feat(files): add the Project file backend and APIs by mzxchandra · Pull Request #8610 · simstudioai/sim

mzxchandra · 2026-10-04T12:50:28Z

Summary

Add the complete Project-file backend: folders, uploads, edits, history, copy, recursive listing/downloads, extraction, search, compiled documents, sharing and realtime persistence callbacks.
Reuse authorized application operations across sessions, v2/CLI and delegated callers. Writes require an organization admin, an admin in an active environment, or write access in every active environment; workspace API keys do not acquire Project authority.
Preserve canonical ownership and revision checks through storage, history, billing, retention, cross-owner copies and content delivery. Public/password/email/SSO sharing rechecks current policy and dependencies.
Keep Project operations behind the existing release gates. Execution files remain workspace scoped; chat ownership remains personal/organization scoped.

Stacked on #8609 above #8590, with #8762 as the lifecycle prerequisite. This PR contains the backend, HTTP API, CLI, documentation and the public-share viewer required for content delivery. Stacked #8781 adds authenticated Project Files UI, picker/mentions and Sim-side Mothership integration; Mothership #594 is its separate worker companion. No additional migration is introduced here.

Type of Change

New feature

Testing

Integrated backend: 263 real-Postgres checks and 84 live HTTP checks across authorization, browser queries, history, sharing, rendering, copying and realtime.
Four additional HTTP checks verify recursive pagination, unchanged root browsing, cursor scope binding and rejection of conflicting folder filters.
Full backend root suite previously passed all 19 workspace tasks; the latest bounded route change passes formatting and all 58 repository audits. Full-repository checks for the published head run in CI.
Fresh migration/replay/schema-drift, generated artifacts and backend contract checks passed. Live paired product/worker acceptance additionally verifies the backend through actual model read/write/copy and browser delivery.
CI is manually dispatched for the stacked branch; workflow triggers and timeouts are unchanged.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Relevant tests updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

vercel · 2026-10-04T12:50:35Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 9, 2026 12:06am UTC

mzxchandra · 2026-10-06T00:31:12Z

@greptile

mzxchandra · 2026-10-06T00:31:15Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-06T00:31:20Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 485 files

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.

Re-trigger cubic}

Reuse entity-owned file operations across Project UI, session APIs, v2/CLI, and delegated Mothership callers. Add Project discovery, sharing, history, copy, collaborative editing, and current-access invalidation while preserving workspace execution boundaries and independent creator/payer attribution. Keep activation gated behind the file-ownership compatibility foundation. Run real HTTP suites through disposable fixture orchestration in CI.

greptile-apps · 2026-10-06T00:39:34Z

Confidence Score: 5/5

[Critical impact] The PR appears safe to merge based on this review; no outstanding finding or new in-scope issue was established.

Summary

Adds Project-owned file operations across the application backend, HTTP and v2 APIs, CLI, public sharing, and realtime persistence. It also extends file ownership handling to storage, history, copying, billing, and retention.

Project-file access is checked through shared application operations.
The previously reported findings are resolved; no new in-scope finding was established.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Client[Browser / CLI / API] --> Routes[Project file routes]
  Routes --> Operations[Authorized application operations]
  Operations --> Storage[Files and revisions]
  Operations --> Policy[Project access policy]
  Operations --> Sharing[Public sharing]
  Operations --> Realtime[Realtime persistence]

_{Reviews (19) · Last reviewed commit: "Merge attribution foundation alignment i..." · Reviewed by Greptile}

mzxchandra · 2026-10-06T00:46:17Z

@greptile

mzxchandra · 2026-10-06T00:46:19Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-06T00:46:23Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 485 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.

Re-trigger cubic}

mzxchandra · 2026-10-08T21:51:44Z

@greptile

mzxchandra · 2026-10-08T21:51:45Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T21:51:52Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 391 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.
You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-08T22:18:44Z

@greptile

mzxchandra · 2026-10-08T22:18:45Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T22:18:52Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 391 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.
You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-08T22:41:05Z

@greptile

mzxchandra · 2026-10-08T22:41:06Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T22:41:13Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 391 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.
You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-08T23:03:24Z

@greptile

mzxchandra · 2026-10-08T23:03:25Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T23:03:31Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 391 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.
You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-09T00:06:54Z

@greptile

mzxchandra · 2026-10-09T00:06:55Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-09T00:07:02Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 391 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Note: This PR contains a large number of files. cubic selects up to 200 of the highest-priority eligible files for this review, so some files may not have been reviewed.
You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra mentioned this pull request Oct 4, 2026

feat: establish shared file ownership foundation #8609

Draft

6 tasks done

vercel Bot deployed to Preview October 4, 2026 12:52 View deployment

mzxchandra mentioned this pull request Oct 5, 2026

feat(projects): backfill and enforce membership in SQL #8590

Draft

6 of 7 tasks

mzxchandra added this pull request to stack #8630 October 5, 2026 18:24

mzxchandra force-pushed the codex/project-files branch from 9dae237 to 3db7e57 Compare October 5, 2026 21:02

vercel Bot deployed to Preview October 5, 2026 21:04 View deployment

vercel Bot deployed to Preview October 5, 2026 22:14 View deployment

vercel Bot temporarily deployed to Preview October 5, 2026 22:42 Inactive

vercel Bot temporarily deployed to Preview October 5, 2026 23:29 Inactive

vercel Bot deployed to Preview October 6, 2026 00:33 View deployment

cubic-dev-ai Bot reviewed Oct 6, 2026

View reviewed changes

mzxchandra added 6 commits October 5, 2026 17:39

refactor: use explicit Project file ownership storage

0985191

refactor: carry file owners through collaborative documents

4f45fa6

refactor: consolidate background file retention by owner

8de6b11

fix(files): close retention races and preserve browser navigation

845b9c5

fix(files): require explicit owners in live documents

a9fd086

greptile-apps Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread apps/sim/lib/projects/files/application/authorization.ts Outdated

Comment thread apps/sim/app/workspace/[workspaceId]/files/project-files.tsx Outdated

mzxchandra force-pushed the codex/project-files branch from 547eb7b to a9fd086 Compare October 6, 2026 00:44

vercel Bot deployed to Preview October 6, 2026 00:46 View deployment

cubic-dev-ai Bot reviewed Oct 6, 2026

View reviewed changes

Merge ownership foundation corrections into Project files backend

05828cd

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 21:57 View deployment

chore(files): integrate aligned foundation migration retirement

34c6a46

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 22:23 View deployment

Merge file ownership foundation staging alignment into Project files

5dbd5ca

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 22:45 View deployment

Merge table concurrency foundation alignment into Project files

3060fa5

vercel Bot temporarily deployed to Preview October 8, 2026 23:03 Inactive

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

Merge attribution foundation alignment into Project files

09c8b20

vercel Bot temporarily deployed to Preview October 9, 2026 00:06 Inactive

cubic-dev-ai Bot reviewed Oct 9, 2026

View reviewed changes

Conversation

mzxchandra commented Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Uh oh!

vercel Bot commented Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mzxchandra commented Oct 6, 2026

Uh oh!

mzxchandra commented Oct 6, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 6, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Oct 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

Uh oh!

Uh oh!

mzxchandra commented Oct 6, 2026

Uh oh!

mzxchandra commented Oct 6, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 6, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

mzxchandra commented Oct 4, 2026 •

edited

Loading

vercel Bot commented Oct 4, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

greptile-apps Bot commented Oct 6, 2026 •

edited

Loading