.github/9

ISSUE_TEMPLATE/3

bug_report.md config.yml feature_request.md

workflows/3

ci.yml clean-clone.yml release.yml

CODEOWNERS dependabot.yml pull_request_template.md

apps/630

api/250

src/243

common/30

__tests__/3

authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts

filters/1

all-exceptions.filter.ts

guards/3

auth.guard.ts internal-service.guard.ts rate-limit.guard.ts

interceptors/2

actor-context.interceptor.ts bigint-serialization.interceptor.ts

middleware/2

idempotency.test.ts idempotency.ts

pipes/1

zod-validation.pipe.ts

actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts

config/1

env.ts

lib/11

__tests__/5

crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts

authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts

modules/197

ai/28

__tests__/4

ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts

generator/4

executor.ts generate.controller.ts generate.dto.ts generate.service.ts

ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts

api-keys/3

api-keys.controller.ts api-keys.module.ts api-keys.service.ts

audit/2

audit-log.controller.ts audit.module.ts

auth/4

auth.controller.ts auth.module.ts auth.service.ts dto.ts

automations/5

automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts

blocks/5

__tests__/1

batch-version-cas.test.ts

block.service.ts blocks.controller.ts blocks.module.ts dto.ts

comments/4

comments.controller.ts comments.module.ts comments.service.ts dto.ts

databases/9

__tests__/3

normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts

database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts

docs/2

docs.controller.ts docs.module.ts

files/10

__tests__/1

quota.test.ts

dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts

forms/18

debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts

health/3

health.controller.ts health.module.ts health.service.ts

integrations/3

integrations.controller.ts integrations.module.ts integrations.service.ts

internal/12

__tests__/2

flush-query-shape.test.ts internal.endpoints.test.ts

ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts

notifications/3

notifications.controller.ts notifications.module.ts notifications.service.ts

oauth/6

__tests__/1

oauth.scopes.test.ts

oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts

org/15

audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts

orgs/5

dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts

pages/4

dto.ts page.service.ts pages.controller.ts pages.module.ts

scim/15

__tests__/3

email-mapping.test.ts etag.test.ts filters.test.ts

etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts

search/4

__tests__/1

search.service.test.ts

search.controller.ts search.module.ts search.service.ts

sessions/3

sessions.controller.ts sessions.module.ts sessions.service.ts

share/3

share.controller.ts share.module.ts share.service.ts

sso/16

__tests__/4

enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts

enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts

teams/4

dto.ts teams.controller.ts teams.module.ts teams.service.ts

users/4

dto.ts users.controller.ts users.module.ts users.service.ts

webhooks/3

webhooks.controller.ts webhooks.module.ts webhooks.service.ts

workspaces/4

dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts

types/1

xmldom.d.ts

app.module.ts constants.ts main.ts

_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts

realtime/33

src/17

auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts

test/11

auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts

.env.example Dockerfile package.json README.md tsconfig.json

web/255

src/244

app/45

__tests__/1

theme-tokens.test.ts

(app)/26

w/25

[workspace]/25

ask/1

page.tsx

databases/1

[id]/1

page.tsx

favorites/1

page.tsx

files/1

page.tsx

notifications/1

page.tsx

page/4

[id]/4

[block]/1

page.tsx

share/1

page.tsx

layout.tsx page.tsx

search/1

page.tsx

settings/10

appearance/1

page.tsx

automations/3

[id]/1

page.tsx

new/1

page.tsx

page.tsx

billing/1

page.tsx

developers/1

page.tsx

members/1

page.tsx

permissions/1

page.tsx

teams/1

page.tsx

page.tsx

shared/1

page.tsx

templates/1

page.tsx

trash/1

page.tsx

layout.tsx page.tsx

layout.tsx

(auth)/4

login/1

page.tsx

register/1

page.tsx

reset-password/1

page.tsx

layout.tsx

api/2

metrics/1

route.ts

v1/1

health/1

route.ts

f/1

[slug]/1

page.tsx

health/1

ready/1

route.ts

org/2

[orgId]/2

admin/2

integrations/1

