feat(code): cli sandboxes, enterprise timeouts, secrets projections, resolver lift, workflow exec cancellations by icecrasher321 · Pull Request #6247 · simstudioai/sim

icecrasher321 · 2026-08-04T08:23:20Z

Summary

Allow CLIs in Sandboxes (with 25 managed CLIs out of the box)
Add Shell as supported language in function block
Enterprise metadata can set custom timeouts now
Resolver lifted to be central compiler adhering to secrets mgmt policies and applying across the board
Workflow execution cancellations to cancel trigger dev side too

Type of Change

New feature

Testing

Tested manually with @Sg312

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

…resolver lift

…lver # Conflicts: # apps/sim/components/settings/navigation.test.ts # apps/sim/components/settings/navigation.ts # apps/sim/providers/index.test.ts

gitguardian · 2026-08-04T08:23:26Z

⚠️ GitGuardian has uncovered 1 secret following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secret in your pull request

GitGuardian id	GitGuardian status	Secret	Commit	Filename
35640005	Triggered	Generic Password	`1a7c79b`	apps/desktop/src/main/browser-import/import-service.test.ts	View secret

🛠 Guidelines to remediate hardcoded secrets

Understand the implications of revoking this secret by investigating where it is used in your code.
Replace and store your secret safely. Learn here the best practices.
Revoke and rotate this secret.
If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

following these best practices for managing and storing secrets including API keys and other credentials
install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.

^{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}

vercel · 2026-08-04T08:23:26Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 5, 2026 11:05pm

cursor · 2026-08-04T08:23:37Z

PR Summary

High Risk
The change set touches secret handling, model-input provenance, remote sandbox supply chain, and long-running execution lifecycle/cleanup—any regression could leak secrets, break sandboxes, or terminate or leave runs in a bad state.

Overview
This PR expands remote Function sandboxes with a curated managed CLI catalog (pinned artifacts, checksums, client vs server registries, content-addressed image identity) plus Debian system packages, and documents how self-hosted deployments build separate Function and Mothership shell bases on E2B/Daytona. The Function block gains Shell, clearer Python __sim_result__ semantics, and updated sandbox/docs around PATH, managed CLIs, and secret placeholders in code.

Execution policy and cleanup add Enterprise-configurable async workflow timeouts (up to seven days), the async-only X-Execution-Timeout-Seconds API header (cannot extend account policy), and a reworked stale-execution cron that batches mutations with SKIP LOCKED, honors executionDeadlineAt, and separates table-job heartbeat rules from workflow timeout policy.

Secrets and provenance are documented and enforced across integrations/tools: opt-in modelInput projection, opaqueModelInput rejection before external I/O, secretProvenance for durable Sim-owned data, and shared executor boundaries—without blanket sanitization of third-party API results. Function/Custom Tool code binds {{KEY}} at a central compiler boundary instead of pasting plaintext into source; model and log views project placeholders where applicable.

Smaller contract fixes include distinct execution attachment keys for multipart uploads, upload receipt tokens on batch presigned URLs, and aligned OpenAPI/docs for async timeout headers and storage CORS (GCS/Azure).

^{Reviewed by Cursor Bugbot for commit 7636c7d. Configure here.}

icecrasher321 · 2026-08-04T08:27:03Z

@greptile

greptile-apps · 2026-08-04T08:30:45Z

Greptile Summary

This PR centralizes execution-time placeholder and secret handling while expanding sandbox, timeout, and cancellation capabilities.

Adds curated managed CLIs and Shell execution to Function sandboxes.
Adds configurable Enterprise asynchronous execution timeouts and exposes per-request timeout controls through the SDKs.
Extends cancellation across local, database-backed, Trigger.dev, resumed, and grouped workflow executions.
Projects resolved secrets out of traces and model-visible tool results.
Updates database schema, API contracts, documentation, UI configuration, and tests for the new behavior.

Confidence Score: 5/5

The PR appears safe to merge within the scope of this follow-up review.

No blocking failure remains in the eligible follow-up review scope.

Important Files Changed

Filename	Overview
apps/sim/executor/variables/resolver.ts	Centralizes code-context resolution while preserving environment placeholders for execution-boundary compilation.
apps/sim/lib/execution/code-placeholders/index.ts	Introduces the shared JavaScript, Python, and Shell placeholder-compilation boundary.
apps/sim/lib/execution/remote-sandbox/cli-tools.server.ts	Defines pinned, checksum-verified server-side installation recipes for managed sandbox CLIs.
apps/sim/lib/billing/execution-timeout-defaults.ts	Resolves plan and Enterprise-specific execution timeout policies.
apps/sim/app/api/workflows/[id]/executions/[executionId]/cancel/route.ts	Coordinates durable cancellation state, backend job cancellation, local aborts, resumed executions, and terminal event publication.
apps/sim/lib/core/async-jobs/backends/trigger-dev.ts	Adds execution-scoped Trigger.dev cancellation using tags and payload verification.
packages/db/schema.ts	Adds persisted metadata supporting configurable Enterprise execution limits and related sandbox behavior.

