fix(workflows): scope executor metadata reads

Author: TheodoreSpeaks

apps/sim/providers/utils.test.ts

@@ -1,5 +1,16 @@
 import { resetEnvFlagsMock, setEnvFlags } from '@sim/testing'
 import { afterAll, afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const workflowMetadataMocks = vi.hoisted(() => ({
+  buildAPIUrl: vi.fn((path: string) => new URL(path, 'https://sim.local')),
+  buildExecutorDelegationHeaders: vi.fn(),
+}))
+
+vi.mock('@/executor/utils/http', () => ({
+  buildAPIUrl: workflowMetadataMocks.buildAPIUrl,
+  buildExecutorDelegationHeaders: workflowMetadataMocks.buildExecutorDelegationHeaders,
+}))
+
 import {
   calculateCost,
   describeModelLevel,
@@ -1841,6 +1852,105 @@ describe('prepareToolExecution invoker identity hand-off', () => {
   })
 })
 
+describe('workflow executor metadata delegation', () => {
+  const workflowBlock = {
+    type: 'workflow',
+    name: 'Workflow',
+    description: 'Execute a workflow',
+    inputs: {},
+    subBlocks: [],
+    tools: { access: ['workflow_executor'] },
+  }
+  const workflowTool = {
+    id: 'workflow_executor',
+    name: 'Workflow Executor',
+    description: 'Execute another workflow',
+    params: {
+      workflowId: {
+        type: 'string' as const,
+        required: true,
+        visibility: 'user-only' as const,
+      },
+    },
+  }
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    workflowMetadataMocks.buildExecutorDelegationHeaders.mockResolvedValue({
+      'Content-Type': 'application/json',
+      Authorization: 'Bearer delegated-token',
+    })
+  })
+
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  it('binds workflow metadata reads to the target workflow and trusted execution subject', async () => {
+    const fetchMock = vi
+      .fn()
+      .mockResolvedValue(
+        new Response(
+          JSON.stringify({ data: { name: 'Child Workflow', description: 'Child description' } }),
+          { status: 200, headers: { 'Content-Type': 'application/json' } }
+        )
+      )
+    vi.stubGlobal('fetch', fetchMock)
+
+    const result = await transformBlockTool(
+      { type: 'workflow', params: { workflowId: 'child-workflow' } },
+      {
+        getAllBlocks: () => [workflowBlock],
+        getTool: () => workflowTool,
+        enrichmentContext: {
+          workflowId: 'parent-workflow',
+          workspaceId: 'workspace-1',
+          executionId: 'execution-1',
+          userId: 'user-1',
+        },
+      }
+    )
+
+    expect(workflowMetadataMocks.buildExecutorDelegationHeaders).toHaveBeenCalledWith({
+      subjectUserId: 'user-1',
+      workflowId: 'child-workflow',
+      executionId: 'execution-1',
+    })
+    expect(fetchMock).toHaveBeenCalledWith('https://sim.local/api/workflows/child-workflow', {
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: 'Bearer delegated-token',
+      },
+    })
+    expect(result).toMatchObject({
+      id: 'workflow_executor_child-workflow',
+      name: 'Child Workflow',
+      description: 'Child description',
+    })
+  })
+
+  it('does not issue an actorless fallback token without a trusted execution subject', async () => {
+    const fetchMock = vi.fn()
+    vi.stubGlobal('fetch', fetchMock)
+
+    const result = await transformBlockTool(
+      { type: 'workflow', params: { workflowId: 'child-workflow' } },
+      {
+        getAllBlocks: () => [workflowBlock],
+        getTool: () => workflowTool,
+      }
+    )
+
+    expect(workflowMetadataMocks.buildExecutorDelegationHeaders).not.toHaveBeenCalled()
+    expect(fetchMock).not.toHaveBeenCalled()
+    expect(result).toMatchObject({
+      id: 'workflow_executor_child-workflow',
+      name: 'Workflow Executor',
+      description: 'Execute another workflow',
+    })
+  })
+})
+
 /**
  * The agent block's tuning-level fields accept variable and environment references, so any
  * message that echoes a caller-supplied level can otherwise carry whatever that reference

apps/sim/providers/utils.ts

@@ -77,12 +77,20 @@ function isDefaultWorkflowDescription(
  * Fetches workflow metadata (name and description) from the API
  */
 async function fetchWorkflowMetadata(
-  workflowId: string
+  workflowId: string,
+  executionContext: WorkflowToolExecutionContext | undefined
 ): Promise<{ name: string; description: string | null } | null> {
   try {
-    const { buildAuthHeaders, buildAPIUrl } = await import('@/executor/utils/http')
+    if (!executionContext?.userId) {
+      throw new Error('Workflow metadata enrichment requires a trusted execution subject')
+    }
+    const { buildAPIUrl, buildExecutorDelegationHeaders } = await import('@/executor/utils/http')
 
-    const headers = await buildAuthHeaders()
+    const headers = await buildExecutorDelegationHeaders({
+      subjectUserId: executionContext.userId,
+      workflowId,
+      ...(executionContext.executionId ? { executionId: executionContext.executionId } : {}),
+    })
     const url = buildAPIUrl(`/api/workflows/${workflowId}`)
 
     const response = await fetch(url.toString(), { headers })
@@ -787,7 +795,10 @@ export async function transformBlockTool(
   if (toolId === 'workflow_executor' && resolvedResourceParams.workflowId) {
     uniqueToolId = `${toolConfig.id}_${resolvedResourceParams.workflowId}`
 
-    const workflowMetadata = await fetchWorkflowMetadata(resolvedResourceParams.workflowId)
+    const workflowMetadata = await fetchWorkflowMetadata(
+      resolvedResourceParams.workflowId,
+      enrichmentContext
+    )
     if (workflowMetadata) {
       toolName = workflowMetadata.name || toolConfig.name
       if (