sim 2.1.8-preview.98.1 → 2.1.8

package/README.md

@@ -220,11 +220,26 @@ will consume the result, and `text` for tab-separated shell output:
 
 ```bash
 sim workflows list --output json
-sim logs list --output json | jq -r '.[].runId'
+sim logs list --output json | jq -r '.data[].runId'
 SIM_OUTPUT=yaml sim tables get <tableId>
 sim configure --set-output json
 ```
 
+Paginated lists return `{ "data": [...], "nextCursor": "..." }` in JSON and YAML.
+`nextCursor` is `null` when no pages remain. Resource lists and directory `ls`
+fetch every page by default; use `--limit N` to cap them. Table rows (including
+queries), logs, audit/billing events, workflow runs/versions, and knowledge
+documents/chunks keep a default limit of 100. Use `--limit 0` to fetch every page
+of those datasets, or pass the returned `nextCursor` to `--cursor` to continue
+with another bounded result. Keep the same resource, filters, and sort order
+when resuming; stop when `nextCursor` is `null`. Results accumulate in memory
+before printing, so large datasets need an explicit limit or filter.
+
+```bash
+sim tables rows list <tableId> --limit 100 --output json
+sim tables rows list <tableId> --limit 100 --cursor "$nextCursor" --output json
+```
+
 JSON-valued options accept inline JSON, a file prefixed with `@`, or stdin with
 `@-`:
 

package/dist/index.js

@@ -4460,6 +4460,22 @@ function toApiError(url, status, contentType, raw) {
 function truncate(value, max) {
   return value.length <= max ? value : `${value.slice(0, max)}…`;
 }
+function transportErrorMessage(error) {
+  const messages = [];
+  const seen = new Set;
+  let current = error;
+  while (current && typeof current === "object" && messages.length < 4 && !seen.has(current)) {
+    seen.add(current);
+    const candidate = current;
+    const message = typeof candidate.message === "string" ? truncate(candidate.message.replace(/\s+/g, " ").trim(), 300) : "";
+    const code = typeof candidate.code === "string" ? candidate.code : "";
+    const detail = `${message}${code && !message.includes(code) ? ` (${code})` : ""}`;
+    if (detail && messages.at(-1) !== detail)
+      messages.push(detail);
+    current = candidate.cause;
+  }
+  return messages.join(": ") || "Unknown network error";
+}
 function namesKeyScopeRefusal(error) {
   if (typeof error.code === "string" && KEY_SCOPE_REFUSALS.has(error.code))
     return true;
@@ -4683,7 +4699,7 @@ class SimClient {
       if (timeout?.aborted) {
         throw new SimApiError(`${url} did not answer within ${timeoutMs / 1000}s. ${RAISE_TIMEOUT_HINT}`, 0);
       }
-      throw new SimApiError(`Could not reach ${this.profile.endpoint}: ${cause.message}`, 0);
+      throw new SimApiError(`Could not reach ${this.profile.endpoint}: ${transportErrorMessage(cause)}`, 0);
     }
     if (trace)
       traceRequest(method, url, response.status, startedAt);
@@ -4747,15 +4763,21 @@ function pageProgress() {
     }
   };
 }
-async function requestAllPages(client, path, options) {
-  return (await requestPages(client, path, options)).items;
+function assertCursorAdvances(cursor, seenCursors) {
+  if (cursor === null)
+    return;
+  if (seenCursors.has(cursor)) {
+    throw new SimApiError("The API returned a repeated pagination cursor; cannot continue.", 0);
+  }
+  seenCursors.add(cursor);
 }
-async function requestPages(client, path, options) {
+async function requestAllPages(client, path, options) {
   const { query, pageSize, limit: requestedLimit, ...requestOptions } = options;
   const limit = requestedLimit ?? Number.POSITIVE_INFINITY;
   if (limit <= 0)
-    return { items: [], truncated: false };
+    return [];
   const items = [];
+  const seenCursors = new Set;
   const progress = pageProgress();
   let cursor = null;
   try {
@@ -4768,6 +4790,7 @@ async function requestPages(client, path, options) {
           cursor
         }
       });
+      assertCursorAdvances(page.nextCursor, seenCursors);
       items.push(...page.data);
       cursor = page.nextCursor;
       if (cursor && items.length < limit)
@@ -4776,7 +4799,7 @@ async function requestPages(client, path, options) {
   } finally {
     progress.finish();
   }
-  return { items: items.slice(0, limit), truncated: cursor !== null || items.length > limit };
+  return items.slice(0, limit);
 }
 function resolvePath(template, params = {}) {
   return template.replace(/\[([^\]]+)\]/g, (_match, key) => {
@@ -8700,6 +8723,7 @@ var V2_OPERATIONS = {
     pathParamDocs: { workflowId: "Unique workflow identifier." },
     responseMode: "json",
     summary: "Apply Workflow Operations",
+    workspaceKeyUnsupported: true,
     query: {
       dryRun: {
         kind: "boolean",
@@ -8788,7 +8812,7 @@ var V2_OPERATIONS = {
       },
       folderPaths: {
         kind: "string",
-        describe: "Folder paths to include with all their descendants, comma-separated. At most 100 entries, and the files they resolve to count against the same 100-file download ceiling. A path that matches no folder is rejected rather than ignored."
