fix(schedules): stop the API accepting actions it no longer handles

Adversarial pass on the scheduled-task removal found a real regression in
PUT /api/schedules/[id].

Removing the job-only `update` and `exclude_occurrence` handlers left them in
`scheduleUpdateSchema`, so those bodies still parsed. The handler chain is
`disable` first and then an unguarded fall-through to reactivate, so an
`action: 'update'` request would have silently REACTIVATED the schedule
instead of being rejected.

Both actions are dropped from the discriminated union, so `parseRequest` now
rejects them with a 400. Their bodies, response types and the orphaned
`createScheduleContract` (its POST route is gone, and nothing imported it)
go with them.

Author: waleedlatif1

apps/sim/lib/api/contracts/schedules.ts

@@ -102,38 +102,6 @@ export const workspaceScheduleRowSchema = workflowScheduleRowSchema.extend({
 
 export type WorkspaceScheduleRow = z.output<typeof workspaceScheduleRowSchema>
 
-export const createScheduleBodySchema = z
-  .object({
-    workspaceId: z.string().min(1, 'Workspace ID is required'),
-    title: z.string().min(1, 'Title is required'),
-    prompt: z.string().min(1, 'Prompt is required'),
-    /** Recurring cadence. Omit (with `time` set) for a one-time task. */
-    cronExpression: z.string().min(1).optional(),
-    /** One-time launch instant (ISO 8601). Omit (with `cronExpression` set) for a recurring task. */
-    time: z.string().min(1).optional(),
-    timezone: z.string().optional().default('UTC'),
-    lifecycle: scheduleLifecycleSchema.optional().default('persistent'),
-    /** Recurrence end after N runs (gcal "ends after N occurrences"). */
-    maxRuns: z.number().int().positive().optional(),
-    /** Recurrence end on a date (ISO 8601; gcal "ends on date"). */
-    endsAt: z.string().optional(),
-    startDate: z.string().optional(),
-    contexts: z.array(scheduleContextSchema).optional(),
-    secretScope: secretMountScopeSchema.optional(),
-    mountedSecrets: mountedSecretNamesSchema.optional(),
-  })
-  .superRefine((body, ctx) => {
-    if (!body.cronExpression && !body.time) {
-      ctx.addIssue({
-        code: z.ZodIssueCode.custom,
-        path: ['time'],
-        message: 'Provide a cron expression for a recurring task or a time for a one-time task',
-      })
-    }
-  })
-
-export type CreateScheduleBody = z.input<typeof createScheduleBodySchema>
-
 export const reactivateScheduleBodySchema = z.object({
   action: z.literal('reactivate'),
 })
@@ -146,41 +114,9 @@ export const disableScheduleBodySchema = z.object({
 
 export type DisableScheduleBody = z.input<typeof disableScheduleBodySchema>
 
-export const updateScheduleBodySchema = z.object({
-  action: z.literal('update'),
-  title: z.string().min(1).optional(),
-  prompt: z.string().min(1).optional(),
-  cronExpression: z.string().nullable().optional(),
-  /** One-time launch instant (ISO 8601). Switches a task to one-time when set alongside a null `cronExpression`. */
-  time: z.string().min(1).optional(),
-  timezone: z.string().optional(),
-  lifecycle: scheduleLifecycleSchema.optional(),
-  maxRuns: z.number().int().positive().nullable().optional(),
-  endsAt: z.string().nullable().optional(),
-  contexts: z.array(scheduleContextSchema).optional(),
-  secretScope: secretMountScopeSchema.optional(),
-  mountedSecrets: mountedSecretNamesSchema.optional(),
-})
-
-export type UpdateScheduleBody = z.input<typeof updateScheduleBodySchema>
-
-/**
- * Deletes a single occurrence of a recurring task (gcal "this event"): the
- * occurrence's instant is added to the schedule's exclusion list and the next
- * run advances past it. Deleting the whole series uses `DELETE /api/schedules/[id]`.
- */
-export const excludeOccurrenceBodySchema = z.object({
-  action: z.literal('exclude_occurrence'),
-  occurrence: z.string().min(1, 'Occurrence timestamp is required'),
-})
-
-export type ExcludeOccurrenceBody = z.input<typeof excludeOccurrenceBodySchema>
-
 export const scheduleUpdateSchema = z.discriminatedUnion('action', [
   reactivateScheduleBodySchema,
   disableScheduleBodySchema,
-  updateScheduleBodySchema,
-  excludeOccurrenceBodySchema,
 ])
 
 export type ScheduleUpdate = z.input<typeof scheduleUpdateSchema>
@@ -248,28 +184,6 @@ export const getScheduleByIdContract = defineRouteContract({
  * the route synthesizes server-side; everything else is filled in on
  * subsequent reads.
  */
-export const createScheduleResponseSchema = z.object({
-  schedule: z.object({
-    id: z.string(),
-    status: scheduleStatusSchema,
-    /** Null for one-time tasks, which carry no recurring cadence. */
-    cronExpression: z.string().nullable(),
-    nextRunAt: z.string(),
-  }),
-})
-
-export type CreateScheduleResponse = z.output<typeof createScheduleResponseSchema>
-
-export const createScheduleContract = defineRouteContract({
-  method: 'POST',
-  path: '/api/schedules',
-  body: createScheduleBodySchema,
-  response: {
-    mode: 'json',
-    schema: createScheduleResponseSchema,
-  },
-})
-
 export const reactivateScheduleContract = defineRouteContract({
   method: 'PUT',
   path: '/api/schedules/[id]',