.github/9
ISSUE_TEMPLATE/3bug_report.md config.yml feature_request.md
workflows/3ci.yml clean-clone.yml release.yml
CODEOWNERS dependabot.yml pull_request_template.md
apps/630
api/250
src/243
common/30
__tests__/3authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts
filters/1all-exceptions.filter.ts
guards/3auth.guard.ts internal-service.guard.ts rate-limit.guard.ts
interceptors/2actor-context.interceptor.ts bigint-serialization.interceptor.ts
middleware/2idempotency.test.ts idempotency.ts
pipes/1zod-validation.pipe.ts
actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts
config/1env.ts
lib/11
__tests__/5crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts
authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts
modules/197
ai/28
__tests__/4ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts
generator/4executor.ts generate.controller.ts generate.dto.ts generate.service.ts
ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts
api-keys/3api-keys.controller.ts api-keys.module.ts api-keys.service.ts
audit/2audit-log.controller.ts audit.module.ts
auth/4auth.controller.ts auth.module.ts auth.service.ts dto.ts
automations/5automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts
blocks/5
__tests__/1batch-version-cas.test.ts
block.service.ts blocks.controller.ts blocks.module.ts dto.ts
comments/4comments.controller.ts comments.module.ts comments.service.ts dto.ts
databases/9
__tests__/3normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts
database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts
docs/2docs.controller.ts docs.module.ts
files/10
__tests__/1quota.test.ts
dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts
forms/18debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts
health/3health.controller.ts health.module.ts health.service.ts
integrations/3integrations.controller.ts integrations.module.ts integrations.service.ts
internal/12
__tests__/2flush-query-shape.test.ts internal.endpoints.test.ts
ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts
notifications/3notifications.controller.ts notifications.module.ts notifications.service.ts
oauth/6
__tests__/1oauth.scopes.test.ts
oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts
org/15audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts
orgs/5dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts
pages/4dto.ts page.service.ts pages.controller.ts pages.module.ts
scim/15
__tests__/3email-mapping.test.ts etag.test.ts filters.test.ts
etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts
search/4
__tests__/1search.service.test.ts
search.controller.ts search.module.ts search.service.ts
sessions/3sessions.controller.ts sessions.module.ts sessions.service.ts
share/3share.controller.ts share.module.ts share.service.ts
sso/16
__tests__/4enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts
enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts
teams/4dto.ts teams.controller.ts teams.module.ts teams.service.ts
users/4dto.ts users.controller.ts users.module.ts users.service.ts
webhooks/3webhooks.controller.ts webhooks.module.ts webhooks.service.ts
workspaces/4dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts
types/1xmldom.d.ts
app.module.ts constants.ts main.ts
_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts
realtime/33
src/17auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts
test/11auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts
.env.example Dockerfile package.json README.md tsconfig.json
web/255
src/244
app/45
__tests__/1theme-tokens.test.ts
(app)/26
w/25
[workspace]/25
ask/1page.tsx
databases/1
[id]/1page.tsx
favorites/1page.tsx
files/1page.tsx
notifications/1page.tsx
page/4
[id]/4
[block]/1page.tsx
share/1page.tsx
layout.tsx page.tsx
search/1page.tsx
settings/10
appearance/1page.tsx
automations/3
[id]/1page.tsx
new/1page.tsx
page.tsx
billing/1page.tsx
developers/1page.tsx
members/1page.tsx
permissions/1page.tsx
teams/1page.tsx
page.tsx
shared/1page.tsx
templates/1page.tsx
trash/1page.tsx
layout.tsx page.tsx
layout.tsx
(auth)/4
login/1page.tsx
register/1page.tsx
reset-password/1page.tsx
layout.tsx
api/2
metrics/1route.ts
v1/1
health/1route.ts
f/1
[slug]/1page.tsx
health/1
ready/1route.ts
org/2
[orgId]/2
admin/2
integrations/1page.tsx
page.tsx
share/1
[id]/1page.tsx
error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx
components/118
admin/10
org-admin/8ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx
ScimCard.tsx SsoTabs.tsx
ai/6ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx
automations/5action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx
collaboration/6CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx
comments/3comment-panel.tsx comment-thread.tsx mention-input.tsx
database/27
__tests__/2cell-editor.test.tsx cell-renderer.test.tsx
AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx
dialogs/7
__tests__/1move-to-dialog.test.tsx
create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx
editor/19
__tests__/3code-block-text.test.ts code-block.test.tsx expandable.test.tsx
block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx
files/4FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx
form/4form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx
layout/8
__tests__/1page-tree-icon.test.tsx
command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx
mentions/3
__tests__/1mention-model.test.ts
mention-model.ts MentionPopup.tsx
search/3ask-ai-search.tsx results-list.tsx search-dialog.tsx
settings/10
api-keys/4ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx
webhooks/5CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx
settings-shell.tsx
ui/3confirm-dialog.tsx form.tsx toaster.tsx
hooks/21
__tests__/4realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx
realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts
lib/50
__tests__/21ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts
files/7
__tests__/2picker.test.ts upload.test.ts
api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts
ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts
stores/8
__tests__/1block-patch-store.test.ts
block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts
instrumentation.ts middleware.ts
.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts
worker/92
src/87
__tests__/13ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts
health/1server.ts
lib/12
__tests__/1clamav.test.ts
clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts
processors/56
automations/28
__tests__/3condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts
executors/17assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts
condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts
files/15
__tests__/4errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts
steps/4finalize.ts metadata.ts scan.ts thumbnails.ts
cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts
search-index/4builders.ts grants.ts index.ts processor.ts
ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts
config.ts events.ts index.ts logger.ts queues.ts
.env.example Dockerfile package.json README.md tsconfig.json
docs/73
api/17ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md
architecture/10ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md
database/2database-architecture.md redis-keys.md
development/8admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md
product/4functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md
requirements/1requirements-matrix.md
security/5audit-report.md files.md forms.md license-allowlist.md security-architecture.md
tasks/16phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md
ui/9ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md
support-matrix.md
infrastructure/71
caddy/1Caddyfile
docker/6
init/101-extensions.sql
opensearch/1init-indices.json
.env.docker docker-compose.yml opensearch-init.sh README.md
kubernetes/40
observability/20
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1sync-sources.mjs
alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml
postgres/7configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml
api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml
nginx/2nginx.conf README.md
observability/14
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1dashboard-completeness.mjs
README.md
terraform/8compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf
packages/289
ai/24
src/20
providers/7anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts
schemas/2database.ts generate.ts
adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts
package.json README.md tsconfig.json vitest.config.ts
auth/11
src/7index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
collaboration/17
src/13awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
config/7
src/4eslint.base.js index.ts prettier.base.json tsconfig.base.json
package.json README.md tsconfig.json
database-client/5
src/2index.test.ts index.ts
package.json README.md tsconfig.json
database-engine/33
src/29
filter/2filter.test.ts index.ts
formula/8evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts
query/6group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts
relations/2index.ts relations.test.ts
rollups/2index.ts rollups.test.ts
values/5dates.ts index.ts registry.ts types.ts values.test.ts
views/3buttons.ts index.ts views.test.ts
index.ts
package.json README.md tsconfig.json vitest.config.ts
editor/25
src/21
marks/1highlight.ts
nodes/2equation.ts mention.ts
autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
observability/20
src/16
__tests__/8db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts
index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts
package.json README.md tsconfig.json vitest.config.ts
permissions/11
src/7index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts
package.json README.md tsconfig.json vitest.config.ts
search/22
src/18chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
shared/61
src/57
dto/17ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts
events/8audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts
realtime/6comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts
automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts
package.json README.md tsconfig.json vitest.config.ts
storage/16
src/12client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
ui/37
src/33
components/19avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx
color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
prisma/16
migrations/13
20260927000000_init/1migration.sql
20260928000000_search_documents_content_hash/1migration.sql
20260929000000_workspace_usage_storage_bytes/1migration.sql
20260930000000_form_submitted_notification_type/1migration.sql