+        describe: "Comma-separated folder paths whose contents are included recursively. Up to 100 paths; resolved files share the 100-file download limit. Unknown paths are rejected."
       }
     }
   },
@@ -9447,7 +9471,7 @@ var V2_OPERATIONS = {
         kind: "enum",
         values: ["streamable-http"],
         default: "streamable-http",
-        describe: "Transport used to communicate with the server. Applied server-side as `streamable-http` when omitted on create."
+        describe: "Transport protocol. Defaults to `streamable-http` on creation."
       },
       url: {
         kind: "string",
@@ -9466,17 +9490,17 @@ var V2_OPERATIONS = {
       timeout: {
         kind: "integer",
         default: 30000,
-        describe: "Per-request timeout in milliseconds. Applied server-side as 30000 when omitted on create."
+        describe: "Per-request timeout in milliseconds. Defaults to 30000 on creation."
       },
       retries: {
         kind: "integer",
         default: 3,
-        describe: "Number of retries per request. Applied server-side as 3 when omitted on create."
+        describe: "Number of retries per request. Defaults to 3 on creation."
       },
       enabled: {
         kind: "boolean",
         default: true,
-        describe: "Whether the server tools are available to workflows. Applied server-side as true when omitted on create."
+        describe: "Whether workflows can use the server's tools. Defaults to true on creation."
       },
       oauthClientId: {
         kind: "string",
@@ -10374,7 +10398,7 @@ var V2_OPERATIONS = {
       input: {
         kind: "object",
         default: {},
-        describe: "Arguments for the tool, keyed by the parameter ids the tool catalog publishes for it. A parameter whose visibility is `user-only` also accepts an environment-variable reference written as the whole value, `{{VAR_NAME}}`, resolved server-side against the workspace environment; any other value is sent verbatim."
+        describe: "Tool arguments keyed by published parameter IDs. For `user-only` parameters, a whole-value `{{VAR_NAME}}` reference resolves a workspace environment variable. Other values pass through unchanged."
       },
       credentialId: {
         kind: "string",
@@ -10409,7 +10433,7 @@ var V2_OPERATIONS = {
       },
       executionTimeoutSeconds: {
         kind: "integer",
-        describe: "Requested server-side timeout for an asynchronous run, in seconds. An upper bound, not the effective timeout: the run uses the smaller of this value and the plan's execution timeout, so requesting more than the plan allows silently yields the plan timeout. Rejected with `400` unless `async` is true."
+        describe: "Maximum duration of an asynchronous run, in seconds, capped by the plan's execution timeout. Requires `async: true`; otherwise returns `400`."
       },
       stream: {
         kind: "boolean",
@@ -10418,7 +10442,7 @@ var V2_OPERATIONS = {
       },
       selectedOutputs: {
         kind: "array",
-        describe: "Block output references to include in a streamed response. Use `<blockName>.<outputPath>` for the executed workflow or `<childWorkflowId>.<blockName>.<outputPath>` for a child workflow; block names are normalized workflow reference names. Selecting a child workflow applies to every invocation of it. Requires `stream: true` — it shapes the streamed envelope only, so it is rejected on a sync request and when `async` is true. To narrow a finished run, pass `selectedOutputs` to the run resource instead."
+        describe: "Output references for streaming: `<blockName>.<outputPath>` or `<childWorkflowId>.<blockName>.<outputPath>`, using normalized block names. Child references apply to every invocation. Requires `stream: true` and rejects synchronous or async requests. Use `selectedOutputs` with Get Workflow Run to narrow an existing run."
