feat: add shared Project files

Reuse entity-owned file operations across Project UI, session APIs, v2/CLI,
and delegated Mothership callers. Add Project discovery, sharing, history,
copy, collaborative editing, and current-access invalidation while preserving
workspace execution boundaries and independent creator/payer attribution.

Keep activation gated behind the file-ownership compatibility foundation.
Run real HTTP suites through disposable fixture orchestration in CI.

Author: mzxchandra

.github/workflows/test-build.yml

@@ -128,8 +128,17 @@ jobs:
   http-e2e:
     name: End-to-end over real HTTP
     runs-on: ${{ (vars.CI_PROVIDER == '' || vars.CI_PROVIDER == 'blacksmith') && 'blacksmith-8vcpu-ubuntu-2404' || 'ubuntu-latest' }}
-    timeout-minutes: 20
+    timeout-minutes: 40
     services:
+      redis:
+        image: redis:8.2-alpine
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
       postgres:
         image: pgvector/pgvector:pg17
         env:
@@ -258,6 +267,22 @@ jobs:
           VERSION_COMPARE_E2E_REPORT_PATH="$report_dir/version-compare-http-report.json" \
             bun run test:workflow-version-compare:e2e
 
+      - name: Prepare the pinned local document engine
+        run: |
+          addon_dir="$(node -p 'require("node:path").dirname(require.resolve("isolated-vm/package.json", { paths: ["./apps/sim"] }))')"
+          cd "$addon_dir"
+          bun run install
+
+      - name: Verify Project files, public delivery and list subscriptions over real HTTP
+        working-directory: apps/sim
+        env:
+          PROJECT_FILES_E2E_ADMIN_DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
+          PROJECT_FILES_E2E_REDIS_URL: redis://127.0.0.1:6379
+          PROJECT_FILES_E2E_BASE_URL: http://127.0.0.1:3050
+          PROJECT_FILES_E2E_RELAY_URL: http://127.0.0.1:3052
+          PROJECT_FILES_E2E_REPORT_PATH: ${{ runner.temp }}/e2e/project-files/orchestration.json
+        run: bun --no-env-file scripts/test-project-files-e2e.ts
+
       - name: Upload end-to-end reports and server logs
         if: failure()
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4

apps/docs/content/docs/cli/commands.mdx

@@ -47,6 +47,7 @@ These apply to every command, and may be written before or after it.
 | [`sim meta`](/cli/meta) | Manage meta |
 | [`sim organizations`](/cli/organizations) | Manage organizations |
 | [`sim permission-groups`](/cli/permission-groups) | Manage permission groups |
+| [`sim projects`](/cli/projects) | Manage projects |
 | [`sim sandboxes`](/cli/sandboxes) | Manage sandboxes |
 | [`sim secrets`](/cli/secrets) | Manage secrets |
 | [`sim selectors`](/cli/selectors) | Manage selectors |

apps/docs/content/docs/cli/files.mdx

@@ -26,6 +26,25 @@ sim files batch-delete [options]
 
 </CommandTable>
 
+## Copy file items
+
+```bash
+sim files copy [options]
+```
+
+Copy File Items (OAuth login or personal API key required)
+
+**Options**
+
+<CommandTable>
+
+| Option | Required | Description |
+| --- | --- | --- |
+| `--source <json\|@file>` | Yes | Source owner and selected fileIds or folderIds (JSON, or @path / @- to read a file or stdin). |
+| `--destination <json\|@file>` | Yes | Destination owner and optional folderId (JSON, or @path / @- to read a file or stdin). |
+
+</CommandTable>
+
 ## Create file
 
 ```bash

apps/docs/content/docs/cli/meta.json

@@ -30,6 +30,7 @@
     "meta",
     "organizations",
     "permission-groups",
+    "projects",
     "sandboxes",
     "secrets",
     "selectors",