Merge remote-tracking branch 'origin/staging' into feat/v2-agent-run-loop

Author: waleedlatif1

.agents/skills/v2-api-conventions/SKILL.md

@@ -11,7 +11,7 @@ The v2 surface makes one promise: **every response is the same two shapes, and a
 ```
 success (single)      { "data": {...} }
 success (collection)  { "data": [...], "nextCursor": "..." | null }
-failure (always)      { "error": { "code": "...", "message": "...", "details"?: ... } }
+failure (always)      { "error": { "code": "...", "message": "...", "details"?: ..., "requestId"?: "..." } }
 ```
 
 Nothing else at the top level. No `success: true`, no bare `{ "error": "string" }`, no HTML.
@@ -214,7 +214,7 @@ The consequence to keep true: **never put a resource id, filter, or scope into a
 
 Run this against any new or changed v2 endpoint.
 
-- [ ] Success body is exactly `{data}` or `{data, nextCursor}`; failures are exactly `{error:{code,message,details?}}`.
+- [ ] Success body is exactly `{data}` or `{data, nextCursor}`; failures are exactly `{error:{code,message,details?,requestId?}}`, where `v2Error` alone sets `requestId` (the `x-request-id` value).
 - [ ] Route uses a shared builder; no hand-built `NextResponse.json`.
 - [ ] Query and body schemas are `.strict()`.
 - [ ] The contract declares a `query` — `noInputSchema` when the endpoint takes no query params, never omission.

