sandbox export keeps the code's result; --trigger implies --manual; deps mock skeleton; run tools lift the terminal output and take select; lint all-clear names what it checked; docs chunker keeps code spans

Author: Sg312

apps/docs/content/docs/cli/reference.mdx

@@ -3096,7 +3096,7 @@ sim tables groups create <tableId> [options]
 | Option | Required | Description |
 | --- | --- | --- |
 | `--group <json\|@file>` | Yes | Workflow or enrichment producer definition. (JSON, or @path / @- to read a file or stdin). |
-| `--output-columns <json\|@file>` | Yes | Columns created for producer outputs. (JSON, or @path / @- to read a file or stdin). |
+| `--output-columns <json\|@file>` | No | Columns to create for producer outputs. An entry naming a column the table already has attaches that column to the group instead of creating it (its `type` must match), and an output whose column already exists may omit its entry entirely — so `[]` attaches existing columns only. (JSON, or @path / @- to read a file or stdin). |
 | `--auto-run` | No | Whether to schedule existing rows after group creation. |
 | `--no-auto-run` | No | Send --auto-run as false. |
 
@@ -3638,7 +3638,7 @@ sim tables dispatches get <tableId> <dispatchId>
 
 ### sim tables dispatches list
 
-List Active Run Dispatches
+List Run Dispatches
 
 ```bash
 sim tables dispatches list <tableId>
@@ -5157,14 +5157,14 @@ sim workflows run <workflowId> [options]
 | `--input <json\|@file>` | No | Trigger input as JSON (JSON, or @path / @- to read a file or stdin). |
 | `--async` | No | Queue the run and return immediately. |
 | `--execution-timeout-seconds <value>` | No | Requested server-side timeout for an asynchronous run, in seconds. An upper bound, not the effective timeout: the run uses the smaller of this value and the plan's execution timeout, so requesting more than the plan allows silently yields the plan timeout. Rejected with `400` unless `async` is true. |
-| `--select-output <value...>` | No | Return blockName.field values (e.g. agent_1.content), or childWorkflowId.blockName.field for a child workflow (applies to every invocation) — in blockOutputs on a sync run, or from the streamed result with --follow; missing fields are omitted. Not available with --async (space-separated, or @path / @- with one value per line; @@value for a literal leading @). |
+| `--select-output <value...>` | No | Return blockName.path values (e.g. agent_1.content), or childWorkflowId.blockName.path for a child workflow (applies to every invocation) — in blockOutputs on a sync run, or from the streamed result with --follow; missing paths are omitted. Not available with --async (space-separated, or @path / @- with one value per line; @@value for a literal leading @). |
 | `--include-file-base64` | No | Inline eligible output files as base64 content. Rejected when `async` is true. |
 | `--no-include-file-base64` | No | Send --include-file-base64 as false. |
 | `--base64-max-bytes <value>` | No | Maximum total bytes of file content to inline as base64, lowering but never raising the server limit of 16 MiB. Rejected when `async` is true. |
 | `--run-id <value>` | No | One-shot identifier for this run; NOT an idempotency key — reusing a claimed value fails with RUN_ID_CONFLICT instead of replaying the first result, and a fresh value starts another run. |
 | `--manual` | No | Run the current saved workflow state instead of the active deployment. |
-| `--trigger <blockId>` | No | Enter a manual run through this runnable trigger (requires --manual). |
-| `--mock-payload` | No | Use the selected trigger's server-derived mock payload (requires --manual). |
+| `--trigger <blockId>` | No | Enter the run through this runnable trigger; runs the current saved workflow state (implies --manual). |
+| `--mock-payload` | No | Use the selected trigger's server-derived mock payload; runs the current saved workflow state (implies --manual). |
 | `--from-block <blockId>` | No | Run manually from this saved workflow block. |
 | `--source-run <runId>` | No | Prior run whose persisted state supplies upstream outputs (requires --from-block). |
 | `--follow` | No | Stream the run as it happens; progress on stderr, result on stdout. The stream reports only success and output, so the result omits the run id and timings a non-streaming run returns. |

apps/docs/content/docs/cli/tables.mdx

@@ -112,7 +112,7 @@ sim tables groups create <tableId> [options]
 | Option | Required | Description |
 | --- | --- | --- |
 | `--group <json\|@file>` | Yes | Workflow or enrichment producer definition. (JSON, or @path / @- to read a file or stdin). |
-| `--output-columns <json\|@file>` | Yes | Columns created for producer outputs. (JSON, or @path / @- to read a file or stdin). |
+| `--output-columns <json\|@file>` | No | Columns to create for producer outputs. An entry naming a column the table already has attaches that column to the group instead of creating it (its `type` must match), and an output whose column already exists may omit its entry entirely — so `[]` attaches existing columns only. (JSON, or @path / @- to read a file or stdin). |
 | `--auto-run` | No | Whether to schedule existing rows after group creation. |
 | `--no-auto-run` | No | Send --auto-run as false. |
 
@@ -614,7 +614,7 @@ sim tables dispatches get <tableId> <dispatchId>
 
 </CommandTable>
 
-## List active run dispatches
+## List run dispatches
 
