[waleedlatif1]

Summary

• Removing a workspace member who owned more files than Postgres's 65,535 bind parameters failed with a 500 and rolled back: the file creator handoff selected every matching file id and then ran update ... where id in (<every id>)
• handoffFileCreatorsInTx is now keyed by the caller's scope predicate throughout: rows are locked FOR UPDATE in id order through a subquery (nothing loaded into memory), version heads load through a subquery, and the final update matches the same predicate
• Covers all three callers: workspace member removal, Project departure, and organization departure
• Versioned files (workspace/project) still have their implicit history frozen before the creator changes. The update only moves a versioned file whose head is current, so a file committed after the history pass keeps its creator rather than losing its original-upload attribution
• Extracted the correlated-column qualification from currentWorkspaceFileVersionNumberSql and added workspaceFileVersionHeadCurrentSql (the SQL form of isVersionHeadCurrent)
• Audited the remaining inArray calls in the removal and handoff paths (workspace, project, and org handoff, workflow reassignment, org membership removal). They bind workspace, project, member, or invitation ids, which don't grow with the number of rows a member owns

Type of Change

• Bug fix

Testing

• New real-Postgres case in shared-resource-handoff.integration.ts: it seeds 66,000 knowledge-base files with generate_series, removes the member through revokeWorkspaceAccessTx, and asserts every file moved to the successor. It fails on the pre-fix code with MAX_PARAMETERS_EXCEEDED on the id-list update and passes with the fix (~9s)
• bun run test:integration with shared-resource-handoff, file-versions, creator-lifetime, projects foundation, membership-removal-lock-order, managed-membership, and owners: 189 passed
• Unit tests for file-manager, file-manager-page, file-query, and file-versions: 23 passed
• biome on the changed files; full type-check and audits are left to CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 14, 2026 4:21am UTC

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable issues were found.

Summary

Replaces file-ID lists with scope-based queries so member removal can hand off more than 65,535 files.

• File handoffs use a scope instead of a growing list of file IDs.

No actionable issues found. Tests were not run during this review.

_{Reviews (2) · Last reviewed commit: "fix(workspaces): hand off a departing me..." · Reviewed by Greptile}

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}