fix(custom-blocks): escape LIKE wildcards in usage scan + fresh count on delete modal

Author: TheodoreSpeaks

apps/sim/ee/custom-blocks/components/custom-block-detail.tsx

@@ -432,7 +432,12 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
                 {
                   text: remove.isPending ? 'Deleting...' : 'Delete',
                   variant: 'destructive' as const,
-                  onSelect: () => setShowDelete(true),
+                  onSelect: () => {
+                    setShowDelete(true)
+                    // The warning must reflect the org's CURRENT usage, not a
+                    // ≤30s-stale cache entry.
+                    usageCountsQuery.refetch()
+                  },
                   disabled: remove.isPending,
                 },
               ]
@@ -733,16 +738,17 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
           disabled: confirmationText !== (existing?.name ?? ''),
         }}
       >
-        {usageCount > 0 ? (
-          <p className='break-words px-2 text-[var(--text-error)] text-sm'>
-            {usageCount} {usageCount === 1 ? 'workflow is' : 'workflows are'} still using this block
-            and will fail at run time.
-          </p>
-        ) : (
-          <p className='break-words px-2 text-[var(--text-muted)] text-sm'>
-            No workflows are currently using it.
-          </p>
-        )}
+        {usageCountsQuery.data &&
+          (usageCount > 0 ? (
+            <p className='break-words px-2 text-[var(--text-error)] text-sm'>
+              {usageCount} {usageCount === 1 ? 'workflow is' : 'workflows are'} still using this
+              block and will fail at run time.
+            </p>
+          ) : (
+            <p className='break-words px-2 text-[var(--text-muted)] text-sm'>
+              No workflows are currently using it.
+            </p>
+          ))}
         <ChipModalField
           type='input'
           title={

apps/sim/lib/workflows/custom-blocks/operations.ts

@@ -464,6 +464,9 @@ export async function getCustomBlockUsageCounts(
     eq(workspace.organizationId, organizationId),
     isNull(workflow.archivedAt)
   )
+  // Escape LIKE wildcards — the `_`s in `custom_block_<id>` would otherwise match
+  // any character and let unrelated states through to the jsonb parse.
+  const likePattern = `%${blockType.replace(/[\\%_]/g, '\\$&')}%`
 
   const [liveRows, deployedRows] = await Promise.all([
     db
@@ -482,7 +485,7 @@ export async function getCustomBlockUsageCounts(
           eq(workflowDeploymentVersion.isActive, true),
           eq(workflow.isDeployed, true),
           orgActiveWorkflow,
-          sql`${workflowDeploymentVersion.state}::text LIKE ${`%${blockType}%`}`,
+          sql`${workflowDeploymentVersion.state}::text LIKE ${likePattern}`,
           sql`EXISTS (
             SELECT 1 FROM jsonb_each((${workflowDeploymentVersion.state})::jsonb -> 'blocks') AS b
             WHERE b.value ->> 'type' = ${blockType}