fix(lifecycle): retain shared resources when creators leave by mzxchandra · Pull Request #8762 · simstudioai/sim

mzxchandra · 2026-10-07T20:55:23Z

Summary

Transfer shared workspace resources to the existing billed account before removing access, and transfer organization-only resources to an existing organization owner. Preserve archived roots, child rows/documents, and file history without changing non-null API contracts.
Preserve implicit upload attribution through handoff, including empty uploads, and keep legitimate first writes at version 1. Serialize content writes, archive rollback, and retention cleanup with member removal by locking the workspace before existing files.
Repair references from earlier departures before permanent account deletion, using transactional successor validation and a user-row barrier against late creator references. Both v1 admin removal routes use the common revocation path.
Retain public MCP execution identity and block creator deletion until an admin makes the server private or deletes it. Require live workspace API keys to be replaced/revoked instead of transferring credentials.

Type of Change

Bug fix

Testing

74 affected real PostgreSQL cases pass: file history, full member-removal races, lifecycle retention, and storage accounting. Eight contention cases verify both arrival orders for content writes, archive rollback, and retention cleanup.
The unchanged code reproduced four PostgreSQL deadlocks. Removing each early lock independently reproduced its failure; restored code passes. Earlier history controls verify uploader attribution, first-write numbering, restored versions, and retained storage references.
158 affected unit tests pass. Scoped Biome, API-validation and test-pattern audits, generated artifacts, and diff checks pass. Full repository tests, typecheck and build run in CI.
Earlier HTTP lifecycle acceptance verifies handoff, departed-user denial, account deletion, surviving-user access, file bytes, non-null contracts, and storage/history preservation; it was not rerun for the lock-order correction.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing (new tests pass the test-audit authoring gate)
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Scope notes

Shared service-account and workspace-env credential lifecycle is intentionally deferred: their existing creator cascade remains, with no new transfer or deletion guard. Existing workflow owner-based execution/environment fallback is preserved. Public MCP execution-identity cleanup is a separate follow-up. Already-admitted requests may finish after departure; permanent deletion repairs their committed references or rejects late user references. HTTP document setup uses a provider-independent fixture, so these tests do not claim connector indexing or provider execution coverage.

vercel · 2026-10-07T20:55:29Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 13, 2026 5:24am UTC

mzxchandra · 2026-10-07T20:57:57Z

@greptile

mzxchandra · 2026-10-07T20:57:58Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-07T20:58:05Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 10 files

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

greptile-apps · 2026-10-07T21:05:32Z

Confidence Score: 5/5

[Critical impact] The PR appears safe to merge; no new actionable issue remains.

Summary

This PR retains shared resources when their creators leave and repairs older creator references before account deletion.

Leaving a workspace now hands shared resources to a reachable survivor.
Organization-only resources move to an active organization owner.
Account deletion repairs shared links left by earlier departures.
Account deletion waits when shared execution still depends on the creator.
Shared file handoffs keep upload history and storage totals intact.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Member removal] --> B[Lock workspace]
  B --> C{Successor has access?}
  C -->|No| D[Keep access and resources]
  C -->|Yes| E[Preserve implicit file history]
  E --> F[Transfer shared creator references]
  F --> G[Remove access]
  H[Account deletion] --> I[Lock organization and Project gates]
  I --> J[Lock related workspaces]
  J --> K{User row available without waiting?}
  K -->|No| L[Roll back and request retry]
  K -->|Yes| M[Recheck scopes and execution dependencies]
  M --> N[Repair shared references before deleting user]

_{Reviews (14) · Last reviewed commit: "Merge remote-tracking branch 'origin/sta..." · Reviewed by Greptile}

mzxchandra · 2026-10-07T22:07:45Z

@greptile

mzxchandra · 2026-10-07T22:07:47Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-07T22:07:52Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 10 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

cubic-dev-ai

No issues found across 10 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-08T05:11:35Z

@greptile

mzxchandra · 2026-10-08T05:11:36Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T05:11:40Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 13 files

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-08T06:54:29Z

@greptile

mzxchandra · 2026-10-08T06:54:30Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T06:54:37Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

mzxchandra · 2026-10-13T01:43:52Z

@greptile review

mzxchandra · 2026-10-13T01:43:59Z

@cubic review

cubic-dev-ai · 2026-10-13T01:44:06Z

@cubic review

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 18 files

_{Heads up: you’ve reached your flex budget. Increase your flex budget or wait for usage to reset.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-13T01:55:09Z

@greptile

mzxchandra · 2026-10-13T01:55:11Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-13T01:55:17Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 19 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Heads up: you’ve reached your flex budget. Increase your flex budget or wait for usage to reset.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