20261001000000_ai_phase12/1migration.sql
20261002000000_webhooks_secret_encrypted_dlq/1migration.sql
20261002111436_webhook_delivery_latency/1migration.sql
20261002120000_org_admin_2fa_retention_unique/1migration.sql
20261002215124_audit_export/1migration.sql
20261003210000_perf_indexes_hot_paths/1migration.sql
20261004004500_perf_indexes_hot_paths_2/1migration.sql
migration_lock.toml README.md
schema.prisma seed.ts verify.ts
scripts/7backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh
tests/169
e2e/63
.auth/1user.json
fixtures/7
files/6clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt
realtime.ts
mocks/2oidc-issuer.ts saml-idp.ts
playwright-report/3
data/2a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm
index.html
reports/1files-security.json
specs/34ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts
test-results-final-flow/3
final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2test-failed-1.png trace.zip
.last-run.json
utils/4api.ts dnd.ts search-lag.ts wait.ts
.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json
fixtures/1
files/1make-sparse.ts
integration/60
ai-capability/2ai-app.capability.test.ts gateway.capability.test.ts
drill/2seed-drill.mjs verify-restore.mjs
fixtures/5
files/5clip.mp4 clip.wav doc.pdf hero-1400.png note.txt
helpers/3api.ts containers.ts seed.ts
realtime/11control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts
ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts
performance/28
fixtures/1search-100k.ts
helpers/2seed-100k.mjs seed-1k-load.mjs
reports/7api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json
api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs
security/16
helpers/1app.ts
audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts
README.md
.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json
codec.test.tspackages/collaboration/src/codec.test.tsraw← src28,058 B← Back to the app
1/**
2 * @factory/collaboration — codec tests (TASK-0092).
3 *
4 * Property-tested (fast-check): the block forest ↔ Yjs doc round-trip is
5 * lossless for random forests across all content families; the op diff →
6 * apply pipeline is a no-op when applied to itself; and the
7 * **two-codecs-agree** contract: `@factory/editor`'s autosave diff and this
8 * package's persister diff produce the same wire `BlockOperation[]` for the
9 * same (previous, next) block set.
10 */
11 
12import * as fc from "fast-check";
13import { describe, expect, it } from "vitest";
14import * as Y from "yjs";
15 
16import {
17  BLOCK_CONTENT_SCHEMAS,
18  blockOperationSchema,
19  blockTypeSchema,
20  beforePosition,
21  comparePositions,
22  generatePosition,
23  type BlockOperation,
24  type BlockType,
25  type Position,
26} from "@factory/shared";
27 
28import { diffBlocks } from "@factory/editor/codec";
29 
30import {
31  applyBlockOperations,
32  applyBlockOperationsToYDoc,
33  base64ToBytes,
34  blockToYElement,
35  blocksToYDoc,
36  bytesToBase64,
37  decodeBase64Yjs,
38  diffBlockSets,
39  encodeDocAsUpdate,
40  encodeDocStateVector,
41  jsonEqual,
42  namedChild,
43  yDocToBlockList,
44  yDocToBlocks,
45  type BlockLike,
46} from "./codec.js";
47import { BLOCK_Y_MAPPINGS, mappingForType } from "./mapping.js";
48 
49// --- random forest generation -------------------------------------------------
50 
51type Family = "text" | "code" | "bookmark" | "table" | "media" | "embed" | "structural" | "ref";
52 
53const FAMILY_TYPES: ReadonlyMap<Family, BlockType[]> = new Map([
54  [
55    "text",
56    ["paragraph", "heading_1", "heading_2", "heading_3", "quote", "callout", "bulleted_list", "numbered_list", "todo", "toggle", "equation"],
57  ],
58  ["code", ["code"]],
59  ["bookmark", ["bookmark"]],
60  ["table", ["table"]],
61  ["media", ["image", "video", "audio", "file"]],
62  ["embed", ["embed"]],
63  ["structural", ["column", "column_list", "divider", "spacer"]],
64  ["ref", ["database", "linked_database", "chart", "form", "synced_block", "child_page", "child_database"]],
65]);
66 
67const ALL_TYPES = blockTypeSchema.options;
68 
69const TEXT_SAMPLES = [
70  "",
71  "hello",
72  "line one\nline two",
73  "unicode: café ☕ émojis 日本語",
74  "spaces  double",
75];
76 
77function familyFor(type: BlockType): Family {
78  for (const [kind, types] of FAMILY_TYPES) {
79    if (types.includes(type)) return kind;
80  }
81  throw new Error(`no family for ${type}`);
82}
83 
84/** Deterministic PRNG (AGENTS.md rule 25 — the tests are reproducible). */
85function mulberry32(seed: number): () => number {
86  let a = seed >>> 0;
87  return () => {
88    a = (a + 0x6d2b79f5) >>> 0;
89    let t = a;
90    t = Math.imul(t ^ (t >>> 15), t | 1);
91    t ^= t + Math.imul(t ^ (t >>> 7), t | 61);
92    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
93  };
94}
95 
96/** Generate valid content for a block type (schema-compatible values). */
97function genContent(rng: () => number, type: BlockType): Record<string, unknown> {
98  const pick = <T>(arr: readonly T[]): T => arr[Math.floor(rng() * arr.length)] as T;
99  const kind = familyFor(type);
100  switch (kind) {
101    case "text":
102      return { text: pick(TEXT_SAMPLES) };
103    case "embed":
104      // The embed schema is { url } only (no text slot — the codec's
105      // mapping derives slots from the shared schema).
