fix(pii): preserve authorized access to restored large values

[icecrasher321]

Summary

• Fix run-from-block and resumed executions failing during PII redaction of cached large values. Forward the existing authorized execution IDs, storage keys, and workflow-scope policy into input, restored-state, and block-output redaction.
• Keep workspace/workflow access checks, chunked reads, byte limits, and masked writes under the current execution.

Type of Change

• Bug fix

Testing

212 execution and payload tests pass, including regression cases that fail with the original PII redaction error before the fix. Coverage includes authorized restored values, masked output, and rejection of unrelated workspace, workflow, and execution references. Full lint, type checking, all 46 CI audits (including API validation), block registry validation, and docs manifest checks pass.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 10, 2026 1:11am UTC

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the forwarded context preserves existing authorization boundaries while enabling PII redaction of valid restored values.

Summary

• Forwards authorized execution IDs, storage keys, and workflow-scope policy into large-value redaction.
• Continues writing masked replacement values under the current execution.
• Adds regression coverage for authorized restoration and rejected cross-scope references.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Input, restored state, or block output] --> B[Find large-value references]
  B --> C{Authorized source reference?}
  C -- No --> D[Abort before storage read]
  C -- Yes --> E[Read source value with size limits]
  E --> F[Mask PII]
  F --> G[Write masked value under current execution]
  G --> H[Replace source reference with masked reference]

Loading

_{Reviews (1) · Last reviewed commit: "fix(pii): preserve authorized access to ..."}