feat(custom-blocks): let a publisher decide whether their block's runs reach consumer traces (#6950)

* feat(custom-blocks): let a publisher decide whether their block's runs reach consumer traces

Joining a custom block's child run into its caller's trace shipped on by default,
gated at read time by whether the person reading could already open the source
workspace. That gate is doing the wrong job: a custom block's whole point is that
consumers need no access to the source, so the check refuses exactly the readers
the feature exists for, and it makes the answer depend on who is looking rather
than on what the block's owner agreed to publish.

The decision moves to the party whose data it is. `custom_block.trace_child_runs`
is set by the publisher in Settings, applies org-wide, and is the entire policy —
nothing downstream re-checks a caller. `getCustomBlockAuthority` already resolves
per invocation and is the one lookup both the canvas handler and the Agent-tool
runner pass through, so one column covers both surfaces and no consumer input can
assert it.

It defaults to FALSE. With the viewer check gone, an opted-in block publishes the
source workflow's block names, inputs, outputs, and prompts to anyone who can read
a consuming workflow's log. That is the same boundary curated outputs and redacted
errors hold, so it opens by an affirmative act of the publisher or not at all —
never as the residue of a column default on rows nobody revisited.

Closed means the handle is withheld outright rather than persisted behind a flag:
with no `childExecutionId` there is nothing for a reader, a migration, or a later
refactor to join. What replaces it is a `_childTraceDisabled` marker, because a
boundary span with no children renders exactly like a leaf block and an untraced
run would otherwise read as one that did nothing. The consumer-facing failure
`ref` is untouched either way — it is the only thing that makes an untraced
failure reportable.

Custom blocks invoked as Agent tools now join too. The child's handle already
reached the agent's persisted `toolCalls[].result` (`postProcessToolOutput` strips
only `__`-prefixed keys); nothing lifted it onto the tool span. Both span builders
lift and strip it, and `hydrateChildTraces` needs no change — its boundary walk
already recurses. The same handle is stripped from the model-facing copy of the
tool result in `executeProviderTool`, the single point where the raw and model
copies diverge: an opaque execution id in a tool result reads to a model like data
the tool returned.

The live SSE stream keeps one condition beyond the policy: an identified consumer.
Not an authorization check — no workspace query — but chat deployments and the
public API leave `liveTraceViewerUserId` unset because their consumer may be
anonymous, and opting into org-wide tracing is not consent to stream a publisher's
raw agent tokens to the internet.

Copilot deliberately cannot set the field; exposing a team's internals org-wide is
a human decision, not one an agent makes while publishing on their behalf.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(custom-blocks): read the publisher's trace policy at read time, not from the handle's presence

Treating a persisted `childExecutionId` as proof of publisher consent is only true
for handles this PR's writer produced. Every handle written before it meant
something else — "a child ran; authorize the reader" — and the rows carrying them
outlive the migration, so removing the reader check turned them into an open door:
a consumer could open an old parent log and receive the source workflow's block
names, inputs, outputs, and prompts from a block whose publisher never opted in.

`hydrateChildTraces` now resolves the policy live, per boundary, from
`custom_block.trace_child_runs`. The child log row's `workflowId` is the key —
publish enforces one block per workflow — which also covers an Agent-tool boundary,
whose span carries no block type to look up. A workflow with no block row (never
published, or since deleted) has no publisher left to consent and stays shut, as
does a failed policy read.

This is not redundant with the write-time withholding. The handler still emits no
handle for a block that was closed when the run executed, so such a run stays
closed forever even if the block is opened later; this check decides whether the
runs that DO carry a handle may still be shown. Turning the policy off therefore
also closes what is already recorded, which is what a governance switch has to do
to mean anything.

Reported by Greptile on #6950.

Also drops `any` from the trace-policy tests: outputs read through
`Record<string, unknown>` (the handler's declared return does not name these
internal keys) and failures narrow through `ChildWorkflowError.isChildWorkflowError`,
which pins the failure type as well as its fields.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(logs): sum the child-trace drop counters from the struct, not a hand-listed set

`totalDropped` re-listed four of the five counters, so a read whose only drops were
policy refusals computed zero and skipped the log entirely. That is the commonest
drop there is now — every handle written before the publisher policy existed refuses
at that gate — so the one signal telling an operator the live check is closing joins
went silent exactly when it started mattering.