page.tsx

page.tsx

share/1

[id]/1

page.tsx

error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx

components/118

admin/10

org-admin/8

ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx

ScimCard.tsx SsoTabs.tsx

ai/6

ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx

automations/5

action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx

collaboration/6

CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx

comments/3

comment-panel.tsx comment-thread.tsx mention-input.tsx

database/27

__tests__/2

cell-editor.test.tsx cell-renderer.test.tsx

AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx

dialogs/7

__tests__/1

move-to-dialog.test.tsx

create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx

editor/19

__tests__/3

code-block-text.test.ts code-block.test.tsx expandable.test.tsx

block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx

files/4

FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx

form/4

form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx

layout/8

__tests__/1

page-tree-icon.test.tsx

command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx

mentions/3

__tests__/1

mention-model.test.ts

mention-model.ts MentionPopup.tsx

search/3

ask-ai-search.tsx results-list.tsx search-dialog.tsx

settings/10

api-keys/4

ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx

webhooks/5

CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx

settings-shell.tsx

ui/3

confirm-dialog.tsx form.tsx toaster.tsx

hooks/21

__tests__/4

realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx

realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts

lib/50

__tests__/21

ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts

files/7

__tests__/2

picker.test.ts upload.test.ts

api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts

ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts

stores/8

__tests__/1

block-patch-store.test.ts

block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts

instrumentation.ts middleware.ts

.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts

worker/92

src/87

__tests__/13

ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts

health/1

server.ts

lib/12

__tests__/1

clamav.test.ts

clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts

processors/56

automations/28

__tests__/3

condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts

executors/17

assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts

condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts

files/15

__tests__/4

errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts

steps/4

finalize.ts metadata.ts scan.ts thumbnails.ts

cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts

search-index/4

builders.ts grants.ts index.ts processor.ts

ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts

config.ts events.ts index.ts logger.ts queues.ts

.env.example Dockerfile package.json README.md tsconfig.json

docs/73

api/17

ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md

architecture/10

ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md

database/2

database-architecture.md redis-keys.md

development/8

admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md

product/4

functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md

requirements/1

requirements-matrix.md

security/5

audit-report.md files.md forms.md license-allowlist.md security-architecture.md

tasks/16

phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md

ui/9

ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md

support-matrix.md

infrastructure/71

caddy/1

Caddyfile

docker/6

init/1

01-extensions.sql

opensearch/1

init-indices.json

.env.docker docker-compose.yml opensearch-init.sh README.md

kubernetes/40

observability/20

alertmanager/1

alertmanager.yaml

grafana/8

dashboards/6

ai.json api-overview.json infra.json realtime.json search.json workers-queues.json

provisioning/2

dashboards/1

dashboards.yaml

datasources/1

datasource.yaml

prometheus/3

alerts.yaml recording-rules.yaml scrape.yaml

scripts/1

sync-sources.mjs

alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml

postgres/7

configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml

api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml

nginx/2

nginx.conf README.md

observability/14

alertmanager/1

alertmanager.yaml

grafana/8

dashboards/6

ai.json api-overview.json infra.json realtime.json search.json workers-queues.json

