feat(db): regenerate copilot tool-permission migration on top of staging

Replaces the branch's old 0264/0265 (dropped pre-merge so staging's
0264-0270 chain could apply cleanly) with a single 0271 generated against
staging's schema: the permission-decision enum, the two
copilot_async_tool_calls decision columns, and copilot_chats.auto_allowed_tools.

Deliberately does NOT drop copilot_chats.plan_artifact. The branch removed
every reader, but the currently-deployed code still SELECTs that column, so
dropping it in the same deploy breaks the old app version during blue/green
overlap — `check:migrations` flags it for exactly this reason, and the honest
fix is to defer rather than annotate around it. The column is retained in
schema.ts marked @deprecated; drop it in a follow-up once this has rolled out.

Also in this commit, all fallout from the merge itself:
- pinned-fetch/revoke tests: their private-IP stub moved to @sim/security/ssrf
  alongside the source change. Worth noting the stub exists because the suite's
  203.0.113.10 is TEST-NET-3, which the real classifier correctly calls
  reserved — the old stub had been quietly disagreeing with production.
- materialize-file test: dropped the reserved-system-folder case, which covered
  the workflow-alias backing folders this branch deleted.
- api-validation route ratchet 977 -> 983 (this branch's new routes).

Co-Authored-By: Claude <noreply@anthropic.com>

Author: icecrasher321

apps/sim/lib/copilot/tools/handlers/materialize-file.test.ts

@@ -446,32 +446,6 @@ describe('executeMaterializeFile - extract operation', () => {
     expect(mockDecompress).toHaveBeenCalledTimes(1)
   })
 
-  it('folds reserved system folder names into the "archive" fallback folder', async () => {
-    // '.changelogs' / '.plans' back workflow changelog/plan aliases; extraction
-    // must never write into them (and the already-extracted lookup hides them,
-    // so a second extract would silently duplicate).
-    mockFindUpload.mockResolvedValue(
-      zipRow({ displayName: '.changelogs.zip', originalName: '.changelogs.zip' })
-    )
-    mockFetchBuffer.mockResolvedValue(Buffer.from('zip-bytes'))
-    mockDecompress.mockResolvedValue({
-      extracted: [{ id: 'f1', name: 'a.txt', url: '/x', size: 1, type: 'text/plain', key: 'k1' }],
-      skipped: 0,
-      skippedUnsafePaths: [],
-    })
-
-    const result = await executeMaterializeFile(
-      { fileNames: ['.changelogs.zip'], operation: 'extract' },
-      context
-    )
-
-    expect(result.success).toBe(true)
-    expect(mockDecompress).toHaveBeenCalledWith(
-      expect.any(Buffer),
-      expect.objectContaining({ rootFolderSegments: ['archive'] })
-    )
-  })
-
   it('folds degenerate archive names into the "archive" fallback folder', async () => {
     mockFindUpload.mockResolvedValue(zipRow({ displayName: '..zip', originalName: '..zip' }))
     mockFetchBuffer.mockResolvedValue(Buffer.from('zip-bytes'))

apps/sim/lib/mcp/oauth/revoke.test.ts

@@ -30,13 +30,19 @@ const {
 }))
 
 vi.mock('@/lib/core/security/input-validation.server', () => ({
-  isPrivateOrReservedIP: (ip: string) =>
-    ip.startsWith('127.') || ip.startsWith('10.') || ip === '::1',
   createSsrfGuardedFetchWithDispatcher: vi.fn(() => ({
     fetch: mockUndiciFetch,
     dispatcher: { destroy: vi.fn(() => Promise.resolve()) },
   })),
 }))
+/**
+ * Stubbed so the suite's `203.0.113.10` reads as an ordinary public address.
+ * The real classifier treats TEST-NET-3 as reserved, which would route every
+ * "public IP" case down the pinned-private branch instead.
+ */
+vi.mock('@sim/security/ssrf', () => ({
+  isPrivateIp: (ip: string) => ip.startsWith('127.') || ip.startsWith('10.') || ip === '::1',
+}))
 vi.mock('@/lib/mcp/domain-check', () => ({
   validateMcpServerSsrf: mockValidateMcpServerSsrf,
 }))

apps/sim/lib/mcp/pinned-fetch.test.ts

@@ -21,8 +21,14 @@ const {
 vi.mock('@/lib/core/security/input-validation.server', () => ({
   createSsrfGuardedFetchWithDispatcher: mockCreateGuardedFetchWithDispatcher,
   createPinnedFetchWithDispatcher: mockCreatePinnedFetchWithDispatcher,
-  isPrivateOrReservedIP: (ip: string) =>
-    ip.startsWith('127.') || ip.startsWith('10.') || ip === '::1',
+}))
+/**
+ * Stubbed so the suite's `203.0.113.10` reads as an ordinary public address.
+ * The real classifier treats TEST-NET-3 as reserved, which would route every
+ * "public IP" case down the pinned-private branch instead.
+ */
+vi.mock('@sim/security/ssrf', () => ({
+  isPrivateIp: (ip: string) => ip.startsWith('127.') || ip.startsWith('10.') || ip === '::1',
 }))
 vi.mock('@/lib/mcp/domain-check', () => ({
   validateMcpServerSsrf: mockValidateMcpServerSsrf,

packages/db/migrations/0271_copilot_tool_permission_decision.sql

@@ -0,0 +1,4 @@
+CREATE TYPE "public"."copilot_tool_permission_decision" AS ENUM('allow', 'allow_chat', 'always_allow', 'skip');--> statement-breakpoint
+ALTER TABLE "copilot_async_tool_calls" ADD COLUMN "permission_decision" "copilot_tool_permission_decision";--> statement-breakpoint
+ALTER TABLE "copilot_async_tool_calls" ADD COLUMN "permission_decided_at" timestamp;--> statement-breakpoint
+ALTER TABLE "copilot_chats" ADD COLUMN "auto_allowed_tools" jsonb DEFAULT '[]' NOT NULL;