improvement(naming): rename sandbox-tasks to sandboxes and drop folder-name stutter in execution files

Author: waleedlatif1

.agents/skills/add-managed-cli/SKILL.md

@@ -15,7 +15,7 @@ Read these live sources before editing; do not copy their current entries into t
 2. `apps/sim/lib/execution/remote-sandbox/cli-tools.server.ts` — server-only recipes and recipe helpers.
 3. `apps/sim/lib/execution/remote-sandbox/cli-tools.test.ts` — catalog and supply-chain invariants.
 4. `apps/sim/lib/execution/remote-sandbox/cli-tools-boundary.test.ts` — client/server import boundary.
-5. `apps/sim/lib/execution/remote-sandbox/sandbox-spec.ts` — content-addressed hash inputs.
+5. `apps/sim/lib/execution/remote-sandbox/spec.ts` — content-addressed hash inputs.
 
 Read `resolve.ts` and `e2b.ts` only when changing provisioning mechanics. A normal catalog addition should not require UI, API, database, resolver, or provider edits; those paths derive from the registries.
 
@@ -114,7 +114,7 @@ Never commit downloaded artifacts or credentials.
 bun run --cwd apps/sim test \
   lib/execution/remote-sandbox/cli-tools.test.ts \
   lib/execution/remote-sandbox/cli-tools-boundary.test.ts \
-  lib/execution/remote-sandbox/sandbox-spec.test.ts \
+  lib/execution/remote-sandbox/spec.test.ts \
   lib/execution/remote-sandbox/resolve.test.ts \
   'app/workspace/[workspaceId]/settings/components/sandboxes/utils.test.ts'
 ```

.claude/rules/sim-sandbox.md

@@ -4,7 +4,7 @@ paths:
   - "apps/sim/lib/execution/isolated-vm-worker.cjs"
   - "apps/sim/lib/execution/isolated-vm.ts"
   - "apps/sim/lib/execution/sandbox/**"
-  - "apps/sim/sandbox-tasks/**"
+  - "apps/sim/sandboxes/**"
 ---
 
 # Sim Sandbox — Worker Security Policy
@@ -40,7 +40,7 @@ about what must **never** live in that process.
    validation.
 
 4. **Nothing that runs in the isolate is trusted, even if we wrote it**. The
-   task `bootstrap` and `finalize` strings in `apps/sim/sandbox-tasks/` execute
+   task `bootstrap` and `finalize` strings in `apps/sim/sandboxes/` execute
    inside the isolate. They must treat `globalThis` as adversarial — no pulling
    values from it that might have been mutated by user code. The hardening
    script in `executeTask` undefines dangerous globals before user code runs.

.cursor/rules/sim-sandbox.mdc

@@ -1,6 +1,6 @@
 ---
 description: "Isolated-vm sandbox worker security policy. Hard rules for anything that lives in the worker child process that runs user code."
-globs: ["apps/sim/lib/execution/isolated-vm-worker.cjs","apps/sim/lib/execution/isolated-vm.ts","apps/sim/lib/execution/sandbox/**","apps/sim/sandbox-tasks/**"]
+globs: ["apps/sim/lib/execution/isolated-vm-worker.cjs","apps/sim/lib/execution/isolated-vm.ts","apps/sim/lib/execution/sandbox/**","apps/sim/sandboxes/**"]
 ---
 
 <!-- Generated from .claude/rules/sim-sandbox.md by `bun run skills:sync`. Edit the source, not this file. -->
@@ -38,7 +38,7 @@ about what must **never** live in that process.
    validation.
 
 4. **Nothing that runs in the isolate is trusted, even if we wrote it**. The
-   task `bootstrap` and `finalize` strings in `apps/sim/sandbox-tasks/` execute
+   task `bootstrap` and `finalize` strings in `apps/sim/sandboxes/` execute
    inside the isolate. They must treat `globalThis` as adversarial — no pulling
    values from it that might have been mutated by user code. The hardening
    script in `executeTask` undefines dangerous globals before user code runs.

apps/sim/app/api/workflows/[id]/execute/route.test.ts

@@ -52,7 +52,7 @@ import { afterAll, beforeEach, describe, expect, it, vi } from 'vitest'