       },
       includeThinking: {
         kind: "boolean",
@@ -10442,7 +10466,7 @@ var V2_OPERATIONS = {
     headers: {
       "x-run-id": {
         kind: "string",
-        describe: 'Caller-supplied run identifier, available only to API-key callers. A one-shot uniqueness claim, NOT an idempotency key: reusing a value fails with `409` and `error.details.code: "RUN_ID_CONFLICT"` rather than replaying the original result. To retry safely, send a fresh value per attempt, or omit the header and let the server allocate one.'
+        describe: "Run ID for API-key or OAuth callers; ignored for anonymous requests. Reuse it after an uncertain response: a claimed ID returns `409` with `RUN_ID_CONFLICT`, without replaying results. Check Get Workflow Run, but `404` can persist while the ID remains claimed and does not establish whether execution started. Do not automatically restart with a fresh or omitted ID; either can start another run."
       },
       "x-sim-via": {
         kind: "string",
@@ -10666,7 +10690,7 @@ var V2_OPERATIONS = {
       },
       folderPaths: {
         kind: "string",
-        describe: "Comma-separated workflow folder paths to include. At most 100 entries. A path covers its whole subtree. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Comma-separated workflow folder paths, including descendants. Up to 100 paths. Unknown folder paths contribute no matches."
       },
       triggers: {
         kind: "string",
@@ -10688,7 +10712,7 @@ var V2_OPERATIONS = {
       segmentCount: {
         kind: "integer",
         default: 72,
-        describe: "Number of equal time buckets to divide the window into, from 1 to 500. Exactly this many buckets are always returned. Buckets are never narrower than one minute, so on a short window the series extends past the end of the window rather than being compressed, and the trailing buckets are empty."
+        describe: "Number of time buckets, up to 500. Exactly this many are returned, each at least one minute wide. Short windows extend past the requested end and include empty trailing buckets."
       }
     }
   },
@@ -11144,7 +11168,7 @@ var V2_OPERATIONS = {
       source: {
         kind: "enum",
         values: ["builtin", "custom"],
-        describe: "Restrict to shipped blocks or to this workspace’s deployed custom blocks."
+        describe: "Restrict to built-in blocks or this workspace's deployed custom blocks."
       },
       sortBy: {
         kind: "enum",
@@ -11343,7 +11367,7 @@ var V2_OPERATIONS = {
       },
       parentPath: {
         kind: "string",
-        describe: "Restrict results to direct children of this parent path. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to direct children of this parent path. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -11405,7 +11429,7 @@ var V2_OPERATIONS = {
       },
       folderPath: {
         kind: "string",
-        describe: "Restrict results to files inside this folder — its direct children, or its whole subtree when `recursive` is true. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict files to this folder, including subfolders when `recursive` is true. Unknown folder paths contribute no matches."
       },
       recursive: {
         kind: "enum",
@@ -11423,7 +11447,7 @@ var V2_OPERATIONS = {
           "n",
           "disabled"
         ],
-        describe: "Whether the folder filter includes files in subfolders. Defaults to true when a search is set, false otherwise, so listing a folder shows that folder while searching one looks through everything in it. Ignored when no folder filter is set, which already spans the workspace. The listed spellings are the whole accepted vocabulary and are case-sensitive; any other value is rejected."
+        describe: "Include subfolders in the folder filter. Defaults to true when searching and false otherwise. Ignored without a folder filter."
       },
       scope: {
         kind: "enum",
@@ -11474,11 +11498,11 @@ var V2_OPERATIONS = {
         kind: "enum",
         values: ["active", "archived"],
         default: "active",
-        describe: "Which lifecycle set to list: `active` (default) for live knowledge bases, `archived` for knowledge bases a `DELETE` archived and `POST /knowledge/{knowledgeBaseId}/restore` can bring back. `folderPath` resolves against active folders only, so pairing it with `scope=archived` returns an empty page when the containing folder was archived too."
+        describe: "Lifecycle scope: active or archived knowledge bases. Use Restore Knowledge Base to recover archived entries. Folder paths resolve only active folders, so filtering by an archived folder returns no matches."
       },
       folderPath: {
         kind: "string",
-        describe: "Restrict results to knowledge bases in this folder. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to knowledge bases in this folder. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -11698,7 +11722,7 @@ var V2_OPERATIONS = {
       },
       parentPath: {
         kind: "string",
-        describe: "Restrict results to direct children of this parent path. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to direct children of this parent path. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -11849,7 +11873,7 @@ var V2_OPERATIONS = {
       },
       folderPaths: {
         kind: "string",
-        describe: "Comma-separated workflow folder paths to include. At most 100 entries. A path covers its whole subtree, so `/prod` also selects runs in `/prod/nested`. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Comma-separated workflow folder paths, including descendants. Up to 100 paths. Unknown folder paths contribute no matches."