Summed from the struct instead. A hand-maintained list beside a struct is stale the
moment a field is added, which is precisely how `policyClosed` was left out.

Reported by Cursor Bugbot on #6950.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* chore(db): renumber the custom-block trace migration around a 0299 collision

Staging landed its own 0299 (`table_run_dispatches.heartbeat_at`) while this
branch was open. The two migrations are independent — different tables, no shared
statement — so only the number and drizzle's snapshot chain collided.

Regenerated rather than hand-merged: a drizzle snapshot is a full-schema dump
whose `prevId` links it to its parent, so editing one by hand to sit after a
migration it was not generated against is how the chain silently stops matching
the database. Staging's 0299 and its snapshot are taken verbatim; this is 0300,
generated against them, and its SQL is byte-identical to what it replaced.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: icecrasher321

apps/docs/content/docs/en/platform/enterprise/custom-blocks.mdx

@@ -74,7 +74,15 @@ Pick which of the workflow's outputs consumers can use, and give each one a name
 
 <Image src="/static/enterprise/custom-blocks-form.png" alt="Create block form filled in: Workspace and Workflow selectors, an uploaded icon, Name and Description fields, an expanded input with a placeholder, and two selected outputs each given a name" width={900} height={570} />
 
-### 6. Save
+### 6. Choose whether runs are traced
+
+**Trace runs in consumer logs** is off by default. Leave it off and your block stays a single step in every workflow that uses it: nothing about the run is recorded anywhere a consumer can reach.
+
+Turn it on and the block's steps appear inside the trace of every workflow that runs it, org-wide. That means anyone who can read those workflows' logs sees your workflow's block names, inputs, outputs, and prompts — including people with no access to this workspace. It is the same information curated outputs and redacted errors otherwise keep on your side of the block, so turn it on when you want consumers to be able to debug your block themselves, and leave it off otherwise.
+
+You can change this at any time; it applies to runs from that point on. Failures always return a reference id either way, so you can find a run in your own logs even with tracing off.
+
+### 7. Save
 
 Click **Save changes**. The block is published immediately and becomes available to everyone in your organization in the workflow editor's block toolbar.
 
@@ -86,7 +94,7 @@ In the workflow editor, open the block toolbar. Published custom blocks appear u
 
 <Image src="/static/enterprise/custom-blocks-toolbar.png" alt="Workflow editor block toolbar with a Custom Blocks section listing two published blocks below Core Blocks" width={400} height={476} />
 
-Consumers don't need any access to the source workflow. The block runs on its own, using only the inputs provided, and returns only the outputs you exposed. Internal steps, models, and intermediate values of the source workflow are never visible.
+Consumers don't need any access to the source workflow. The block runs on its own, using only the inputs provided, and returns only the outputs you exposed. Its internal steps, models, and intermediate values stay hidden unless the block's publisher turned on **Trace runs in consumer logs**, in which case they appear under the block in the run's trace.
 
 <Image src="/static/enterprise/custom-blocks-canvas.png" alt="A custom block connected to a Start block on the workflow canvas, with its query input filled in and the run output showing the returned fields" width={900} height={570} />
 
@@ -96,7 +104,7 @@ Consumers don't need any access to the source workflow. The block runs on its ow
 
 Open a block from **Settings → Enterprise → Custom blocks** to edit or delete it.
 
