fix(mothership): bind media admission to loaded files

Author: icecrasher321

apps/sim/app/api/v2/lib/response.ts

@@ -10,11 +10,11 @@ import { type CursorKey, INVALID_CURSOR_MESSAGE } from '@/lib/api/list-query'
 import { getValidationErrorMessage, serializeZodIssues } from '@/lib/api/server'
 import { ADMISSION_RETRY_AFTER_SECONDS } from '@/lib/core/admission/transient-failure'
 import {
+  ContentDeliveryUnobservedError,
   forbiddenErrorDetails,
   InsufficientScopeError,
   OAuthAccessTokenExpiredError,
 } from '@/lib/core/application'
-import { ContentDeliveryUnobservedError } from '@/lib/core/application/content-delivery'
 import {
   asOrchestrationError,
   OrchestrationError,

apps/sim/lib/api/server/routes/copilot-request.ts

@@ -1,5 +1,5 @@
 import type { DelegatedPrincipal } from '@sim/auth/principal'
-import { noteContentDeliveryOperation } from '@/lib/core/application/content-delivery'
+import { noteContentDeliveryOperation } from '@/lib/core/application'
 import { markCopilotWorkspaceInvocation } from '@/lib/core/application/copilot-workspace-invocation'
 import type { ApplicationOperation, OperationUseCase } from '@/lib/core/application/operation'
 import {

apps/sim/lib/benchmarks/application/access.ts

@@ -76,6 +76,7 @@ export function defineAuthorizedBenchmarkUseCase<
 
 const targetOperation = defineOrganizationOperation({
   id: 'benchmarks.target.authorize',
+  contentDelivery: 'none',
   minimumRole: 'member',
   capability: 'copilot.use',
   principalKinds: ['organization_delegated'],

apps/sim/lib/core/application/index.ts

@@ -61,3 +61,26 @@ export {
   type WorkspaceOperation,
 } from '@/lib/core/application/workspace-operation'
 export { PermissionGroupCapabilityError } from '@/lib/permission-groups/capability-error'
+export {
+  admitContent,
+  admitEach,
+  admitWrittenContent,
+  type ContentDeliveryDeclaration,
+  type ContentDeliveryGate,
+  ContentDeliveryUnobservedError,
+  ContentGateFailure,
+  type ContentProvenance,
+  ContentRefusedError,
+  type ContentSource,
+  type ContentSourceKind,
+  type ContentView,
+  isCopilotPrincipal,
+  mustClassifyContent,
+  noteContentDeliveryOperation,
+  observeContentDelivery,
+  observeContentOutsideModel,
+  redactBeforeCutting,
+  requireAdmittedContent,
+  runDeclaredContentOperation,
+  trackContentDelivery,
+} from './content-delivery'

apps/sim/lib/execution/sandbox/__integration__/content-reads.integration.ts

@@ -19,7 +19,7 @@ vi.mock('@/lib/uploads/core/setup.server', () => ({
 }))
 vi.mock('@/tools', () => toolsMock)
 
-import { observeContentDelivery } from '@/lib/core/application/content-delivery'
+import { observeContentDelivery } from '@/lib/core/application'
 import { encryptSecret } from '@/lib/core/security/encryption'
 import {
   createKnowledgeAclFixtureIds,

apps/sim/lib/knowledge/__integration__/content-delivery.integration.ts

@@ -18,7 +18,7 @@ import { eq, inArray } from 'drizzle-orm'
 import { PostgresJsPreparedQuery } from 'drizzle-orm/postgres-js/session'
 import JSZip from 'jszip'
 import { afterAll, afterEach, beforeAll, describe, expect, it, vi } from 'vitest'
-import { observeContentDelivery } from '@/lib/core/application/content-delivery'
+import { observeContentDelivery } from '@/lib/core/application'
 import { encryptSecret } from '@/lib/core/security/encryption'
 import type { DurableSecretProvenance } from '@/lib/execution/durable-secret-provenance'
 import {

apps/sim/lib/knowledge/__integration__/execution-archive-provenance.integration.ts

@@ -65,7 +65,7 @@ vi.mock('@/lib/embeddings', async () => ({
 
 import { functionExecuteBodySchema } from '@/lib/api/contracts'
 import { fileManageDecompressBodySchema } from '@/lib/api/contracts/tools/file'
-import { observeContentDelivery } from '@/lib/core/application/content-delivery'
+import { observeContentDelivery } from '@/lib/core/application'
 import { processOutboxEventById } from '@/lib/core/outbox/service'
 import { decryptSecret, encryptSecret } from '@/lib/core/security/encryption'
 import { isUserFile } from '@/lib/core/utils/user-file'

apps/sim/lib/knowledge/application/admit-knowledge-content.ts

@@ -1,5 +1,5 @@
 import type { Principal } from '@sim/auth/principal'
-import { admitEach, type ContentSourceKind } from '@/lib/core/application/content-delivery'
+import { admitEach, type ContentSourceKind } from '@/lib/core/application'
 import {
   classifyKnowledgeChunks,
   classifyKnowledgeDocumentMetadata,

apps/sim/lib/knowledge/application/authorized-knowledge-use-case.ts

@@ -5,9 +5,9 @@ import {
   type PrincipalForOperation,
   recordProjectedUseCaseAuditEntries,
   requireAllowedWorkspacePrincipal,
+  runDeclaredContentOperation,
   type WorkspaceUseCaseAuditEntry,
 } from '@/lib/core/application'
-import { runDeclaredContentOperation } from '@/lib/core/application/content-delivery'
 import { authorizeOrganizationOperation } from '@/lib/core/application/organization-authorization'
 import { runWithOutboundOrganization } from '@/lib/core/network/context.server'
 import {

apps/sim/lib/knowledge/application/chunks.test.ts

@@ -42,7 +42,7 @@ vi.mock('@/lib/knowledge/application/admit-knowledge-content', () => ({
   admitKnowledgeChunks: mocks.admitKnowledgeChunks,
 }))
 
-import { admitContent } from '@/lib/core/application/content-delivery'
+import { admitContent } from '@/lib/core/application'
 import { ForbiddenOperationError } from '@/lib/core/application/forbidden'
 import { WORKSPACE_ACCESS_SCOPE } from '@/lib/knowledge/access/scope'
 import { KnowledgeDocumentNotReadyError } from '@/lib/knowledge/application/chunk-errors'