106      return { url: "https://example.com/embed" };
107    case "code":
108      return {
109        text: pick(TEXT_SAMPLES),
110        ...(rng() < 0.5 ? { language: pick(["ts", "python", "rust"]) } : {}),
111      };
112    case "bookmark":
113      return {
114        url: "https://example.com/page",
115        ...(rng() < 0.5 ? { title: "A bookmark" } : {}),
116      };
117    case "table": {
118      const rows = Array.from({ length: 1 + Math.floor(rng() * 3) }, () =>
119        Array.from({ length: 1 + Math.floor(rng() * 3) }, () => pick(TEXT_SAMPLES)),
120      );
121      return { rows, ...(rng() < 0.3 ? { width: 800 } : {}) };
122    }
123    case "media":
124      return {
125        fileId: `fil_${Math.floor(rng() * 1e6).toString(16)}`,
126        ...(rng() < 0.5 ? { caption: "a caption" } : {}),
127        ...(rng() < 0.3 ? { width: 1200 } : {}),
128      };
129    case "structural": {
130      switch (type) {
131        case "column":
132          return rng() < 0.5 ? { width: 300 } : {};
133        case "column_list":
134          return { direction: rng() < 0.5 ? "row" : "column" };
135        case "divider":
136        case "spacer":
137          return rng() < 0.5 ? { height: 24 } : {};
138      }
139      return {};
140    }
141    case "ref": {
142      const id = (prefix: string) => `${prefix}_${Math.floor(rng() * 1e6).toString(16)}`;
143      switch (type) {
144        case "database":
145          return { databaseId: id("db") };
146        case "child_database":
147          return { databaseId: id("db") };
148        case "linked_database":
149          return rng() < 0.5 ? { databaseId: id("db"), viewId: id("view") } : { databaseId: id("db") };
150        case "chart":
151          return { chartId: id("chart") };
152        case "form":
153          return { formId: id("form") };
154        case "synced_block":
155          return { sourceBlockId: id("blk") };
156        case "child_page":
157          return { pageId: id("page") };
158      }
159      return {};
160    }
161  }
162}
163 
164/** A random flat forest: n root blocks, position-ordered. */
165function genForest(rng: () => number): BlockLike[] {
166  const n = 1 + Math.floor(rng() * 8);
167  const blocks: BlockLike[] = [];
168  let cursor = "";
169  for (let i = 0; i < n; i += 1) {
170    cursor = generatePosition(cursor === "" ? undefined : cursor);
171    const type = ALL_TYPES[Math.floor(rng() * ALL_TYPES.length)] as BlockType;
172    blocks.push({
173      id: `blk_${i}_${Math.floor(rng() * 1e9).toString(16)}`,
174      type,
175      content: genContent(rng, type),
176      parentId: null,
177      position: cursor,
178      ...(rng() < 0.3
179        ? { properties: { color: pickColor(rng), checked: rng() < 0.5 } }
180        : {}),
181    });
182  }
183  return blocks;
184}
185 
186function pickColor(rng: () => number): string {
187  const colors = ["red", "blue", "green"];
188  return colors[Math.floor(rng() * colors.length)] as string;
189}
190 
191function normalizeBlock(b: BlockLike) {
192  return {
193    id: b.id,
194    type: b.type,
195    content: sortKeys(b.content),
196    parentId: b.parentId,
197    position: b.position,
198    properties: b.properties !== undefined ? sortKeys(b.properties) : undefined,
199  };
200}
201 
202function sortKeys(value: unknown): unknown {
203  if (Array.isArray(value)) return value.map(sortKeys);
204  if (typeof value === "object" && value !== null) {
205    return Object.fromEntries(
206      Object.entries(value as Record<string, unknown>)
207        .sort(([a], [b]) => a.localeCompare(b))
208        .map(([k, v]) => [k, sortKeys(v)]),
209    );
210  }
211  return value;
212}
213 
214/**
215 * The invariant the wire contract actually guarantees after applying a diff's
216 * ops: the same blocks in the same parents in the same RELATIVE order. The
217 * applier recomputes fractional positions from the move/insert ANCHORS (a
218 * wire `move` carries no `position`, and a wire `insert` no `id` — the server
219 * assigns it), so the exact position strings and the inserted block's id are
220 * NOT reproducible. `shapeOf` drops both (keying each sibling by its parent's
221 * rank rather than its id/position) and keeps type + content + properties, so
222 * two applied sets are equal iff they have the same blocks, in the same
223 * parents, in the same relative order, with the same content/properties.
