fix(workflows): preserve cancellation scope assertions

[j15z]

Summary

• preserve workflow parent assertions for internal and v2 cancellation routes
• keep Mothership cancellation executionId-only while asserting trusted Copilot workspace scope
• cover canonical execution resolution and cross-workspace concealment

Type of Change

• Bug fix

Testing

• bun run lint
• bun run check:audits
• 71 focused workflow and route tests
• cancellation schema parity check against the sibling Mothership contract
• full app type-check remains blocked by the existing pi-sdk ResourceLoader mismatch on staging

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 1, 2026 7:59pm UTC

[greptile-apps]

Greptile Summary

The PR restores parent-scope assertions on internal and v2 workflow cancellation and binds Copilot cancellation to its trusted workspace.

• Passes route workflow IDs into cancellation context resolution.
• Passes the Copilot workspace ID as an execution lookup assertion.
• Adds focused coverage for canonical execution resolution and workspace mismatch concealment.

Confidence Score: 5/5

The PR appears safe to merge, with cancellation assertions consistently failing closed on workflow or workspace mismatches.

The changed adapters preserve trusted parent scope while cancellation continues to resolve canonical execution ownership and authorize the resulting workflow context before performing the operation.

Important Files Changed

Filename	Overview
apps/sim/lib/workflows/application/cancel-run.ts	Extends cancellation input with optional workflow and workspace assertions and forwards them to canonical run-context resolution.
apps/sim/app/api/v2/workflows/[workflowId]/runs/[runId]/cancel/route.ts	Preserves the workflow path parameter as an assertion when cancelling a v2 run.
apps/sim/app/api/workflows/[id]/executions/[executionId]/cancel/route.ts	Preserves the internal route’s workflow parent as an assertion while retaining request cancellation propagation.
apps/sim/lib/copilot/tools/handlers/workflow/mutations.ts	Constrains execution-ID-only Copilot cancellation to the trusted workspace in its execution context.
apps/sim/lib/workflows/application/context.test.ts	Adds coverage for canonical execution resolution and concealed workspace mismatches.

_{Reviews (1): Last reviewed commit: "fix(workflows): preserve cancellation sc..." | Re-trigger Greptile}

[cubic-dev-ai]

No issues found across 9 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>Heads up: you’re close to your included review allowance. Set a flex budget so reviews don’t pause.

Re-trigger cubic</sub>