fix(monday): escape string params in GraphQL, align deleteSubscription with established patterns

- Use JSON.stringify() for groupId in get_items.ts (matches create_item.ts
  and move_item_to_group.ts)
- Use JSON.stringify() for notificationUrl in webhook provider
- Remove non-standard getOAuthToken fallback in deleteSubscription to match
  Airtable/Webflow pattern (credential resolution only, warn and return on failure)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: waleedlatif1

apps/sim/lib/webhooks/providers/monday.ts

@@ -114,7 +114,7 @@ export const mondayHandler: WebhookProviderHandler = {
           Authorization: accessToken,
         },
         body: JSON.stringify({
-          query: `mutation { create_webhook(board_id: ${boardIdValidation.sanitized}, url: "${notificationUrl}", event: ${eventType}) { id board_id } }`,
+          query: `mutation { create_webhook(board_id: ${boardIdValidation.sanitized}, url: ${JSON.stringify(notificationUrl)}, event: ${eventType}) { id board_id } }`,
         }),
       })
 
@@ -211,15 +211,6 @@ export const mondayHandler: WebhookProviderHandler = {
       )
     }
 
-    if (!accessToken) {
-      try {
-        const fallbackToken = await getOAuthToken(ctx.webhook.userId as string, 'monday')
-        if (fallbackToken) accessToken = fallbackToken
-      } catch {
-        // Non-fatal — fall through to the guard below
-      }
-    }
-
     if (!accessToken) {
       logger.warn(
         `[${ctx.requestId}] No access token available for Monday webhook deletion ${externalId} (non-fatal)`

apps/sim/tools/monday/get_items.ts

@@ -83,7 +83,7 @@ export const mondayGetItemsTool: ToolConfig<MondayGetItemsParams, MondayGetItems
       const limit = params.limit ?? 25
       if (params.groupId) {
         return {
-          query: `query { boards(ids: [${params.boardId}]) { groups(ids: ["${params.groupId}"]) { items_page(limit: ${limit}) { items { id name state board { id } group { id title } column_values { id text value type } created_at updated_at url } } } } }`,
+          query: `query { boards(ids: [${params.boardId}]) { groups(ids: [${JSON.stringify(params.groupId)}]) { items_page(limit: ${limit}) { items { id name state board { id } group { id title } column_values { id text value type } created_at updated_at url } } } } }`,
         }
       }
       return {