provisioning/2

dashboards/1

dashboards.yaml

datasources/1

datasource.yaml

prometheus/3

alerts.yaml recording-rules.yaml scrape.yaml

scripts/1

dashboard-completeness.mjs

README.md

terraform/8

compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf

packages/289

ai/24

src/20

providers/7

anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts

schemas/2

database.ts generate.ts

adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts

package.json README.md tsconfig.json vitest.config.ts

auth/11

src/7

index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts

package.json README.md tsconfig.json vitest.config.ts

collaboration/17

src/13

awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

config/7

src/4

eslint.base.js index.ts prettier.base.json tsconfig.base.json

package.json README.md tsconfig.json

database-client/5

src/2

index.test.ts index.ts

package.json README.md tsconfig.json

database-engine/33

src/29

filter/2

filter.test.ts index.ts

formula/8

evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts

query/6

group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts

relations/2

index.ts relations.test.ts

rollups/2

index.ts rollups.test.ts

values/5

dates.ts index.ts registry.ts types.ts values.test.ts

views/3

buttons.ts index.ts views.test.ts

index.ts

package.json README.md tsconfig.json vitest.config.ts

editor/25

src/21

marks/1

highlight.ts

nodes/2

equation.ts mention.ts

autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

observability/20

src/16

__tests__/8

db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts

index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts

package.json README.md tsconfig.json vitest.config.ts

permissions/11

src/7

index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts

package.json README.md tsconfig.json vitest.config.ts

search/22

src/18

chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

shared/61

src/57

dto/17

ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts

events/8

audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts

realtime/6

comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts

automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts

package.json README.md tsconfig.json vitest.config.ts

storage/16

src/12

client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

ui/37

src/33

components/19

avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx

color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts

package.json README.md tsconfig.json vitest.config.ts

prisma/16

migrations/13

20260927000000_init/1

migration.sql

20260928000000_search_documents_content_hash/1

migration.sql

20260929000000_workspace_usage_storage_bytes/1

migration.sql

20260930000000_form_submitted_notification_type/1

migration.sql

20261001000000_ai_phase12/1

migration.sql

20261002000000_webhooks_secret_encrypted_dlq/1

migration.sql

20261002111436_webhook_delivery_latency/1

migration.sql

20261002120000_org_admin_2fa_retention_unique/1

migration.sql

20261002215124_audit_export/1

migration.sql

20261003210000_perf_indexes_hot_paths/1

migration.sql

20261004004500_perf_indexes_hot_paths_2/1

migration.sql

migration_lock.toml README.md

schema.prisma seed.ts verify.ts

scripts/7

backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh

tests/169

e2e/63

.auth/1

user.json

fixtures/7

files/6

clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt

realtime.ts

mocks/2

oidc-issuer.ts saml-idp.ts

playwright-report/3

data/2

a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm

index.html

reports/1

files-security.json

specs/34

ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts

test-results-final-flow/3

final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2

test-failed-1.png trace.zip

.last-run.json

utils/4

api.ts dnd.ts search-lag.ts wait.ts

.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json

fixtures/1

files/1

make-sparse.ts

integration/60

ai-capability/2

ai-app.capability.test.ts gateway.capability.test.ts

drill/2

seed-drill.mjs verify-restore.mjs

fixtures/5

files/5

clip.mp4 clip.wav doc.pdf hero-1400.png note.txt

helpers/3

api.ts containers.ts seed.ts

realtime/11

control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts

ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts

performance/28

fixtures/1

search-100k.ts

helpers/2

seed-100k.mjs seed-1k-load.mjs

reports/7

api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json

api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs

security/16

helpers/1

app.ts

audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts

README.md

.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json

sidebar.tsxapps/web/src/components/layout/sidebar.tsxraw← layout19,385 B← Back to the app

