fix(v2): name the undecodable-cursor failure on the two sortless lists

GET /workflows/{id}/versions and GET /workspaces/{id}/members threw a bare
'Invalid cursor' literal where every other v2 list uses a shared constant.
The right one is UNREADABLE_CURSOR_MESSAGE, not INVALID_CURSOR_MESSAGE:
both lists take only limit and cursor, so naming sortBy/sortOrder would
answer one 400 with advice that earns a second.

Their missing filter scope is correct and stays. Neither contract accepts a
filter — v2PaginationFields is the whole query — so there is nothing to bind,
and limit is excluded from a scope by design.

Pins the message on the versions route, verified to fail against the literal.

Author: waleedlatif1

apps/sim/app/api/v2/workflows/[id]/versions/route.test.ts

@@ -12,6 +12,7 @@ import {
 } from '@sim/testing'
 import { NextRequest } from 'next/server'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { UNREADABLE_CURSOR_MESSAGE } from '@/lib/api/cursor-binding'
 
 const mocks = vi.hoisted(() => ({
   listVersions: vi.fn(),
@@ -103,6 +104,12 @@ describe('GET /api/v2/workflows/[id]/versions', () => {
 
     expect(response.status).toBe(400)
     expect(mocks.listVersions).not.toHaveBeenCalled()
+    /**
+     * The undecodable-token message, not the sort-mismatch one: this list
+     * declares no `sortBy`/`sortOrder`, so naming them would answer a 400 with
+     * advice that earns a second.
+     */
+    expect((await response.json()).error.message).toBe(UNREADABLE_CURSOR_MESSAGE)
   })
 
   /**

apps/sim/app/api/v2/workflows/[id]/versions/route.ts

@@ -3,6 +3,7 @@ import {
   v2ListWorkflowVersionsContract,
   v2WorkflowVersionCursorSchema,
 } from '@/lib/api/contracts/v2/workflows'
+import { UNREADABLE_CURSOR_MESSAGE } from '@/lib/api/cursor-binding'
 import { defineV2JsonRoute, v2ApiKeyAuth, v2RateLimits } from '@/lib/api/server/routes'
 import { OrchestrationError } from '@/lib/core/orchestration/types'
 import { v2WorkflowErrorPolicies } from '@/lib/workflows/api'
@@ -24,7 +25,7 @@ export const GET = defineV2JsonRoute({
       ? v2WorkflowVersionCursorSchema.safeParse(decodeCursor(query.cursor))
       : undefined
     if (decoded && !decoded.success) {
-      throw new OrchestrationError('validation', 'Invalid cursor')
+      throw new OrchestrationError('validation', UNREADABLE_CURSOR_MESSAGE)
     }
     return {
       workflowId: params.id,

apps/sim/app/api/v2/workspaces/[workspaceId]/members/route.ts

@@ -2,6 +2,7 @@ import {
   v2ListWorkspaceMembersContract,
   v2WorkspaceMemberCursorSchema,
 } from '@/lib/api/contracts/v2/workspaces'
+import { UNREADABLE_CURSOR_MESSAGE } from '@/lib/api/cursor-binding'
 import {
   defineV2JsonRoute,
   v2ApiKeyAuth,
@@ -25,7 +26,7 @@ export const GET = defineV2JsonRoute({
       ? v2WorkspaceMemberCursorSchema.safeParse(decodeCursor(query.cursor))
       : undefined
     if (decoded && !decoded.success) {
-      throw new OrchestrationError('validation', 'Invalid cursor')
+      throw new OrchestrationError('validation', UNREADABLE_CURSOR_MESSAGE)
     }
     return {
       workspaceId: params.workspaceId,