fix(github): treat boolean false as an explicit gist visibility choice

Author: waleedlatif1

apps/sim/blocks/blocks/github.param-wiring.test.ts

@@ -95,6 +95,27 @@ describe('gist_public coercion', () => {
     expect(map({ operation: 'github_create_gist' })).not.toHaveProperty('public')
   })
 
+  it.each([null, undefined, ''])('treats %o as unset rather than Secret', (unset) => {
+    expect(map({ gist_public: unset })).not.toHaveProperty('public')
+  })
+
+  /**
+   * The block declares this input as `boolean`, so a writer following that
+   * schema stores `false` rather than the dropdown's `'false'`. Both mean the
+   * user chose Secret, and a truthy presence check would silently drop one of
+   * them — letting a model-supplied `public: true` through on the agent path.
+   */
+  it.each([
+    ['false', false],
+    [false, false],
+  ])('treats %o as an explicit Secret selection', (input, expected) => {
+    expect(map({ gist_public: input }).public).toBe(expected)
+  })
+
+  it.each(['false', false])('overrides a model-supplied public for %o', (secret) => {
+    expect({ public: true, ...map({ gist_public: secret }) }.public).toBe(false)
+  })
+
   it('matches the dropdown option ids the block actually renders', () => {
     const sub = GitHubBlock.subBlocks.find((s) => s.id === 'gist_public')
     expect(sub?.options).toBeDefined()

apps/sim/blocks/blocks/github.ts

@@ -2316,8 +2316,20 @@ Return ONLY the timestamp string - no explanations, no quotes, no extra text.`,
          * 'true'/'false' while the tool declares `public` as a boolean. The
          * generic handler only JSON-parses `json`/`array` inputs, so nothing
          * else coerces it.
+         *
+         * Presence is tested rather than truthiness, because boolean `false` is
+         * a real selection: the block declares this input as `boolean`, so a
+         * writer following that schema stores `false` rather than `'false'`.
+         * Under a truthy check the two disagree — `'false'` would force the
+         * gist secret while `false` was dropped, letting a model-supplied
+         * `public: true` through on the agent path. Only an unset field
+         * (nullish or empty) defers to the tool's own default.
          */
-        if (params.gist_public) {
+        if (
+          params.gist_public !== undefined &&
+          params.gist_public !== null &&
+          params.gist_public !== ''
+        ) {
           result.public = params.gist_public === true || params.gist_public === 'true'
         }