1"use client";
2 
3import { useEffect, useMemo, useRef, useState } from "react";
4import Link from "next/link";
5import { usePathname, useParams, useRouter } from "next/navigation";
6import {
7  Activity,
8  Archive,
9  ArchiveRestore,
10  Bookmark,
11  CheckSquare,
12  ChevronDown,
13  File as FileIcon,
14  FilePlus2,
15  FolderPlus,
16  LayoutGrid,
17  LogOut,
18  Search,
19  Settings,
20  Star,
21  StarOff,
22  Trash2,
23  UserPlus,
24  X
25} from "lucide-react";
26import { useAuth } from "@/hooks/use-auth";
27import { useWorkspaces, useWorkspace } from "@/hooks/use-workspace";
28import { useCreatePage, useDuplicatePage, usePageTree } from "@/hooks/use-pages";
29import { pageApi } from "@/lib/api";
30import { toast, useUiStore } from "@/stores/ui-store";
31import { FactoryLogo } from "./factory-logo";
32import { PageTreeList } from "./page-tree-node";
33import { cn } from "@/lib/utils";
34 
35/**
36 * Workspace sidebar (PRODUCT-SPEC §27): switcher, primary nav, private page
37 * tree (recursive + lazy), shared section, user/settings footer.
38 */
39export function Sidebar() {
40  const { user } = useAuth();
41  const pathname = usePathname();
42  const params = useParams<{ workspace: string }>();
43  const workspaceSlug = params?.workspace ?? "default";
44  const { data: workspace } = useWorkspace(workspaceSlug);
45  const { data: allWorkspaces } = useWorkspaces();
46  const [switcherOpen, setSwitcherOpen] = useState(false);
47  const collapsed = useUiStore((s) => s.sidebarCollapsed);
48  // Mobile (<640px) — the sidebar is an OVERLAY drawer (docs/product/
49  // ux-requirements.md: single-column everything + the z-index tokens'
50  // "sidebar drawer (mobile) 90"), closed by default so the editor is
51  // full-width. Desktop keeps the in-flow column toggled by `collapsed`.
52  const mobileNavOpen = useUiStore((s) => s.mobileNavOpen);
53  const setMobileNav = useUiStore((s) => s.setMobileNav);
54  // Close the drawer on navigation (the destination page starts full-width,
55  // not covered by the drawer).
56  const prevPathRef = useRef(pathname);
57  useEffect(() => {
58    if (prevPathRef.current !== pathname) {
59      prevPathRef.current = pathname;
60      if (useUiStore.getState().mobileNavOpen) setMobileNav(false);
61    }
62  }, [pathname, setMobileNav]);
63 
64  // Private tree: top-level pages only; children lazy-load per node.
65  const tree = usePageTree(workspace?.id ?? "", null);
66  const createPage = useCreatePage(workspace?.id ?? "");
67  const duplicatePage = useDuplicatePage(workspace?.id ?? "");
68  const router = useRouter();
69 
70  // T-192: the sidebar tree is lazy + collapsed-by-default, so a page whose
71  // PARENT is collapsed is invisible — after "Add a sub-page" navigates into
72  // the new child, its row never renders (the nested E2E). On a page route,
73  // walk the active page's ancestor chain (page → parent → … → root) and
74  // auto-expand those nodes so the active page is always visible.
75  const activePageId = pathname.includes("/page/") ? pathname.split("/page/")[1]?.split("/")[0] ?? null : null;
76  const [autoExpandIds, setAutoExpandIds] = useState<Set<string>>(new Set());
77  useEffect(() => {
78    if (!activePageId) {
79      setAutoExpandIds(new Set());
80      return;
81    }
82    let cancelled = false;
83    const chain: string[] = [];
84    void (async () => {
85      let id: string | null = activePageId;
86      const seen = new Set<string>();
87      while (id && !seen.has(id)) {
88        seen.add(id);
89        chain.push(id);
90        try {
91          const p = await pageApi.get(id);
92          id = p.parentId ?? null;
93        } catch {
94          break; // 404 / forbidden — stop at the top of what we can see
95        }
96      }
97      if (!cancelled) setAutoExpandIds(new Set(chain));
98    })();
99    return () => {
100      cancelled = true;
101    };
102  }, [activePageId]);
103 
104  // Tree rows request page creation via a DOM event (keeps the recursive
105  // node component free of router/mutation coupling).
106  useEffect(() => {
107    if (!workspace?.id) return;
