chore(config): retire unused env vars and fully-rolled-out feature flags (#8808)

* chore(config): retire unused env vars and fully-rolled-out feature flags

* chore(helm): bump chart version for removed TABLE_ROW_TTL value

Author: waleedlatif1

apps/docs/content/docs/platform/connected-accounts.mdx

@@ -11,9 +11,9 @@ Each organization has at most one pool. Creating it does not give any workspace
 
 ## Availability
 
-Connected accounts must be enabled for your organization. Sim Cloud also requires an active Enterprise plan. Organization owners and admins manage the pool, subject to the organization's permission settings. A workspace admin who is not an organization admin cannot change the pool or its workspace access.
+Sim Cloud requires an active Enterprise plan. Organization owners and admins manage the pool, subject to the organization's permission settings. A workspace admin who is not an organization admin cannot change the pool or its workspace access.
 
-For self-hosted deployments using environment-based feature flags, set `CREDENTIAL_GROUPS=true`. Availability is organization-scoped; personal workspaces cannot use an organization pool.
+For self-hosted deployments, set `CREDENTIAL_GROUPS=true`, or `ENTERPRISE_ENABLED=true` to enable the whole enterprise suite. Availability is organization-scoped; personal workspaces cannot use an organization pool.
 
 Manage the pool under **Settings → Credential Groups**. It remains available independently of Search. Search administrators use **Settings → Sources**, while members connect personal Search accounts under **Integrations** in the main sidebar. These surfaces can share grants without sharing their purpose or resource settings.
 

apps/docs/content/docs/platform/enterprise/self-hosted.mdx

@@ -56,6 +56,7 @@ Three features do not need a flag at all: **custom branding**, **session policie
 | Session policies — on by default | `SESSION_POLICIES_ENABLED` | `NEXT_PUBLIC_SESSION_POLICIES_ENABLED` |
 | Data retention deletion | `DATA_RETENTION_ENABLED` | `NEXT_PUBLIC_DATA_RETENTION_ENABLED` |
 | Data drains | `DATA_DRAINS_ENABLED` | `NEXT_PUBLIC_DATA_DRAINS_ENABLED` |
+| Credential Groups | `CREDENTIAL_GROUPS` | — |
 | Workspace forks | `FORKING_ENABLED` | `NEXT_PUBLIC_FORKING_ENABLED` |
 | Sim Mailer inbox — on by default | `INBOX_ENABLED` | `NEXT_PUBLIC_INBOX_ENABLED` |
 | Sandboxes | `SANDBOXES_ENABLED` | `NEXT_PUBLIC_SANDBOXES_ENABLED` |

apps/sim/.env.example

@@ -214,7 +214,6 @@ CRON_SECRET=your_cron_secret # Use `openssl rand -hex 32` to generate. Authentic
 # DATA_DRAINS_ENABLED= / NEXT_PUBLIC_DATA_DRAINS_ENABLED=         # Export streams
 # FORKING_ENABLED=                                                # Workspace forks
 # CREDENTIAL_GROUPS=                                              # Enterprise managed OAuth collections
-# TABLE_ROW_TTL=                                                  # Table TTL columns and expired-row cleanup
 # KNOWLEDGE_MEMBER_ACCESS=                                        # Per-member knowledge connectors and hybrid-by-default retrieval
 # ORGANIZATIONS_ENABLED= / NEXT_PUBLIC_ORGANIZATIONS_ENABLED=     # Organizations only
 

apps/sim/app/api/cron/cleanup-table-row-ttl/route.test.ts

@@ -1,19 +1,13 @@
 import { createMockRequest } from '@sim/testing'
 import { asyncJobsMock, asyncJobsMockFns } from '@sim/testing/mocks/async-jobs.mock'
 import { authInternalMock, authInternalMockFns } from '@sim/testing/mocks/auth-internal.mock'
-import {
-  tableTtlAvailabilityMock,
-  tableTtlAvailabilityMockFns,
-} from '@sim/testing/mocks/table-ttl-availability.mock'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
 vi.mock('@/lib/auth/internal', () => authInternalMock)
 vi.mock('@/lib/core/async-jobs', () => asyncJobsMock)
-vi.mock('@/lib/table/ttl-availability', () => tableTtlAvailabilityMock)
 
 import { GET } from '@/app/api/cron/cleanup-table-row-ttl/route'
 
-const { mockIsTableRowTtlEnabled } = tableTtlAvailabilityMockFns
 const { mockVerifyCronAuth } = authInternalMockFns
 
 const mockEnqueue = asyncJobsMockFns.mockJobQueue.enqueue
@@ -23,7 +17,6 @@ describe('table row TTL cleanup route', () => {
     vi.useFakeTimers()
     vi.setSystemTime(new Date('2026-08-22T17:01:00Z'))
     mockVerifyCronAuth.mockReturnValue(null)
-    mockIsTableRowTtlEnabled.mockResolvedValue(true)
     mockEnqueue.mockResolvedValue('job-ttl-1')
   })
 

apps/sim/app/api/cron/cleanup-table-row-ttl/route.ts

@@ -3,7 +3,6 @@ import { type NextRequest, NextResponse } from 'next/server'
 import { verifyCronAuth } from '@/lib/auth/internal'
 import { getJobQueue } from '@/lib/core/async-jobs'
 import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
-import { isTableRowTtlEnabled } from '@/lib/table/ttl-availability'
 
 export const dynamic = 'force-dynamic'
 
@@ -15,11 +14,6 @@ export const GET = withRouteHandler(async (request: NextRequest) => {
     const authError = verifyCronAuth(request, 'table row TTL cleanup')
     if (authError) return authError
 
