fix(tools): resolve {{ENV_VAR}} references in user-only params for copilot tool executions

[waleedlatif1]

Summary

• Fixes Chat-invoked integration tools with API-key auth failing with provider-side 401s (e.g. Sentry 401 Invalid token) — broken since the mothership tool-dispatch rewrite (improvement(mothership): restructured stream, tool structures, code typing, file write/patch/append tools, timing issues #4090) removed the orchestrator's env reference resolution
• Chat agents can only pass {{VAR}} references (the workspace VFS exposes env var names, never values); the literal placeholder was being sent to the provider as the bearer token
• Adds resolveCopilotEnvReferences in the tool executor: resolves whole-value {{VAR}} references on params declared visibility: 'user-only', gated to copilot executions only
• Deliberately narrower than the removed deep resolver: LLM-writable params (urls, headers, bodies) never resolve, so references can't be used to extract secrets; embedded references are left untouched
• Resolves against getEffectiveDecryptedEnv — the same personal+workspace merge workflow runs use, so Chat and canvas behave identically
• Missing variables fail fast with an actionable error (naming the variable and parameter) before any request, instead of a confusing provider-side 401
• Resolution mutates only the per-execution params copy, so decrypted values can't leak into failure logs or persisted chat state

Type of Change

• Bug fix

Testing

• 7 new tests: whole-value resolution, brace-whitespace trim, user-or-llm exclusion, embedded-reference exclusion, missing-var fail-fast, non-copilot passthrough, caller-params mutation guard
• Full tools/index.test.ts suite (87 tests) passing; typecheck and lint clean
• Root cause verified against production CloudWatch logs (three sentry_projects_list 401s via /api/mothership/chat with the literal placeholder in params)

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 14, 2026 11:33pm

[cursor]

PR Summary

Medium Risk
Touches secret resolution and decrypted env loading for copilot-only tool calls; scope is narrowed to user-only whole references with tests, but mishandling could leak or mis-resolve credentials.

Overview
Copilot Chat was sending literal {{VAR}} placeholders to integrations (e.g. API keys), causing provider 401s after env resolution was dropped from the copilot tool path.

This PR adds resolveCopilotEnvReferences in executeTool, run only when copilotToolExecution is set. It replaces whole-value {{ENV_VAR}} strings on params with visibility: 'user-only' using getEffectiveDecryptedEnv and the same resolveEnvVarReferences helper as workflow runs (allowEmbedded: false). LLM-writable params and embedded references are unchanged. Missing vars or missing user context fail before any HTTP call; resolution updates only the per-execution params copy.

Tests add a mock env tool and a suite covering resolution, exclusions, errors, non-copilot passthrough, and no mutation of caller params.

^{Reviewed by Cursor Bugbot for commit 728917c. Configure here.}

[greptile-apps]

Greptile Summary

This PR restores env variable reference handling for copilot tool executions. The main changes are:

• Resolves whole-value {{ENV_VAR}} references in user-only tool params.
• Keeps LLM-writable and embedded-reference params unresolved.
• Fails before the provider request when user context or variables are missing.
• Adds tests for resolution scope, missing context, workspace messaging, and mutation safety.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
apps/sim/tools/index.ts	Adds copilot-only env reference resolution for user-only params before hosted-key injection.
apps/sim/tools/index.test.ts	Adds tests for env reference resolution, missing context errors, passthrough behavior, and mutation safety.

_{Reviews (2): Last reviewed commit: "fix(tools): fail fast on env references ..." | Re-trigger Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 728917c. Configure here.}