feat(org): read each member's own mail and calendar for Home

Adds the session-only email and calendar reads behind Home's widgets, the
single-source removal from search history, and moves the member integrations
inventory and the account query keys where a server prefetch can reach them.

Author: waleedlatif1

apps/sim/app/api/organizations/[id]/home/calendar/route.ts

@@ -0,0 +1,25 @@
+import { getOrganizationHomeCalendarContract } from '@/lib/api/contracts/organization-home'
+import {
+  defineInternalJsonRoute,
+  internalRateLimits,
+  internalSessionAuth,
+} from '@/lib/api/server/routes'
+import {
+  organizationHomeOperations,
+  readOrganizationHomeCalendar,
+} from '@/lib/organizations/application/home-widgets'
+import { createCredentialGroupInternalErrorPolicy } from '@/app/api/workspaces/[id]/credential-groups/error-policy'
+
+export const GET = defineInternalJsonRoute({
+  contract: getOrganizationHomeCalendarContract,
+  auth: internalSessionAuth,
+  operation: organizationHomeOperations.readCalendar,
+  rateLimit: internalRateLimits.user({ bucketName: 'organization-home-calendar' }),
+  errorPolicy: createCredentialGroupInternalErrorPolicy(
+    'Failed to load calendar',
+    'Organization not found'
+  ),
+  mapInput: ({ params, query }) => ({ organizationId: params.id, ...query }),
+  useCase: readOrganizationHomeCalendar,
+  staticResponseHeaders: { 'Cache-Control': 'private, no-store' },
+})

apps/sim/app/api/organizations/[id]/home/email/route.ts

@@ -0,0 +1,25 @@
+import { getOrganizationHomeEmailContract } from '@/lib/api/contracts/organization-home'
+import {
+  defineInternalJsonRoute,
+  internalRateLimits,
+  internalSessionAuth,
+} from '@/lib/api/server/routes'
+import {
+  organizationHomeOperations,
+  readOrganizationHomeEmail,
+} from '@/lib/organizations/application/home-widgets'
+import { createCredentialGroupInternalErrorPolicy } from '@/app/api/workspaces/[id]/credential-groups/error-policy'
+
+export const GET = defineInternalJsonRoute({
+  contract: getOrganizationHomeEmailContract,
+  auth: internalSessionAuth,
+  operation: organizationHomeOperations.readEmail,
+  rateLimit: internalRateLimits.user({ bucketName: 'organization-home-email' }),
+  errorPolicy: createCredentialGroupInternalErrorPolicy(
+    'Failed to load email',
+    'Organization not found'
+  ),
+  mapInput: ({ params }) => ({ organizationId: params.id }),
+  useCase: readOrganizationHomeEmail,
+  staticResponseHeaders: { 'Cache-Control': 'private, no-store' },
+})

apps/sim/app/api/organizations/[id]/search/history/sources/route.ts

@@ -0,0 +1,23 @@
+import { removeSearchHistorySourceContract } from '@/lib/api/contracts/knowledge/search-history'
+import {
+  defineInternalJsonRoute,
+  internalOrchestrationErrorPolicy,
+  internalRateLimits,
+  internalSessionAuth,
+} from '@/lib/api/server/routes'
+import {
+  removeSearchHistorySource,
+  searchHistoryOperations,
+} from '@/lib/knowledge/application/search-history'
+
+export const DELETE = defineInternalJsonRoute({
+  contract: removeSearchHistorySourceContract,
+  auth: internalSessionAuth,
+  operation: searchHistoryOperations.removeSource,
+  rateLimit: internalRateLimits.user({ bucketName: 'search-history-write' }),
+  errorPolicy: internalOrchestrationErrorPolicy,
+  parseOptions: { maxBodyBytes: 24 * 1024 },
+  mapInput: ({ params, body }) => ({ organizationId: params.id, url: body.url }),
+  useCase: removeSearchHistorySource,
+  staticResponseHeaders: { 'Cache-Control': 'private, no-store' },
+})

