fix(workflows): bind executor metadata targets

Author: TheodoreSpeaks

apps/sim/providers/utils.test.ts

@@ -1886,7 +1886,7 @@ describe('workflow executor metadata delegation', () => {
     vi.unstubAllGlobals()
   })
 
-  it('binds workflow metadata reads to the target workflow and trusted execution subject', async () => {
+  it('binds cross-workflow metadata reads to the target without attaching the parent run', async () => {
     const fetchMock = vi
       .fn()
       .mockResolvedValue(
@@ -1914,7 +1914,6 @@ describe('workflow executor metadata delegation', () => {
     expect(workflowMetadataMocks.buildExecutorDelegationHeaders).toHaveBeenCalledWith({
       subjectUserId: 'user-1',
       workflowId: 'child-workflow',
-      executionId: 'execution-1',
     })
     expect(fetchMock).toHaveBeenCalledWith('https://sim.local/api/workflows/child-workflow', {
       headers: {
@@ -1929,6 +1928,38 @@ describe('workflow executor metadata delegation', () => {
     })
   })
 
+  it('includes the run binding when the metadata target is the executing workflow', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn().mockResolvedValue(
+        new Response(JSON.stringify({ data: { name: 'Current Workflow', description: null } }), {
+          status: 200,
+          headers: { 'Content-Type': 'application/json' },
+        })
+      )
+    )
+
+    await transformBlockTool(
+      { type: 'workflow', params: { workflowId: 'current-workflow' } },
+      {
+        getAllBlocks: () => [workflowBlock],
+        getTool: () => workflowTool,
+        enrichmentContext: {
+          workflowId: 'current-workflow',
+          workspaceId: 'workspace-1',
+          executionId: 'execution-1',
+          userId: 'user-1',
+        },
+      }
+    )
+
+    expect(workflowMetadataMocks.buildExecutorDelegationHeaders).toHaveBeenCalledWith({
+      subjectUserId: 'user-1',
+      workflowId: 'current-workflow',
+      executionId: 'execution-1',
+    })
+  })
+
   it('does not issue an actorless fallback token without a trusted execution subject', async () => {
     const fetchMock = vi.fn()
     vi.stubGlobal('fetch', fetchMock)

apps/sim/providers/utils.ts

@@ -89,7 +89,9 @@ async function fetchWorkflowMetadata(
     const headers = await buildExecutorDelegationHeaders({
       subjectUserId: executionContext.userId,
       workflowId,
-      ...(executionContext.executionId ? { executionId: executionContext.executionId } : {}),
+      ...(executionContext.workflowId === workflowId && executionContext.executionId
+        ? { executionId: executionContext.executionId }
+        : {}),
     })
     const url = buildAPIUrl(`/api/workflows/${workflowId}`)