108    const onNewPage = (e: Event) => {
109      const { parentId, title } = (e as CustomEvent<{ parentId: string | null; title?: string }>).detail ?? {};
110      // `title` (optional) lets "New folder" pre-name the page; the page is
111      // opened for an immediate in-place rename. A folder is just a page —
112      // it becomes a folder the moment the first sub-page lands in it.
113      void createPage.mutateAsync({ parentId: parentId ?? null, title: title ?? "" }).then((page) => {
114        router.push(`/w/${workspaceSlug}/page/${page.id}`);
115      });
116    };
117    window.addEventListener("factory:new-page", onNewPage);
118    return () => window.removeEventListener("factory:new-page", onNewPage);
119  }, [workspace?.id, createPage, router, workspaceSlug]);
120 
121  // T-138: tree rows request a duplicate via a DOM event too (same
122  // decoupling as `factory:new-page`). The server defaults the copy's title
123  // to `<title> (copy)`; we land ON the copy (like a create) so the user
124  // sees the recursive result immediately.
125  useEffect(() => {
126    if (!workspace?.id) return;
127    const onPageAction = (e: Event) => {
128      const { action, pageId, parentId } = (
129        e as CustomEvent<{ action: string; pageId: string; parentId?: string | null }>
130      ).detail ?? {};
131      if (action !== "duplicate" || !pageId) return;
132      void duplicatePage
133        .mutateAsync({ id: pageId, parentId: parentId ?? undefined })
134        .then((page) => {
135          toast("success", "Page duplicated", page.title || "Untitled (copy)");
136          router.push(`/w/${workspaceSlug}/page/${page.id}`);
137        })
138        .catch((e: unknown) =>
139          toast("error", "Duplicate failed", e instanceof Error ? e.message : String(e))
140        );
141    };
142    window.addEventListener("factory:page-action", onPageAction);
143    return () => window.removeEventListener("factory:page-action", onPageAction);
144  }, [workspace?.id, duplicatePage, router, workspaceSlug]);
145 
146  const nav = useMemo(
147    () => [
148      { href: `/w/${workspaceSlug}`, label: "Home", icon: LayoutGrid, exact: true },
149      { href: `/w/${workspaceSlug}/inbox`, label: "Inbox", icon: CheckSquare },
150      { href: `/w/${workspaceSlug}/favorites`, label: "Favorites", icon: Bookmark },
151      { href: `/w/${workspaceSlug}/files`, label: "Files", icon: FileIcon },
152      { href: `/w/${workspaceSlug}/search`, label: "Search", icon: Search },
153      { href: `/w/${workspaceSlug}/activity`, label: "Activity", icon: Activity },
154      // `trash-section` (tests/README.md): the sidebar Trash node — the
155      // navigation target the E2E clicks (the trash LIST lives on the page).
156      { href: `/w/${workspaceSlug}/trash`, label: "Trash", icon: Trash2, testId: "trash-section" },
157      { href: `/w/${workspaceSlug}/templates`, label: "Templates", icon: FilePlus2 }
158    ],
159    [workspaceSlug]
160  );
161 
162  // Desktop (≥640px): the in-flow column follows `collapsed`. Mobile
163  // (<640px): the sidebar is an OVERLAY drawer (docs/product/
164  // ux-requirements.md — "single-column everything", z-index tokens'
165  // "sidebar drawer (mobile) 90"), closed by default so the editor is
166  // full-width single-column. Each breakpoint renders exactly one mode
167  // (the column is `hidden` below md:, the drawer is `md:hidden`).
168  if (collapsed && !mobileNavOpen) return null;
169 
170  const content = (
171    <>
172      {/* Mobile: close the drawer (the topbar hamburger re-opens it). */}
173      <button
174        type="button"
175        onClick={() => setMobileNav(false)}
176        className="absolute right-2 top-2 z-10 rounded-md p-1.5 text-foreground/60 hover:bg-accent hover:text-foreground md:hidden"
177        aria-label="Close sidebar"
178      >
179        <X className="size-4" aria-hidden />
180      </button>
181      {/* Workspace switcher */}
182      <div className="relative border-b border-border p-2">
183        <button
184          type="button"
185          onClick={() => setSwitcherOpen((v) => !v)}