 ```bash
 sim tables dispatches list <tableId>

apps/docs/content/docs/cli/workflows.mdx

@@ -532,14 +532,14 @@ sim workflows run <workflowId> [options]
 | `--input <json\|@file>` | No | Trigger input as JSON (JSON, or @path / @- to read a file or stdin). |
 | `--async` | No | Queue the run and return immediately. |
 | `--execution-timeout-seconds <value>` | No | Requested server-side timeout for an asynchronous run, in seconds. An upper bound, not the effective timeout: the run uses the smaller of this value and the plan's execution timeout, so requesting more than the plan allows silently yields the plan timeout. Rejected with `400` unless `async` is true. |
-| `--select-output <value...>` | No | Return blockName.field values (e.g. agent_1.content), or childWorkflowId.blockName.field for a child workflow (applies to every invocation) — in blockOutputs on a sync run, or from the streamed result with --follow; missing fields are omitted. Not available with --async (space-separated, or @path / @- with one value per line; @@value for a literal leading @). |
+| `--select-output <value...>` | No | Return blockName.path values (e.g. agent_1.content), or childWorkflowId.blockName.path for a child workflow (applies to every invocation) — in blockOutputs on a sync run, or from the streamed result with --follow; missing paths are omitted. Not available with --async (space-separated, or @path / @- with one value per line; @@value for a literal leading @). |
 | `--include-file-base64` | No | Inline eligible output files as base64 content. Rejected when `async` is true. |
 | `--no-include-file-base64` | No | Send --include-file-base64 as false. |
 | `--base64-max-bytes <value>` | No | Maximum total bytes of file content to inline as base64, lowering but never raising the server limit of 16 MiB. Rejected when `async` is true. |
 | `--run-id <value>` | No | One-shot identifier for this run; NOT an idempotency key — reusing a claimed value fails with RUN_ID_CONFLICT instead of replaying the first result, and a fresh value starts another run. |
 | `--manual` | No | Run the current saved workflow state instead of the active deployment. |
-| `--trigger <blockId>` | No | Enter a manual run through this runnable trigger (requires --manual). |
-| `--mock-payload` | No | Use the selected trigger's server-derived mock payload (requires --manual). |
+| `--trigger <blockId>` | No | Enter the run through this runnable trigger; runs the current saved workflow state (implies --manual). |
+| `--mock-payload` | No | Use the selected trigger's server-derived mock payload; runs the current saved workflow state (implies --manual). |
 | `--from-block <blockId>` | No | Run manually from this saved workflow block. |
 | `--source-run <runId>` | No | Prior run whose persisted state supplies upstream outputs (requires --from-block). |
 | `--follow` | No | Stream the run as it happens; progress on stderr, result on stdout. The stream reports only success and output, so the result omits the run id and timings a non-streaming run returns. |

apps/sim/lib/chunkers/docs-chunker.test.ts

@@ -110,6 +110,23 @@ describe('cleanContent FAQ extraction', () => {
   })
 })
 
