[waleedlatif1]

Summary

• Pause points read once: a paused run's status read reused the pause points it had already loaded instead of querying paused_executions a second time. The returned data is unchanged.
• Auto-disable log fires once: a polling webhook logs "auto-disabled" only when this failure actually disables it, not on every later failure of a row that was already off. It still runs as one race-free statement, which now also returns the prior state.
• Accurate scopes in /api/v2/meta: it reports the scopes a credential can actually reach, using the same check enforcement uses:
  • Write tokens and full-access keys report api:read, api:write and search:read.
  • Read-only keys report api:read and search:read.
  • Enforcement is unchanged.
• Docs: MACHINE_ACCESS.md names MCP TypeScript SDK 2.4.0.

Type of Change

• Bug fix

Testing

• Unit tests: read-workflow-run, runs, webhooks/polling/utils, oauth-authorization, read-v2-api-capabilities, v2-api-key-auth.
• Integration tests (real Postgres/Redis): triggers.integration.ts covers the auto-disable log firing once. read-only-access.integration.ts covers meta scopes. read-workflow-run-pause.integration.ts and pause-persistence.integration.ts cover pause points. 38/38 pass.
• New guards: the auto-disable log and meta scopes each have a test that fails when the fix is reverted.
• Commands: bun run lint, bun run --cwd apps/sim type-check, check-block-registry.ts origin/staging, check:test-patterns, check:cli-api, check:cli-docs, check:api-validation:strict, check:openapi, check:docs, check:tool-metadata, check:docs-manifest, check:comment-hygiene, check:source-conventions.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 11, 2026 12:13am UTC

[cubic-dev-ai]

No issues found across 16 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge.

Summary

The PR reuses loaded pause points, logs webhook auto-disable only when it happens, reports implied credential scopes, and updates the documented MCP SDK version.

• Paused run details reuse pause points already loaded for status.
• Polling failures log only when they turn a webhook off.
• API metadata lists every scope a credential can reach.
• Machine access docs name MCP TypeScript SDK 2.4.0.

_{Reviews (3) · Last reviewed commit: "test(mcp): expect the search:read scope ..." · Reviewed by Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 10 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 11 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}