fix(mothership): strip presentation activity from desktop-authorized tool args

[waleedlatif1]

Summary

• Electron executes browser and terminal tools with the server-persisted args returned by /api/desktop/tool/authorize, which still carried the worker's presentation-only activity field; browser_fill_form rejects any key other than fields, so it failed on nearly every call once activity became required (mothership dd30087)
• The authorize route now omits activity from the args it returns, matching the server-side executor; Sim still reads it from the frame for row grouping
• Companion to simstudioai/mothership#517 / Fix/normalized tables type bug #521; should ship with or before that release

Type of Change

• Bug fix

Testing

• Added a regression test in authorize/route.test.ts (fails without the fix); file passes 12/12
• bun run check:audits (49 audits) and biome pass

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 24, 2026 11:04pm UTC

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the previously identified execution path now receives arguments without presentation activity.

Summary

The PR moves removal of presentation-only activity from the renderer to the desktop authorization response, so Electron receives executable arguments without that field.

• Adds a route regression test for browser_fill_form.
• Reverts the renderer-side stripping and its test.

_{Reviews (2) · Last reviewed commit: "fix(mothership): strip activity from des..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}