feat(search): add central Google Workspace indexing

[waleedlatif1]

Summary

• Add central Google Workspace indexing for Drive, Gmail, and Calendar with read-only per-user delegation, resumable directory traversal, and private mailbox/calendar document identities. Keep personal OAuth connections available.
• Crawl shared drives explicitly and preserve permissions verified within the current crawl when another reader cannot enumerate them. Bind deferred hydration to the verified listing identity and retain explicit permission revocations.
• Open provider setup directly, use consistent service-account fields and Search defaults, stabilize selectors and pagination, and simplify Slack citation labels and tooltip wrapping.
• Use the same Manage destination across Google providers, label each connection method, and keep credential labels and source names consistent. Update the Google guides and Drive screenshot; remove obsolete Gmail/Calendar setup images.

Type of Change

• New feature
• Bug fix
• Documentation

Testing

• 1,484 tests passed across 51 suites, including real PostgreSQL permission tests and the latest staging embedding/admission regressions.
• Final UI consistency pass: 164 focused tests passed. Full lint, app/docs TypeScript, 46 repository audits, block-registry and docs-manifest checks passed. Documentation production build passed before the final prose-only changes.
• Live Drive content, shared-drive traversal, persisted permissions, and an unauthorized-reader check passed.
• Live Gmail/Calendar delegation and pagination passed for two managed identities. Both sources were created through the normal UI and completed empty filtered syncs.
• Positive live Gmail/Calendar content and signed-in Search/Assistant/MCP validation remain pending fresh fixtures and test-account access.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Sep 10, 2026 7:47am UTC

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; no actionable new correctness, security, or repository-rule violations were identified in the changes since the previous review.

Summary

• Adds delegated, resumable company crawls for Google Workspace users, mailboxes, calendars, My Drive content, and shared drives.
• Extends permission reconciliation, listing checkpoints, credential handling, source identity, selectors, and sync persistence.
• Aligns organization source-management navigation and labels across Google providers.
• Updates tests and documentation for service-account setup, user selection, permissions, and troubleshooting.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Organization admin configures Google source] --> B[Service account with domain-wide delegation]
  B --> C[Directory administrator enumerates active users]
  C --> D{Provider}
  D -->|Drive| E[Crawl each user's files and shared drives]
  D -->|Gmail| F[Crawl each user's private mailbox]
  D -->|Calendar| G[Crawl each user's calendar view]
  E --> H[Resume listing and reconcile permissions]
  F --> I[Resume mailbox listing and reconcile threads]
  G --> J[Resume event listing and reconcile events]
  H --> K[Index provider documents]
  I --> K
  J --> K
  K --> L[Search authorization uses verified user identity]

Loading

_{Reviews (2) · Last reviewed commit: "fix(search): align Google source managem..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.