improvement(naming): rename sandbox-tasks to sandboxes and standardize file names (#9044)

* improvement(naming): rename sandbox-tasks to sandboxes and drop folder-name stutter in execution files

* improvement(naming): standardize file names to the folder and role conventions

Renames every check:file-names baseline entry (stutter and redundant-suffix) so the
baseline is empty, plus the same rule's uncaught cases: grandparent-domain prefixes in
application/ and orchestration/ folders, loose stores moved to stores/<feature>/store.ts,
non-hook files dropped from the use-* prefix, and application context/errors outliers.

* improvement(naming): resolve rename ambiguities and stale file references from review

Author: waleedlatif1

.agents/skills/add-block/SKILL.md

@@ -350,7 +350,7 @@ sourceIds.forEach((id) => delete params[id])   // subblock ids are deleted
 if (chosen !== undefined) params[group.canonicalId] = chosen
 ```
 
-So by the time `tools.config.params(inputs)` runs (`executor/handlers/generic/generic-handler.ts`),
+So by the time `tools.config.params(inputs)` runs (`executor/handlers/generic/handler.ts`),
 `params.uploadFile` and `params.fileRef` are **gone** and the value is under `params.file`. Reading a
 subblock id there yields `undefined` and silently sends no file.
 
@@ -359,7 +359,7 @@ and the first non-empty advanced value in advanced mode, so a stale value in the
 never leak. `normalizeFileInput` then handles the JSON string that advanced-mode template resolution
 produces.
 
-Note that `generic-handler` merges rather than replaces (`{ ...inputs, ...transformedParams }`), so
+Note that `generic/handler` merges rather than replaces (`{ ...inputs, ...transformedParams }`), so
 omitting a key from the returned object does not strip it from what the tool receives. Tools simply
 ignore params they do not declare.
 

.agents/skills/add-integration/SKILL.md

@@ -657,8 +657,8 @@ File Downloads and Generated Files.
 | Helper | Location | Purpose |
 |--------|----------|---------|
 | `normalizeFileInput` | `@/blocks/utils` | Normalize file params in block config |
-| `processFilesToUserFiles` | `@/lib/uploads/utils/file-utils` | Convert raw inputs to UserFile[] |
-| `downloadFileFromStorage` | `@/lib/uploads/utils/file-utils.server` | Get file Buffer from UserFile |
+| `processFilesToUserFiles` | `@/lib/uploads/utils/file` | Convert raw inputs to UserFile[] |
+| `downloadFileFromStorage` | `@/lib/uploads/utils/file.server` | Get file Buffer from UserFile |
 | `FileToolProcessor` | `@/executor/utils/file-tool-processor` | Executor-side; stores declared file outputs (not called by tools) |
 | `isUserFile` | `@/lib/core/utils/user-file` | Type guard for UserFile objects |
 | `FileInputSchema` | `@/lib/uploads/utils/file-schemas` | Zod schema for file validation |

.agents/skills/add-managed-cli/SKILL.md

@@ -15,7 +15,7 @@ Read these live sources before editing; do not copy their current entries into t
 2. `apps/sim/lib/execution/remote-sandbox/cli-tools.server.ts` — server-only recipes and recipe helpers.
 3. `apps/sim/lib/execution/remote-sandbox/cli-tools.test.ts` — catalog and supply-chain invariants.
 4. `apps/sim/lib/execution/remote-sandbox/cli-tools-boundary.test.ts` — client/server import boundary.
-5. `apps/sim/lib/execution/remote-sandbox/sandbox-spec.ts` — content-addressed hash inputs.
+5. `apps/sim/lib/execution/remote-sandbox/spec.ts` — content-addressed hash inputs.
 
 Read `resolve.ts` and `e2b.ts` only when changing provisioning mechanics. A normal catalog addition should not require UI, API, database, resolver, or provider edits; those paths derive from the registries.
 
@@ -114,7 +114,7 @@ Never commit downloaded artifacts or credentials.
 bun run --cwd apps/sim test \
   lib/execution/remote-sandbox/cli-tools.test.ts \
   lib/execution/remote-sandbox/cli-tools-boundary.test.ts \
-  lib/execution/remote-sandbox/sandbox-spec.test.ts \
+  lib/execution/remote-sandbox/spec.test.ts \
   lib/execution/remote-sandbox/resolve.test.ts \
   'app/workspace/[workspaceId]/settings/components/sandboxes/utils.test.ts'
 ```

.agents/skills/migrate-application-operation/SKILL.md

@@ -47,7 +47,7 @@ Read these files completely before editing:
 - `apps/sim/lib/api/server/routes/internal-json-route.ts`
 - `apps/sim/lib/api/server/routes/v2-json-route.ts`
 - `apps/sim/lib/auth/internal-delegation.ts`
-- `apps/sim/lib/mothership/application/application-adapter.ts`
+- `apps/sim/lib/mothership/application/adapter.ts`
 - `apps/sim/lib/mothership/auth/application-delegation.ts`
 