-    if (!(await isTableRowTtlEnabled())) {
-      logger.info('Table row TTL cleanup skipped because the feature is disabled')
-      return NextResponse.json({ triggered: false, reason: 'feature-disabled' })
-    }
-
     const queue = await getJobQueue()
     const scheduleWindow = Math.floor(Date.now() / TTL_CLEANUP_INTERVAL_MS)
     const jobId = await queue.enqueue(

apps/sim/app/api/table/[tableId]/query/route.test.ts

@@ -1,6 +1,5 @@
 import { tableApiMock, tableApiMockFns } from '@sim/testing/mocks/table-api.mock'
 import {
-  MockTableV2FeatureDisabledError,
   tableApplicationRowsMock,
   tableApplicationRowsMockFns,
 } from '@sim/testing/mocks/table-application-rows.mock'
@@ -10,15 +9,7 @@ import { beforeEach, describe, expect, it, vi } from 'vitest'
 vi.mock('@/lib/table/api', () => tableApiMock)
 
 vi.mock('@/lib/table/api/row-route-policies', () => ({
-  internalTableV2QueryErrorPolicy: {
-    project: (error: unknown) =>
-      error instanceof MockTableV2FeatureDisabledError
-        ? {
-            status: 403,
-            body: { error: error.message, code: 'tables_v2_disabled' },
-          }
-        : null,
-  },
+  internalTableV2QueryErrorPolicy: { project: () => null },
 }))
 
 vi.mock('@/lib/table/application/rows', () => tableApplicationRowsMock)

apps/sim/app/api/table/[tableId]/query/route.ts

@@ -30,7 +30,6 @@ export const POST = defineInternalJsonRoute({
     includeTotal: !body.cursor,
     includeRunState: false,
     allowExpandedLimit: true,
-    requireV2Feature: true,
     includePersistedSecretProvenance: negotiateTableRowsProvenance(
       request,
       principal.kind === 'delegated'

apps/sim/app/api/table/utils.ts

@@ -19,39 +19,10 @@ import type { ColumnDefinition, Filter, TableDefinition, TablePredicate } from '
 import { buildFilterClause, getTableById, TableQueryValidationError } from '@/lib/table'
 import { USER_TABLE_ROWS_SQL_NAME } from '@/lib/table/constants'
 import { TableLockedError } from '@/lib/table/mutation-locks'
-import {
-  getTableQueryAvailability,
-  TABLE_QUERY_UNAVAILABLE_REASON,
-} from '@/lib/table/query-availability'
 import { isTablePredicate } from '@/lib/table/query-builder/converters'
 import { validateStoragePredicate } from '@/lib/table/query-builder/validate'
 import type { TableLockKind } from '@/lib/table/types'
 import { checkWorkspaceAccess } from '@/lib/workspaces/permissions/utils'
-import { getWorkspaceOrganizationId } from '@/lib/workspaces/utils'
-
-/**
- * Gate for the internal predicate-grammar table query route (`tables-v2-api`
- * flag). Runs AFTER authorization, so the caller has already proven read
- * access to the table — hiding the gate behind a bare 404 at that point
- * serves nobody and reads as data loss (live incident: the table_v2 block
- * hard-"Not found"-ing on every query while the copilot gateway, which
- * bypasses HTTP, found the rows). Authorized callers get an honest 403
- * naming the gate instead.
- */
-export async function tablesV2GateError(
-  userId: string,
-  workspaceId: string
-): Promise<NextResponse | null> {
-  const orgId = await getWorkspaceOrganizationId(workspaceId)
-  if ((await getTableQueryAvailability({ userId, orgId })).enabled) return null
-  return NextResponse.json(
-    {
-      error: TABLE_QUERY_UNAVAILABLE_REASON,
-      code: 'tables_v2_disabled',
-    },
-    { status: 403 }
-  )
-}
 
 /**
  * Maps a {@link TableLockedError} thrown by the service layer to a 423 response

apps/sim/app/api/v1/logs/projection.test.ts

@@ -67,7 +67,6 @@ const { mockGetWorkspaceBillingSettings } = workspacesUtilsMockFns
 workspacesUtilsMockFns.mockGetWorkspaceBilledAccountUserId.mockImplementation(
   async () => 'billed-user'
 )
-workspacesUtilsMockFns.mockGetWorkspaceOrganizationId.mockImplementation(async () => null)
 const { mockMaterializeExecutionDataForDisplay: mockMaterialize } = traceStoreMockFns
 
 const mockGetUserEntityPermissions = permissionsMockFns.mockGetUserEntityPermissions

apps/sim/app/api/v1/tables/[tableId]/route.test.ts

@@ -12,10 +12,7 @@ import { permissionsMock, permissionsMockFns } from '@sim/testing/mocks/permissi
 import { createMockRequest } from '@sim/testing/mocks/request.mock'
 import { tableMock, tableMockFns } from '@sim/testing/mocks/table.mock'
 import { v1MiddlewareMock, v1MiddlewareMockFns } from '@sim/testing/mocks/v1-middleware.mock'
-import {
-  workspacesUtilsMock,
-  workspacesUtilsMockFns,
-} from '@sim/testing/mocks/workspaces-utils.mock'
+import { workspacesUtilsMock } from '@sim/testing/mocks/workspaces-utils.mock'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 
 const { mockPerformDeleteTable } = vi.hoisted(() => ({
@@ -48,7 +45,6 @@ vi.mock('@/lib/table/orchestration', () => ({
 
 import { DELETE } from '@/app/api/v1/tables/[tableId]/route'
 
-workspacesUtilsMockFns.mockGetWorkspaceOrganizationId.mockResolvedValue(null)
 const { mockGetTableById } = tableMockFns
 
 const { mockCheckRateLimit, mockCheckWorkspaceScope, mockResolveWorkspaceRequestActor } =