       }
     }
   },
@@ -11908,7 +11932,7 @@ var V2_OPERATIONS = {
       },
       refresh: {
         kind: "boolean",
-        describe: "Bypass the short-lived per-workspace tool cache and reconnect under your own credentials. A cached result reflects whichever workspace member last ran discovery, so this is the only way to pick up a tool added since then; it costs a live round trip."
+        describe: "Refresh tools using your credentials. Otherwise results may reuse another workspace member's recent discovery and omit newly added tools."
       }
     }
   },
@@ -12086,7 +12110,7 @@ var V2_OPERATIONS = {
       },
       parentPath: {
         kind: "string",
-        describe: "Restrict results to direct children of this parent path. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to direct children of this parent path. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -12150,7 +12174,7 @@ var V2_OPERATIONS = {
       },
       folderPath: {
         kind: "string",
-        describe: "Restrict results to tables in this folder. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to tables in this folder. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -12252,7 +12276,7 @@ var V2_OPERATIONS = {
       },
       parentPath: {
         kind: "string",
-        describe: "Restrict results to direct children of this parent path. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to direct children of this parent path. Unknown folder paths contribute no matches."
       },
       search: {
         kind: "string",
@@ -12387,7 +12411,7 @@ var V2_OPERATIONS = {
       },
       folderPath: {
         kind: "string",
-        describe: "Restrict results to workflows in this folder path. A path that names no folder narrows the result to nothing, so the response is an empty page rather than an error."
+        describe: "Restrict results to workflows in this folder path. Unknown folder paths contribute no matches."
       },
       deployedOnly: {
         kind: "boolean",
@@ -12694,6 +12718,7 @@ var V2_OPERATIONS = {
     pathParamDocs: { workflowId: "Unique workflow identifier." },
     responseMode: "json",
     summary: "Create or Replace Workflow Chat Deployment",
+    workspaceKeyUnsupported: true,
     body: {
       identifier: {
         kind: "string",
@@ -12746,6 +12771,7 @@ var V2_OPERATIONS = {
     pathParamDocs: { workflowId: "Unique workflow identifier." },
     responseMode: "json",
     summary: "Replace Workflow State",
+    workspaceKeyUnsupported: true,
     query: {
       dryRun: {
         kind: "boolean",
@@ -13182,6 +13208,11 @@ var V2_OPERATIONS = {
       },
       apiToken: { kind: "string", describe: "Write-only provider API token." },
       domain: { kind: "string", describe: "Provider account domain." },
+      atlassianProduct: {
+        kind: "enum",
+        values: ["jira", "confluence"],
+        describe: "Atlassian product to verify; defaults to Jira on create and preserves the saved product on reconnect."
+      },
       signingSecret: { kind: "string", describe: "Write-only webhook signing secret." },
       botToken: { kind: "string", describe: "Write-only bot token." },
       clientId: { kind: "string", describe: "OAuth client identifier." },
@@ -13432,7 +13463,7 @@ var V2_OPERATIONS = {
         kind: "enum",
         values: ["streamable-http"],
         default: "streamable-http",
-        describe: "Transport used to communicate with the server. Applied server-side as `streamable-http` when omitted on create."
+        describe: "Transport protocol. Defaults to `streamable-http` on creation."
       },
       url: {
         kind: "string",
@@ -13450,17 +13481,17 @@ var V2_OPERATIONS = {
       timeout: {
         kind: "integer",
         default: 30000,
-        describe: "Per-request timeout in milliseconds. Applied server-side as 30000 when omitted on create."
+        describe: "Per-request timeout in milliseconds. Defaults to 30000 on creation."
       },
       retries: {
         kind: "integer",
         default: 3,
-        describe: "Number of retries per request. Applied server-side as 3 when omitted on create."
+        describe: "Number of retries per request. Defaults to 3 on creation."
       },
       enabled: {
         kind: "boolean",
         default: true,
-        describe: "Whether the server tools are available to workflows. Applied server-side as true when omitted on create."
+        describe: "Whether workflows can use the server's tools. Defaults to true on creation."
