**9 issues found** across 866 files **Note:** This PR contains a large number of files. cubic only reviews up to 75 files per PR, so some files may not have been reviewed.

Prompt for AI agents (unresolved issues)

```text Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately. P2: `commands.get` always returns `params`, but `cmd.params` can be `undefined`, which violates the declared response schema (`params` must be string when present). Return `params` only when it is a string. P2: The Statsig "duplicate_comment_added" event is logged unconditionally (`if: always()`), so failures/non-comment runs are recorded as successful duplicate comments. P2: `jq` numeric coercion on a string input can hard-fail the workflow for manual dispatches with non-numeric `issue_number` values. P1: Bug: When no `x-auth-token` header is present (unauthenticated routes), `authToken` is `null`, so `String(null)` produces `"null"` and `_hashLoginToken` hashes that meaningless string. The old `&&` guard prevented this. Restore the guard to avoid setting a bogus token on unauthenticated requests. P2: `API.v1.failure()` without an error payload does not match the new 400 AJV schema, so error responses can fail validation on this endpoint. P1: `description` is not a valid top-level key in a GitHub Actions workflow, which can make the workflow invalid and prevent it from running. P1: `dm.close`/`im.close` now incorrectly require `userId` in the request body, which breaks existing clients and adds an unused parameter. These endpoints should only require `roomId` and use authenticated `this.userId`. P2: This adds duplicate version-update banner filtering logic instead of reusing a shared helper, increasing maintenance risk and drift. (Based on your team's feedback about preferring existing helpers over duplicated logic.) [FEEDBACK_USED] P1: Unauthenticated route context now types `user` as non-nullable, but runtime still assigns `null`; restore nullable typing to prevent unsafe assumptions. ```

_{Reply with feedback, questions, or to request a fix. Tag `@cubic-dev-ai` to re-run a review.}