feat(mothership): remove resource-level delete tools from copilot

Remove delete operations for workflows, folders, tables, and files
from the mothership copilot to prevent destructive actions via AI.
Row-level and column-level deletes are preserved.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: waleedlatif1

apps/sim/lib/copilot/orchestrator/tool-executor/index.ts

@@ -52,8 +52,6 @@ import type {
   CreateFolderParams,
   CreateWorkflowParams,
   CreateWorkspaceMcpServerParams,
-  DeleteFolderParams,
-  DeleteWorkflowParams,
   DeleteWorkspaceMcpServerParams,
   DeployApiParams,
   DeployChatParams,
@@ -82,8 +80,6 @@ import { executeVfsGlob, executeVfsGrep, executeVfsList, executeVfsRead } from '
 import {
   executeCreateFolder,
   executeCreateWorkflow,
-  executeDeleteFolder,
-  executeDeleteWorkflow,
   executeGenerateApiKey,
   executeGetBlockOutputs,
   executeGetBlockUpstreamReferences,
@@ -836,11 +832,9 @@ const SIM_WORKFLOW_TOOL_HANDLERS: Record<
   create_folder: (p, c) => executeCreateFolder(p as CreateFolderParams, c),
   rename_workflow: (p, c) => executeRenameWorkflow(p as unknown as RenameWorkflowParams, c),
   update_workflow: (p, c) => executeUpdateWorkflow(p as unknown as UpdateWorkflowParams, c),
-  delete_workflow: (p, c) => executeDeleteWorkflow(p as unknown as DeleteWorkflowParams, c),
   move_workflow: (p, c) => executeMoveWorkflow(p as unknown as MoveWorkflowParams, c),
   move_folder: (p, c) => executeMoveFolder(p as unknown as MoveFolderParams, c),
   rename_folder: (p, c) => executeRenameFolder(p as unknown as RenameFolderParams, c),
-  delete_folder: (p, c) => executeDeleteFolder(p as unknown as DeleteFolderParams, c),
   get_workflow_data: (p, c) => executeGetWorkflowData(p as GetWorkflowDataParams, c),
   get_block_outputs: (p, c) => executeGetBlockOutputs(p as GetBlockOutputsParams, c),
   get_block_upstream_references: (p, c) =>

apps/sim/lib/copilot/orchestrator/tool-executor/param-types.ts

@@ -169,10 +169,6 @@ export interface UpdateWorkflowParams {
   description?: string
 }
 
-export interface DeleteWorkflowParams {
-  workflowId: string
-}
-
 export interface MoveWorkflowParams {
   workflowId: string
   folderId: string | null
@@ -188,10 +184,6 @@ export interface RenameFolderParams {
   name: string
 }
 
-export interface DeleteFolderParams {
-  folderId: string
-}
-
 export interface UpdateWorkspaceMcpServerParams {
   serverId: string
   name?: string

apps/sim/lib/copilot/orchestrator/tool-executor/workflow-tools/mutations.ts

@@ -11,8 +11,6 @@ import {
 import {
   createFolderRecord,
   createWorkflowRecord,
-  deleteFolderRecord,
-  deleteWorkflowRecord,
   setWorkflowVariables,
   updateFolderRecord,
   updateWorkflowRecord,
@@ -70,8 +68,6 @@ function buildExecutionError(error: unknown): ToolCallResult {
 import type {
   CreateFolderParams,
   CreateWorkflowParams,
-  DeleteFolderParams,
-  DeleteWorkflowParams,
   GenerateApiKeyParams,
   MoveFolderParams,
   MoveWorkflowParams,
@@ -550,28 +546,6 @@ export async function executeUpdateWorkflow(
   }
 }
 
-export async function executeDeleteWorkflow(
-  params: DeleteWorkflowParams,
-  context: ExecutionContext
-): Promise<ToolCallResult> {
-  try {
-    const workflowId = params.workflowId
-    if (!workflowId) {
-      return { success: false, error: 'workflowId is required' }
-    }
-
-    const { workflow: workflowRecord } = await ensureWorkflowAccess(workflowId, context.userId)
-    await deleteWorkflowRecord(workflowId)
-
-    return {
-      success: true,
-      output: { workflowId, name: workflowRecord.name, deleted: true },
-    }
-  } catch (error) {
-    return { success: false, error: error instanceof Error ? error.message : String(error) }
-  }
-}
-
 export async function executeRenameFolder(
   params: RenameFolderParams,
   context: ExecutionContext
@@ -597,27 +571,6 @@ export async function executeRenameFolder(
   }
 }
 
