feat: establish shared file ownership foundation

[mzxchandra]

Summary

• Prepare shared file infrastructure for Project files while preserving workspace files. Canonical files retain workspace_id and organization_id and gain a nullable project_id FK; a database check permits at most one owner. Existing personal/chat attachments may have none, with their access and lifecycle unchanged.
• Keep the consolidated entityType/entityId interface above storage. Native FKs enforce parent existence and concurrent deletion; shared directory locks and domain guards cover folders, history, creator attribution, billing and cleanup. Search/share owner pairs derive from canonical FK columns.
• Carry Project ownership through accounting, payer transfers, teardown, uploads, retention, public shares, search and compiled-document caches. Use finite retirement cleanup plus one paginated storage inventory for late uploads, and preserve search invalidation across owner changes.
• Fence realtime admission and stale joins, distinguish permission-service outages from revocation, and recognize executable document references without treating quoted examples as dependencies.
• Add compatible migrations 0398–0403 and awaited validation/backfill scripts. Fresh db:push also installs the file-integrity functions and triggers. Project file endpoints and UI arrive in feat: add shared Project files #8610.

Stacked on #8590; #8580 has merged. Project Files #8610 targets this branch and pairs with Mothership #594.

Rollout and rollback

Deploy the foundation and verify retirement of incompatible app/realtime tasks and worker jobs before enabling Project files. Traffic cutover alone is insufficient. The feature remains disabled by default in the follow-up. Earlier draft migrations ran only on disposable databases and were replaced before release.

This foundation is the compatible rollback target once Project files exist: Project UI access is unavailable, while accounting and lifecycle consumers continue handling those rows.

Type of Change

• Other: file ownership and rollout compatibility foundation

Testing

• Root lint, all 26 workspace type-check tasks, all audits, migration safety, generated artifacts, docs manifest and block registry pass.
• Full root tests pass: 373 script tests and all 19 workspace tasks; the app suite passes 34,792 tests with 20 existing skips.
• Fresh migration and replay pass; Drizzle generation produces no schema drift or invalid indexes. All 59 ownership, history, creator and share-lifetime database checks pass.
• Real PostgreSQL/local-storage regressions cover cleanup durability, payer-transfer serialization, search fairness, interrupted-index recovery, finite retirement and paginated orphan discovery.
• All 16 Project Socket.IO checks pass, including confirmed revocation, service outages, delayed admission, owner-qualified join intent and stale leaves. Negative controls demonstrate the relevant failures before their fixes.
• Earlier schema-push, Redis and integration-fixture checks remain covered by the manually dispatched CI jobs. Workflow triggers and timeouts are unchanged.

Checklist

• Code follows project style guidelines
• Self-reviewed the storage, concurrency and compatibility boundaries
• Relevant tests updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 6, 2026 8:57pm UTC

[mzxchandra]

@greptile

[mzxchandra]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

[greptile-apps]

Confidence Score: 5/5

[Critical risk] Introduces shared file ownership and project-scoped document access.

The PR appears safe to merge with respect to the changes since the previous review.

Summary

The PR establishes Project file ownership alongside workspace files, carrying owner scope through database integrity, billing, cleanup, search, and realtime documents. The latest changes qualify document join and leave intent by owner and add race-focused integration coverage.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[File operation] --> B{Canonical owner}
  B -->|Workspace| C[Workspace authorization and lifecycle]
  B -->|Project| D[Project authorization and lifecycle]
  C --> E[Shared file storage]
  D --> E
  E --> F[Search, billing, cleanup, and realtime]

Loading

_{Reviews (4) · Last reviewed commit: "fix(realtime): fence file joins by owner..."}

[cubic-dev-ai]

All reported issues were addressed across 181 files

_{Re-trigger cubic}

[mzxchandra]

@greptile

[mzxchandra]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 192 files

_{Turn on auto-fix | Re-trigger cubic}

[mzxchandra]

@greptile

[mzxchandra]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 191 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Turn on auto-fix | Re-trigger cubic</sub>

[mzxchandra]

@greptile

[mzxchandra]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 191 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic</sub>