fix(resume): withhold unsafe resume failure messages on the legacy route

Also drop two unused exports from the v2 Project file search contract that fail check:unused-exports on staging.

Author: waleedlatif1

apps/sim/app/api/resume/[workflowId]/[executionId]/[contextId]/route.test.ts

@@ -513,12 +513,17 @@ describe('POST /api/resume/[workflowId]/[executionId]/[contextId]', () => {
   })
 
   it.each([
-    { statusCode: 402, message: 'Member usage limit reached', retryable: false },
-    { statusCode: 429, message: 'Target concurrency full', retryable: true },
-    { statusCode: 503, message: 'Usage admission unavailable', retryable: true },
+    { statusCode: 402, message: 'Member usage limit reached', retryable: false, body: undefined },
+    { statusCode: 429, message: 'Target concurrency full', retryable: true, body: undefined },
+    {
+      statusCode: 503,
+      message: 'Usage admission unavailable',
+      retryable: true,
+      body: 'Internal server error',
+    },
   ])(
     'leaves the pause and queued input untouched when readmission returns $statusCode',
-    async ({ statusCode, message, retryable }) => {
+    async ({ statusCode, message, retryable, body }) => {
       mockPreprocessExecution.mockResolvedValueOnce({
         success: false,
         error: { statusCode, message, retryable },
@@ -528,7 +533,7 @@ describe('POST /api/resume/[workflowId]/[executionId]/[contextId]', () => {
       const response = await POST(request, context)
 
       expect(response.status).toBe(statusCode)
-      expect(await response.json()).toEqual({ error: message })
+      expect(await response.json()).toEqual({ error: body ?? message })
       expect(mockEnqueueOrStartResume).not.toHaveBeenCalled()
     }
   )
@@ -543,7 +548,7 @@ describe('POST /api/resume/[workflowId]/[executionId]/[contextId]', () => {
 
     expect(response.status).toBe(500)
     expect(await response.json()).toEqual({
-      error: 'Paused execution billing attribution is missing or invalid',
+      error: 'Internal server error',
     })
     expect(mockPreprocessExecution).not.toHaveBeenCalled()
     expect(mockEnqueueOrStartResume).not.toHaveBeenCalled()
@@ -576,7 +581,7 @@ describe('POST /api/resume/[workflowId]/[executionId]/[contextId]', () => {
 
     expect(response.status).toBe(500)
     expect(await response.json()).toEqual({
-      error: 'Paused execution billing attribution does not match its workspace or actor',
+      error: 'Internal server error',
     })
     expect(mockPreprocessExecution).not.toHaveBeenCalled()
     expect(mockEnqueueOrStartResume).not.toHaveBeenCalled()
@@ -593,7 +598,7 @@ describe('POST /api/resume/[workflowId]/[executionId]/[contextId]', () => {
 
     expect(response.status).toBe(500)
     expect(await response.json()).toEqual({
-      error: 'Paused execution snapshot does not match the requested workflow or execution',
+      error: 'Internal server error',
     })
     expect(mockPreprocessExecution).not.toHaveBeenCalled()
     expect(mockEnqueueOrStartResume).not.toHaveBeenCalled()

apps/sim/app/api/resume/[workflowId]/[executionId]/[contextId]/route.ts

@@ -143,7 +143,9 @@ export const POST = withRouteHandler(
         })
       }
       if (error instanceof ResumeWorkflowExecutionError) {
-        return NextResponse.json({ error: error.message }, { status: error.statusCode })
+        // Keep the status so a retryable 503 stays retryable; only the message is withheld.
+        const message = error.safeForPublicApi ? error.message : 'Internal server error'
+        return NextResponse.json({ error: message }, { status: error.statusCode })
       }
       throw error
     }

apps/sim/lib/api/contracts/v2/project-file-search.ts

@@ -1,4 +1,3 @@
-import type { z } from 'zod'
 import { defineRouteContract } from '@/lib/api/contracts/types'
 import {
   v2FileSearchResultsSchema,
@@ -7,14 +6,13 @@ import {
 import { v2ProjectFilesParamsSchema } from '@/lib/api/contracts/v2/project-files'
 import { v2DataResponse } from '@/lib/api/contracts/v2/shared'
 
-export const v2SearchProjectFileContentQuerySchema = v2SearchFileContentQuerySchema
+const v2SearchProjectFileContentQuerySchema = v2SearchFileContentQuerySchema
   .omit({ workspaceId: true })
   .extend({
     folderPaths: v2SearchFileContentQuerySchema.shape.folderPaths.describe(
       'Comma-separated folder paths within the Project. Omit to search the entire Project; index coverage applies to the selected folders.'
     ),
   })
-export type V2SearchProjectFileContentQuery = z.output<typeof v2SearchProjectFileContentQuerySchema>
 
 export const v2SearchProjectFileContentContract = defineRouteContract({
   method: 'GET',