Bind media and imports to originating project

Author: Sprite

packages/websocket/src/http-api.ts

@@ -638,6 +638,7 @@ export async function handleWorkflowRun(
     // cold-start bootstrap failure must not turn that into a 500.
     environment: () => getWorkflowRuntimeEnvironment(options),
     params: body?.params ?? {},
+    projectId: body?.project_id ?? null,
     background: body?.background ?? false,
     interactive: body?.interactive === true,
     // The server's own import site, so a test that mocks it still governs.
@@ -1179,13 +1180,19 @@ export async function handleWorkflowImportBundle(
     return errorResponse(405, "Method not allowed");
   }
   const userId = getUserId(request, options.userIdHeader ?? "x-user-id");
+  let projectId =
+    new URL(request.url).searchParams.get("project_id") ?? "default";
 
   let zipBytes: Uint8Array | null = null;
   const contentType = request.headers.get("content-type") ?? "";
   if (contentType.toLowerCase().includes("multipart/form-data")) {
     try {
       const fd = await request.formData();
       const file = fd.get("file") as File | null;
+      const formProjectId = fd.get("project_id");
+      if (typeof formProjectId === "string" && formProjectId) {
+        projectId = formProjectId;
+      }
       if (file) {
         zipBytes = new Uint8Array(await file.arrayBuffer());
       }
@@ -1201,6 +1208,13 @@ export async function handleWorkflowImportBundle(
   if (!zipBytes) {
     return errorResponse(400, "A .nodetool bundle file is required");
   }
+  if (projectId !== "default") {
+    try {
+      await Project.requireOwned(userId, projectId);
+    } catch {
+      return errorResponse(400, "Project not found");
+    }
+  }
 
   let result: Awaited<ReturnType<typeof importWorkflowBundle>>;
   try {
@@ -1211,6 +1225,7 @@ export async function handleWorkflowImportBundle(
           name: fileName,
           content_type: assetType,
           parent_id: userId,
+          project_id: projectId,
           size: bytes.byteLength
         })) as Asset;
         const storedName = getAssetFileName(asset.id, asset.content_type);
@@ -1623,6 +1638,7 @@ export async function handleExtractAudio(
     content_type: "audio/wav",
     parent_id: source.id,
     workflow_id: source.workflow_id ?? null,
+    project_id: source.project_id,
     node_id: null,
     job_id: null,
     metadata: null,

packages/websocket/src/http-body-schemas.ts

@@ -82,7 +82,8 @@ export const workflowRunBodySchema = z.object({
   interactive: unchecked<boolean>(),
   max_decisions: lenientNumber(),
   max_retries_per_node: lenientNumber(),
-  decision_timeout_ms: lenientNumber()
+  decision_timeout_ms: lenientNumber(),
+  project_id: lenientString()
 });
 
 /** `POST /api/debug/sessions/:id/verdict` */

packages/websocket/src/session/chat-turn.ts

@@ -602,6 +602,8 @@ export class ChatTurnHandler {
         const asset = new Asset({
           user_id: userId,
           workflow_id: workflowId ?? null,
+          project_id:
+            (await Project.findByThread(userId, threadId))?.id ?? "default",
           name: `image_${Date.now()}`,
           content_type: mimeType,
           // Home — see the chat media generation path.
@@ -2731,6 +2733,7 @@ export class ChatTurnHandler {
     const threadId = isString(data.thread_id) ? data.thread_id : "";
     const workflowId = isString(data.workflow_id) ? data.workflow_id : null;
     const userId = this.session.requireUserId();
+    const projectId = (await Project.findByThread(userId, threadId))?.id ?? null;
     const mode = String(mediaGeneration.mode ?? "");
     // The media composer's own selection first; a client without a separate
     // media picker (mobile) sends only the message-level one. The built-in
@@ -2825,6 +2828,7 @@ export class ChatTurnHandler {
       origin: { surface: "chat", thread_id: threadId || null },
       threadId,
       workflowId: workflowId ?? null,
+      projectId,
       assetNamePrefix: mode,
       signal
     });

