feat(files): folders, multiselect, vfs update

.gitignore

@@ -84,3 +84,4 @@ i18n.cache
 .claude/launch.json
 .claude/worktrees/
 .claude/scheduled_tasks.lock
+.deepsec/

apps/sim/app/(landing)/components/auth-modal/auth-modal.tsx

@@ -10,6 +10,7 @@ import {
   Modal,
   ModalClose,
   ModalContent,
+  ModalDescription,
   ModalTitle,
   ModalTrigger,
 } from '@/components/emcn'
@@ -134,6 +135,9 @@ export function AuthModal({ children, defaultView = 'login', source }: AuthModal
         <ModalTitle className='sr-only'>
           {view === 'login' ? 'Log in' : 'Create account'}
         </ModalTitle>
+        <ModalDescription className='sr-only'>
+          {view === 'login' ? 'Sign in to your account' : 'Create a new account'}
+        </ModalDescription>
 
         <div className='relative px-6 pt-6 pb-6'>
           <ModalClose className='absolute top-6 right-6 rounded-sm opacity-70 transition-opacity hover:opacity-100'>

apps/sim/app/(landing)/components/demo-request/demo-request-modal.tsx

@@ -8,6 +8,7 @@ import {
   Modal,
   ModalBody,
   ModalContent,
+  ModalDescription,
   ModalFooter,
   ModalHeader,
   ModalTrigger,
@@ -152,6 +153,9 @@ export function DemoRequestModal({ children, theme = 'dark' }: DemoRequestModalP
             }
           >
             <ModalBody>
+              <ModalDescription className='sr-only'>
+                Fill out this form to request a demo and talk to the sales team
+              </ModalDescription>
               <div className='space-y-3'>
                 <div className='grid gap-3 sm:grid-cols-2'>
                   <LandingField htmlFor='firstName' label='First name' error={errors.firstName}>

apps/sim/app/(landing)/integrations/components/request-integration-modal.tsx

@@ -8,6 +8,7 @@ import {
   Modal,
   ModalBody,
   ModalContent,
+  ModalDescription,
   ModalFooter,
   ModalHeader,
   Textarea,
@@ -83,6 +84,9 @@ export function RequestIntegrationModal() {
 
           {status === 'success' ? (
             <ModalBody>
+              <ModalDescription className='sr-only'>
+                Integration request submitted successfully
+              </ModalDescription>
               <div className='flex flex-col items-center gap-3 py-6 text-center'>
                 <div className='flex size-10 items-center justify-center rounded-full bg-[#33C482]/10'>
                   <svg
@@ -106,6 +110,10 @@ export function RequestIntegrationModal() {
           ) : (
             <form onSubmit={handleSubmit} className='flex min-h-0 flex-1 flex-col'>
               <ModalBody>
+                <ModalDescription className='sr-only'>
+                  Submit a request for a new integration by entering the integration name and your
+                  email
+                </ModalDescription>
                 <div className='space-y-3'>
                   <div className='flex flex-col gap-1'>
                     <Label htmlFor='integration-name'>Integration name</Label>

apps/sim/app/api/tools/file/manage/route.ts

@@ -3,13 +3,18 @@ import { type NextRequest, NextResponse } from 'next/server'
 import { fileManageContract } from '@/lib/api/contracts/tools/file'
 import { parseRequest } from '@/lib/api/server'
 import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { splitWorkspaceFilePath } from '@/lib/copilot/tools/server/files/workspace-file'
 import { acquireLock, releaseLock } from '@/lib/core/config/redis'
 import { ensureAbsoluteUrl } from '@/lib/core/utils/urls'
 import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  ensureWorkspaceFileFolderPath,
+  moveWorkspaceFileItems,
+} from '@/lib/uploads/contexts/workspace/workspace-file-folder-manager'
 import {
   fetchWorkspaceFileBuffer,
   getWorkspaceFile,
-  getWorkspaceFileByName,
+  resolveWorkspaceFileReference,
   updateWorkspaceFileContent,
   uploadWorkspaceFile,
 } from '@/lib/uploads/contexts/workspace/workspace-file-manager'
@@ -49,11 +54,14 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
         const selectedFileId =
           fileId ||
           (fileInput && typeof fileInput === 'object' && !Array.isArray(fileInput)
-            ? typeof fileInput.id === 'string'
-              ? fileInput.id
-              : typeof fileInput.fileId === 'string'
-                ? fileInput.fileId
-                : ''
+            ? (() => {
+                const obj = fileInput as Record<string, unknown>
+                return typeof obj.id === 'string'
+                  ? obj.id
+                  : typeof obj.fileId === 'string'
+                    ? obj.fileId
+                    : ''
+              })()
             : '')
 
         if (!selectedFileId) {
@@ -91,14 +99,21 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
 
       case 'write': {
         const { fileName, content, contentType } = body
-        const mimeType = contentType || getMimeTypeFromExtension(getFileExtension(fileName))
+        const { folderSegments, leafName } = splitWorkspaceFilePath(fileName)
+        const folderId = await ensureWorkspaceFileFolderPath({
+          workspaceId,
+          userId,
+          pathSegments: folderSegments,
+        })
+        const mimeType = contentType || getMimeTypeFromExtension(getFileExtension(leafName))
         const fileBuffer = Buffer.from(content ?? '', 'utf-8')
         const result = await uploadWorkspaceFile(
           workspaceId,
           userId,
           fileBuffer,
-          fileName,
-          mimeType
+          leafName,
+          mimeType,
+          { folderId }
         )
 
         logger.info('File created', {
@@ -118,10 +133,32 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
         })
       }
 