 Use the file domain only as a representative golden slice:

.claude/rules/sim-sandbox.md

@@ -4,7 +4,7 @@ paths:
   - "apps/sim/lib/execution/isolated-vm-worker.cjs"
   - "apps/sim/lib/execution/isolated-vm.ts"
   - "apps/sim/lib/execution/sandbox/**"
-  - "apps/sim/sandbox-tasks/**"
+  - "apps/sim/sandboxes/**"
 ---
 
 # Sim Sandbox — Worker Security Policy
@@ -40,7 +40,7 @@ about what must **never** live in that process.
    validation.
 
 4. **Nothing that runs in the isolate is trusted, even if we wrote it**. The
-   task `bootstrap` and `finalize` strings in `apps/sim/sandbox-tasks/` execute
+   task `bootstrap` and `finalize` strings in `apps/sim/sandboxes/` execute
    inside the isolate. They must treat `globalThis` as adversarial — no pulling
    values from it that might have been mutated by user code. The hardening
    script in `executeTask` undefines dangerous globals before user code runs.

.cursor/rules/sim-sandbox.mdc

@@ -1,6 +1,6 @@
 ---
 description: "Isolated-vm sandbox worker security policy. Hard rules for anything that lives in the worker child process that runs user code."
-globs: ["apps/sim/lib/execution/isolated-vm-worker.cjs","apps/sim/lib/execution/isolated-vm.ts","apps/sim/lib/execution/sandbox/**","apps/sim/sandbox-tasks/**"]
+globs: ["apps/sim/lib/execution/isolated-vm-worker.cjs","apps/sim/lib/execution/isolated-vm.ts","apps/sim/lib/execution/sandbox/**","apps/sim/sandboxes/**"]
 ---
 
 <!-- Generated from .claude/rules/sim-sandbox.md by `bun run skills:sync`. Edit the source, not this file. -->
@@ -38,7 +38,7 @@ about what must **never** live in that process.
    validation.
 
 4. **Nothing that runs in the isolate is trusted, even if we wrote it**. The
-   task `bootstrap` and `finalize` strings in `apps/sim/sandbox-tasks/` execute
+   task `bootstrap` and `finalize` strings in `apps/sim/sandboxes/` execute
    inside the isolate. They must treat `globalThis` as adversarial — no pulling
    values from it that might have been mutated by user code. The hardening
    script in `executeTask` undefines dangerous globals before user code runs.

apps/sim/app/(auth)/login/login-form.tsx

@@ -15,7 +15,7 @@ import { normalizeEmail } from '@sim/utils/string'
 import { useRouter, useSearchParams } from 'next/navigation'
 import { requestJson } from '@/lib/api/client/request'
 import { forgetPasswordContract } from '@/lib/api/contracts'
-import { client } from '@/lib/auth/auth-client'
+import { client } from '@/lib/auth/client'
 import { getEnv, isFalsy } from '@/lib/core/config/env'
 import { isSsoEnabled } from '@/lib/core/config/env-flags'
 import { validateCallbackUrl } from '@/lib/core/security/input-validation'

apps/sim/app/(auth)/oauth/consent/consent-view.test.tsx

@@ -7,7 +7,7 @@ import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
 import { createRoot, type Root } from 'react-dom/client'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
-vi.mock('@/lib/auth/auth-client', () => authClientMock)
+vi.mock('@/lib/auth/client', () => authClientMock)
 
 import { OAuthConsentView } from '@/app/(auth)/oauth/consent/consent-view'
 import { oauthProviderKeys } from '@/hooks/queries/oauth-provider'

apps/sim/app/(auth)/signup/signup-form.tsx

@@ -7,7 +7,7 @@ import { useRouter, useSearchParams } from 'next/navigation'
 import { usePostHog } from 'posthog-js/react'
 import { trackFreebuffConversion } from '@/lib/analytics/freebuff'
 import { trackGoogleEvent } from '@/lib/analytics/google'
-import { client, useSession } from '@/lib/auth/auth-client'
+import { client, useSession } from '@/lib/auth/client'
 import { useTrackingConsent } from '@/lib/consent/tracking-consent'
 import { getEnv, isFalsy } from '@/lib/core/config/env'
 import { isSsoEnabled } from '@/lib/core/config/env-flags'

apps/sim/app/(auth)/verify/use-verification.test.tsx

@@ -6,7 +6,7 @@ import { nextNavigationMock } from '@sim/testing/mocks/next-navigation.mock'
 import { createRoot, type Root } from 'react-dom/client'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
-vi.mock('@/lib/auth/auth-client', () => authClientMock)
+vi.mock('@/lib/auth/client', () => authClientMock)
 vi.mock('next/navigation', () => nextNavigationMock)
 
 import { useVerification } from '@/app/(auth)/verify/use-verification'