apps/docs/content/docs/api-reference/getting-started.mdx

@@ -175,12 +175,12 @@ Rejected v2 requests use HTTP error status codes and a stable code/message envel
   "error": {
     "code": "NOT_FOUND",
     "message": "Workflow not found",
-    "traceId": "3f9a1c7e"
+    "requestId": "3f9a1c7e"
   }
 }
 ```
 
-Every response carries an `x-request-id` header, and an error repeats it as `error.traceId`. Include it when you contact support about a failed request.
+Every response carries an `x-request-id` header, and an error repeats the same id as `error.requestId`. Quote it when you contact support about a failed request.
 
 | Status | Meaning | Action |
 | --- | --- | --- |

apps/docs/content/docs/cli/commands.mdx

@@ -83,7 +83,7 @@ sim login [options]
 | `--method <method>` | No | Credential to obtain: oauth requires OAuth support; api-key creates an API key through pairing (auto-selects when omitted). Accepted values: `oauth`, `api-key`. |
 | `--no-browser` | No | Print the approval URL without opening it (either login method). |
 | `--read-only` | No | Ask only for permission to read, never to change anything. |
-| `--expires-in <days>` | No | API-key login only: days until the key expires (1-365); omit for a key that never expires. |
+| `--expires-in <days>` | No | Log in with an API key that expires after this many days (1-365); without it an API key never expires. |
 | `--callback-port <port>` | No | Pin the local port the browser returns to. |
 | `-y, --yes` | No | Overwrite an existing API-key profile without prompting. |
 

apps/docs/content/docs/cli/reference.mdx

@@ -50,7 +50,7 @@ sim login [options]
 | `--method <method>` | No | Credential to obtain: oauth requires OAuth support; api-key creates an API key through pairing (auto-selects when omitted). Accepted values: `oauth`, `api-key`. |
 | `--no-browser` | No | Print the approval URL without opening it (either login method). |
 | `--read-only` | No | Ask only for permission to read, never to change anything. |
-| `--expires-in <days>` | No | API-key login only: days until the key expires (1-365); omit for a key that never expires. |
+| `--expires-in <days>` | No | Log in with an API key that expires after this many days (1-365); without it an API key never expires. |
 | `--callback-port <port>` | No | Pin the local port the browser returns to. |
 | `-y, --yes` | No | Overwrite an existing API-key profile without prompting. |
 
@@ -5126,7 +5126,7 @@ sim schedules list [options]
 | --- | --- | --- |
 | `--limit <n>` | No | Maximum items to return (0 for everything). Defaults to `100`. |
 | `--cursor <value>` | No | Continue from nextCursor returned by a previous result. |
-| `--sort-by <value>` | No | Field used to sort the result. Defaults to "createdAt". Accepted values: `createdAt`. |
+| `--sort-by <value>` | No | Field used to sort the result. `createdAt` is when the schedule was created for the deployment version that runs it: each deploy creates new schedule rows, so a redeployed workflow's schedules move to the newest end. Defaults to "createdAt". Accepted values: `createdAt`. |
 | `--sort-order <value>` | No | Sort direction. Defaults to "desc". Accepted values: `asc`, `desc`. |
 
 </CommandTable>

apps/docs/content/docs/cli/schedules.mdx

@@ -27,7 +27,7 @@ sim schedules list [options]
 | --- | --- | --- |
 | `--limit <n>` | No | Maximum items to return (0 for everything). Defaults to `100`. |
 | `--cursor <value>` | No | Continue from nextCursor returned by a previous result. |
-| `--sort-by <value>` | No | Field used to sort the result. Defaults to "createdAt". Accepted values: `createdAt`. |
+| `--sort-by <value>` | No | Field used to sort the result. `createdAt` is when the schedule was created for the deployment version that runs it: each deploy creates new schedule rows, so a redeployed workflow's schedules move to the newest end. Defaults to "createdAt". Accepted values: `createdAt`. |
 | `--sort-order <value>` | No | Sort direction. Defaults to "desc". Accepted values: `asc`, `desc`. |
 
 </CommandTable>

apps/docs/openapi-v2-billing.json

@@ -602,8 +602,8 @@
                   }
                 ]
               },
-              "traceId": {
-                "description": "Identifier of this request, the same value as the `x-request-id` response header. Include it when contacting support.",
+              "requestId": {
+                "description": "Identifier of this request, the same id as the `x-request-id` response header. Quote it when contacting support.",
                 "type": "string"
               }
             },

apps/docs/openapi-v2-files-audit.json

@@ -4744,8 +4744,8 @@
                   }
                 ]
               },
-              "traceId": {
-                "description": "Identifier of this request, the same value as the `x-request-id` response header. Include it when contacting support.",
+              "requestId": {
+                "description": "Identifier of this request, the same id as the `x-request-id` response header. Quote it when contacting support.",
                 "type": "string"
               }
             },

apps/docs/openapi-v2-knowledge.json

@@ -6049,8 +6049,8 @@
                   }
                 ]
               },
-              "traceId": {
-                "description": "Identifier of this request, the same value as the `x-request-id` response header. Include it when contacting support.",
+              "requestId": {
+                "description": "Identifier of this request, the same id as the `x-request-id` response header. Quote it when contacting support.",
                 "type": "string"
               }
             },

apps/docs/openapi-v2-logs.json

@@ -1096,8 +1096,8 @@
                   }
                 ]
               },
-              "traceId": {
-                "description": "Identifier of this request, the same value as the `x-request-id` response header. Include it when contacting support.",
+              "requestId": {
+                "description": "Identifier of this request, the same id as the `x-request-id` response header. Quote it when contacting support.",
                 "type": "string"
               }
             },

apps/docs/openapi-v2-resources.json

@@ -15082,8 +15082,8 @@
                   }
                 ]
               },
-              "traceId": {
-                "description": "Identifier of this request, the same value as the `x-request-id` response header. Include it when contacting support.",
+              "requestId": {
+                "description": "Identifier of this request, the same id as the `x-request-id` response header. Quote it when contacting support.",
                 "type": "string"
               }
             },
@@ -15266,7 +15266,7 @@
             "anyOf": [
               {
                 "type": "string",
-                "pattern": "^(\\/(?!\\/)|https:\\/\\/)"
+                "pattern": "^(\\/$|\\/[^/]|https:\\/\\/)"
               },
               {
                 "type": "null"