+describe('cleanContent keeps code intact', () => {
+  it('leaves reference tokens inside fenced and inline code alone while stripping prose tags', () => {
+    const chunker = new DocsChunker({ chunkSize: 500 })
+    const cleaned = (chunker as unknown as { cleanContent: (c: string) => string }).cleanContent(
+      [
+        'Use <Callout>this</Callout> block. Reference `<start.input>` in code:',
+        '```javascript',
+        'return <start.input>.toLowerCase().includes({{ENV}})',
+        '```',
+      ].join('\n')
+    )
+    expect(cleaned).not.toContain('<Callout>')
+    expect(cleaned).toContain('`<start.input>`')
+    expect(cleaned).toContain('return <start.input>.toLowerCase().includes({{ENV}})')
+  })
+})
+
 describe('cleanContent scaffolding strips', () => {
   it('still strips imports, exports, comments, and code-ish brace expressions', () => {
     const cleaned = cleanContent(

apps/sim/lib/chunkers/docs-chunker.ts

@@ -252,18 +252,32 @@ export class DocsChunker {
     return { chunks: finalChunks, cleanedContent }
   }
 
+  /**
+   * Strips MDX scaffolding from prose while leaving code untouched: a fenced block or an
+   * inline span is where `<start.input>` references and `{{SECRET}}` tokens live, and the
+   * tag and brace strips below would otherwise erase exactly the part of a code sample
+   * that shows how a reference is written.
+   */
   private cleanContent(content: string): string {
-    return content
+    const normalized = content
       .replace(/\r\n/g, '\n')
       .replace(/\r/g, '\n')
       .replace(/^import\s+.*$/gm, '')
       .replace(/^export\s+.*$/gm, '')
       .replace(/<FAQ\s+items=\{\[([\s\S]*?)\]\}\s*\/>/g, (_m, items: string) =>
         extractFaqProse(items)
       )
-      .replace(/<\/?[a-zA-Z][^>]*>/g, ' ')
-      .replace(/\{\/\*[\s\S]*?\*\/\}/g, ' ')
-      .replace(/\{[^{}]*\}/g, ' ')
+    const segments = normalized.split(/(```[\s\S]*?```|`[^`\n]+`)/g)
+    return segments
+      .map((segment, index) =>
+        index % 2 === 1
+          ? segment
+          : segment
+              .replace(/<\/?[a-zA-Z][^>]*>/g, ' ')
+              .replace(/\{\/\*[\s\S]*?\*\/\}/g, ' ')
+              .replace(/\{[^{}]*\}/g, ' ')
+      )
+      .join('')
       .replace(/\n{3,}/g, '\n\n')
       .replace(/[ \t]{2,}/g, ' ')
       .trim()

apps/sim/lib/function-execution/execute-request.test.ts

@@ -921,14 +921,64 @@ describe('Function execution request', () => {
           }),
         })
       )
-      expect(data.output.result.files).toHaveLength(2)
+      expect(data.output.result).toBe('done')
+      expect(data.output.exported.files).toHaveLength(2)
+      expect(data.output.message).toContain('Exported 2 sandbox files')
+      expect(data.output.exported.message).toBe(data.output.message)
       expect(data.output.cost).toEqual({ input: 0, output: 0, total: 0.00023456 })
       expect(data.resources).toEqual([
         expect.objectContaining({ path: 'files/reports/chart.png' }),
         expect.objectContaining({ path: 'files/reports/summary.json' }),
       ])
     })
 
+    it("keeps the code's returned rows beside the sandbox export receipt", async () => {
+      envFlagsMock.isRemoteSandboxEnabled = true
+      const rows = [{ name: 'Ada' }, { name: 'Grace' }]
+      mockExecuteInSandbox.mockResolvedValueOnce({
+        result: rows,
+        stdout: 'ok',
+        sandboxId: 'sandbox-123',
+        exportedFiles: { '/home/user/report.txt': 'name\nAda\nGrace\n' },
+      })
+
+      const response = await POST(
+        createMockRequest('POST', {
+          code: '__sim_result__ = [{"name": "Ada"}, {"name": "Grace"}]',
+          language: 'python',
+          workspaceId: 'workspace-1',
+          outputs: {
+            files: [
+              {
+                path: 'files/report.txt',
+                sandboxPath: '/home/user/report.txt',
+                mimeType: 'text/plain',
+              },
+            ],
+          },
+        })
+      )
+      const data = await response.json()
+
+      expect(response.status).toBe(200)
+      expect(data.success).toBe(true)
+      // The table writer and the returned-value file writer both read
+      // `output.result`, so the export receipt must not displace the rows.
+      expect(data.output.result).toEqual(rows)
+      expect(data.output.exported).toEqual({
+        message: expect.stringContaining('Sandbox file exported to files/report.txt'),
+        files: [
+          expect.objectContaining({
+            fileId: 'wf_report_txt',
+            vfsPath: 'files/report.txt',
+            sandboxPath: '/home/user/report.txt',
+          }),
+        ],
+      })
+      expect(data.output.message).toBe(data.output.exported.message)
+      expect(data.resources).toEqual([expect.objectContaining({ path: 'files/report.txt' })])
+    })
+
     it('atomically classifies text exports and acknowledges the durable v2 capability', async () => {
       envFlagsMock.isRemoteSandboxEnabled = true
       mockExecuteInSandbox.mockResolvedValueOnce({
@@ -1221,9 +1271,9 @@ describe('Function execution request', () => {
       )
 