224 */
225function shapeOf(blocks: readonly BlockLike[]): Record<string, { type: string; content: unknown; properties: unknown }> {
226  const byParent = new Map<string | null, BlockLike[]>();
227  for (const b of blocks) {
228    const list = byParent.get(b.parentId) ?? [];
229    list.push(b);
230    byParent.set(b.parentId, list);
231  }
232  const out: Record<string, { type: string; content: unknown; properties: unknown }> = {};
233  for (const [parentId, list] of byParent) {
234    list.sort((a, b) => comparePositions(a.position, b.position));
235    list.forEach((b, rank) => {
236      out[`${parentId ?? "ROOT"}::${rank}`] = {
237        type: b.type,
238        content: sortKeys(b.content),
239        properties: b.properties !== undefined ? sortKeys(b.properties) : undefined,
240      };
241    });
242  }
243  return out;
244}
245 
246const mk = (
247  id: string,
248  pos: Position,
249  type: BlockType = "paragraph",
250  content: Record<string, unknown> = { text: `T${id}` },
251  extra: Partial<BlockLike> = {},
252): BlockLike => ({
253  id,
254  type,
255  content,
256  parentId: null,
257  position: pos,
258  ...extra,
259});
260 
261// --- round-trip ----------------------------------------------------------------
262 
263describe("blocksToYDoc / yDocToBlockList round-trip", () => {
264  it("is lossless for 200 random forests (property)", () => {
265    fc.assert(
266      fc.property(fc.integer({ min: 1, max: 4096 }), (seed) => {
267        const rng = mulberry32(seed);
268        const forest = genForest(rng);
269        const doc = blocksToYDoc(forest, { pageId: "page_test" });
270        try {
271          const back = yDocToBlockList(doc);
272          expect(back.map(normalizeBlock)).toEqual(forest.map(normalizeBlock));
273        } finally {
274          doc.destroy();
275        }
276      }),
277      { numRuns: 200, seed: 0xc0ffee },
278    );
279  });
280 
281  it("reads fragment order (the decode-time truth) and stamps positions", () => {
282    const a = mk("a", generatePosition());
283    const b = mk("b", generatePosition(a.position));
284    const doc = blocksToYDoc([a, b]);
285    try {
286      const list = yDocToBlockList(doc);
287      expect(list.map((x) => x.id)).toEqual(["a", "b"]);
288      expect(list.map((x) => x.position)).toEqual([a.position, b.position]);
289    } finally {
290      doc.destroy();
291    }
292  });
293 
294  it("throws on duplicate ids and on a missing parent", () => {
295    const a = mk("a", "000");
296    expect(() => blocksToYDoc([a, { ...a }])).toThrow(/duplicate/);
297    const orphan = mk("o", "001", "paragraph", { text: "O" }, { parentId: "ghost" });
298    expect(() => blocksToYDoc([a, orphan])).toThrow(/parent/);
299  });
300});
301 
302// --- yDocToBlocks (minimal ops) --------------------------------------------------
303 
304describe("yDocToBlocks (the persister's diff)", () => {
305  it("emits [] for an unchanged doc (idempotency)", () => {
306    const blocks = [mk("a", generatePosition()), mk("b", generatePosition("0001"))];
307    const doc = blocksToYDoc(blocks);
308    try {
309      expect(yDocToBlocks(doc, blocks)).toEqual([]);
310    } finally {
311      doc.destroy();
312    }
313  });
314 
315  it("emits a single content-only update for a text change (minimal patch)", () => {
316    const prev = [mk("a", generatePosition())]; // content { text: "Ta" }
317    const doc = blocksToYDoc(prev);
318    try {
319      const frag = doc.getXmlFragment("blocks");
320      const el = frag.get(0) as Y.XmlElement;
321      (namedChild(el, "text") as Y.XmlText).insert(0, "edited");
322      const ops = yDocToBlocks(doc, prev);
323      expect(ops).toEqual([{ op: "update", id: "a", patch: { content: { text: "editedTa" } } }]);
324      // No `properties`, no `position` — the minimal patch.