186          className="flex w-full items-center gap-2 rounded-md px-2 py-1.5 text-sm font-medium hover:bg-accent"
187          aria-expanded={switcherOpen}
188          aria-haspopup="menu"
189        >
190          <FactoryLogo brand className="size-6 shrink-0 rounded" />
191          <span className="min-w-0 flex-1 truncate text-left">{workspace?.name ?? workspaceSlug}</span>
192          <ChevronDown className="size-4 shrink-0 text-muted-foreground" aria-hidden />
193        </button>
194 
195        {switcherOpen ? (
196          <div className="absolute left-2 right-2 z-40 mt-1 rounded-md border border-border bg-popover p-1 shadow-lg" role="menu">
197            {(allWorkspaces ?? []).map((ws) => (
198              <Link
199                key={ws.id}
200                href={`/w/${ws.slug || ws.id}`}
201                onClick={() => setSwitcherOpen(false)}
202                className={cn(
203                  "flex items-center gap-2 rounded px-2 py-1.5 text-sm hover:bg-accent",
204                  ws.id === workspace?.id && "bg-accent/60"
205                )}
206                role="menuitem"
207              >
208                <span className="size-5 rounded bg-muted" aria-hidden />
209                <span className="min-w-0 flex-1 truncate">{ws.name}</span>
210              </Link>
211            ))}
212            <Link
213              href={`/w/${workspaceSlug}/settings/members`}
214              onClick={() => setSwitcherOpen(false)}
215              className="mt-1 flex items-center gap-2 rounded border-t border-border px-2 py-1.5 text-sm text-muted-foreground hover:bg-accent hover:text-foreground"
216              role="menuitem"
217            >
218              <UserPlus className="size-4" aria-hidden />
219              Invite people
220            </Link>
221          </div>
222        ) : null}
223      </div>
224 
225      {/* Primary nav */}
226      <nav className="space-y-0.5 p-2" aria-label="Primary">
227        {nav.map((item) => {
228          const active = item.exact ? pathname === item.href : pathname.startsWith(item.href) && pathname !== `/w/${workspaceSlug}`;
229          return (
230            <Link
231              key={item.label}
232              href={item.href}
233              data-testid={item.testId}
234              className={cn(
235                "flex items-center gap-2.5 rounded-md px-2 py-1.5 text-sm text-foreground/80 hover:bg-accent hover:text-foreground",
236                active && "bg-accent font-medium text-foreground"
237              )}
238            >
239              <item.icon className="size-4 shrink-0" aria-hidden />
240              {item.label}
241            </Link>
242          );
243        })}
244        {/* T-158: the USER activity feed is cross-workspace, so it links to
245            the top-level /activity (outside the [workspace] segment). */}
246        <Link
247          href="/activity"
248          className={cn(
249            "flex items-center gap-2.5 rounded-md px-2 py-1.5 text-sm text-foreground/80 hover:bg-accent hover:text-foreground",
250            pathname.startsWith("/activity") && "bg-accent font-medium text-foreground"
251          )}
252        >
253          <Activity className="size-4 shrink-0" aria-hidden />
254          My activity
255        </Link>
256      </nav>
257 
258      {/* Private pages */}
259      <div className="min-h-0 flex-1 overflow-y-auto px-2 pb-2">
260        <div className="flex items-center justify-between px-2 py-1">
261          <span className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">Private</span>
262          <div className="flex items-center gap-0.5">
263            <button
264              type="button"
265              title="New folder"
266              aria-label="New folder"
267              onClick={() =>
268                window.dispatchEvent(
269                  new CustomEvent("factory:new-page", { detail: { parentId: null, title: "New folder" } })
270                )
271              }
272              className="rounded p-0.5 text-muted-foreground hover:bg-accent hover:text-foreground"
273            >
