fix(mothership): keep no raw prefix in a truncated block input

A truncated block input kept its first 200 raw characters, written before
secret projection. A secret straddling that cut left a fragment that
whole-literal redaction cannot match, so part of the secret reached the model.
The marker now keeps nothing of the raw input:
`…[input omitted; inspect with logs get <executionId> --trace]`. Inputs over
the limit are echoed upstream data the caller already has or can fetch, so the
preview carried little.

Author: waleedlatif1

apps/sim/lib/mothership/tools/handlers/workflow/mutations.test.ts

@@ -181,10 +181,10 @@ describe('workflow mutation Copilot adapters', () => {
     }
     expect(code.length).toBeGreaterThan(240)
     expect(output.logs[0].input.code).toBe(
-      `${code.slice(0, 200)} …[truncated; inspect with logs get execution-1 --trace]`
+      '…[input omitted; inspect with logs get execution-1 --trace]'
     )
     expect(output.logs[0].input.note).toBe(
-      `${'n'.repeat(200)} …[truncated; inspect with logs get execution-1 --trace]`
+      '…[input omitted; inspect with logs get execution-1 --trace]'
     )
     expect(output.logs[0].input.language).toBe('javascript')
     expect(output.logs[0].output.result).toBe(code)

apps/sim/lib/mothership/tools/handlers/workflow/run-workflow-result-budget.test.ts

@@ -293,4 +293,33 @@ describe('run_workflow model-facing result budget', () => {
     expect(logs[0]?.output).toEqual({ ok: true })
     expect(logs[1]?.output).toEqual(expect.stringContaining(`logs get ${EXECUTION_ID} --trace`))
   })
+
+  /** A cut through a secret leaves a fragment no whole-literal redaction can match. */
+  it('never exposes part of a secret that straddles an input truncation point', async () => {
+    const straddling = `${'a'.repeat(190)}${SECRET}${'b'.repeat(3_000)}`
+    mocks.executeWorkflowUseCase.mockResolvedValue({
+      success: true,
+      output: { done: true },
+      logs: [
+        {
+          blockId: 'fn',
+          blockName: 'Function',
+          success: true,
+          input: { code: straddling, note: straddling },
+          output: { ok: true },
+        },
+      ],
+      metadata: { executionId: EXECUTION_ID },
+    })
+
+    const settled = await executeRunWorkflow({ workflowId: 'wf-1' }, context)
+    const projection = inspectToolResultForCopilot(settled, secretRegistry(), 'run_workflow')
+
+    expect(projection.safe).toBe(true)
+    const serialized = JSON.stringify(projection.result)
+    expect(serialized).toContain(`logs get ${EXECUTION_ID} --trace`)
+    for (let length = 4; length <= SECRET.length; length += 1) {
+      expect(serialized).not.toContain(SECRET.slice(0, length))
+    }
+  })
 })

apps/sim/lib/mothership/tools/workflow-output.ts

@@ -71,13 +71,13 @@ function selectFromLogs(selectors: string[], logs: unknown[]): Record<string, un
 const LOG_CODE_INPUT_MAX_CHARS = 240
 /** Any other echoed input string over this is data the caller already has, or can fetch. */
 const LOG_INPUT_STRING_MAX_CHARS = 2_000
-const LOG_INPUT_KEEP_CHARS = 200
 
 /**
  * Compacts the block inputs echoed back in `logs`. A Function block's `input.code` embeds the
  * fully serialized upstream rows, so a seven-block run repeated the same rows several times
- * across ~14k chars of tool result. The marker carries no length: it is written before secret
- * projection, so a length would disclose the length of any secret in the input.
+ * across ~14k chars of tool result. The marker is written before secret projection, so it keeps
+ * nothing of the raw input: a kept prefix could cut through a secret and leave a fragment no
+ * whole-literal redaction matches, and a length would disclose the length of any secret in it.
  */
 function compactBlockLogInputs(logs: unknown, executionId: string | undefined): unknown {
   if (!Array.isArray(logs)) return logs
@@ -89,7 +89,7 @@ function compactBlockLogInputs(logs: unknown, executionId: string | undefined):
       const limit = key === 'code' ? LOG_CODE_INPUT_MAX_CHARS : LOG_INPUT_STRING_MAX_CHARS
       input[key] =
         typeof value === 'string' && value.length > limit
-          ? `${value.slice(0, LOG_INPUT_KEEP_CHARS)} …[truncated; inspect with logs get ${reference} --trace]`
+          ? `…[input omitted; inspect with logs get ${reference} --trace]`
           : value
     }
     return { ...entry, input }