Merge origin/staging into fix/midrun-usage-enforcement

Author: waleedlatif1

.github/workflows/test-build.yml

@@ -147,6 +147,24 @@ jobs:
           if-no-files-found: ignore
           retention-days: 7
 
+      - name: Verify Lucid MCP search and complete diagram reads over real HTTP
+        if: matrix.provision == 'push'
+        working-directory: apps/sim
+        env:
+          NEXT_PUBLIC_APP_URL: http://127.0.0.1:3040
+          NEXT_PUBLIC_FORCE_HOSTED: 'false'
+          SEARCH_LUCID_REPORT_PATH: ${{ runner.temp }}/search-lucid.json
+        run: bun scripts/test-search-lucid-e2e.ts
+
+      - name: Upload Lucid acceptance report
+        if: failure() && matrix.provision == 'push'
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: search-lucid
+          path: ${{ runner.temp }}/search-lucid.json
+          if-no-files-found: ignore
+          retention-days: 7
+
       - name: Verify SCIM and administration over real HTTP
         working-directory: apps/sim
         env:

apps/docs/components/icons.tsx

@@ -1,6 +1,22 @@
 import type { SVGProps } from 'react'
 import { useId } from 'react'
 
+interface LucidIconProps extends SVGProps<SVGSVGElement> {}
+
+export function LucidIcon(props: LucidIconProps) {
+  return (
+    <svg
+      {...props}
+      viewBox='-22 0 144 144.5'
+      fill='currentColor'
+      xmlns='http://www.w3.org/2000/svg'
+    >
+      <path d='M50 0L0 28.9V144.5L50 115.6V0Z' />
+      <path d='M100 142.7V86.7L50 115.6V142.7H100Z' />
+    </svg>
+  )
+}
+
 export function EnrichmentIcon(props: SVGProps<SVGSVGElement>) {
   return (
     <svg

apps/docs/content/docs/search/lucid.mdx

@@ -0,0 +1,24 @@
+---
+title: Lucid
+description: Search Lucidchart diagrams and Lucidspark boards with your own Lucid account
+---
+
+## Connect
+
+An administrator enables **Lucid → Member accounts** in **Settings → Sources**. Each person then connects Lucid in **Integrations** and approves access with their own Lucid account.
+
+Sim uses [Lucid’s official read-only MCP server](https://help.lucid.co/hc/en-us/articles/51290793390740-View-and-search-Lucid-content-with-AI-tools-using-the-Lucid-read-only-MCP-server), available on Free, Individual, Team and Enterprise plans; FedRAMP accounts are not supported. No developer app, API key or additional Sim environment variables are needed. Team and Enterprise administrators may need to enable MCP access in Lucid. Lucid excludes documents owned outside the connected account, even when shared with you.
+
+## Search
+
+Search requires terms, even when filtering by date. Results are ranked for relevance and may not match the title literally. Start with a short document-title query, such as `deployment architecture`. Select `lucidchart` or `lucidspark` to narrow the product, or search both. Read a result to inspect its diagram or board structure.
+
+To find text inside a known document, use its UUID or Lucid URL as the native query’s `project` and enter a literal phrase such as `API Gateway`. This matches shape labels and sticky-note text, case-insensitively. It does not search notes, tags, links or comments.
+
+Title queries allow up to 400 characters; document-scoped text queries allow 200. Boolean and field operators are unsupported. Document search has no continuation and verifies at most 10 candidates. Dates use modification time; filtering and sorting the returned candidates cannot establish the newest or oldest document across the entire account.
+
+## Diagram content
+
+Reads preserve Lucid’s structured pages, nodes, connections and properties, with links back to the source. Large responses can be read in successive windows of the same document version. Sim rejects incomplete or changed documents rather than treating a partial graph as complete.
+
+A complete read is limited to 8 page regions and 512 KiB. Images and external links remain references; rendered diagrams, OCR, comments and Lucidscale are not included. See [Lucid’s MCP access rules](https://help.lucid.co/hc/en-us/articles/53780064823188-For-admins-Lucid-MCP-server-security-and-authorization) for account restrictions.

apps/docs/content/docs/search/meta.json

@@ -16,6 +16,7 @@
     "hubspot",
     "jira",
     "linear",
+    "lucid",
     "notion",
     "slack"
   ]

apps/sim/app/(auth)/components/auth-button-classes.ts

@@ -21,8 +21,7 @@ interface AuthTextLinkProps {
 /**
  * The canonical inline text affordance for the auth pages — forgot-password,
  * resend, and the legal links. Renders a {@link Link} when `href` is set and a
- * `<button>` otherwise, both in one light-token style. Replaces the legacy dark
- * `AUTH_TEXT_LINK` class string with a single props-driven source of truth.
+ * `<button>` otherwise, both using the shared neutral text tokens.
  */
 export function AuthTextLink({
   children,

