Serialize account and organization truth into the copilot VFS

Workspace standing, membership, billing, org role, access-control
restrictions, published-block provenance, and fork topology were reachable
only through three parameterless tools (or not at all). They are ambient
read-only facts, so they belong in the VFS where they are greppable, cost no
tool round-trip, and every agent that can read gets them — the same move that
retired get_blocks_and_tools and list_user_workflows.

Adds account/{workspace,workspaces,members,billing}.json (always mounted) and
organization/{organization,access-control,custom-blocks,forks}.json (only when
the workspace is org-hosted). Every file projects an existing use case or util
after getOrMaterializeVFS's access assert — no new queries, no new
authorization. One relation per file, cross-referenced by id-and-name stub, so
overlapping facts cannot disagree. Volatile content (billing, access control,
forks) is lazy, so numbers are read-time fresh and unasked-for reads cost
nothing.

Projection follows the viewer: member emails are admin-only, fork detail
requires workspace admin on a forking-enabled org, and the whole organization/
namespace is absent for a personal workspace — which is itself the answer.

Retires get_account_billing, get_enterprise_context, and list_user_workspaces
along with their handlers; display titles stay for transcript replay.

Author: Sg312

apps/sim/lib/copilot/entitlements.ts

@@ -3,6 +3,7 @@ import { getErrorMessage } from '@sim/utils/errors'
 import { LRUCache } from 'lru-cache'
 import { hasWorkspaceSandboxAccess } from '@/lib/billing/core/subscription'
 import { isCustomBlocksEligible } from '@/lib/workflows/custom-blocks/operations'
+import { getWorkspaceWithOwner } from '@/lib/workspaces/permissions/utils'
 
 const logger = createLogger('CopilotEntitlements')
 
@@ -12,6 +13,7 @@ const logger = createLogger('CopilotEntitlements')
  */
 export const CUSTOM_BLOCKS_ENTITLEMENT = 'custom-blocks'
 export const SIM_SANDBOXES_ENTITLEMENT = 'sim-sandboxes'
+export const ORGANIZATION_CONTEXT_ENTITLEMENT = 'organization-context'
 
 /**
  * Workspace entitlements — plan/flag-gated org capabilities sent to the
@@ -36,6 +38,18 @@ const ENTITLEMENT_EVALUATORS: Record<
 > = {
   [CUSTOM_BLOCKS_ENTITLEMENT]: isCustomBlocksEligible,
   [SIM_SANDBOXES_ENTITLEMENT]: hasWorkspaceSandboxAccess,
+  [ORGANIZATION_CONTEXT_ENTITLEMENT]: isOrganizationContextAvailable,
+}
+
+/**
+ * True when this workspace belongs to an organization, which is exactly when
+ * the copilot's `organization/` VFS namespace has anything in it. Advertising
+ * it keeps a personal workspace's agents from ever hearing that org standing,
+ * access-control groups, or fork topology exist.
+ */
+async function isOrganizationContextAvailable(workspaceId: string): Promise<boolean> {
+  const workspace = await getWorkspaceWithOwner(workspaceId)
+  return Boolean(workspace?.organizationId)
 }
 