274              <FolderPlus className="size-3.5" aria-hidden />
275            </button>
276            <button
277              type="button"
278              title="New page"
279              aria-label="New page"
280              data-testid="sidebar-new-page"
281              onClick={() => window.dispatchEvent(new CustomEvent("factory:new-page", { detail: { parentId: null } }))}
282              className="rounded p-0.5 text-muted-foreground hover:bg-accent hover:text-foreground"
283            >
284              <FilePlus2 className="size-3.5" aria-hidden />
285            </button>
286          </div>
287        </div>
288        {tree.isLoading ? (
289          <p className="px-2 py-1 text-xs text-muted-foreground">Loading…</p>
290        ) : (
291          <PageTreeList
292            entries={tree.data ?? []}
293            depth={0}
294            workspaceSlug={workspaceSlug}
295            workspaceId={workspace?.id ?? ""}
296            autoExpand={autoExpandIds}
297          />
298        )}
299      </div>
300 
301      {/* T-139: bulk multi-select action bar. Visible while pages are selected
302          (in THIS workspace); opens the confirm dialog for a chosen action. */}
303      <BulkActionBar workspaceId={workspace?.id ?? ""} />
304 
305      {/* Shared with me */}
306      <div className="border-t border-border px-2 py-2">
307        <Link
308          href={`/w/${workspaceSlug}/shared`}
309          className="flex items-center gap-2.5 rounded-md px-2 py-1.5 text-sm text-foreground/80 hover:bg-accent hover:text-foreground"
310        >
311          <Bookmark className="size-4 text-muted-foreground" aria-hidden />
312          Shared with me
313        </Link>
314      </div>
315 
316      {/* Footer: settings + user */}
317      <div className="border-t border-border p-2">
318        <Link
319          href={`/w/${workspaceSlug}/settings`}
320          className="flex items-center gap-2.5 rounded-md px-2 py-1.5 text-sm text-foreground/80 hover:bg-accent hover:text-foreground"
321        >
322          <Settings className="size-4" aria-hidden />
323          Settings
324        </Link>
325        <UserCard
326          name={user?.name ?? ""}
327          email={user?.email ?? ""}
328          image={user?.image ?? null}
329        />
330      </div>
331    </>
332  );
333 
334  return (
335    <>
336      {/* Mobile drawer (overlay, z-90 per the ux z-index tokens): mounted
337          only while open — closed by default so the editor is full-width. */}
338      {mobileNavOpen ? (
339        <div className="fixed inset-0 z-[90] flex md:hidden" role="dialog" aria-label="Navigation">
340          <button
341            type="button"
342            aria-label="Close sidebar"
343            onClick={() => setMobileNav(false)}
344            className="min-w-0 flex-1 cursor-default bg-black/40"
345          />
346          <aside
347            className="relative flex h-full w-64 shrink-0 flex-col border-r border-border bg-background"
348            aria-label="Workspace sidebar"
349            data-testid="sidebar"
350          >
351            {content}
352          </aside>
353        </div>
354      ) : null}
355      {/* Desktop in-flow column (hidden below md: — the drawer is the only
356          mobile mode, and it is off-canvas). */}
357      {!collapsed ? (
358        <aside
359          className="relative hidden h-full w-64 shrink-0 flex-col border-r border-border bg-muted/30 md:flex"
360          aria-label="Workspace sidebar"
361          data-testid="sidebar"
362        >
363          {content}
364        </aside>
365      ) : null}
366    </>
367  );
368}
369 
370function UserCard({ name, email, image }: { name: string; email: string; image: string | null }) {
371  const router = useRouter();
372  const logout = async () => {
373    // Non-hook logout path (hook form lives in use-auth.ts).
374    const { authApi } = await import("@/lib/api");
375    const { authStore } = await import("@/lib/auth-store");
376    try {
377      await authApi.logout();
378    } catch {
379      /* best effort */
380    }
381    authStore.clear();
382    router.replace("/login");
383  };
384 
385  return (
386    <div data-testid="user-menu" className="mt-1 flex items-center gap-2 rounded-md px-2 py-1.5">
387      <span className="flex size-7 shrink-0 items-center justify-center overflow-hidden rounded-full bg-primary text-xs font-semibold text-primary-foreground" aria-hidden>
388        {image ? (
389          // eslint-disable-next-line @next/next/no-img-element
390          <img src={image} alt="" className="size-full object-cover" />
391        ) : name ? (
392          name.slice(0, 1).toUpperCase()
393        ) : (
394          "?"
395        )}
396      </span>
397      <span className="min-w-0 flex-1">
398        <span className="block truncate text-sm font-medium">{name || "You"}</span>
399        <span className="block truncate text-xs text-muted-foreground">{email}</span>
400      </span>
401      <button
402        type="button"
403        data-testid="user-menu-logout"
404        onClick={() => void logout()}
405        title="Log out"
406        aria-label="Log out"
407        className="rounded p-1 text-muted-foreground hover:bg-accent hover:text-foreground"
408      >
409        <LogOut className="size-4" aria-hidden />
410      </button>
411    </div>
412  );
413}
414 
415/**
416 * T-139 — the bulk multi-select action bar. Shown while pages are selected in
417 * the CURRENT workspace (the selection is workspace-scoped, so switching
418 * workspaces hides it). Each button opens the confirm dialog (workspace shell)
419 * for that action; destructive ones (trash) confirm, the rest confirm too —
420 * bulk ops are batch + audited, so the dialog always asks before firing.
421 */
422function BulkActionBar({ workspaceId }: { workspaceId: string }) {
423  const pageSelection = useUiStore((s) => s.pageSelection);
424  const setBulk = useUiStore((s) => s.setBulk);
425  const clearPageSelection = useUiStore((s) => s.clearPageSelection);
426  const active = workspaceId !== "" && pageSelection.workspaceId === workspaceId && pageSelection.ids.length > 0;
427 
428  if (!active) return null;
429  const n = pageSelection.ids.length;
430 
431  const act = (action: "trash" | "archive" | "unarchive" | "favorite" | "unfavorite") =>
432    setBulk(true, action);
433 
434  const btn = "rounded p-1 text-muted-foreground hover:bg-accent hover:text-foreground";
435 
436  return (
437    <div
438      className="sticky bottom-0 z-10 flex items-center gap-1 border-t border-border bg-background px-2 py-1.5"
439      data-testid="bulk-action-bar"
440    >
441      <span className="mr-auto text-xs font-medium text-foreground/80" data-testid="bulk-count">
442        {n} selected
443      </span>
444      <button type="button" title="Favorite" aria-label="Favorite selected" data-testid="bulk-favorite" onClick={() => act("favorite")} className={btn}>
445        <Star className="size-3.5" aria-hidden />
446      </button>
447      <button type="button" title="Unfavorite" aria-label="Unfavorite selected" data-testid="bulk-unfavorite" onClick={() => act("unfavorite")} className={btn}>
448        <StarOff className="size-3.5" aria-hidden />
449      </button>
450      <button type="button" title="Archive" aria-label="Archive selected" data-testid="bulk-archive" onClick={() => act("archive")} className={btn}>
451        <Archive className="size-3.5" aria-hidden />
452      </button>
453      <button type="button" title="Unarchive" aria-label="Unarchive selected" data-testid="bulk-unarchive" onClick={() => act("unarchive")} className={btn}>
454        <ArchiveRestore className="size-3.5" aria-hidden />
455      </button>
456      <button type="button" title="Move to trash" aria-label="Move selected to trash" data-testid="bulk-trash" onClick={() => act("trash")} className="rounded p-1 text-red-600 hover:bg-accent">
457        <Trash2 className="size-3.5" aria-hidden />
458      </button>
459      <button type="button" title="Clear selection" aria-label="Clear selection" onClick={clearPageSelection} className={btn}>
460        <X className="size-3.5" aria-hidden />
461      </button>
462    </div>
463  );
464}
465