fix(core): Allow manual execution from pinned trigger with no destination node

[mfsiega]

Summary

Allow manual executions with neither start node or destination node.

WIP. Still need to do something with the request types to reflect this (either introduce a new variant, or update the existing one).

Related Linear tickets, Github issues, and Community forum posts

Review / Merge checklist

• PR title and summary are descriptive. (conventions)
• Docs updated or follow-up ticket created.
• Tests included.
• PR Labeled with release/backport (if the PR is an urgent fix that needs to be backported)

[cubic-dev-ai]

1 issue found across 2 files

Prompt for AI agents (all issues)

Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name="packages/cli/src/workflows/workflow-execution.service.ts">

<violation number="1" location="packages/cli/src/workflows/workflow-execution.service.ts:139">
P1: Rule violated: **Security Review**

Logging the entire manual execution payload leaks workflow data and credentials to server logs. Remove this debug log or log only non-sensitive metadata to comply with credential-handling requirements.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

P1: Rule violated: Security Review

Logging the entire manual execution payload leaks workflow data and credentials to server logs. Remove this debug log or log only non-sensitive metadata to comply with credential-handling requirements.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At packages/cli/src/workflows/workflow-execution.service.ts, line 139:

<comment>Logging the entire manual execution payload leaks workflow data and credentials to server logs. Remove this debug log or log only non-sensitive metadata to comply with credential-handling requirements.</comment>

<file context>
@@ -136,6 +136,8 @@ export class WorkflowExecutionService {
 			}
 		}
 
+		console.log(payload);
+
 		// Case 2: Full execution from a known trigger.
</file context>

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[blacksmith-sh]

Found 1 test failure on Blacksmith runners:

Failure

Test	View Logs
tests/e2e/app-config/demo.spec.ts/Demo › can import template	View Logs