-- **Editing** changes only the block's presentation and interface — name, description, icon, input placeholders, and exposed outputs. The source workflow can't be re-pointed.
+- **Editing** changes only the block's presentation, interface, and trace policy — name, description, icon, input placeholders, exposed outputs, and whether runs are traced in consumer logs. The source workflow can't be re-pointed.
 - **Changing what the block does** is done by editing and **redeploying the source workflow**. The block picks up the new deployment automatically; there's nothing to republish.
 - **Deleting** a block is permanent. Workflows already using it will have that block removed, so replace it before deleting if it's in active use.
 

apps/sim/app/api/custom-blocks/[id]/route.ts

@@ -36,7 +36,8 @@ export const PATCH = withRouteHandler(async (request: NextRequest, context: Rout
   if (authz.error) return authz.error
   const { ctx } = authz
 
-  const { name, description, enabled, iconUrl, inputs, exposedOutputs } = parsed.data.body
+  const { name, description, enabled, iconUrl, inputs, exposedOutputs, traceChildRuns } =
+    parsed.data.body
   try {
     await updateCustomBlock(id, {
       name,
@@ -45,6 +46,7 @@ export const PATCH = withRouteHandler(async (request: NextRequest, context: Rout
       inputs,
       iconUrl,
       exposedOutputs,
+      traceChildRuns,
     })
     recordAudit({
       workspaceId: ctx.sourceWorkspaceId,

apps/sim/app/api/custom-blocks/route.ts

@@ -36,6 +36,7 @@ function toWire(block: CustomBlockWithInputs) {
     description: block.description,
     iconUrl: block.iconUrl,
     enabled: block.enabled,
+    traceChildRuns: block.traceChildRuns,
     inputFields: block.inputFields,
     exposedOutputs: block.exposedOutputs,
   }
@@ -82,8 +83,16 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
   if (!parsed.success) return parsed.response
 
   const userId = session.user.id
-  const { workspaceId, workflowId, name, description, iconUrl, inputs, exposedOutputs } =
-    parsed.data.body
+  const {
+    workspaceId,
+    workflowId,
+    name,
+    description,
+    iconUrl,
+    inputs,
+    exposedOutputs,
+    traceChildRuns,
+  } = parsed.data.body
 
   const access = await checkWorkspaceAccess(workspaceId, userId)
   if (!access.canAdmin) {
@@ -120,6 +129,7 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
       iconUrl,
       inputs,
       exposedOutputs,
+      traceChildRuns,
     })
     recordAudit({
       workspaceId,

apps/sim/app/workspace/[workspaceId]/logs/components/log-details/components/trace-view/trace-view.tsx

@@ -54,9 +54,9 @@ import { useCodeViewerFeatures } from '@/hooks/use-code-viewer'
  * the joined children are their own evidence, so labelling them would be noise.
  */
 const CHILD_TRACE_ACCESS_LABEL: Record<string, string> = {
-  denied: 'No access to the source workspace',
   missing: 'Not available',
   truncated: 'Not expanded (nesting limit)',
+  disabled: 'Not traced',
 }
 
 const DEFAULT_TREE_PANE_WIDTH = 240
@@ -682,12 +682,13 @@ const TraceDetailPane = memo(function TraceDetailPane({ span }: { span: TraceSpa
     label: 'Type',
     value: isCustomBlockType(span.type) ? 'custom block' : span.type,
   })
-  // A custom block runs in another workspace, so its steps are joined in only for a viewer
-  // authorized there. Say why they are absent — otherwise a boundary span with no children
-  // is indistinguishable from a block that simply did nothing.
-  const childRunLabel = span.childTraceAccess
-    ? CHILD_TRACE_ACCESS_LABEL[span.childTraceAccess]
-    : undefined
+  // A custom block runs in another workspace, and its steps are joined in only when its
+  // publisher opted that block into consumer traces. Say why they are absent — otherwise a
+  // boundary span with no children is indistinguishable from a block that simply did
+  // nothing. The read-time verdict wins: a span that carries one was opted in, so
+  // `disabled` can only describe a span hydration never considered.
+  const childRunState = span.childTraceAccess ?? (span.childTraceDisabled ? 'disabled' : undefined)
+  const childRunLabel = childRunState ? CHILD_TRACE_ACCESS_LABEL[childRunState] : undefined
   if (childRunLabel) metaEntries.push({ label: 'Child run', value: childRunLabel })
   metaEntries.push({ label: 'Duration', value: formatDuration(duration, { precision: 2 }) || '—' })
   if (span.tries !== undefined) metaEntries.push({ label: 'Tries', value: String(span.tries) })

apps/sim/ee/custom-blocks/components/custom-block-detail.tsx

@@ -142,6 +142,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
     toCustomBlockInputs(existing?.inputFields)
   )
   const [outputs, setOutputs] = useState<CustomBlockOutput[]>(() => existing?.exposedOutputs ?? [])
+  const [traceChildRuns, setTraceChildRuns] = useState(existing?.traceChildRuns ?? false)
   const [error, setError] = useState<string | null>(null)
   const [showDelete, setShowDelete] = useState(false)
 
