.github/9
ISSUE_TEMPLATE/3bug_report.md config.yml feature_request.md
workflows/3ci.yml clean-clone.yml release.yml
CODEOWNERS dependabot.yml pull_request_template.md
apps/630
api/250
src/243
common/30
__tests__/3authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts
filters/1all-exceptions.filter.ts
guards/3auth.guard.ts internal-service.guard.ts rate-limit.guard.ts
interceptors/2actor-context.interceptor.ts bigint-serialization.interceptor.ts
middleware/2idempotency.test.ts idempotency.ts
pipes/1zod-validation.pipe.ts
actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts
config/1env.ts
lib/11
__tests__/5crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts
authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts
modules/197
ai/28
__tests__/4ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts
generator/4executor.ts generate.controller.ts generate.dto.ts generate.service.ts
ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts
api-keys/3api-keys.controller.ts api-keys.module.ts api-keys.service.ts
audit/2audit-log.controller.ts audit.module.ts
auth/4auth.controller.ts auth.module.ts auth.service.ts dto.ts
automations/5automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts
blocks/5
__tests__/1batch-version-cas.test.ts
block.service.ts blocks.controller.ts blocks.module.ts dto.ts
comments/4comments.controller.ts comments.module.ts comments.service.ts dto.ts
databases/9
__tests__/3normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts
database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts
docs/2docs.controller.ts docs.module.ts
files/10
__tests__/1quota.test.ts
dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts
forms/18debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts
health/3health.controller.ts health.module.ts health.service.ts
integrations/3integrations.controller.ts integrations.module.ts integrations.service.ts
internal/12
__tests__/2flush-query-shape.test.ts internal.endpoints.test.ts
ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts
notifications/3notifications.controller.ts notifications.module.ts notifications.service.ts
oauth/6
__tests__/1oauth.scopes.test.ts
oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts
org/15audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts
orgs/5dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts
pages/4dto.ts page.service.ts pages.controller.ts pages.module.ts
scim/15
__tests__/3email-mapping.test.ts etag.test.ts filters.test.ts
etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts
search/4
__tests__/1search.service.test.ts
search.controller.ts search.module.ts search.service.ts
sessions/3sessions.controller.ts sessions.module.ts sessions.service.ts
share/3share.controller.ts share.module.ts share.service.ts
sso/16
__tests__/4enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts
enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts
teams/4dto.ts teams.controller.ts teams.module.ts teams.service.ts
users/4dto.ts users.controller.ts users.module.ts users.service.ts
webhooks/3webhooks.controller.ts webhooks.module.ts webhooks.service.ts
workspaces/4dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts
types/1xmldom.d.ts
app.module.ts constants.ts main.ts
_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts
realtime/33
src/17auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts
test/11auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts
.env.example Dockerfile package.json README.md tsconfig.json
web/255
src/244
app/45
__tests__/1theme-tokens.test.ts
(app)/26
w/25
[workspace]/25
ask/1page.tsx
databases/1
[id]/1page.tsx
favorites/1page.tsx
files/1page.tsx
notifications/1page.tsx
page/4
[id]/4
[block]/1page.tsx
share/1page.tsx
layout.tsx page.tsx
search/1page.tsx
settings/10
appearance/1page.tsx
automations/3
[id]/1page.tsx
new/1page.tsx
page.tsx
billing/1page.tsx
developers/1page.tsx
members/1page.tsx
permissions/1page.tsx
teams/1page.tsx
page.tsx
shared/1page.tsx
templates/1page.tsx
trash/1page.tsx
layout.tsx page.tsx
layout.tsx
(auth)/4
login/1page.tsx
register/1page.tsx
reset-password/1page.tsx
layout.tsx
api/2
metrics/1route.ts
v1/1
health/1route.ts
f/1
[slug]/1page.tsx
health/1
ready/1route.ts
org/2
[orgId]/2
admin/2
integrations/1page.tsx
page.tsx
share/1
[id]/1page.tsx
error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx
components/118
admin/10
org-admin/8ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx
ScimCard.tsx SsoTabs.tsx
ai/6ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx
automations/5action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx
collaboration/6CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx
comments/3comment-panel.tsx comment-thread.tsx mention-input.tsx
database/27
__tests__/2cell-editor.test.tsx cell-renderer.test.tsx
AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx
dialogs/7
__tests__/1move-to-dialog.test.tsx
create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx
editor/19
__tests__/3code-block-text.test.ts code-block.test.tsx expandable.test.tsx
block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx
files/4FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx
form/4form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx
layout/8
__tests__/1page-tree-icon.test.tsx
command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx
mentions/3
__tests__/1mention-model.test.ts
mention-model.ts MentionPopup.tsx
search/3ask-ai-search.tsx results-list.tsx search-dialog.tsx
settings/10
api-keys/4ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx
webhooks/5CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx
settings-shell.tsx
ui/3confirm-dialog.tsx form.tsx toaster.tsx
hooks/21
__tests__/4realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx
realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts
lib/50
__tests__/21ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts
files/7
__tests__/2picker.test.ts upload.test.ts
api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts
ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts
stores/8
__tests__/1block-patch-store.test.ts
block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts
instrumentation.ts middleware.ts
.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts
worker/92
src/87
__tests__/13ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts
health/1server.ts
lib/12
__tests__/1clamav.test.ts
clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts
processors/56
automations/28
__tests__/3condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts
executors/17assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts
condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts
files/15
__tests__/4errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts
steps/4finalize.ts metadata.ts scan.ts thumbnails.ts
cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts
search-index/4builders.ts grants.ts index.ts processor.ts
ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts
config.ts events.ts index.ts logger.ts queues.ts
.env.example Dockerfile package.json README.md tsconfig.json
docs/73
api/17ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md
architecture/10ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md
database/2database-architecture.md redis-keys.md
development/8admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md
product/4functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md
requirements/1requirements-matrix.md
security/5audit-report.md files.md forms.md license-allowlist.md security-architecture.md
tasks/16phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md
ui/9ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md
support-matrix.md
infrastructure/71
caddy/1Caddyfile
docker/6
init/101-extensions.sql
opensearch/1init-indices.json
.env.docker docker-compose.yml opensearch-init.sh README.md
kubernetes/40
observability/20
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1sync-sources.mjs
alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml
postgres/7configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml
api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml
nginx/2nginx.conf README.md
observability/14
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1dashboard-completeness.mjs
README.md
terraform/8compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf
packages/289
ai/24
src/20
providers/7anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts
schemas/2database.ts generate.ts
adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts
package.json README.md tsconfig.json vitest.config.ts
auth/11
src/7index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
collaboration/17
src/13awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
config/7
src/4eslint.base.js index.ts prettier.base.json tsconfig.base.json
package.json README.md tsconfig.json
database-client/5
src/2index.test.ts index.ts
package.json README.md tsconfig.json
database-engine/33
src/29
filter/2filter.test.ts index.ts
formula/8evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts
query/6group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts
relations/2index.ts relations.test.ts
rollups/2index.ts rollups.test.ts
values/5dates.ts index.ts registry.ts types.ts values.test.ts
views/3buttons.ts index.ts views.test.ts
index.ts
package.json README.md tsconfig.json vitest.config.ts
editor/25
src/21
marks/1highlight.ts
nodes/2equation.ts mention.ts
autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
observability/20
src/16
__tests__/8db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts
index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts
package.json README.md tsconfig.json vitest.config.ts
permissions/11
src/7index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts
package.json README.md tsconfig.json vitest.config.ts
search/22
src/18chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
shared/61
src/57
dto/17ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts
events/8audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts
realtime/6comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts
automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts
package.json README.md tsconfig.json vitest.config.ts
storage/16
src/12client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
ui/37
src/33
components/19avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx
color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
prisma/16
migrations/13
20260927000000_init/1migration.sql
20260928000000_search_documents_content_hash/1migration.sql
20260929000000_workspace_usage_storage_bytes/1migration.sql
20260930000000_form_submitted_notification_type/1migration.sql
20261001000000_ai_phase12/1migration.sql
20261002000000_webhooks_secret_encrypted_dlq/1migration.sql
20261002111436_webhook_delivery_latency/1migration.sql
20261002120000_org_admin_2fa_retention_unique/1migration.sql
20261002215124_audit_export/1migration.sql
20261003210000_perf_indexes_hot_paths/1migration.sql
20261004004500_perf_indexes_hot_paths_2/1migration.sql
migration_lock.toml README.md
schema.prisma seed.ts verify.ts
scripts/7backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh
tests/169
e2e/63
.auth/1user.json
fixtures/7
files/6clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt
realtime.ts
mocks/2oidc-issuer.ts saml-idp.ts
playwright-report/3
data/2a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm
index.html
reports/1files-security.json
specs/34ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts
test-results-final-flow/3
final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2test-failed-1.png trace.zip
.last-run.json
utils/4api.ts dnd.ts search-lag.ts wait.ts
.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json
fixtures/1
files/1make-sparse.ts
integration/60
ai-capability/2ai-app.capability.test.ts gateway.capability.test.ts
drill/2seed-drill.mjs verify-restore.mjs
fixtures/5
files/5clip.mp4 clip.wav doc.pdf hero-1400.png note.txt
helpers/3api.ts containers.ts seed.ts
realtime/11control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts
ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts
performance/28
fixtures/1search-100k.ts
helpers/2seed-100k.mjs seed-1k-load.mjs
reports/7api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json
api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs
security/16
helpers/1app.ts
audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts
README.md
.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json
design-system.mddocs/ui/design-system.md← ui35,898 B← Back to the app

Design System — AI Software Factory

The visual + interaction contract for packages/ui and every screen in apps/web. Implements the UX requirements (ux-requirements.md) and the theming rule PR-164 (tokens only, no hard-coded colors). Token tables are the source of truth for values; the implementation lives in packages/ui/src/tokens/*.css (CSS variables) and is consumed via Tailwind's theme.extend mapping (hex values appear only in the token files — an eslint rule blocks hex/rgb literals elsewhere in apps/web).


1. Design tokens

1.1 Color — semantic tokens (the only names app code may use)

Token Light Dark Purpose
--color-bg #FFFFFF #191919 app background
--color-surface #FFFFFF #202020 cards, dialogs, menus
--color-surface-2 #F7F6F3 #262626 sidebar, hover surfaces, code bg
--color-surface-3 #F1F0EC #2E2E2E active hover, pressed, inset panels
--color-border #E9E8E3 #333333 hairlines, dividers
--color-border-strong #D3D1C9 #454545 input borders, focused menus
--color-text #37352F #FFFFFF primary text
--color-text-secondary #6B6B6B #B4B4B4 secondary text, placeholders
--color-text-tertiary #9B9A97 #808080 muted text, disabled, timestamps
--color-accent #2383E2 #3B8EE6 primary actions, links, active states
--color-accent-hover #1A73C7 #4C9BE8
--color-accent-soft #E7F2FC #1C2E40 active tab bg, selection bg, info chips
--color-success #0F7B6C #3DB6A0 success text/icon
--color-success-soft #E3F4F0 #14332E
--color-warning #B97324 #D99A4E warnings
--color-warning-soft #FBF0E2 #3A2C18
--color-danger #E03E3E #F2545B destructive, errors
--color-danger-soft #FCEBEB #3D2222
--color-focus-ring #2383E2 #3B8EE6 focus outline (2 px)
--color-shadow rgba(15,15,15,0.08) rgba(0,0,0,0.5) shadow color
--color-scrim rgba(15,15,15,0.4) rgba(0,0,0,0.6) modal overlay
--color-selection rgba(35,131,226,0.25) rgba(59,142,230,0.35) text/block selection
--color-skeleton #F1F0EC #2E2E2E skeleton shimmer base

Contrast check (WCAG 2.2 AA): --color-text on --color-bg ≥ 12.6:1 in both themes; --color-text-secondary ≥ 4.6:1; --color-accent on --color-bg 4.9:1 (light) / 5.4:1 (dark) — verified by the token test (packages/ui/src/tokens/contrast.test.ts, fails the build on a token edit that breaks a pair).

1.2 Color — database option palette (28 named, stable across themes)

Select / Multi Select / Status / group colors. Each has a base + soft (background) variant; the base is used for text/dots, the soft for pills.

Name Base (L) Soft (L) Base (D) Soft (D)
default (gray) #9B9A97 #F1F0EC #9B9A97 #2E2E2E
gray #787774 #E9E8E3 #B4B4B4 #333333
brown #9F6B53 #F3EAE5 #C58C74 #3A2A22
orange #D9730D #FBEBDD #E8944A #3D2A14
yellow #B99724 #F9F1D8 #D9BE4E #3A3418
green #0F7B46 #E3F4EB #3DB678 #143326
blue #2383E2 #E7F2FC #3B8EE6 #1C2E40
purple #6B57D0 #EEEAFB #8F7FE6 #282240
pink #C2398B #F9E8F4 #E05FB0 #3D1F33
red #E03E3E #FCEBEB #F2545B #3D2222
brown_bg … (the soft column above doubles as the _bg token)

(Each name also exists as <name>-bg = the soft value; e.g. --color-option-blue-bg. 10 hues × base/bg = 20, + default pair + 8 "extra" light variants for gallery covers = 28 palette entries.)

1.3 Typography

Font stack: Inter, -apple-system, "Segoe UI", Roboto, sans-serif; mono: "JetBrains Mono", ui-monospace, "SF Mono", monospace.

Token Size Line-height Weight Use
--text-title 26 px 1.25 650 page title (H1)
--text-h1 26 px 1.25 600 heading_1
--text-h2 20 px 1.3 600 heading_2
--text-h3 16 px 1.3 600 heading_3
--text-body-lg 16 px 1.5 400 editor body, primary UI text
--text-body 15 px 1.5 400 default text (tables, lists, menus)
--text-small 13 px 1.4 400 secondary UI, table cells compact
--text-tiny 12 px 1.3 400 badges, timestamps, captions
--text-mono 13 px 1.5 400 code blocks, formula input
--text-weight-medium — — 500
--text-weight-semibold — — 600
--text-weight-title — — 650
--text-placeholder — — 400 color: --color-text-tertiary

1.4 Spacing (4 px scale)

Token Value Use
--space-1 4 px icon↔label, chip inner
--space-2 8 px tight gaps, menu item padding-y
--space-3 12 px standard control padding
--space-4 16 px block vertical rhythm (editor line gaps)
--space-5 24 px section gaps, dialog padding
--space-6 32 px page content top/bottom
--space-7 48 px hero/empty-state padding
--space-8 64 px large layout padding

Editor rhythm: block margin-top = --space-4 (paragraph), headings add --space-4 above (h1) / --space-3 (h2, h3); toggle children indent --space-5 + a 24 px gutter; list indent per level = --space-5.

1.5 Radii

Token Value Use
--radius-sm 4 px chips, badges, small buttons
--radius-md 6 px inputs, buttons, menu items
--radius-lg 8 px cards, dialogs, popovers, kanban cards
--radius-xl 12 px drawers, command palette
--radius-full 999 px pills, avatars, toggles

1.6 Shadows

Token Value (light) Value (dark) Use
--shadow-sm 0 1px 2px var(--color-shadow) same cards at rest, rows hover
--shadow-md 0 2px 8px var(--color-shadow) 0 2px 8px var(--color-shadow) lifted cards, hover lift, drag preview
--shadow-lg 0 8px 24px var(--color-shadow) 0 8px 24px var(--color-shadow) menus, popovers, dialogs
--shadow-focus 0 0 0 2px var(--color-focus-ring) same focus ring (combined with border)

1.7 Z-index (layering contract — ux-requirements §11)

Token Value Use
--z-content 0 page content
--z-sticky 10 sticky table headers, top-of-page toolbar
--z-toolbar 30 floating selection toolbar, block hover controls
--z-drawer 40 settings drawer (view settings, right rail)
--z-topbar 50 top bar
--z-sidebar-overlay 90 mobile sidebar drawer
--z-palette 100 command palette
--z-toast 110 toasts
--z-dialog 120 confirm dialogs, modals

1.8 Motion

Token Value Use
--motion-instant 0 ms reduced-motion: everything
--motion-fast 120 ms hover, focus ring, press
--motion-base 150 ms menus, dropdowns, toasts in/out
--motion-slow 200 ms drawers, palette open/close, view switch
--motion-ease cubic-bezier(0.25, 0.6, 0.3, 1) standard ease-out
--motion-spring cubic-bezier(0.34, 1.3, 0.64, 1) drag settle, card drop (slight overshoot)

Rules: only opacity and transform animate (compositor-friendly); layout properties never animate except drawer width; reduced-motion (OS or manual) maps every token to --motion-instant and disables drag auto-scroll animation (jump-cut instead) and skeleton shimmer (static fill).

2. Theming implementation

packages/ui/src/tokens/
├── tokens.light.css      # :root / .light  { --color-bg: #fff; … }   (ALL hex lives here)
├── tokens.dark.css       # .dark          { --color-bg: #191919; … }
├── tokens.hc.css         # .hc (high contrast override set, v1.1)
├── tokens.typography.css # font/spacing/radii/shadows/z-index/motion (theme-independent)
└── contrast.test.ts      # WCAG pair checks on the color tables above

2.1 As-built (apps/web) — token format contract + conflict record

Recorded per AGENTS.md rule 29 (2026-10). The package above (packages/ui hex tokens + next-themes) is the target design; the shipped web app runs its own local theming. Both are described so the contract is unambiguous:

3. Component inventory (packages/ui)

Props sketches are TypeScript-ish and show the public API. All components forward ref, accept className (tailwind-merge), and are keyboard-accessible per ux-requirements §12. Radix primitives underpin the overlay components (menu/dialog/popover/tooltip/tabs/accordion).

3.1 Button

interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {
  variant?: "primary" | "secondary" | "ghost" | "danger" | "danger-soft";
  size?: "sm" | "md" | "lg";           // 28 / 32 / 40 px height
  loading?: boolean;                    // spinner + disabled (see §5 states)
  iconOnly?: boolean;                   // aria-label required
  leadingIcon?: React.ReactNode;        // 16 px icon, --space-2 gap
}

3.2 Input / Textarea / Select / Checkbox / Switch / Slider

interface InputProps extends React.InputHTMLAttributes<HTMLInputElement> {
  label?: string;            // renders <label> + id wiring (a11y)
  error?: string;            // renders --color-danger message, border-danger, aria-invalid
  hint?: string;             // helper line, --color-text-tertiary
  leadingIcon?: React.ReactNode;
  truncate?: boolean;        // single-line ellipsis mode (table cells)
}

3.3 Command (searchable select / the command-list primitive)

<Command onSearch={fn} onOpen={fn}>
  <Command.Input placeholder="Search…" />
  <Command.List>
    <Command.Group label="Text">
      <Command.Item value="h1" onSelect={fn} shortcut="⌘⇧1" icon={<Icon/>}>Heading 1</Command.Item>
    </Command.Group>
  </Command.List>
</Command>

3.4 Dialog / Drawer / Popover

<Dialog open onOpenChange title description size="sm|md|lg">…</Dialog>
  // role=dialog aria-modal, scrim, focus trap, Esc, footer: Cancel/Confirm
<Drawer side="right" width={320} title>…</Drawer>   // view settings, filters
<Popover trigger={node} align="start" width={260}>…</Popover>  // cell editors

3.5 DropdownMenu / ContextMenu / Menu primitives

<DropdownMenu trigger={node} align="start">
  <Menu.Item icon onSelect>…</Menu.Item>
  <Menu.Sub label="Turn into">…</Menu.Sub>
  <Menu.Separator/>
  <Menu.Item destructive>Delete</Menu.Item>
</DropdownMenu>
<ContextMenu>…same item tree…</ContextMenu>   // right-click / ⋮⋮

3.6 Tooltip / Toaster / Toast

<Tooltip content="Copy link" side="bottom">…</Tooltip>
  // 500 ms open delay, 0 close; aria-describedby; never on touch (tap = action)
<Toaster/>  // portal, stack max 4, --z-toast
toast({ title, description?, kind: "info"|"success"|"warning"|"error",
        action?: {label, onClick}, duration? })   // 4s / 7s w/ action

3.7 Avatar / Badge / Chip

3.8 Card / KanbanCard

3.9 Table / VirtualizedList

<DataTable<T>
  rows={T[]} rowKey={fn} onRowClick? onRowSelect?
  selection="none|single|multiple"
  columns={{ id, header, cell(row), width?, minWidth=80, maxWidth=500,
             sortable?, sticky?, renderCell?(ctx) }}
  virtualize={{ rowHeight: 48|64, overscan: 8 }}
  density="compact|comfortable" />

3.10 Tabs

<Tabs value onChange items={{id, label, icon?, closable?}} addMenu?/>

3.11 Sidebar (page tree)

<SidebarTree nodes={TreeNode[]} onSelect activeId collapsed
  onDragReorder? renderItem={row => (<PageRow …/>)}/>

3.12 Skeleton / EmptyState / ErrorState / Spinner

3.13 CommandPalette (app composite, built on Command)

The ⌘K overlay (ux-requirements §3): 640 px, --z-palette, groups (Create / Go to / Actions / Workspace / AI / Data), recent-items memory, full keyboard model, per-item permission gating. Lives in apps/web (composes packages/ui Command) because its item catalog is app-specific.

3.14 BlockToolbar / BlockHoverControls (editor composites)

3.15 Form controls (builder + public forms)

FormField wrapper (label, required *, hint, error, aria wiring) + per-type editors: text, textarea, number (spinbuttons), email, date (popup calendar: month grid, role=grid, keyboard per ux §12), checkbox, radio/segment (single select), multi-select (Command + chips), rating (5 stars, aria-valuenow), file (dropzone + file chip list). Public-form render reuses the same editors in read-submit mode (no builder chrome).

3.16 Media

4. Iconography

5. State styles (per control)

State Style
default as specified
hover bg-surface-3 (ghost) / color token -hover (primary) / shadow-sm (cards)
focus-visible 2 px --color-focus-ring outline, 2 px offset (keyboard only — :focus-visible)
active/pressed bg-surface-3 + 1 px translateY (buttons)
disabled opacity-50 pointer-events-none (keeps layout)
selected bg-accent-soft text-accent (list rows) / bg-accent text-white (buttons)
error border-danger + message below + aria-invalid
loading Button: spinner + opacity-60; rows: value kept + pulse overlay; areas: skeletons
drag source: opacity-40; preview: shadow-md rotate-[2deg] scale(1.02); drop target: border-accent bg-accent-soft/40 (line indicator for sibling drops: 2 px accent bar with 8 px end caps)

6. Block type visual specs (all 28 authoring + 2 structural)

Gutter convention (all blocks): 40 px left gutter (24 px content padding + 16 px handle zone); ⋮⋮ + appear on hover; block hover bg = transparent except in selection (bg-accent/10 + 2 px left border-accent).

# Type Layout & controls
1 paragraph text-body; empty placeholder per ux §2.1
2 heading_1 --text-h1, margin-top --space-4; hover: anchor # link (when showAnchor)
3 heading_2 --text-h2, margin-top --space-3
4 heading_3 --text-h3, margin-top --space-3
5 quote 3 px left border (--color-border-strong), padding-left --space-3, text-body --color-text-secondary
6 callout rounded-lg bg-surface-2 (or properties.background option soft), padding --space-4, icon 20 px left (--space-3 gap), text text-body
7 bulleted_list bullet = 6 px dot --color-text-tertiary in a 24 px indent box; line-height 1.5
8 numbered_list number in the indent box (text-tiny tertiary, right-aligned, max 3 digits); numbering from consecutive same-level siblings
9 todo 16 px checkbox in the indent box; checked → text --color-text-tertiary + line-through; "All (3/5)" summary row above a todo run
10 toggle row: chevron (16 px, rotates 90° on open, --motion-fast) + ⋮⋮ on hover + title text-body medium; children indented --space-5 + 24 px; closed = children hidden (virtualized out)
11 image per §3.16 ImageBlock; max-width 100 %; width handle: 8 px circles at mid-left/right edges on hover (drag)
12 video 16:9 max, rounded-lg, native controls; upload = file pipeline
13 audio 40 px tall player: play (32 px), seek (2 px track), time (text-tiny)
14 file FileCard per §3.16 (row layout: icon 24 px + name/size + actions)
15 bookmark BookmarkCard per §3.16, max-width 420 px
16 embed iframe, rounded-lg border, height from properties.height (default 400 px, resize handle bottom-center); sandbox attributes per functional §4.2
17 code CodeBlock per §3.16; language menu top-right (hover)
18 equation KaTeX, text-body-lg, centered; edit on click (inline input replaces render)
19 column_list flex row, gap: --space-4; child columns; divider handle between columns (4 px hit → 12 px, cursor col-resize, drag live-resizes, min width 10 %); stacks vertically < 768 px (handles hidden)
20 column transparent container; holds blocks; width = column_list.widths[i]
21 divider 1 px --color-border, margin --space-4 0
22 spacer invisible; height from properties.height; hover: 8 px handle bar centered (drag = height, snap 8 px)
23 database full database render (tabs + view, §7); the block frame is borderless (the view owns its chrome)
24 linked_database same as database with a "linked to <db>" chip in the top-right + read-only badge
25 table bordered grid (1 px --color-border), header row bg-surface-2 text-small medium; cells 32 px min-height, text-body; add-row/col ghost buttons at the edge on hover; cell = inline text input
26 chart ChartRender per §3.16, 280 px default height
27 form public-form render (§3.15) inline; draft state shows "Publish to collect responses"
28 synced_block renders master content + "Synced" badge (12 px pill, top-right on hover); copies show a link icon in the gutter instead of ⋮⋮ (drag disabled — break-sync via menu)
— child_page sidebar-style row: icon + title + → on hover; click navigates; used in TOCs/templates
— child_database same row style + database icon; click opens the record list

7. Database view visual specs

Shared chrome (all views): tab bar (36 px: tabs text-body medium, active border-b-2 border-accent; "+" opens the 9-type picker; tab right-click = rename/duplicate/delete) + toolbar row (32 px: left = view name (inline edit) + record count (text-tiny tertiary, "128"); right = filter/sort/group indicator chips (click → drawer) + settings gear (opens the right drawer, ux §4)).

View Visual rules
Table row height 48 px (comfortable) / 36 px (compact) from density; column borders 1 px --color-border; title column 240 px sticky; cell padding --space-3; row hover bg-surface-2; selected row bg-accent-soft; sort arrow 12 px in header; "New row" ghost row at bottom (text-tertiary, "+ New row"); bulk bar appears above the table on selection (bg-surface-2 border-b: count + actions)
List row = title (medium) + 2 secondary properties (tertiary, text-small) + 16 px icon; 40 px rows; same filter/sort/group drawer
Board columns 280 px wide, gap --space-4, horizontal scroll; column header 40 px (bg-surface-2 rounded-t-lg: name medium + count badge + ⋯); column body bg-surface-2 rounded-lg padding --space-2; cards stacked 8 px gap; add-card ghost at column bottom; WIP line optional (dashed --color-border-strong at the limit, over-limit cards get a --color-warning count)
Calendar toolbar per ux §4.3; month grid: 7 cols, 5–6 rows, day cell min 96 px; today cell: accent ring 2 px; record chip: 24 px, option-color dot + 1-line title, text-small; week: rows per day (88 px), records as timeline chips; day: list with time-of-day order
Gallery grid auto-fill minmax(220px, 1fr), gap --space-4; card: cover 16:9 (bg-surface-2 + centered icon fallback), padding --space-3, title medium 2-line clamp, ≤ 3 property rows; hover: shadow-md 150 ms
Timeline axis 48 px (month ticks text-tiny); lanes 56 px (bg-surface-2 alternating, lane label sticky left 160 px); bars 32 px rounded-md in the record's status color (option palette), label inside when > 120 px else right; drag ghost = --color-accent-soft bar; today line 2 px accent full-height; zoom toolbar (Day/Week/Month/Quarter) top-right
Chart ChartRender full-width (min 320 px height) + "Configure" ghost button (drawer: type, axes, aggregation, filter, legend)
Dashboard widget grid (12 cols × 32 px rows), gap --space-3; widget = card chrome + header (type icon + title + ⋯: settings/remove) + body render; add widget = dashed placeholder card on empty slot hover; public mode = read-only badge
Form two-pane (builder: question list left 320 px drag-reorder + live preview right) / public render (single column, 480 px max, intro + fields + submit, brand colors from config)

8. Dark mode rules

  1. Every surface maps through tokens — a component is dark-mode-correct by construction if it uses only token utilities; the visual regression suite (Playwright screenshots, both themes, per view) catches token leaks.
  2. Shadows in dark mode use the higher-alpha --color-shadow (dark surfaces need stronger definition); elevation is also carried by surface-2/3 steps (the dark palette is only 3 surface steps — use them in order, never skip).
  3. Images/media get a 4 % dark scrim on hover-adjacent chrome (covers are displayed as-is; no forced dimming).
  4. Option colors: the dark bases are lightened (see table §1.2) so pills keep 4.5:1 text contrast on their soft bg in both themes.
  5. Focus ring: --color-focus-ring is tuned per theme (slightly lighter in dark); never use the accent directly for focus in dark (4.9:1 → 5.4:1 difference matters at 2 px).
  6. Code blocks: always --color-surface-2 (both themes) — code syntax themes are fixed (one syntax palette that works on both: the --syntax-* token set, 8 colors, contrast-verified on surface-2 in both themes).

9. Reduced motion

10. Responsive rules (per component category)

Category ≥ 1024 768–1023 640–767 < 640
Layout shell sidebar 240 px + content sidebar auto-collapses to 56 px rail (hover-expand) overlay drawer (hamburger) overlay drawer; top bar search → icon (full-screen)
Buttons/controls standard sizes standard 44 px min touch height 44 px min touch height; icon buttons get 44×44 hit areas
Menus/tooltips hover + right-click hover + tap (⋯) long-press / ⋯ per row; menus full-width bottom sheets for confirmation same; tooltips never (use inline labels)
Dialogs centered 400–720 px centered centered, 90 % width full-screen sheet (slide up, 24 px grab handle)
Table view virtualized both axes horizontal scroll + sticky title forced list view forced list view
Board columns 280 px columns 260 px, horizontal scroll cards 80 % viewport width same + snap scroll per column
Calendar month grid week default day-list day-list
Gallery minmax(220px) minmax(200px) 2-up 1–2 up (minmax(160px))
Timeline full horizontal scroll, axis sticky day zoom default day list fallback
Slash/palette menus anchored, 260–640 px anchored centered modal full-screen (palette) / bottom sheet (slash)
Columns (editor) side-by-side ≤ 2-up stacked stacked
Comments panel right rail 360 px (page-level) overlay drawer full overlay full-screen
Text body 15 px 15 px 15 px 15 px (never < 14 px)

11. Accessibility (visual + interaction contract)