fix(security): redact workflow snapshot secrets

[TheodoreSpeaks]

Summary

• reuse the workflow search/replace codecs to classify nested built-in tool parameters
• keep custom, MCP, and unknown tool schemas non-authoritative even when their IDs collide with built-ins
• redact password, OAuth, advanced credential-reference, malformed, opaque-table, and unclassified values fail-closed
• apply the shared hardened projection to v1/v2 execution logs and v2 workflow versions
• preserve codec-classified safe built-in tool configuration and portable export behavior

Type of Change

• Bug fix
• Security fix

Testing

• 99 focused sanitizer, codec, workflow-version, and v1/v2 public-log tests
• Sim app typecheck
• Full lint
• Strict API validation
• OpenAPI generation and validation
• Tool-registry boundary audit
• All 25 repository audits

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 12, 2026 3:01am

[cursor]

PR Summary

High Risk
Changes security-critical credential redaction on public API surfaces that expose workflow graphs. Incorrect classification could either leak secrets or over-redact legitimate configuration.

Overview
Closes credential leaks in public workflow snapshots by fail-closed redaction of opaque and nested secret-bearing fields.

sanitizeWorkflowForSharing now supports redactOpaqueCredentialInputs, which nulls entire table values and walks nested tool-input params through the search-replace codecs. Only authoritative built-in tool params keep non-sensitive values; custom, MCP, unknown, and malformed params are withheld. Safe {{VAR}} references remain preserved.

This hardened projection is applied to v1/v2 execution logs and v2 workflow version reads, with OpenAPI/contract descriptions updated to match.

^{Reviewed by Cursor Bugbot for commit ff82280. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

The PR hardens public workflow snapshots by using shared tool-parameter codecs and withholding values whose safety cannot be authoritatively classified.

• Redacts credential-bearing tables, nested sensitive tool parameters, and malformed or unclassified tool values.
• Prevents custom and MCP tool IDs from resolving against colliding built-in registry definitions.
• Applies the hardened projection to public execution logs and workflow-version responses.
• Updates public API descriptions and focused sanitizer, indexer, log, and route tests.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/lib/workflows/credentials/credential-extractor.ts	Adds fail-closed recursive sanitization for tool inputs, opaque tables, credential references, and malformed parameter shapes.
apps/sim/lib/workflows/search-replace/indexer.ts	Exposes parameter-authority metadata and prevents custom or MCP tool identifiers from resolving as registered built-ins.
apps/sim/lib/logs/snapshot-sanitizer.ts	Enables opaque credential-input redaction for retained execution snapshots.
apps/sim/lib/workflows/application/read-workflow-version.ts	Applies the same hardened workflow projection to version-detail responses.
apps/sim/lib/workflows/search-replace/indexer.test.ts	Verifies generic and colliding custom/MCP parameters remain non-authoritative.
apps/sim/lib/workflows/credentials/credential-extractor.test.ts	Covers sensitive, safe, opaque, malformed, and unclassified sanitizer behavior.

_{Reviews (5): Last reviewed commit: "fix(security): isolate opaque tool schem..." | Re-trigger Greptile}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

1 issue from previous review remains unresolved.

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit e2842f6. Configure here.}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 56ab7d0. Configure here.}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ff82280. Configure here.}