+      case 'move': {
+        const { fileId, targetFolder } = body
+        const pathSegments = targetFolder.trim()
+          ? targetFolder
+              .trim()
+              .split('/')
+              .map((s) => s.trim())
+              .filter(Boolean)
+          : []
+        const targetFolderId = await ensureWorkspaceFileFolderPath({
+          workspaceId,
+          userId,
+          pathSegments,
+        })
+        await moveWorkspaceFileItems({ workspaceId, fileIds: [fileId], targetFolderId })
+        logger.info('File moved', { fileId, targetFolder: targetFolder || '(root)' })
+        return NextResponse.json({
+          success: true,
+          data: { fileId, targetFolder: targetFolder || '(root)' },
+        })
+      }
+
       case 'append': {
         const { fileName, content } = body
 
-        const existing = await getWorkspaceFileByName(workspaceId, fileName)
+        const existing = await resolveWorkspaceFileReference(workspaceId, fileName)
         if (!existing) {
           return NextResponse.json(
             { success: false, error: `File not found: "${fileName}"` },

apps/sim/app/api/workspaces/[id]/files/[fileId]/route.ts

@@ -9,6 +9,7 @@ import { getValidationErrorMessage, parseRequest } from '@/lib/api/server'
 import { getSession } from '@/lib/auth'
 import { generateRequestId } from '@/lib/core/utils/request'
 import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { captureServerEvent } from '@/lib/posthog/server'
 import {
   deleteWorkspaceFile,
   FileConflictError,
@@ -55,6 +56,12 @@ export const PATCH = withRouteHandler(
 
       logger.info(`[${requestId}] Renamed workspace file: ${fileId} to "${updatedFile.name}"`)
 
+      captureServerEvent(
+        session.user.id,
+        'file_renamed',
+        { workspace_id: workspaceId },
+        { groups: { workspace: workspaceId } }
+      )
       recordAudit({
         workspaceId,
         actorId: session.user.id,
@@ -124,6 +131,12 @@ export const DELETE = withRouteHandler(
 
       logger.info(`[${requestId}] Archived workspace file: ${fileId}`)
 
+      captureServerEvent(
+        session.user.id,
+        'file_deleted',
+        { workspace_id: workspaceId },
+        { groups: { workspace: workspaceId } }
+      )
       recordAudit({
         workspaceId,
         actorId: session.user.id,

apps/sim/app/api/workspaces/[id]/files/bulk-archive/route.ts

@@ -0,0 +1,76 @@
+import { AuditAction, AuditResourceType, recordAudit } from '@sim/audit'
+import { createLogger } from '@sim/logger'
+import { toError } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { bulkArchiveWorkspaceFileItemsContract } from '@/lib/api/contracts/workspace-file-folders'
+import { parseRequest } from '@/lib/api/server'
+import { getSession } from '@/lib/auth'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { captureServerEvent } from '@/lib/posthog/server'
+import { bulkArchiveWorkspaceFileItems } from '@/lib/uploads/contexts/workspace'
+import { getUserEntityPermissions } from '@/lib/workspaces/permissions/utils'
+
+const logger = createLogger('WorkspaceFileBulkArchiveAPI')
+
+export const POST = withRouteHandler(
+  async (request: NextRequest, context: { params: Promise<{ id: string }> }) => {
+    const session = await getSession()
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(bulkArchiveWorkspaceFileItemsContract, request, context)
+    if (!parsed.success) return parsed.response
+    const { id: workspaceId } = parsed.data.params
+    const { fileIds, folderIds } = parsed.data.body
+
+    const permission = await getUserEntityPermissions(session.user.id, 'workspace', workspaceId)
+    if (permission !== 'admin' && permission !== 'write') {
+      return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 })
+    }
+
+    try {
+      const deletedItems = await bulkArchiveWorkspaceFileItems({ workspaceId, fileIds, folderIds })
+      captureServerEvent(
+        session.user.id,
+        'file_bulk_deleted',
+        { workspace_id: workspaceId, file_count: fileIds.length, folder_count: folderIds.length },
+        { groups: { workspace: workspaceId } }
+      )
+      if (fileIds.length > 0) {
+        recordAudit({
+          workspaceId,
+          actorId: session.user.id,
+          actorName: session.user.name,
+          actorEmail: session.user.email,
+          action: AuditAction.FILE_DELETED,
+          resourceType: AuditResourceType.FILE,
+          description: `Deleted ${fileIds.length} file${fileIds.length === 1 ? '' : 's'}`,
+          metadata: { fileIds },
+        })
+      }
+      if (folderIds.length > 0) {
+        recordAudit({
+          workspaceId,
+          actorId: session.user.id,
+          actorName: session.user.name,
+          actorEmail: session.user.email,
+          action: AuditAction.FOLDER_DELETED,
+          resourceType: AuditResourceType.FOLDER,
+          description: `Deleted ${folderIds.length} folder${folderIds.length === 1 ? '' : 's'}`,
+          metadata: { folderIds },
+        })
+      }
+      return NextResponse.json({ success: true, deletedItems })
+    } catch (error) {
+      logger.error('Failed to bulk archive workspace file items:', error)
+      return NextResponse.json(
+        {
+          success: false,
+          error: toError(error).message,
+        },
+        { status: 400 }
+      )
+    }
+  }
+)