-export async function executeDeleteFolder(
-  params: DeleteFolderParams,
-  context: ExecutionContext
-): Promise<ToolCallResult> {
-  try {
-    const folderId = params.folderId
-    if (!folderId) {
-      return { success: false, error: 'folderId is required' }
-    }
-
-    const deleted = await deleteFolderRecord(folderId)
-    if (!deleted) {
-      return { success: false, error: 'Folder not found' }
-    }
-
-    return { success: true, output: { folderId, deleted: true } }
-  } catch (error) {
-    return { success: false, error: error instanceof Error ? error.message : String(error) }
-  }
-}
-
 export async function executeRunBlock(
   params: RunBlockParams,
   context: ExecutionContext

apps/sim/lib/copilot/tools/server/files/workspace-file.ts

@@ -2,7 +2,6 @@ import { createLogger } from '@sim/logger'
 import type { BaseServerTool, ServerToolContext } from '@/lib/copilot/tools/server/base-tool'
 import type { WorkspaceFileArgs, WorkspaceFileResult } from '@/lib/copilot/tools/shared/schemas'
 import {
-  deleteWorkspaceFile,
   getWorkspaceFile,
   renameWorkspaceFile,
   updateWorkspaceFileContent,
@@ -159,36 +158,10 @@ export const workspaceFileServerTool: BaseServerTool<WorkspaceFileArgs, Workspac
           }
         }
 
-        case 'delete': {
-          const fileId = (args as Record<string, unknown>).fileId as string | undefined
-          if (!fileId) {
-            return { success: false, message: 'fileId is required for delete operation' }
-          }
-
-          const fileRecord = await getWorkspaceFile(workspaceId, fileId)
-          if (!fileRecord) {
-            return { success: false, message: `File with ID "${fileId}" not found` }
-          }
-
-          await deleteWorkspaceFile(workspaceId, fileId)
-
-          logger.info('Workspace file deleted via copilot', {
-            fileId,
-            name: fileRecord.name,
-            userId: context.userId,
-          })
-
-          return {
-            success: true,
-            message: `File "${fileRecord.name}" deleted successfully`,
-            data: { id: fileId, name: fileRecord.name },
-          }
-        }
-
         default:
           return {
             success: false,
-            message: `Unknown operation: ${operation}. Supported: write, update, rename, delete. Use the filesystem to list/read files.`,
+            message: `Unknown operation: ${operation}. Supported: write, update, rename. Use the filesystem to list/read files.`,
           }
       }
     } catch (error) {

apps/sim/lib/copilot/tools/server/router.ts

@@ -41,7 +41,6 @@ const WRITE_ACTIONS: Record<string, string[]> = {
     'create',
     'create_from_file',
     'import_file',
-    'delete',
     'insert_row',
     'batch_insert_rows',
     'update_row',
@@ -57,7 +56,7 @@ const WRITE_ACTIONS: Record<string, string[]> = {
   manage_mcp_tool: ['add', 'edit', 'delete'],
   manage_skill: ['add', 'edit', 'delete'],
   manage_credential: ['rename', 'delete'],
-  workspace_file: ['write', 'update', 'delete', 'rename'],
+  workspace_file: ['write', 'update', 'rename'],
 }
 
 function isActionAllowed(toolName: string, action: string, userPermission: string): boolean {

apps/sim/lib/copilot/tools/server/table/user-table.ts

@@ -12,7 +12,6 @@ import {
   deleteRow,
   deleteRowsByFilter,
   deleteRowsByIds,
-  deleteTable,
   getRowById,
   getTableById,
   insertRow,
@@ -275,20 +274,6 @@ export const userTableServerTool: BaseServerTool<UserTableArgs, UserTableResult>
           }
         }
 
-        case 'delete': {
-          if (!args.tableId) {
-            return { success: false, message: 'Table ID is required' }
-          }
-
-          const requestId = crypto.randomUUID().slice(0, 8)
-          await deleteTable(args.tableId, requestId)
-
-          return {
-            success: true,
-            message: `Deleted table ${args.tableId}`,
-          }
-        }
-
         case 'insert_row': {
           if (!args.tableId) {
             return { success: false, message: 'Table ID is required' }

apps/sim/lib/copilot/tools/shared/schemas.ts

@@ -112,7 +112,6 @@ export const UserTableArgsSchema = z.object({
     'import_file',
     'get',
     'get_schema',
-    'delete',
     'insert_row',
     'batch_insert_rows',
     'get_row',
@@ -172,7 +171,7 @@ export type UserTableResult = z.infer<typeof UserTableResultSchema>
 
 // workspace_file - shared schema used by server tool and Go catalog
 export const WorkspaceFileArgsSchema = z.object({
-  operation: z.enum(['write', 'update', 'delete', 'rename']),
+  operation: z.enum(['write', 'update', 'rename']),
   args: z
     .object({
       fileId: z.string().optional(),