 const entitlementsCache = new LRUCache<string, Promise<string[]>>({

apps/sim/lib/copilot/generated/tool-catalog-v1.ts

@@ -55,12 +55,10 @@ export interface ToolCatalogEntry {
     | 'generate_audio'
     | 'generate_image'
     | 'generate_video'
-    | 'get_account_billing'
     | 'get_block_outputs'
     | 'get_block_upstream_references'
     | 'get_deployed_workflow_state'
     | 'get_deployment_status'
-    | 'get_enterprise_context'
     | 'get_workflow_data'
     | 'get_workflow_run_options'
     | 'glob'
@@ -69,7 +67,6 @@ export interface ToolCatalogEntry {
     | 'knowledge'
     | 'list_deployment_versions'
     | 'list_integration_tools'
-    | 'list_user_workspaces'
     | 'list_workspace_mcp_servers'
     | 'load_deployment'
     | 'load_integration_tool'
@@ -186,12 +183,10 @@ export interface ToolCatalogEntry {
     | 'generate_audio'
     | 'generate_image'
     | 'generate_video'
-    | 'get_account_billing'
     | 'get_block_outputs'
     | 'get_block_upstream_references'
     | 'get_deployed_workflow_state'
     | 'get_deployment_status'
-    | 'get_enterprise_context'
     | 'get_workflow_data'
     | 'get_workflow_run_options'
     | 'glob'
@@ -200,7 +195,6 @@ export interface ToolCatalogEntry {
     | 'knowledge'
     | 'list_deployment_versions'
     | 'list_integration_tools'
-    | 'list_user_workspaces'
     | 'list_workspace_mcp_servers'
     | 'load_deployment'
     | 'load_integration_tool'
@@ -3004,14 +2998,6 @@ export const GenerateVideo: ToolCatalogEntry = {
   capabilities: ['file_input', 'file_output', 'generated_media'],
 }
 
-export const GetAccountBilling: ToolCatalogEntry = {
-  id: 'get_account_billing',
-  name: 'get_account_billing',
-  route: 'sim',
-  mode: 'async',
-  parameters: { type: 'object', properties: {} },
-}
-
 export const GetBlockOutputs: ToolCatalogEntry = {
   id: 'get_block_outputs',
   name: 'get_block_outputs',
@@ -3089,14 +3075,6 @@ export const GetDeploymentStatus: ToolCatalogEntry = {
   },
 }
 
-export const GetEnterpriseContext: ToolCatalogEntry = {
-  id: 'get_enterprise_context',
-  name: 'get_enterprise_context',
-  route: 'sim',
-  mode: 'async',
-  parameters: { type: 'object', properties: {} },
-}
-
 export const GetWorkflowData: ToolCatalogEntry = {
   id: 'get_workflow_data',
   name: 'get_workflow_data',
@@ -3287,14 +3265,6 @@ export const ListIntegrationTools: ToolCatalogEntry = {
   },
 }
 
-export const ListUserWorkspaces: ToolCatalogEntry = {
-  id: 'list_user_workspaces',
-  name: 'list_user_workspaces',
-  route: 'sim',
-  mode: 'async',
-  parameters: { type: 'object', properties: {} },
-}
-
 export const ListWorkspaceMcpServers: ToolCatalogEntry = {
   id: 'list_workspace_mcp_servers',
   name: 'list_workspace_mcp_servers',
@@ -7245,12 +7215,10 @@ export const TOOL_CATALOG: Record<string, ToolCatalogEntry> = {
   [GenerateAudio.id]: GenerateAudio,
   [GenerateImage.id]: GenerateImage,
   [GenerateVideo.id]: GenerateVideo,
-  [GetAccountBilling.id]: GetAccountBilling,
   [GetBlockOutputs.id]: GetBlockOutputs,
   [GetBlockUpstreamReferences.id]: GetBlockUpstreamReferences,
   [GetDeployedWorkflowState.id]: GetDeployedWorkflowState,
   [GetDeploymentStatus.id]: GetDeploymentStatus,
-  [GetEnterpriseContext.id]: GetEnterpriseContext,
   [GetWorkflowData.id]: GetWorkflowData,
   [GetWorkflowRunOptions.id]: GetWorkflowRunOptions,
   [Glob.id]: Glob,
@@ -7259,7 +7227,6 @@ export const TOOL_CATALOG: Record<string, ToolCatalogEntry> = {
   [Knowledge.id]: Knowledge,
   [ListDeploymentVersions.id]: ListDeploymentVersions,
   [ListIntegrationTools.id]: ListIntegrationTools,
-  [ListUserWorkspaces.id]: ListUserWorkspaces,
   [ListWorkspaceMcpServers.id]: ListWorkspaceMcpServers,
   [LoadDeployment.id]: LoadDeployment,
   [LoadIntegrationTool.id]: LoadIntegrationTool,

