chore(cleanup): apply codebase-design deep-module pass across the monorepo (#8549)

* chore(skills): vendor codebase-design deep-module vocabulary skill

* chore(cleanup): remove dead client hooks, query exports, and orphaned scheduled-tasks utils

* refactor(queries): concentrate workflow search MCP list fetches into two helpers

* chore(cleanup): dedupe app copies of shared package helpers

- import subflow helpers from @sim/workflow-persistence/subflow-helpers
- drop env-capabilities and service-account-metadata re-export shims
- use isWorkflowBlockProtected in block-enablement
- move anonymous user identity into @sim/auth/principal
- reuse isLightTileColor from @sim/workflow-renderer/tile-icon-color
- use @sim/utils sleep/getErrorMessage in sim-cli (bundled)
- remove dead normalizeSandboxProvider export

* chore(cleanup): trim log-views to toOverview and use interruptibleSleep in data drains

* chore(cleanup): use @sim/utils/object helpers in internal clients and drop dead vanta input-size

* chore(cleanup): remove dead logs types, organization utils, and workspace permission queries

* chore(cleanup): remove dead custom-tool use cases and unused folder, slack-search, skills, and selector helpers

* chore(cleanup): remove unreachable application use cases and API helpers

Delete test-only Copilot/executor use cases (bulk table rows by filter,
credential delete-many, credential-group invite send/link, sandbox and
connected-accounts adapters) with their operation entries, the unused
public API route wrapper, parseToolRequest, the invitation management
error policy, the execution invitation rate limit, and dead table/chat
route helpers.

* chore(cleanup): remove dead application use cases and utils, share workflow context resolver

- Delete unreachable platform-context, workflow VFS, deployment-overview, chat
  undeploy, and Copilot block-output/upstream-reference use cases plus their
  workflowOperations entries
- Delete dead fetch-deadline and scheduling utils and unused exported helpers
- Add resolvePrincipalWorkflowContext and use it at the 16 identical resolvers
- Share processCodeFailure between the Daytona and E2B adapters
- Use escapeRegExp and generateId in place of inline equivalents

* chore(cleanup): remove unreferenced Copilot table commands, workflow mutation handlers, and param types

chore(cleanup): drop unused billing client usage-pill and plan-view exports

* chore(cleanup): share webhook provider config, notification URL, and credential token helpers

* chore(cleanup): remove dead billing, credential, MCP, and API key exports

* chore(cleanup): remove dead executor helpers and redundant LoopConfigWithNodes type

* refactor(executor): export subflow node-id codec functions directly and drop forwarders

* refactor(providers): drop pass-through model wrappers and share the json_schema response format builder

* chore(cleanup): remove dead executor, tools, and block registry exports

* chore(cleanup): remove unreachable workspace-file and table use cases

* chore(cleanup): reuse knowledge tag slot constants in the tags service

* chore(cleanup): share escapeLikePattern from @sim/utils/string

* chore(cleanup): reuse zip-guard EOCD parsing in the file sniffer

* chore(cleanup): use isRecordLike for inline record guards

* chore(cleanup): remove dead uploads, tokenization, table, knowledge, and search exports

* chore(cleanup): use shared escapeLikePattern in list-query and logs filters

* docs(skills): align codebase-design testing guidance with repo rules and add its license

* chore(cleanup): cascade-remove use cases, helpers, and mocks orphaned by deleted Copilot commands

* chore(cleanup): consolidate shared helpers and restore TSDoc on moved codec and subflow helpers

* test(cleanup): port storage-cleanup ownership tests and drop stale mock keys

* test(scripts): follow model-access import move in application-graph fixture

* chore(skills): drop vendored codebase-design skill from the repo

Author: waleedlatif1

apps/docs/components/ui/block-info-card.tsx

@@ -1,6 +1,7 @@
 'use client'
 
 import type * as React from 'react'
+import { isLightTileColor } from '@sim/workflow-renderer/tile-icon-color'
 import { blockTypeToIconMap } from '@/components/ui/icon-mapping'
 
 interface BlockInfoCardProps {
@@ -9,33 +10,6 @@ interface BlockInfoCardProps {
   icon?: React.ComponentType<{ className?: string }>
 }
 
-/**
- * Brightness above which a tile background is "clearly light" and a white
- * foreground icon would wash out. Mirrors apps/sim's LIGHT_TILE_THRESHOLD
- * (blocks/icon-color.ts) so monochrome `currentColor` icons (e.g. Daytona,
- * Notion) stay legible on white/pale tiles instead of white-on-white.
- */
-const LIGHT_TILE_THRESHOLD = 0.75
-
-function isLightTileColor(color: string): boolean {
-  const hex = color.trim().replace('#', '').toLowerCase()
-  let r: number
-  let g: number
-  let b: number
-  if (/^[0-9a-f]{3}$/.test(hex)) {
-    r = Number.parseInt(hex[0] + hex[0], 16)
-    g = Number.parseInt(hex[1] + hex[1], 16)
-    b = Number.parseInt(hex[2] + hex[2], 16)
-  } else if (/^[0-9a-f]{6}$/.test(hex)) {
-    r = Number.parseInt(hex.slice(0, 2), 16)
-    g = Number.parseInt(hex.slice(2, 4), 16)
-    b = Number.parseInt(hex.slice(4, 6), 16)
-  } else {
-    return false
-  }
-  return (0.299 * r + 0.587 * g + 0.114 * b) / 255 > LIGHT_TILE_THRESHOLD
-}
-
 export function BlockInfoCard({
   type,
   color,

apps/realtime/src/auth.ts

@@ -1,16 +1,6 @@
 import { createVerifyAuth } from '@sim/auth/verify'
 import { env } from '@/env'
 
