GeezerVison

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Apr 15, 2026 7:48pm

Greptile Summary

This PR fixes credential injection for Copilot/Superagent tool execution via two changes: (1) createUserToolSchema now adds credentialId as a required field only when surface === 'copilot', so the LLM is explicitly told to provide it; and (2) new helpers in executeTool normalize credentialId → credential and throw a descriptive error if an OAuth tool is called without any credential selector. A second commit replaces the Ajv-based stream event validator (which required eval/new Function and violated CSP) with a hand-written structural validator in contract.ts.

Confidence Score: 5/5

Safe to merge — both findings are P2 style/consistency issues that do not affect runtime correctness.

The core credential-injection fix is logically sound: the schema correctly marks credentialId as required for copilot surface, normalization copies it to the canonical credential field, and enforceCopilotCredentialSelection provides a fast-fail safety net. The Ajv→structural-validator swap is well-tested with full event-type coverage. The two P2 findings (required: false in VFS docs; missing scope guard on normalizeCopilotCredentialParams) are minor inconsistencies with no impact on the happy path.

apps/sim/lib/copilot/vfs/serializers.ts (credentialId still says required: false) and apps/sim/tools/index.ts (normalizeCopilotCredentialParams lacks scope guard).

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant LLM as Copilot / Superagent LLM
    participant Schema as createUserToolSchema surface=copilot
    participant Exec as executeTool
    participant Norm as normalizeCopilotCredentialParams
    participant Enforce as enforceCopilotCredentialSelection
    participant Token as OAuth Token API

    LLM->>Schema: request tool definitions
    Schema-->>LLM: schema with credentialId required

    LLM->>Exec: tool call with credentialId and params
    Exec->>Norm: normalize params unconditional
    Norm-->>Exec: params.credential set from credentialId
    Exec->>Enforce: check copilotToolExecution and oauth.required
    alt no credential selector found
        Enforce-->>Exec: throw Error must pass credentialId
        Exec-->>LLM: success false with error message
    else credential found
        Enforce-->>Exec: ok
        Exec->>Token: fetch access token for credential
        Token-->>Exec: accessToken
        Exec-->>LLM: success true with output
    end

_{Reviews (1): Last reviewed commit: "Lint" | Re-trigger Greptile}