packages/websocket/src/session/commands.ts

@@ -827,8 +827,14 @@ export class CommandRouter {
       const audioFormat = isString(data.audio_format)
         ? (data.audio_format as string)
         : undefined;
-      const capability = data.capability === "reference_to_video" ? "reference_to_video" : undefined;
-      const referenceImages = Array.isArray(data.reference_images) ? data.reference_images : undefined;
+      const capability =
+        data.capability === "reference_to_video"
+          ? "reference_to_video"
+          : undefined;
+      const referenceImages = Array.isArray(data.reference_images)
+        ? data.reference_images
+        : undefined;
+      const projectId = isString(data.project_id) ? data.project_id : undefined;
       return this.runRpc(command, requestId, () =>
         inference.runDirectMediaGeneration({
           mode,
@@ -851,6 +857,7 @@ export class CommandRouter {
           audioFormat,
           capability,
           referenceImages,
+          projectId,
           requestId
         })
       );

packages/websocket/src/session/inference.ts

@@ -2,7 +2,7 @@ import { randomUUID } from "node:crypto";
 
 import { createLogger } from "@nodetool-ai/config";
 import { getModelUnitPrice } from "@nodetool-ai/model-pricing";
-import { Asset, Prediction } from "@nodetool-ai/models";
+import { Asset, Prediction, Project } from "@nodetool-ai/models";
 import { extractPricingParams } from "@nodetool-ai/node-sdk/pricing-params";
 import { resolveNodetoolDelegate } from "@nodetool-ai/protocol";
 import {
@@ -75,6 +75,8 @@ export interface DirectMediaGenerationRequest {
   requestId?: string;
   capability?: "reference_to_video";
   referenceImages?: unknown[];
+  /** Project captured when the request was accepted. */
+  projectId?: string | null;
 }
 
 /**
@@ -507,6 +509,9 @@ export class DirectInferenceHandler {
       throw new Error("prompt is required");
     }
     const userId = this.session.requireUserId();
+    if (req.projectId && req.projectId !== "default") {
+      await Project.requireOwned(userId, req.projectId);
+    }
     const provider = await this.session.resolveProvider(req.provider, userId);
     if (req.provider !== "nodetool") {
       // BYOK: the user's own keys, never metered.
@@ -608,6 +613,7 @@ export class DirectInferenceHandler {
       provider,
       origin: { surface: "rpc", request_id: req.requestId ?? null },
       workflowId: null,
+      projectId: req.projectId ?? null,
       assetNamePrefix: req.mode,
       // The row names the RPC mode the way it always did.
       nodeType: () => `direct.${req.mode}`,

packages/websocket/src/session/media-generation.ts

@@ -40,6 +40,8 @@ export interface GenerationRunOptions {
   threadId?: string | null;
   /** Stamped on assets stored through {@link GenerationRun.storeAsset}. */
   workflowId?: string | null;
+  /** Project captured when this generation was accepted. */
+  projectId?: string | null;
   /** Prefixes a stored asset's name, e.g. `image_1730000000000`. */
   assetNamePrefix: string;
   signal?: AbortSignal;
@@ -92,6 +94,7 @@ export function createGenerationRun(
     origin,
     threadId = null,
     workflowId = null,
+    projectId = null,
     assetNamePrefix,
     signal,
     nodeType,
@@ -102,7 +105,8 @@ export function createGenerationRun(
   const context = new GenerationContext({
     jobId: randomUUID(),
     userId,
-    threadId: threadId || null
+    threadId: threadId || null,
+    projectId
   });
   context.registerProvider(providerId, provider);
   context.setModelInterfaces({ createAsset: createAssetModelInterface });
@@ -144,6 +148,7 @@ export function createGenerationRun(
       const asset = new Asset({
         user_id: userId,
         workflow_id: workflowId,
+        project_id: projectId ?? "default",
         name: `${assetNamePrefix}_${Date.now()}`,
         content_type: contentType,
         // Home, the same folder an upload lands in. A null parent is