       },
       oauthClientId: {
         kind: "string",
@@ -16056,7 +16087,30 @@ function buildRequest(operation, positional, flags, workspaceId) {
 }
 
 // src/runtime/options.ts
-var DEFAULT_LIMIT = 100;
+var DEFAULT_PAGE_SIZE = 100;
+var COMPLETE_LIST_OPERATIONS = new Set([
+  "listBlocks",
+  "listChatDeployments",
+  "listCredentials",
+  "listCustomTools",
+  "listFiles",
+  "listKnowledgeBases",
+  "listKnowledgeConnectors",
+  "listMcpServers",
+  "listSandboxes",
+  "listSecrets",
+  "listSkillEditors",
+  "listSkills",
+  "listTables",
+  "listTools",
+  "listWorkflowMcpServers",
+  "listWorkflows",
+  "listWorkspaceMembers",
+  "listWorkspaces"
+]);
+function defaultListLimit(operation) {
+  return COMPLETE_LIST_OPERATIONS.has(operation) ? 0 : 100;
+}
 function describeField(flag, descriptor, name, field) {
   return flag.describe ?? descriptor.describe ?? `Set ${name.replaceAll("-", " ") || field}`;
 }
@@ -16069,15 +16123,21 @@ function withoutWireVocabulary(documented) {
 }
 var NON_PAGINATED_LIMIT_HINT = " (caps a --filter match only; omit it to act on every match, and note 0 is not accepted)";
 function addFieldOption(command, operation, field, descriptor, slot, paginates, capsAFilter) {
-  if (field === PROFILE_INJECTED_FIELD || field === "cursor")
+  if (field === PROFILE_INJECTED_FIELD)
+    return;
+  if (field === "cursor") {
+    if (paginates && defaultListLimit(operation) > 0) {
+      command.option("--cursor <value>", "Continue from nextCursor returned by a previous result");
+    }
     return;
+  }
   const flag = flagSpecFor(operation, field);
   if (flag.omit)
     return;
   const name = flagNameFor(operation, field);
   const short = flag.short ? `-${flag.short}, ` : "";
   if (paginates && field === "limit" && (descriptor.kind === "number" || descriptor.kind === "integer")) {
-    command.option("--limit <n>", "Maximum items to return (0 for everything)", String(DEFAULT_LIMIT));
+    command.option("--limit <n>", "Maximum items to return (0 for everything)", String(defaultListLimit(operation)));
     return;
   }
   const documented = `${describeField(flag, descriptor, name, field)}${capsAFilter && field === "limit" && (descriptor.kind === "number" || descriptor.kind === "integer") ? NON_PAGINATED_LIMIT_HINT : ""}`;
@@ -16437,11 +16497,10 @@ function unwrapResource(data) {
   const [, value] = entries[0];
   return value && typeof value === "object" && !Array.isArray(value) ? value : data;
 }
-function renderPage(format, rows, spec, envelope, options = {}) {
+function renderPage(format, page, spec, envelope) {
   writePageNote(spec, envelope);
   writeEnvelopeTruncation(envelope);
-  writeCursorTruncation(rows.length, options.truncated === true);
-  printList(format, rows, spec.columns ? columnsFrom(spec.columns) : inferColumns(rows, spec.expand));
+  printList(format, page.data, spec.columns ? columnsFrom(spec.columns) : inferColumns(page.data, spec.expand), page);
 }
 function writePageNote(spec, envelope) {
   if (!spec.pageNote)
@@ -16486,12 +16545,6 @@ function writeEnvelopeTruncation(envelope) {
 `));
   }
 }
-function writeCursorTruncation(count, truncated) {
-  if (!truncated)
-    return;
-  process.stderr.write(source_default.dim(`showing the first ${count}; more results exist — re-run with --limit 0 for all
-`));
-}
 function renderResult(operation, format, raw, spec, options = {}, envelope) {
   writeEnvelopeTruncation(envelope);
   if (spec.document) {
@@ -16628,8 +16681,8 @@ function bulkFailureMessage(operation, payload, body) {
 var EXCLUSIVE_CAP_FIELDS = {
   deleteTableRows: { cap: "limit", ids: "rowIds" }
 };
-function readPagedLimit(raw) {
-  const text = String(raw ?? DEFAULT_LIMIT).trim();
+function readPagedLimit(raw, operation) {
+  const text = String(raw ?? defaultListLimit(operation)).trim();
   const value = text === "" ? Number.NaN : Number(text);
   if (!Number.isInteger(value) || value < 0) {
     throw new SimApiError("--limit must be a whole number of 0 or more (0 for everything)", 0);
@@ -16704,24 +16757,33 @@ async function executeOperation(operation, commandSpec, operationSpec, invocatio
   const omitsWorkspace = commandSpec.allWorkspaces && requestFlags.allWorkspaces === true;
   const needsWorkspace = (hasWorkspaceField || commandSpec.profileWorkspacePath === true) && !omitsWorkspace;