Sequence Diagram

sequenceDiagram
  participant Client
  participant API as Execution API
  participant Policy as Timeout Policy
  participant Queue as Async Backend
  participant Executor
  participant Sandbox
  participant Projection as Secret Projection

  Client->>API: Start workflow
  API->>Policy: Resolve account and request timeout
  Policy-->>API: Effective deadline
  API->>Queue: Enqueue execution with deadline
  Queue->>Executor: Run workflow
  Executor->>Sandbox: Execute Function or Shell with managed CLIs
  Sandbox-->>Executor: Block output
  Executor->>Projection: Sanitize traces and model-visible output
  Projection-->>Client: Stream projected result
  Client->>API: Cancel execution
  API->>Queue: Cancel queued or running job
  API->>Executor: Signal local or resumed execution

_{Reviews (14): Last reviewed commit: "run from block ui disabling" | Re-trigger Greptile}

icecrasher321 · 2026-08-04T09:19:51Z

@greptile

icecrasher321 · 2026-08-04T09:19:58Z

@cursor review

icecrasher321 · 2026-08-04T10:13:16Z

@greptile

icecrasher321 · 2026-08-04T10:13:23Z

@cursor review

icecrasher321 · 2026-08-04T10:26:38Z

@greptile

icecrasher321 · 2026-08-04T10:26:44Z

@cursor review

cursor

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 8558c19. Configure here.}

…nto feat/func-cli-resolver

…lver # Conflicts: # apps/sim/executor/handlers/agent/agent-handler.ts # apps/sim/lib/copilot/vfs/workspace-vfs.ts # apps/sim/tools/generated/tool-metadata.ts # apps/sim/tools/generated/tool-outputs.ts

…lver # Conflicts: # apps/docs/content/docs/en/workflows/blocks/function.mdx # apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/panel/components/editor/components/sub-block/components/code/code.tsx # apps/sim/lib/copilot/request/tools/executor.test.ts # apps/sim/tools/generated/tool-metadata.ts

icecrasher321 · 2026-08-05T23:08:20Z

bugbot run

cursor

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 7636c7d. Configure here.}

cursor · 2026-08-05T23:12:56Z

+              updatedAt: new Date(),
+            })
+            .where(and(staleProcessingPredicate, inArray(asyncJobs.id, candidates)))
+            .returning({ id: asyncJobs.id })


Unsafe batched cleanup subquery locking

High Severity

runBatchedMutation and deployment pruning embed SELECT ... LIMIT ... FOR UPDATE SKIP LOCKED inside WHERE id IN (...). PostgreSQL can re-execute that IN subquery as a join, so LIMIT is not reliably single-evaluated. Batches can return more rows than requested, trip the oversized-batch throw, abort the rest of that cleanup section, and make short pages an unreliable exhaustion signal. Workflow cleanup already avoids this with an explicit transaction.

Additional Locations (2)

apps/sim/app/api/cron/cleanup-stale-executions/route.ts#L71-L95

apps/sim/app/api/cron/cleanup-stale-executions/route.ts#L484-L511

^{Reviewed by Cursor Bugbot for commit 7636c7d. Configure here.}

icecrasher321 added 2 commits August 4, 2026 01:07

feat(code): cli sandboxes, enterprise timeouts, secrets projections, …

66b25d3

…resolver lift

Merge remote-tracking branch 'origin/staging' into feat/func-cli-reso…

1a7c79b

…lver # Conflicts: # apps/sim/components/settings/navigation.test.ts # apps/sim/components/settings/navigation.ts # apps/sim/providers/index.test.ts

icecrasher321 requested a review from a team as a code owner August 4, 2026 08:23