@@ -169,6 +170,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
     setDescription(existing.description ?? '')
     setInputs(toCustomBlockInputs(existing.inputFields))
     setOutputs(existing.exposedOutputs ?? [])
+    setTraceChildRuns(existing.traceChildRuns)
   }
 
   const iconUpload = useProfilePictureUpload({
@@ -277,6 +279,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
     ? name.trim() !== existing.name ||
       description.trim() !== (existing.description ?? '') ||
       (iconUrl || null) !== (existing.iconUrl ?? null) ||
+      traceChildRuns !== existing.traceChildRuns ||
       JSON.stringify(visibleOutputs) !== JSON.stringify(existing.exposedOutputs) ||
       JSON.stringify(normalizeInputsForCompare(visibleInputs)) !==
         JSON.stringify(normalizeInputsForCompare(existing.inputFields))
@@ -286,6 +289,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
           selectedWorkflowId ||
           selectedWorkspaceId !== eligibleDefaultWorkspaceId ||
           iconUrl ||
+          traceChildRuns ||
           visibleOutputs.length > 0 ||
           visibleInputs.some((i) => i.placeholder?.trim())
       )
@@ -343,6 +347,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
     }
     setName(existing?.name ?? '')
     setDescription(existing?.description ?? '')
+    setTraceChildRuns(existing?.traceChildRuns ?? false)
     setInputs(toCustomBlockInputs(existing?.inputFields))
     setOutputs(existing?.exposedOutputs ?? [])
     iconUpload.reset()
@@ -388,6 +393,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
           description: description.trim(),
           inputs: inputPlaceholders,
           exposedOutputs,
+          traceChildRuns,
           ...(iconChanged ? { iconUrl: iconUrl || null } : {}),
         })
         toast.success('Block updated')
@@ -399,6 +405,7 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
           description: description.trim(),
           inputs: inputPlaceholders,
           exposedOutputs,
+          traceChildRuns,
           ...(iconUrl ? { iconUrl } : {}),
         })
         toast.success('Block created')
@@ -727,6 +734,19 @@ export function CustomBlockDetail({ blockId, workspaceId, onBack }: CustomBlockD
               </div>
             )}
           </SettingRow>
+
+          <SettingRow
+            label='Trace runs in consumer logs'
+            htmlFor='custom-block-trace-child-runs'
+            description='Shows this block’s steps inside the trace of every workflow that runs it, org-wide. Anyone who can read those logs sees the source workflow’s block names, inputs, outputs, and prompts — including people with no access to this workspace.'
+          >
+            <Switch
+              id='custom-block-trace-child-runs'
+              checked={traceChildRuns}
+              onCheckedChange={setTraceChildRuns}
+              disabled={!canManageBlock}
+            />
+          </SettingRow>
         </div>
       </SettingsPanel>
 

apps/sim/executor/constants.ts

@@ -323,10 +323,27 @@ export function isWorkflowBlockType(blockType: string | undefined): boolean {
  */
 export const CHILD_EXECUTION_ID_OUTPUT_KEY = '_childExecutionId'
 