   const paging = cursorSlot(operationSpec);
-  const pagedLimit = paging ? readPagedLimit(requestFlags.limit) : 0;
+  const pagedLimit = paging ? readPagedLimit(requestFlags.limit, operation) : 0;
   const request = buildRequest(operation, positional, requestFlags, needsWorkspace ? client.requireWorkspace() : profile.workspaceId);
   if (paging) {
+    const initialCursor = request[paging]?.cursor;
+    if (initialCursor !== undefined && (typeof initialCursor !== "string" || initialCursor.trim() === "")) {
+      throw new SimApiError("--cursor must be a non-empty string", 0);
+    }
     const limit = pagedLimit === 0 ? Number.POSITIVE_INFINITY : pagedLimit;
-    const pageSize = Math.min(Number.isFinite(limit) ? limit : DEFAULT_LIMIT, DEFAULT_LIMIT);
-    const pageLimit = "limit" in (operationSpec[paging] ?? {}) ? { limit: pageSize } : {};
     const rows = [];
+    const seenCursors = new Set(initialCursor ? [initialCursor] : []);
     const progress = pageProgress();
-    let cursor = null;
+    let cursor = initialCursor ?? null;
     let envelope;
     try {
       do {
+        const pageSize = Math.min(DEFAULT_PAGE_SIZE, limit - rows.length);
+        const pageLimit = "limit" in (operationSpec[paging] ?? {}) ? { limit: pageSize } : {};
         const page = await client.request(request.path, {
           method: operationSpec.method,
           headers: request.headers,
           query: paging === "query" ? { ...request.query, ...pageLimit, cursor } : request.query,
           body: paging === "body" ? { ...request.body ?? {}, ...pageLimit, ...cursor ? { cursor } : {} } : request.body
         });
+        if (page.data.length > pageSize) {
+          throw new SimApiError(`The API returned ${page.data.length} items for a page limit of ${pageSize}; nextCursor would skip unreturned items.`, 0);
+        }
+        assertCursorAdvances(page.nextCursor, seenCursors);
         envelope = foldPageEnvelope(envelope, page);
         rows.push(...page.data);
         cursor = page.nextCursor;
@@ -16731,7 +16793,7 @@ async function executeOperation(operation, commandSpec, operationSpec, invocatio
     } finally {
       progress.finish();
     }
-    renderPage(profile.output, Number.isFinite(limit) ? rows.slice(0, limit) : rows, commandSpec, envelope, { truncated: Boolean(cursor) });
+    renderPage(profile.output, { data: rows, nextCursor: cursor }, commandSpec, envelope);
     return;
   }
   const result = await client.request(request.path, {
@@ -17239,6 +17301,47 @@ function attachCredentialCommands(program) {
   credentials.command("reconnect").argument("<credentialId>", "Existing OAuth credential to re-authorize").description(describeOperation(V2_OPERATIONS.createCredentialConnection, "Create a short-lived link for reconnecting an OAuth credential")).action((credentialId, _options, command) => createConnectionLink(command, { credentialId }));
 }
 
+// src/http/ndjson.ts
+async function* readNdjson(body, protocol) {
+  if (!body) {
+    throw new SimApiError(`${protocol} ended without a response body`, 0);
+  }
+  const reader = body.getReader();
+  const decoder = new TextDecoder;
+  let buffer = "";
+  const parse = (line) => {
+    const trimmed = line.trim();
+    if (!trimmed)
+      return;
+    try {
+      return JSON.parse(trimmed);
+    } catch {
+      throw new SimApiError(`${protocol} returned malformed data`, 0);
+    }
+  };
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      buffer += done ? decoder.decode() : decoder.decode(value, { stream: true });
+      const lines = buffer.split(`
+`);
+      buffer = done ? "" : lines.pop() ?? "";
+      for (const line of lines) {
+        const event = parse(line);
+        if (event !== undefined)
+          yield event;
+      }
+      if (done)
+        return;
+    }
+  } finally {
+    reader.cancel().catch(() => {
+      return;
+    });
+    reader.releaseLock();
+  }
+}
+
 // src/commands/protocol/result.ts
 function printProtocolResult(format, result) {
   const fields = Object.entries(result).map(([key, value]) => [key, text(value)]);
@@ -17246,72 +17349,28 @@ function printProtocolResult(format, result) {
 }
 
 // src/commands/protocol/chat.ts
-function parseChatStreamLine(line) {
-  const trimmed = line.trim();
-  if (!trimmed)