apps/sim/app/o/[organizationId]/home/components/get-started/get-started.tsx

@@ -6,11 +6,8 @@ import { ArrowRight } from '@sim/emcn/icons'
 import { HomeSection } from '@/components/home/home-section'
 import { SettingsGuardedLink } from '@/components/settings/settings-guarded-link'
 import { OAUTH_SEARCH_READ_SCOPE, oauthScopeSatisfies } from '@/lib/auth/oauth-provider'
+import { hasSearchIntegrationReady } from '@/lib/credential-groups/member-integrations'
 import { organizationRoutes } from '@/lib/navigation/paths'
-import {
-  liveSearchProviderForCredential,
-  supportsLiveSearchMode,
-} from '@/lib/sim-search/live/provider-catalog'
 import { useOrganizationContext } from '@/app/o/[organizationId]/providers/organization-provider'
 import { useAuthorizedApps } from '@/hooks/queries/oauth-provider'
 import { useOrganizationAccounts } from '@/hooks/queries/organization-accounts'
@@ -94,63 +91,14 @@ export function GetStarted() {
     authorizedApps?.pages.some((page) =>
       page.apps.some((app) => oauthScopeSatisfies(app.scopes, OAUTH_SEARCH_READ_SCOPE))
     ) ?? false
-  const approvedProviders = new Set(
-    integrations
-      ?.filter((integration) => integration.approved && integration.available !== false)
-      .map((integration) => integration.connectorType)
-  )
-  const readyOptions = new Set(
-    accounts?.credentialGroup?.options
-      .filter((option) => {
-        const provider = liveSearchProviderForCredential(option.provider)
-        return (
-          option.status === 'active' &&
-          option.configurationStatus === 'ready' &&
-          provider &&
-          supportsLiveSearchMode(provider, 'member') &&
-          approvedProviders.has(provider)
-        )
-      })
-      .map((option) => option.id)
-  )
-  const readyMcpServers = new Set(
-    accounts?.credentialGroup?.mcpServers
-      .filter((server) => {
-        const provider = liveSearchProviderForCredential(`mcp:${server.managedConnectorId}`)
-        return (
-          server.enabled &&
-          provider &&
-          approvedProviders.has(provider) &&
-          accounts.availableMcpConnectors.some((id) => id === server.managedConnectorId)
-        )
-      })
-      .map((server) => server.id)
-  )
-  const hasSearchConnection =
-    accounts?.credentialGroup?.status === 'active' &&
-    (accounts.viewerAccounts?.some(
-      (account) => account.status === 'active' && readyOptions.has(account.optionId)
-    ) ||
-      accounts.viewerMcpAccounts?.some(
-        (account) => account.status === 'active' && readyMcpServers.has(account.mcpServerId)
-      ))
-
   const hrefs: Record<StepId, string> = {
     'connect-integration': viewer.isAdmin
       ? routes.settingsSection('integrations')
       : routes.integrations,
     'connect-sim-search': routes.settingsSection('search-mcp'),
   }
   const completed: Record<StepId, boolean> = {
-    'connect-integration': Boolean(
-      hasSearchConnection ||
-        integrations?.some(
-          (integration) =>
-            integration.approved &&
-            integration.available !== false &&
-            integration.configuredServiceSource
-        )
-    ),
+    'connect-integration': hasSearchIntegrationReady(accounts, integrations),
     'connect-sim-search': hasSearchAuthorization,
   }
   const steps = STEPS.filter((step) =>

apps/sim/app/o/[organizationId]/integrations/assistant-account-integrations.tsx

@@ -4,12 +4,12 @@ import { ChipSelect, toast } from '@sim/emcn'
 import type { SearchIntegrationStatus } from '@/lib/api/contracts/knowledge/search-integrations'
 import type { OrganizationAccountsSettings } from '@/lib/api/contracts/organization-accounts'
 import { assistantSearchSourceForProvider } from '@/lib/assistant-actions/providers'
+import { assistantAccountOptions } from '@/lib/credential-groups/member-integrations'
 import {
   getCredentialGroupProviderId,
   getCredentialGroupProviderService,
 } from '@/lib/credential-groups/providers'
 import { AccountActionsMenu } from '@/app/o/[organizationId]/integrations/account-actions-menu'
-import { assistantAccountOptions } from '@/app/o/[organizationId]/integrations/utils'
 import { IntegrationTile } from '@/app/workspace/[workspaceId]/integrations/components/integrations-showcase'
 import { SettingsResourceRow } from '@/app/workspace/[workspaceId]/settings/components/settings-resource-row'
 import { SettingsSection } from '@/app/workspace/[workspaceId]/settings/components/settings-section/settings-section'

apps/sim/app/o/[organizationId]/integrations/integration-detail.tsx

@@ -2,9 +2,9 @@
 
 import type { ReactNode } from 'react'
 import { toast } from '@sim/emcn'
+import type { MemberIntegration } from '@/lib/credential-groups/member-integrations'
 import { AccountConnectionActions } from '@/app/o/[organizationId]/integrations/account-connection-actions'
 import { AccountToolPermissionsContent } from '@/app/o/[organizationId]/integrations/accounts/[credentialId]/tool-permissions'
-import type { MemberIntegration } from '@/app/o/[organizationId]/integrations/utils'
 import {
   CredentialDetailHeading,
   CredentialDetailLayout,

apps/sim/app/o/[organizationId]/integrations/live-member-integrations.tsx

@@ -4,17 +4,15 @@ import type { ReactNode } from 'react'
 import { ChipLink } from '@sim/emcn'
 import { ArrowLeft } from '@sim/emcn/icons'
 import { useQueryStates } from 'nuqs'
+import { memberIntegrationEntries } from '@/lib/credential-groups/member-integrations'
 import { organizationRoutes } from '@/lib/navigation/paths'
 import { OrganizationPage } from '@/app/o/[organizationId]/components/organization-page'
 import { IntegrationDetail } from '@/app/o/[organizationId]/integrations/integration-detail'
 import {
   integrationViewParsers,
   serializeIntegrationView,
 } from '@/app/o/[organizationId]/integrations/search-params'
-import {
-  memberIntegrationEntries,
-  memberIntegrationStatus,
-} from '@/app/o/[organizationId]/integrations/utils'
+import { memberIntegrationStatus } from '@/app/o/[organizationId]/integrations/utils'
 import {
   GenericSecretSourceIcon,
   GenericSecretSourceRow,