+/**
+ * Internal marker saying a custom block ran a child whose trace it deliberately
+ * did not publish. Carried instead of {@link CHILD_EXECUTION_ID_OUTPUT_KEY}, never
+ * beside it: withholding the handle is what makes tracing-off fail closed, and a
+ * marker that travelled with the handle would be one dropped field away from
+ * joining a run the caller opted out of. Underscore-prefixed for the same reason.
+ *
+ * Recorded because a boundary span with no children renders exactly like a leaf
+ * block, so an untraced invocation would otherwise read as one that did nothing.
+ *
+ * Neither key may become a globally hidden output key: on the Agent-tool path the
+ * block log's nested `toolCalls[].result` is the only carrier from the tool
+ * response to the tool span, so hiding them there would silently stop custom
+ * blocks invoked as tools from joining their child runs at all.
+ */
+export const CHILD_TRACE_DISABLED_OUTPUT_KEY = '_childTraceDisabled'
+
 /**
  * Whether a block runs another workflow underneath it, and therefore owns a
  * nested subtree in the trace/terminal — a workflow block, or a custom block
- * whose source run the viewer has been authorized to see.
+ * whose publisher opted its runs into consumer traces.
  *
  * Deliberately wider than {@link isWorkflowBlockType}, which stays narrow because
  * it also gates whether the child workflow's NAME may be attached to an error —

apps/sim/executor/errors/child-workflow-error.ts

@@ -22,6 +22,11 @@ interface ChildWorkflowErrorOptions {
    * started — including for boundary-safe failures, which carry no `ref`.
    */
   childExecutionId?: string
+  /**
+   * A child run happened but the invocation opted out of publishing it. Mutually
+   * exclusive with {@link childExecutionId} — see `CHILD_TRACE_DISABLED_OUTPUT_KEY`.
+   */
+  childTraceDisabled?: boolean
   cause?: Error
 }
 
@@ -45,6 +50,7 @@ export class ChildWorkflowError extends Error {
   readonly rootErrorMessage: string
   readonly consumerFacing?: CustomBlockFailure
   readonly childExecutionId?: string
+  readonly childTraceDisabled?: boolean
 
   constructor(options: ChildWorkflowErrorOptions) {
     super(options.message, { cause: options.cause })
@@ -58,6 +64,7 @@ export class ChildWorkflowError extends Error {
     this.rootErrorMessage = options.rootErrorMessage ?? options.message
     this.consumerFacing = options.consumerFacing
     this.childExecutionId = options.childExecutionId
+    this.childTraceDisabled = options.childTraceDisabled
   }
 
   static isChildWorkflowError(error: unknown): error is ChildWorkflowError {

apps/sim/executor/execution/block-executor.ts

@@ -20,6 +20,7 @@ import {
   buildResumeApiUrl,
   buildResumeUiUrl,
   CHILD_EXECUTION_ID_OUTPUT_KEY,
+  CHILD_TRACE_DISABLED_OUTPUT_KEY,
   DEFAULTS,
   EDGE,
   isSentinelBlockType,
@@ -351,11 +352,15 @@ export class BlockExecutor {
         if (typeof childExecutionId === 'string' && childExecutionId) {
           blockLog.childExecution = { executionId: childExecutionId }
         }
+        if (normalizedOutput[CHILD_TRACE_DISABLED_OUTPUT_KEY] === true) {
+          blockLog.childTraceDisabled = true
+        }
       }
 
       const {
         childTraceSpans: _traces,
         [CHILD_EXECUTION_ID_OUTPUT_KEY]: _childExecutionId,
+        [CHILD_TRACE_DISABLED_OUTPUT_KEY]: _childTraceDisabled,
         ...outputForState
       } = normalizedOutput
       const stateOutput = outputForState as NormalizedBlockOutput
@@ -663,10 +668,14 @@ export class BlockExecutor {
       if (ChildWorkflowError.isChildWorkflowError(error) && error.childTraceSpans.length > 0) {
         blockLog.childTraceSpans = error.childTraceSpans
       }
-      // A failed custom block still has its own child run to join at read time.
+      // A failed custom block still has its own child run to join at read time —
+      // unless the instance opted out, which leaves only the marker.
       if (ChildWorkflowError.isChildWorkflowError(error) && error.childExecutionId) {
         blockLog.childExecution = { executionId: error.childExecutionId }
       }
+      if (ChildWorkflowError.isChildWorkflowError(error) && error.childTraceDisabled) {
+        blockLog.childTraceDisabled = true
+      }
     }
 
     const diagnosticRegistry = ctx.errorResolvedSecretTraceRegistry