325      const patch = (ops[0] as { patch: Record<string, unknown> }).patch;
326      expect(patch.position).toBeUndefined();
327      expect(patch.properties).toBeUndefined();
328    } finally {
329      doc.destroy();
330    }
331  });
332 
333  it("emits a property-only update without content", () => {
334    const prev: BlockLike[] = [
335      mk("a", generatePosition(), "paragraph", { text: "x" }, { properties: { color: "red" } }),
336    ];
337    const doc = blocksToYDoc(prev);
338    try {
339      const frag = doc.getXmlFragment("blocks");
340      const el = frag.get(0) as Y.XmlElement;
341      el.setAttribute("p.color", JSON.stringify("green"));
342      const ops = yDocToBlocks(doc, prev);
343      expect(ops).toEqual([{ op: "update", id: "a", patch: { properties: { color: "green" } } }]);
344    } finally {
345      doc.destroy();
346    }
347  });
348 
349  it("emits a one-anchor move (the wire contract) for a reorder", () => {
350    const p1 = generatePosition();
351    const p2 = generatePosition(p1);
352    const p3 = generatePosition(p2);
353    const prev = [mk("a", p1), mk("b", p2), mk("c", p3)];
354    const beforeP1 = beforePosition(p1); // strictly sorts before p1 (prepend)
355    const doc = blocksToYDoc(prev);
356    try {
357      // Reorder fragment to c, a, b (c takes a new earlier position). A
358      // client move is delete-old + insert-FRESH (the y-prosemirror
359      // snapshot-diff model). Re-inserting the integrated element crashes
360      // yjs 13.6 and `clone(true)` drops the XmlText slots' `name` attr
361      // (YXmlText.clone rebuilds from the delta without attrs), so the
362      // fresh element is built from the block's DATA via blockToYElement
363      // (the same path the server applier uses).
364      const frag = doc.getXmlFragment("blocks");
365      const cBlock = prev[2]!;
366      const fresh = blockToYElement({
367        ...cBlock,
368        position: beforeP1,
369      });
370      frag.delete(2, 1);
371      frag.insert(0, [fresh]);
372      const ops = yDocToBlocks(doc, prev);
373      // c is now at the front of [c, a, b]: it has no predecessor, and its
374      // successor is `a`. The diff anchors on the neighbor it lands BESIDE —
375      // with no `before` (no predecessor) it emits `after: a` ("a is after
376      // me" → I land before a). This is the editor codec's convention
377      // (two-codecs-agree): a block leading its destination siblings uses
378      // `after`.
379      expect(ops.filter((o) => o.op === "move")).toEqual([{ op: "move", id: "c", after: "a" }]);
380      // a and b are untouched (no update ops).