-export const ANONYMOUS_USER_ID = '00000000-0000-0000-0000-000000000000'
-
-export const ANONYMOUS_USER = {
-  id: ANONYMOUS_USER_ID,
-  name: 'Anonymous',
-  email: 'anonymous@localhost',
-  emailVerified: true,
-  image: null,
-} as const
-
 export const auth = createVerifyAuth({
   secret: env.BETTER_AUTH_SECRET,
   baseURL: env.BETTER_AUTH_URL,

apps/realtime/src/middleware/auth.ts

@@ -1,7 +1,8 @@
+import { ANONYMOUS_USER, ANONYMOUS_USER_ID } from '@sim/auth/principal'
 import { createLogger } from '@sim/logger'
 import { toError } from '@sim/utils/errors'
 import type { Socket } from 'socket.io'
-import { ANONYMOUS_USER, ANONYMOUS_USER_ID, auth } from '@/auth'
+import { auth } from '@/auth'
 import { isAuthDisabled } from '@/env'
 
 const logger = createLogger('SocketAuth')

apps/sim/app/api/auth/oauth2/callback/instagram/route.ts

@@ -1,13 +1,13 @@
 import { db } from '@sim/db'
 import { account } from '@sim/db/schema'
+import { EnvCapabilityConfigurationError } from '@sim/deployment-config/env-capabilities'
 import { createLogger } from '@sim/logger'
 import { generateId } from '@sim/utils/id'
 import { and, eq } from 'drizzle-orm'
 import { type NextRequest, NextResponse } from 'next/server'
 import { instagramCallbackContract } from '@/lib/api/contracts/oauth-connections'
 import { parseRequest } from '@/lib/api/server'
 import { getSession } from '@/lib/auth'
-import { EnvCapabilityConfigurationError } from '@/lib/core/config/env-capabilities'
 import { requireConfiguredOAuthClient } from '@/lib/core/config/env-capabilities.server'
 import {
   DEFAULT_MAX_ERROR_BODY_BYTES,

apps/sim/app/api/auth/oauth2/callback/shopify/route.ts

@@ -1,3 +1,4 @@
+import { EnvCapabilityConfigurationError } from '@sim/deployment-config/env-capabilities'
 import { createLogger } from '@sim/logger'
 import { safeCompare } from '@sim/security/compare'
 import { hmacSha256Hex } from '@sim/security/hmac'
@@ -7,7 +8,6 @@ import {
   shopifyShopDomainSchema,
 } from '@/lib/api/contracts/oauth-connections'
 import { getSession } from '@/lib/auth'
-import { EnvCapabilityConfigurationError } from '@/lib/core/config/env-capabilities'
 import { requireConfiguredOAuthClient } from '@/lib/core/config/env-capabilities.server'
 import { getBaseUrl } from '@/lib/core/utils/urls'
 import { isSameOrigin } from '@/lib/core/utils/validation'

apps/sim/app/api/chat/utils.ts

@@ -26,30 +26,6 @@ export async function setChatAuthCookie(
   })
 }
 
-/**
- * Check if user has permission to create a chat for a specific workflow
- */
-export async function checkWorkflowAccessForChatCreation(
-  workflowId: string,
-  userId: string
-): Promise<{ hasAccess: boolean; workflow?: any }> {
-  const authorization = await authorizeWorkflowByWorkspacePermission({
-    workflowId,
-    userId,
-    action: 'admin',
-  })
-
-  if (!authorization.workflow) {
-    return { hasAccess: false }
-  }
-
-  if (authorization.allowed) {
-    return { hasAccess: true, workflow: authorization.workflow }
-  }
-
-  return { hasAccess: false }
-}
-
 /**
  * Check if user has access to view/edit/delete a specific chat
  */

apps/sim/app/api/files/delete/route.test.ts

@@ -54,7 +54,6 @@ describe('File Delete API Route', () => {
     filesAuthorizationMockFns.mockVerifyFileAccess.mockResolvedValue(true)
     storageServiceMockFns.mockDeleteFile.mockResolvedValue(undefined)
     storageServiceMockFns.mockHasCloudStorage.mockReturnValue(true)
-    uploadsMockFns.mockGetStorageProvider.mockReturnValue('s3')
     uploadsMockFns.mockIsUsingCloudStorage.mockReturnValue(true)
   })
 

apps/sim/app/api/files/utils.ts

@@ -40,7 +40,7 @@ export class InvalidRequestError extends Error {
   }
 }
 
-export const contentTypeMap: Record<string, string> = {
+const contentTypeMap: Record<string, string> = {
   txt: 'text/plain',
   csv: 'text/csv',
   json: 'application/json',