apps/sim/lib/copilot/generated/tool-schemas-v1.ts

@@ -2959,13 +2959,6 @@ export const TOOL_RUNTIME_SCHEMAS: Record<string, ToolRuntimeSchemaEntry> = {
     },
     resultSchema: undefined,
   },
-  get_account_billing: {
-    parameters: {
-      type: 'object',
-      properties: {},
-    },
-    resultSchema: undefined,
-  },
   get_block_outputs: {
     parameters: {
       type: 'object',
@@ -3034,13 +3027,6 @@ export const TOOL_RUNTIME_SCHEMAS: Record<string, ToolRuntimeSchemaEntry> = {
     },
     resultSchema: undefined,
   },
-  get_enterprise_context: {
-    parameters: {
-      type: 'object',
-      properties: {},
-    },
-    resultSchema: undefined,
-  },
   get_workflow_data: {
     parameters: {
       type: 'object',
@@ -3209,13 +3195,6 @@ export const TOOL_RUNTIME_SCHEMAS: Record<string, ToolRuntimeSchemaEntry> = {
     },
     resultSchema: undefined,
   },
-  list_user_workspaces: {
-    parameters: {
-      type: 'object',
-      properties: {},
-    },
-    resultSchema: undefined,
-  },
   list_workspace_mcp_servers: {
     parameters: {
       type: 'object',

apps/sim/lib/copilot/tool-executor/register-handlers.ts

@@ -10,19 +10,16 @@ import {
   DeployAsMcp,
   DiffWorkflows,
   GenerateApiKey,
-  GetAccountBilling,
   GetBlockOutputs,
   GetBlockUpstreamReferences,
   GetDeployedWorkflowState,
   GetDeploymentStatus,
-  GetEnterpriseContext,
   GetWorkflowData,
   GetWorkflowRunOptions,
   Glob as GlobTool,
   Grep as GrepTool,
   ListDeploymentVersions,
   ListIntegrationTools,
-  ListUserWorkspaces,
   ListWorkspaceMcpServers,
   LoadDeployment,
   ManageCredential,
@@ -53,8 +50,6 @@ import {
   UpdateDeploymentVersion,
   UpdateWorkspaceMcpServer,
 } from '@/lib/copilot/generated/tool-catalog-v1'
-import { executeGetAccountBilling } from '@/lib/copilot/tools/handlers/account'
-import { executeGetEnterpriseContext } from '@/lib/copilot/tools/handlers/enterprise-context'
 import { createServerToolHandler } from '@/lib/copilot/tools/registry/server-tool-adapter'
 import { getRegisteredServerToolNames } from '@/lib/copilot/tools/server/router'
 import { executeDeployCustomBlock } from '../tools/handlers/deployment/custom-block'
@@ -114,7 +109,6 @@ import {
   executeGetDeployedWorkflowState,
   executeGetWorkflowData,
   executeGetWorkflowRunOptions,
-  executeListUserWorkspaces,
 } from '../tools/handlers/workflow/queries'
 import { registerHandlers } from './executor'
 import type { ToolHandler } from './types'
@@ -139,9 +133,6 @@ function h(fn: (params: any, context: any) => Promise<any>): ToolHandler {
 
 function buildHandlerMap(): Record<string, ToolHandler> {
   return {
-    [ListUserWorkspaces.id]: h((_p, c) => executeListUserWorkspaces(c)),
-    [GetAccountBilling.id]: h((_p, c) => executeGetAccountBilling(c)),
-    [GetEnterpriseContext.id]: h((_p, c) => executeGetEnterpriseContext(c)),
     [GetWorkflowData.id]: h(executeGetWorkflowData),
     [GetWorkflowRunOptions.id]: h(executeGetWorkflowRunOptions),
     [GetBlockOutputs.id]: h(executeGetBlockOutputs),