 import type { AuthResult } from '@/lib/auth/hybrid'
 import { AsyncJobEnqueueError } from '@/lib/core/async-jobs/types'
 import { getRemainingExecutionMs } from '@/lib/core/execution-limits'
-import { INTERNAL_EXECUTION_DEADLINE_HEADER } from '@/lib/execution/execution-deadline-header'
+import { INTERNAL_EXECUTION_DEADLINE_HEADER } from '@/lib/execution/deadline-header'
 import {
   abortManualExecution,
   registerManualExecutionAborter,

apps/sim/app/api/workflows/[id]/execute/route.ts

@@ -50,6 +50,10 @@ import {
   SIM_VIA_HEADER,
   validateCallChain,
 } from '@/lib/execution/call-chain'
+import {
+  INTERNAL_EXECUTION_DEADLINE_HEADER,
+  parseExecutionDeadlineHeader,
+} from '@/lib/execution/deadline-header'
 import {
   createExecutionEventWriter,
   flushExecutionStreamReplayBuffer,
@@ -58,10 +62,6 @@ import {
   setExecutionActiveBlockStarts,
   type TerminalExecutionStreamStatus,
 } from '@/lib/execution/event-buffer'
-import {
-  INTERNAL_EXECUTION_DEADLINE_HEADER,
-  parseExecutionDeadlineHeader,
-} from '@/lib/execution/execution-deadline-header'
 import {
   registerManualExecutionAborter,
   unregisterManualExecutionAborter,

apps/sim/app/api/workflows/[id]/executions/[executionId]/stream/route.test.ts

@@ -19,7 +19,7 @@ vi.mock('@/lib/execution/event-buffer', () => ({
   readExecutionMetaState: mockReadExecutionMetaState,
 }))
 
-vi.mock('@/lib/execution/execution-signal', () => ({
+vi.mock('@/lib/execution/signal', () => ({
   getExecutionSignalHub: () => ({ subscribe: mockSubscribe }),
 }))
 

apps/sim/app/api/workflows/[id]/executions/[executionId]/stream/route.ts

@@ -14,7 +14,7 @@ import {
   readExecutionEventsState,
   readExecutionMetaState,
 } from '@/lib/execution/event-buffer'
-import { type ExecutionSignalReason, getExecutionSignalHub } from '@/lib/execution/execution-signal'
+import { type ExecutionSignalReason, getExecutionSignalHub } from '@/lib/execution/signal'
 import {
   type ExecutionEvent,
   formatSSEEvent,

apps/sim/blocks/blocks/function.ts

@@ -1,7 +1,7 @@
 import { CodeIcon } from '@/components/icons'
 import { getDeploymentShape } from '@/lib/core/config/deployment-shape'
 import { CodeLanguage, getLanguageDisplayName } from '@/lib/execution/languages'
-import { SANDBOX_OUTPUT_DIR } from '@/lib/execution/remote-sandbox/sandbox-paths'
+import { SANDBOX_OUTPUT_DIR } from '@/lib/execution/remote-sandbox/paths'
 import type { BlockConfig } from '@/blocks/types'
 
 export const FunctionBlock: BlockConfig = {

apps/sim/lib/api/contracts/hotspots.ts

@@ -9,7 +9,7 @@ import {
 import { defineRouteContract } from '@/lib/api/contracts/types'
 import { DEFAULT_CODE_LANGUAGE } from '@/lib/execution/languages'
 import { PRIVATE_SECRET_PROVENANCE_FIELD } from '@/lib/execution/private-tool-metadata'
-import { MAX_BLOCK_MOUNTED_FILES } from '@/lib/execution/remote-sandbox/sandbox-paths'
+import { MAX_BLOCK_MOUNTED_FILES } from '@/lib/execution/remote-sandbox/paths'
 import { MAX_FUNCTION_CODE_LENGTH } from '@/lib/function-execution/limits'
 import {
   MAX_PII_VALIDATION_DETECTED_ENTITIES,

apps/sim/lib/execution/cancellation.test.ts

@@ -21,7 +21,7 @@ const {
 
 const mockGetRedisClient = redisConfigMockFns.mockGetRedisClient
 
-vi.mock('@/lib/execution/execution-signal', () => ({
+vi.mock('@/lib/execution/signal', () => ({
   getExecutionSignalChannel: (executionId: string) => `execution:signal:${executionId}`,
   getExecutionSignalHub: () => ({ subscribe: mockSignalSubscribe }),
   LEGACY_EXECUTION_CANCEL_CHANNEL: 'execution:cancel',