       expect(response.status).toBe(200)
-      expect((await response.json()).output.result).toEqual(
-        expect.objectContaining({ fileId: 'wf_output_txt', vfsPath: 'files/output.txt' })
-      )
+      expect((await response.json()).output.exported.files).toEqual([
+        expect.objectContaining({ fileId: 'wf_output_txt', vfsPath: 'files/output.txt' }),
+      ])
       expect(mockExecuteInSandbox).toHaveBeenCalledOnce()
       expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledWith(
         expect.objectContaining({
@@ -2005,9 +2055,10 @@ describe('Function execution request', () => {
       expect(response.status).toBe(200)
       expect(data.success).toBe(true)
       expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledTimes(1)
-      expect(data.output.result.unchanged).toBe(true)
-      expect(data.output.result.message).toContain('byte-identical to the previous version')
-      expect(data.output.result.message).toContain('/home/user/doc.md')
+      expect(data.output.result).toBe('done')
+      expect(data.output.exported.files[0].unchanged).toBe(true)
+      expect(data.output.message).toContain('byte-identical to the previous version')
+      expect(data.output.message).toContain('/home/user/doc.md')
     })
 
     it('continues an overwrite when the advisory comparison fails', async () => {
@@ -2045,8 +2096,8 @@ describe('Function execution request', () => {
       expect(response.status).toBe(200)
       expect(data.success).toBe(true)
       expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledTimes(1)
-      expect(data.output.result).toMatchObject({ unchanged: false })
-      expect(data.output.result).not.toHaveProperty('previousSize')
+      expect(data.output.exported.files[0]).toMatchObject({ unchanged: false })
+      expect(data.output.exported.files[0]).not.toHaveProperty('previousSize')
     })
 
     it('reports size, previousSize, and sha256 receipts on a successful overwrite export', async () => {
@@ -2088,12 +2139,13 @@ describe('Function execution request', () => {
       expect(data.success).toBe(true)
       // Sizes differ, so the current content is never downloaded for comparison.
       expect(mockFetchWorkspaceFileBuffer).not.toHaveBeenCalled()
-      expect(data.output.result.size).toBe(Buffer.byteLength(newContent, 'utf-8'))
-      expect(data.output.result.previousSize).toBe(36728)
-      expect(data.output.result.sha256).toMatch(/^[0-9a-f]{64}$/)
-      expect(data.output.result.unchanged).toBe(false)
-      expect(data.output.result.message).toContain('replaced 36728 bytes')
-      expect(data.output.result.message).toContain('sha256:')
+      const [exportedFile] = data.output.exported.files
+      expect(exportedFile.size).toBe(Buffer.byteLength(newContent, 'utf-8'))
+      expect(exportedFile.previousSize).toBe(36728)
+      expect(exportedFile.sha256).toMatch(/^[0-9a-f]{64}$/)
+      expect(exportedFile.unchanged).toBe(false)
+      expect(data.output.message).toContain('replaced 36728 bytes')
+      expect(data.output.message).toContain('sha256:')
       // The python wrapper prints the marker with a leading \n so it always
       // starts a fresh line even after non-newline-terminated user output.
       const e2bCode = mockExecuteInSandbox.mock.calls[0][0].code as string