vercel Bot deployed to Preview August 4, 2026 08:28 View deployment

cursor Bot reviewed Aug 4, 2026

View reviewed changes

Comment thread apps/sim/app/api/cron/cleanup-stale-executions/route.ts

github-advanced-security AI found potential problems Aug 4, 2026

View reviewed changes

Comment thread apps/sim/lib/execution/code-placeholders/javascript.ts Fixed

fix(execution): harden compatibility and secret diagnostics

9661638

vercel Bot temporarily deployed to Preview August 4, 2026 09:19 Inactive

cursor Bot reviewed Aug 4, 2026

View reviewed changes

Comment thread apps/sim/app/api/cron/cleanup-stale-executions/route.ts

Comment thread apps/sim/app/api/cron/cleanup-stale-executions/route.ts Outdated

fix(execution): harden generated JavaScript literals

78c5e8b

vercel Bot temporarily deployed to Preview August 4, 2026 09:37 Inactive

fix(execution): align timeout cleanup semantics

3ff0dba

vercel Bot temporarily deployed to Preview August 4, 2026 10:11 Inactive

cursor Bot reviewed Aug 4, 2026

View reviewed changes

Comment thread apps/sim/app/api/cron/cleanup-stale-executions/route.ts Outdated

fix(tables): decouple stale job cleanup

d8f777e

vercel Bot temporarily deployed to Preview August 4, 2026 10:26 Inactive

cursor Bot reviewed Aug 4, 2026

View reviewed changes

Comment thread apps/sim/app/api/cron/cleanup-stale-executions/route.ts

fix(execution): drain stale workflow backlog

e3f33d1

vercel Bot temporarily deployed to Preview August 4, 2026 10:45 Inactive

cursor Bot reviewed Aug 5, 2026

View reviewed changes

Sg312 added 3 commits August 4, 2026 19:29

feat(copilot): expose Sim sandboxes to mothership

8b4e5f0

feat(copilot): expose sandbox capability catalog in VFS

b6f3cce

Updates

4e43f67

vercel Bot deployed to Preview August 5, 2026 03:15 View deployment

icecrasher321 and others added 3 commits August 4, 2026 20:47

fix legacy logs showing up

f8269bd

Merge branch 'feat/func-cli-resolver' of github.com:simstudioai/sim i…

ca0b8e4

…nto feat/func-cli-resolver

fix(copilot): keep sandbox config visible

36fa8e3

vercel Bot temporarily deployed to Preview August 5, 2026 04:07 Inactive

icecrasher321 added 6 commits August 4, 2026 23:26

fix model provenance issues

b100f95

fix lint'

bac2211

more lint

752d72c

more

d2a45d0

Merge branch 'feat/func-cli-resolver' of github.com:simstudioai/sim i…

4a9549c

…nto feat/func-cli-resolver

test(files): align provenance copy query order

2e478d3

vercel Bot deployed to Preview August 5, 2026 06:30 View deployment

consolidate migrations, rollout compat

a179093

vercel Bot deployed to Preview August 5, 2026 08:09 View deployment

Merge remote-tracking branch 'origin/staging' into feat/func-cli-reso…

27efa0f

…lver # Conflicts: # apps/sim/executor/handlers/agent/agent-handler.ts # apps/sim/lib/copilot/vfs/workspace-vfs.ts # apps/sim/tools/generated/tool-metadata.ts # apps/sim/tools/generated/tool-outputs.ts

vercel Bot deployed to Preview August 5, 2026 08:23 View deployment

icecrasher321 mentioned this pull request Aug 5, 2026

fix(logs): restore workflow input on log details for runs without secret provenance #6278

Closed

4 tasks

icecrasher321 added 2 commits August 5, 2026 14:53

integration projections

ada0334

update skills

86fb48c

vercel Bot deployed to Preview August 5, 2026 22:05 View deployment

vercel Bot deployed to Preview August 5, 2026 22:23 View deployment

fix

7636c7d

vercel Bot temporarily deployed to Preview August 5, 2026 23:05 Inactive

cursor Bot reviewed Aug 5, 2026

View reviewed changes

Uh oh!

Conversation

icecrasher321 commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Uh oh!

gitguardian Bot commented Aug 4, 2026

⚠️ GitGuardian has uncovered 1 secret following the scan of your pull request.

Uh oh!

vercel Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

Uh oh!

greptile-apps Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Sequence Diagram

Uh oh!

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

Uh oh!

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

icecrasher321 commented Aug 4, 2026

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

icecrasher321 commented Aug 5, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Aug 5, 2026

Choose a reason for hiding this comment

Unsafe batched cleanup subquery locking

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

icecrasher321 commented Aug 4, 2026 •

edited

Loading

vercel Bot commented Aug 4, 2026 •

edited

Loading

cursor Bot commented Aug 4, 2026 •

edited

Loading

greptile-apps Bot commented Aug 4, 2026 •

edited

Loading