apps/sim/app/(auth)/components/auth-text-link.tsx

@@ -5,8 +5,7 @@ import { cn, Input, InputOTP, InputOTPGroup, InputOTPSlot, Label } from '@sim/em
 import { createLogger } from '@sim/logger'
 import { toError } from '@sim/utils/errors'
 import { quickValidateEmail } from '@/lib/messaging/email/validation'
-import { AuthSubmitButton } from '@/app/(auth)/components'
-import { AUTH_TEXT_LINK } from '@/app/(auth)/components/auth-button-classes'
+import { AuthSubmitButton, AuthTextLink } from '@/app/(auth)/components'
 import { useChatEmailOtpRequest, useChatEmailOtpVerify } from '@/hooks/queries/chats'
 
 const logger = createLogger('EmailAuth')
@@ -220,28 +219,26 @@ export default function EmailAuth({ identifier }: EmailAuthProps) {
                         Resend in <span className='text-[var(--text-primary)]'>{countdown}s</span>
                       </span>
                     ) : (
-                      <button
-                        className={AUTH_TEXT_LINK}
+                      <AuthTextLink
                         onClick={handleResendOtp}
                         disabled={verifyOtp.isPending || requestOtp.isPending}
                       >
                         Resend
-                      </button>
+                      </AuthTextLink>
                     )}
                   </p>
                 </div>
 
                 <div className='text-center font-light text-sm'>
-                  <button
+                  <AuthTextLink
                     onClick={() => {
                       setShowOtpVerification(false)
                       setOtpValue('')
                       setAuthError(null)
                     }}
-                    className={AUTH_TEXT_LINK}
                   >
                     Change email
-                  </button>
+                  </AuthTextLink>
                 </div>
               </div>
             )}

apps/sim/app/(interfaces)/chat/components/auth/email/email-auth.tsx

@@ -6,8 +6,7 @@ import { getErrorMessage } from '@sim/utils/errors'
 import { normalizeEmail } from '@sim/utils/string'
 import { useRouter } from 'next/navigation'
 import { quickValidateEmail } from '@/lib/messaging/email/validation'
-import { AuthSubmitButton } from '@/app/(auth)/components'
-import { AUTH_TEXT_LINK } from '@/app/(auth)/components/auth-button-classes'
+import { AuthSubmitButton, AuthTextLink } from '@/app/(auth)/components'
 import { PublicFileAuthShell } from '@/app/f/[token]/public-file-auth-shell'
 import { usePublicFileOtpRequest, usePublicFileOtpVerify } from '@/hooks/queries/public-shares'
 
@@ -176,28 +175,23 @@ export function PublicFileEmailAuth({ token }: PublicFileEmailAuthProps) {
                 Resend in <span className='text-[var(--text-primary)]'>{countdown}s</span>
               </span>
             ) : (
-              <button
-                className={AUTH_TEXT_LINK}
-                onClick={resend}
-                disabled={requestOtp.isPending || verifyOtp.isPending}
-              >
+              <AuthTextLink onClick={resend} disabled={requestOtp.isPending || verifyOtp.isPending}>
                 Resend
-              </button>
+              </AuthTextLink>
             )}
           </p>
         </div>
 
         <div className='text-center font-light text-sm'>
-          <button
+          <AuthTextLink
             onClick={() => {
               setSent(false)
               setOtp('')
               setError(null)
             }}
-            className={AUTH_TEXT_LINK}
           >
             Change email
-          </button>
+          </AuthTextLink>
         </div>
       </div>
     </PublicFileAuthShell>

apps/sim/app/f/[token]/public-file-email-auth.tsx

@@ -1,6 +1,22 @@
 import type { SVGProps } from 'react'
 import { useId } from 'react'
 
+interface LucidIconProps extends SVGProps<SVGSVGElement> {}
+
+export function LucidIcon(props: LucidIconProps) {
+  return (
+    <svg
+      {...props}
+      viewBox='-22 0 144 144.5'
+      fill='currentColor'
+      xmlns='http://www.w3.org/2000/svg'
+    >
+      <path d='M50 0L0 28.9V144.5L50 115.6V0Z' />
+      <path d='M100 142.7V86.7L50 115.6V142.7H100Z' />
+    </svg>
+  )
+}
+
 export function EnrichmentIcon(props: SVGProps<SVGSVGElement>) {
   return (
     <svg

apps/sim/components/icons.tsx

@@ -372,6 +372,7 @@ export const createCredentialGroupMcpConnectorBodySchema = z.discriminatedUnion(
   z.object({ connectorId: z.literal('notion') }).strict(),
   z.object({ connectorId: z.literal('coda') }).strict(),
   z.object({ connectorId: z.literal('hubspot') }).strict(),
+  z.object({ connectorId: z.literal('lucid') }).strict(),
   z
     .object({
       connectorId: z.literal('databricks'),