…rce-lifecycle

mzxchandra · 2026-10-13T02:55:46Z

@greptile

mzxchandra · 2026-10-13T02:55:48Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-13T02:55:52Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 20 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Heads up: you’ve reached your flex budget. Increase your flex budget or wait for usage to reset.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

…rce-lifecycle

mzxchandra · 2026-10-13T05:35:26Z

@greptile review

mzxchandra · 2026-10-13T05:35:32Z

@cubic review

cubic-dev-ai · 2026-10-13T05:35:38Z

@cubic review

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 20 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Heads up: you’ve reached your flex budget. Increase your flex budget or wait for usage to reset.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

fix(lifecycle): retain shared resources when creators leave

817191c

cubic-dev-ai Bot reviewed Oct 7, 2026

View reviewed changes

Comment thread apps/sim/lib/workspaces/access/shared-resource-handoff.integration.ts

Comment thread apps/sim/app/api/v1/admin/workspaces/[id]/members/[memberId]/route.ts

Comment thread apps/sim/app/api/v1/admin/workspaces/[id]/members/route.ts

fix(lifecycle): preserve replacement workspace grants

be01225

vercel Bot temporarily deployed to Preview October 7, 2026 22:07 Inactive

cubic-dev-ai Bot reviewed Oct 7, 2026

View reviewed changes

mzxchandra marked this pull request as ready for review October 7, 2026 22:43

cubic-dev-ai Bot reviewed Oct 7, 2026

View reviewed changes

This was referenced Oct 8, 2026

feat(files): integrate Project files with the browser and Mothership #8781

Draft

feat: establish shared file ownership foundation #8609

Draft

feat(files): add the Project file backend and APIs #8610

Draft

mzxchandra marked this pull request as draft October 8, 2026 04:09

fix(lifecycle): preserve upload history during creator handoff

34a82c3

vercel Bot temporarily deployed to Preview October 8, 2026 05:11 Inactive

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

Comment thread apps/sim/lib/uploads/contexts/workspace/creator-handoff.ts Outdated

fix(lifecycle): preserve empty upload attribution through handoff

08398e7

vercel Bot temporarily deployed to Preview October 8, 2026 06:54 Inactive

vercel Bot temporarily deployed to Preview October 13, 2026 01:37 Inactive

cubic-dev-ai Bot reviewed Oct 13, 2026

View reviewed changes

Comment thread apps/sim/lib/users/account-deletion.ts

fix(lifecycle): preview successor blockers and sync Project enforcement

f2c4d32

vercel Bot deployed to Preview October 13, 2026 01:58 View deployment

cubic-dev-ai Bot reviewed Oct 13, 2026

View reviewed changes

greptile-apps Bot reviewed Oct 13, 2026

View reviewed changes

Comment thread apps/sim/lib/users/account-deletion.ts Outdated

mzxchandra added 2 commits October 12, 2026 19:44

fix(lifecycle): lock Project workspaces before successor grants

8244ef2

Merge remote-tracking branch 'origin/staging' into codex/shared-resou…

01b4ff6

…rce-lifecycle

vercel Bot temporarily deployed to Preview October 13, 2026 02:44 Inactive

cubic-dev-ai Bot reviewed Oct 13, 2026

View reviewed changes

greptile-apps Bot reviewed Oct 13, 2026

View reviewed changes

Comment thread apps/sim/lib/workspaces/resource-handoff.ts Outdated

fix(lifecycle): make shared file contexts readonly

fb298fb

vercel Bot temporarily deployed to Preview October 13, 2026 03:07 Inactive

Merge remote-tracking branch 'origin/staging' into codex/shared-resou…

5b4b904

…rce-lifecycle

vercel Bot deployed to Preview October 13, 2026 05:24 View deployment

cubic-dev-ai Bot reviewed Oct 13, 2026

View reviewed changes

mzxchandra merged commit 8c52d6b into staging Oct 13, 2026
51 checks passed

mzxchandra deleted the codex/shared-resource-lifecycle branch October 13, 2026 06:04

Conversation

mzxchandra commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Scope notes

Uh oh!

vercel Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mzxchandra commented Oct 7, 2026

Uh oh!

mzxchandra commented Oct 7, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 7, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

mzxchandra commented Oct 7, 2026

Uh oh!

mzxchandra commented Oct 7, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 7, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

mzxchandra commented Oct 13, 2026

Uh oh!

mzxchandra commented Oct 13, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

mzxchandra commented Oct 13, 2026

Uh oh!

mzxchandra commented Oct 13, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mzxchandra commented Oct 7, 2026 •

edited

Loading

vercel Bot commented Oct 7, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

greptile-apps Bot commented Oct 7, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading