The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		May 1, 2026 2:26am

PR Summary

Medium Risk
Medium risk because it touches many client/server request paths (migrating raw fetch/Zod parsing to contract-driven requestJson/parseRequest) and changes billing attribution for wand usage to a workspace’s billed account, which could affect charging if mis-resolved.

Overview
Broadly enforces the API contract boundary pattern by replacing many same-origin JSON fetch calls in UI code with requestJson(...), adding boundary-raw-fetch annotations for legitimate non-JSON/streaming/multipart cases, and tightening docs in apps/sim/AGENTS.md to reflect the expanded enforcement scope.

Moves multiple API routes to contract-first validation by switching route handlers from route-local Zod parsing to parseRequest(contract, ...) (e.g., auth providers/SSO, invitations, credential-set invites, organizations, templates), and wrapping several mothership shim routes with withRouteHandler while explicitly annotating tolerated request.clone().json() envelope validation.

Fixes workflow variable shaping and workflow listing payloads by stamping workflowId onto returned variables (and removing now-unreachable per-variable workflowId validation on writes), updating tests accordingly, and projecting workflow list queries to only the contract-declared columns.

Adjusts wand usage billing attribution so usage/overage checks are recorded against the workspace’s billedAccountUserId (when applicable) and includes workspaceId in usage records, returning a server error if the billed account cannot be resolved.

^{Reviewed by Cursor Bugbot for commit 06c11b3. Configure here.}

bugbot run

bugbot run

bugbot run

bugbot run

bugbot run