-    return;
-  try {
-    return JSON.parse(trimmed);
-  } catch {
-    throw new SimApiError("Chat stream returned malformed data", 0);
-  }
-}
 async function readChatStream(response, onChunk) {
-  if (!response.body) {
-    throw new SimApiError("Chat stream ended without a response body", 0);
-  }
-  const reader = response.body.getReader();
-  const decoder = new TextDecoder;
-  let buffer = "";
-  let finalResult;
-  const processLine = (line) => {
-    const event = parseChatStreamLine(line);
-    if (!event || event.type === "heartbeat")
-      return false;
+  for await (const value of readNdjson(response.body, "Chat stream")) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+      throw new SimApiError("Chat stream returned an unknown event", 0);
+    }
+    const event = value;
+    if (event.type === "heartbeat")
+      continue;
     if (event.type === "chunk") {
       if (event.content)
         onChunk(sanitize(event.content));
-      return false;
+      continue;
     }
     if (event.type === "error") {
       throw new SimApiError(event.error || "Chat request failed", 0);
     }
     if (event.type === "final") {
-      finalResult = event.data;
-      return true;
+      return event.data;
     }
     throw new SimApiError("Chat stream returned an unknown event", 0);
-  };
-  try {
-    let ended = false;
-    while (!ended) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      buffer += decoder.decode(value, { stream: true });
-      const lines = buffer.split(`
-`);
-      buffer = lines.pop() ?? "";
-      for (const line of lines) {
-        if (processLine(line)) {
-          ended = true;
-          break;
-        }
-      }
-    }
-    if (!ended) {
-      buffer += decoder.decode();
-      processLine(buffer);
-    }
-    if (!finalResult) {
-      throw new SimApiError("Chat stream ended without a final result", 0);
-    }
-    return finalResult;
-  } finally {
-    reader.cancel().catch(() => {
-      return;
-    });
   }
+  throw new SimApiError("Chat stream ended without a final result", 0);
 }
 function ignoreBrokenPipe(stream) {
   const onError = (error) => {
@@ -18086,11 +18145,11 @@ async function listResources(client, config, workspaceId, folderPath, search, li
   const paginated = "cursor" in V2_OPERATIONS[config.resources].query;
   if (!paginated) {
     const page = await client.request(path, { query });
-    return { items: page.data.slice(0, limit), truncated: page.data.length > limit };
+    return page.data.slice(0, limit);
   }
-  return requestPages(client, path, {
+  return requestAllPages(client, path, {
     query,
-    pageSize: DEFAULT_LIMIT,
+    pageSize: DEFAULT_PAGE_SIZE,
     limit
   });
 }
@@ -18120,7 +18179,7 @@ function entriesFor(config, folders, resources) {
   ].sort((left, right) => left.name.localeCompare(right.name) || left.kind.localeCompare(right.kind));
 }
 function attachResourceDirectoryCommands(group, config) {
-  group.command("ls").argument("[path]", "Folder path to list; defaults to the root folder").allowExcessArguments(false).description(`List ${config.kind} resources and child folders together`).option("--search <text>", "Filter folders and resources by name").addOption(new Option("--limit <n>", "Maximum combined items to return (0 for everything)").default(String(DEFAULT_LIMIT))).action(async (path, options, command) => {
+  group.command("ls").argument("[path]", "Folder path to list; defaults to the root folder").allowExcessArguments(false).description(`List ${config.kind} resources and child folders together`).option("--search <text>", "Filter folders and resources by name").addOption(new Option("--limit <n>", "Maximum combined items to return (0 for everything)").default("0")).action(async (path, options, command) => {
     const rawLimit = Number(options.limit);
     if (!Number.isSafeInteger(rawLimit) || rawLimit < 0) {
       throw new SimApiError("--limit must be a whole number of 0 or more (0 for everything)", 0);
@@ -18133,9 +18192,8 @@ function attachResourceDirectoryCommands(group, config) {
       listFolders(client, config.folders, workspaceId, folderPath, options.search),
       listResources(client, config, workspaceId, folderPath, options.search, limit)
     ]);
-    const entries = entriesFor(config, folders, resources.items);
