fix(files): state the path resolver's concealment accurately; restore takes no path flag

Author: waleedlatif1

apps/sim/lib/workspace-files/application/file-context.ts

@@ -88,8 +88,8 @@ function requireWorkspaceFileContext<C extends ActiveWorkspaceFileContext>(
 
 /**
  * A path becomes an id first, so the canonical load and every authorization check run unchanged.
- * It runs before authorization, so a missing and an ambiguous path both answer exactly as the
- * concealed authorization failure does: the reply says nothing about another workspace's files.
+ * Like that load, it runs before authorization, so a missing and an ambiguous path both answer
+ * `not_found`, the answer the v2 surface also gives for a file the caller cannot reach.
  */
 async function resolveFileId(input: WorkspaceFileContextInput): Promise<string> {
   if (!input.acceptVfsPath || !isWorkspaceFileVfsPath(input.fileId)) return input.fileId
@@ -122,7 +122,7 @@ export async function resolveActiveWorkspaceFileContext(
 }
 
 export async function resolveWorkspaceFileLifecycleContext(
-  input: WorkspaceFileContextInput
+  input: Omit<WorkspaceFileContextInput, 'acceptVfsPath'>
 ): Promise<WorkspaceFileLifecycleContext> {
   return requireWorkspaceFileContext(
     await loadWorkspaceFileLifecycleContext(input.fileId),