refactor(file): read share status uses visibility vocabulary, no row internals

Read's per-file "share" is now { visibility, url, allowedEmails } using the
same visibility vocabulary as Manage Sharing: 'private' when not shared (url
null, no config) instead of null, otherwise public/password/email/sso with the
link. Drops row internals (id, token, resourceType, resourceId, isActive,
hasPassword).

Author: TheodoreSpeaks

apps/sim/app/api/tools/file/manage/route.ts

@@ -418,16 +418,29 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
           )
         }
 
-        // Attach each workspace file's public share status (batched to avoid N+1).
-        // Picker/upload input files have no canonical id, so they carry no share.
+        // Attach each workspace file's share status (batched to avoid N+1), using
+        // the same visibility vocabulary as the Manage Sharing operation. A file
+        // with no active public link reads as 'private' and exposes no link/config.
+        // Picker/upload input files have no canonical id, so they read as private.
         const shares = await getSharesForResources('file', selectedFileIds)
+        const toReadShare = (fileId: string) => {
+          const share = shares.get(fileId)
+          if (!share || !share.isActive) {
+            return { visibility: 'private' as const, url: null, allowedEmails: [] as string[] }
+          }
+          return {
+            visibility: share.authType,
+            url: share.url,
+            allowedEmails: share.allowedEmails,
+          }
+        }
         const userFiles = files
           .map((file) => workspaceFileToUserFile(file))
           .filter((file): file is NonNullable<ReturnType<typeof workspaceFileToUserFile>> =>
             Boolean(file)
           )
-          .map((file) => ({ ...file, share: shares.get(file.id) ?? null }))
-          .concat(selectedInputFiles.map((file) => ({ ...file, share: null })))
+          .map((file) => ({ ...file, share: toReadShare(file.id) }))
+          .concat(selectedInputFiles.map((file) => ({ ...file, share: toReadShare(file.id) })))
 
         logger.info('Files retrieved', {
           count: userFiles.length,

apps/sim/blocks/blocks/file.ts

@@ -1361,7 +1361,7 @@ export const FileV5Block: BlockConfig<FileParserV3Output> = {
     files: {
       type: 'file[]',
       description:
-        'Workspace file objects (read; each includes a "share" field with its public share status, null when not shared), fetched file objects (fetch), the compressed archive (compress), or extracted files (decompress)',
+        'Workspace file objects (read; each includes a "share" field — { visibility, url, allowedEmails }, where visibility is "private" when not shared or "public"/"password"/"email"/"sso" with the link in url), fetched file objects (fetch), the compressed archive (compress), or extracted files (decompress)',
     },
     contents: {
       type: 'array',

apps/sim/tools/file/get.ts

@@ -63,7 +63,7 @@ const createFileReadTool = (config: {
     files: {
       type: 'file[]',
       description:
-        'Workspace file objects, each with its public share status in a "share" field (null when the file is not shared)',
+        'Workspace file objects, each with a "share" field: { visibility, url, allowedEmails }. visibility is "private" when not publicly shared (url null), otherwise "public"/"password"/"email"/"sso" with the public link in url',
     },
   },
 })