+    const entries = entriesFor(config, folders, resources);
     const shown = entries.slice(0, limit);
-    writeCursorTruncation(shown.length, resources.truncated || entries.length > limit);
     printList(profile.output, shown, COLUMNS2);
   });
   group.command("mkdir").argument("<path>", "Folder path to create; the leading / is optional").allowExcessArguments(false).description(`Create a ${config.kind} directory at a path`).action(async (path, _options, command) => {
@@ -18302,6 +18360,7 @@ function attachTableImport(tables) {
 // src/commands/protocol/workflow-run-follow.ts
 var AGENT_STREAM_PROTOCOL_HEADER = "x-sim-stream-protocol";
 var AGENT_STREAM_PROTOCOL_V1 = "agent-events-v1";
+var WORKFLOW_RESULT_STREAM_CONTENT_TYPE = "application/x-ndjson";
 var DONE_SENTINEL = "[DONE]";
 function resolveWorkflowRunSelection(flags) {
   const manual = flags.manual === true;
@@ -18353,6 +18412,59 @@ function stringField(frame, key) {
   const value = frame[key];
   return typeof value === "string" ? value : null;
 }
+async function readWorkflowResult(response) {
+  const contentType = (response.headers.get("content-type") ?? "").toLowerCase();
+  if (!contentType.includes(WORKFLOW_RESULT_STREAM_CONTENT_TYPE)) {
+    let envelope;
+    try {
+      envelope = await response.json();
+    } catch {
+      throw new SimApiError(`Workflow run returned malformed JSON${contentType ? ` as ${contentType}` : ""}`, response.status);
+    }
+    if (!isRecord(envelope)) {
+      throw new SimApiError("Workflow run returned an invalid result envelope", response.status);
+    }
+    return isRecord(envelope.data) ? envelope.data : envelope;
+  }
+  for await (const value of readNdjson(response.body, "Workflow result stream")) {
+    if (!isRecord(value) || typeof value.type !== "string") {
+      throw new SimApiError("Workflow result stream returned an unknown event", response.status);
+    }
+    if (value.type === "heartbeat")
+      continue;
+    if (value.type === "error") {
+      throw new SimApiError(safeOneLine(typeof value.error === "string" ? value.error : "Workflow run failed"), typeof value.status === "number" ? value.status : 0, typeof value.code === "string" ? value.code : null);
+    }
+    if (value.type === "final" && isRecord(value.data))
+      return value.data;
+    throw new SimApiError("Workflow result stream returned an unknown event", response.status);
+  }
+  throw new SimApiError("Workflow result stream ended without a final result", response.status);
+}
+async function runWithResultStream(workflowId, command) {
+  const flags = command.optsWithGlobals();
+  const { client, profile } = clientFrom(command);
+  const operation = V2_OPERATIONS.executeWorkflow;
+  const commandSpec = CLI_CONTRACT.executeWorkflow ?? {};
+  try {
+    const request = buildRequest("executeWorkflow", [workflowId], flags, profile.workspaceId);
+    const response = await client.requestRaw(request.path, {
+      method: operation.method,
+      query: request.query,
+      body: request.body,
+      headers: { ...request.headers, accept: WORKFLOW_RESULT_STREAM_CONTENT_TYPE }
+    });
+    const payload = await readWorkflowResult(response);
+    renderResult("executeWorkflow", profile.output, payload, commandSpec, {
+      expandedTrace: flags.trace === true
+    });
+    const failure = runFailureMessage("executeWorkflow", payload);
+    if (failure)
+      throw new SimApiError(failure, 0);
+  } catch (error) {
+    throw retypeApiError(error, "executeWorkflow", commandSpec, operation);
+  }
+}
 async function* sseData(body) {
   const reader = body.getReader();
   const decoder = new TextDecoder;
@@ -18524,6 +18636,10 @@ function followOrDelegate(previous) {
       if (flags.includeThinking === true || flags.includeToolCalls === true) {
         throw new SimApiError("--include-thinking and --include-tool-calls describe a stream; add --follow", 0);
       }
+      if (flags.async !== true) {
+        await runWithResultStream(workflowId, command);
+        return;
+      }
       if (previous) {
         await previous(command.processedArgs);
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sim",
-  "version": "2.1.8-preview.98.1",
+  "version": "2.1.8",
   "description": "Sim CLI - talk to the Sim API from your terminal",
   "type": "module",
   "bin": {