fix(mothership): follow-ups for v1.0.0 regressions

[waleedlatif1]

Summary

Follow-ups to #8208 for regressions and gaps found auditing it against staging.

• Stored file references: workflow inputs could reference stored files by key, id, or internal URL and get them granted to the run, so an anonymous public-API, public MCP, or webhook caller could pull other workflows' or workspace files into a run. Only workspace-member principals now resolve workspace-wide; everyone else can only reference files from their own execution (keeps chat and webhook uploads working). Internal-URL uploads from non-members go through the same check instead of downloading with the run user's access.
• Table secrets in sim_cli: Copilot table reads moved to sim_cli and lost the row secret provenance import, so persisted secrets in cells reached the model unredacted. Row use cases now report provenance to the CLI transport, which activates it for redaction; row-bearing results without provenance, run-state/enrichment error text, and export download links are withheld.
• Google Calendar scopes: feat(mothership): v1.0.0 #8208 added calendar.readonly to Calendar's delegation scopes, which broke indexed admin-mode Calendar syncs whose delegation only authorizes calendar.events.readonly. Live service search now reads the all-day time zone from events.list and runs on the same single scope as indexing, like Drive and Gmail. The admin picker keeps calendar.readonly.
• Search Show more: the new strict limit check in the knowledge search placeholder blanked the org search results on Show more; the page-owned path now keeps results painted while the tool-owned Search tab stays strict.
• Activity dot: resource panel dot used undefined --brand-primary (invisible); back to --brand-blue.
• Connector auth: restored the connector auth guidance lost with the Copilot VFS in the v2 contract descriptions (apiKey vs OAuth, {{SECRET}} references, GitHub PATs), reject $NAME API keys that name an existing secret, and point the config error at sim connector-types list --detail full.
• Env-reference passwords: Copilot chat deploy and file share store a whole-value {{NAME}} password literally since the move to v2; it's resolved again for Copilot only, validated after resolution, and skipped when a share is being disabled.

Type of Change

• Bug fix

Testing

Each fix has tests that fail without it. Type-check, lint, check:audits (49), block registry, and docs manifest pass; ~17k tests across the touched areas pass.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Sep 23, 2026 11:56pm UTC

[cubic-dev-ai]

All reported issues were addressed across 58 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no actionable blocking defects identified.

Summary

This PR addresses v1.0.0 regressions in workflow file inputs, Copilot table reads, Calendar delegation, search transitions, and secret-reference handling.

• Restricts caller-supplied stored-file references according to the execution principal while preserving workflow-authored defaults.
• Connects table-row provenance to CLI result redaction and withholds unsupported table results and export-download links.
• Restores events-only Calendar delegation, page-owned search-result retention, and the resource activity-dot color.
• Restores Copilot password-reference resolution and updates connector authentication guidance.

No actionable defects were established in the reviewed changes. Tests were inspected but not executed during this review.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Copilot CLI table request] --> B{Route classification}
  B -->|Metadata-only route| C[Existing transport]
  B -->|Export download| D[Reject download link]
  B -->|Row-bearing route| E[Observe authorized row delivery]
  E --> F[Load persisted row provenance]
  F --> G[Import provenance into result registry]
  G --> H{Complete provenance and no untracked error text?}
  H -->|Yes| I[Redact model-facing result]
  H -->|No| J[Withhold model-facing content]

Loading

_{Reviews (1) · Last reviewed commit: "fix(mothership): resolve Copilot env-ref..."}