381      expect(ops.filter((o) => o.op === "update")).toEqual([]);
382    } finally {
383      doc.destroy();
384    }
385  });
386 
387  it("emits a delete for a removed block (wire order: deletes first)", () => {
388    const p1 = generatePosition();
389    const p2 = generatePosition(p1);
390    const prev = [mk("a", p1), mk("b", p2)];
391    const doc = blocksToYDoc(prev);
392    try {
393      const frag = doc.getXmlFragment("blocks");
394      frag.delete(1, 1);
395      const ops = yDocToBlocks(doc, prev);
396      expect(ops).toEqual([{ op: "delete", id: "b" }]);
397    } finally {
398      doc.destroy();
399    }
400  });
401});
402 
403// --- op appliers -----------------------------------------------------------------
404 
405describe("applyBlockOperations (plain) / applyBlockOperationsToYDoc (CRDT)", () => {
406  it("applies delete → update → move → insert in wire order", () => {
407    const p1 = generatePosition();
408    const p2 = generatePosition(p1);
409    const p3 = generatePosition(p2);
410    const blocks = [mk("a", p1), mk("b", p2), mk("c", p3)];
411    const ops: BlockOperation[] = [
412      { op: "delete", id: "c" },
413      { op: "update", id: "b", patch: { content: { text: "new b" } } },
414      { op: "move", id: "b", after: "a" },
415      {
416        op: "insert",
417        block: { type: "paragraph", content: { text: "z" }, position: generatePosition() },
418        after: "b",
419      },
420    ];
421    const plain = applyBlockOperations(blocks, ops);
422    // Wire order: deletes → updates → moves → inserts. Under the diff's
423    // neighbors convention (`after:X` = X is the successor, so the block
424    // lands BEFORE X; `before:X` = X is the predecessor → land after X):
425    //   1. delete c          → [a, b]
426    //   2. update b text     → [a, b("new b")]
427    //   3. move b after a    → a is b's successor → b lands before a → [b, a]
428    //   4. insert z after b  → b is z's successor → z lands before b → [z, b, a]
429    expect(plain.map((b) => b.id)).toEqual([plain[0]?.id ?? "", "b", "a"]);
430    expect(plain[0]?.content).toEqual({ text: "z" });
431    expect(plain.find((x) => x.id === "b")?.content).toEqual({ text: "new b" });
432    // The load-bearing rule: the list order (canonical) equals the
433    // position-sorted order. comparePositions is the only valid comparator
434    // for fractional positions.
435    const byPos = [...plain].sort((x, y) => comparePositions(x.position, y.position));
436    expect(byPos.map((b) => b.id)).toEqual(plain.map((b) => b.id));
437    // A re-diff of the settled state against itself is empty (quiescent).
438    expect(diffBlockSets(plain, plain)).toEqual([]);
439  });
440 
441  it("the two appliers agree (Y.Doc vs plain block list) on a nested tree", () => {
442    const p1 = generatePosition();
443    const p2 = generatePosition(p1);
444    const p3 = generatePosition(p2);
445    const p4 = generatePosition(p3);
446    const p5 = generatePosition(p4);
447    const blocks: BlockLike[] = [
448      mk("a", p1),
449      mk("col", p2, "column", { width: 300 }),
450      mk("b", p3),
451      mk("c1", p4, "paragraph", { text: "C1" }, { parentId: "col" }),
452      mk("c2", p5, "paragraph", { text: "C2" }, { parentId: "col" }),
453    ];
454    const ops: BlockOperation[] = [
455      { op: "update", id: "a", patch: { content: { text: "edited" } } },
456      { op: "update", id: "b", patch: { properties: { color: "red" } } },
457      { op: "move", id: "c2", before: "c1" }, // within the column
458      {
459        op: "insert",
460        // Wire `insert` carries no id and `parentId` is `string | undefined`
461        // (absent = root — the applier resolves it via the anchor anyway).
462        block: { type: "paragraph", content: { text: "n" }, position: p3 },
463        before: "b",
464      },
465      { op: "move", id: "c1", before: "b" }, // cross-parent: into the root
466    ];
467    const doc = blocksToYDoc(blocks);
468    try {
469      applyBlockOperationsToYDoc(doc, ops);
470      const fromDoc = yDocToBlockList(doc);
471      const fromPlain = applyBlockOperations(blocks, ops);
472      // Compare by SHAPE (parents + relative order + content + properties),
473      // not by id: the wire `insert` carries no id, so each applier assigns
474      // its own `blk_…` to the inserted block — the ids can never literally
475      // agree, and that is the recorded wire gap. Everything else must.
476      expect(shapeOf(fromDoc)).toEqual(shapeOf(fromPlain));
477      // The moved-in block is in the root (cross-parent via the anchor).
478      expect(fromDoc.find((b) => b.id === "c1")?.parentId).toBeNull();
479    } finally {
480      doc.destroy();
481    }
482  });
483});
484 
485// --- two codecs agree (editor autosave vs collaboration persister) -----------------
486 
487describe("two codecs agree (the load-bearing contract)", () => {
488  function toEditorBlocks(blocks: BlockLike[]) {
489    return blocks.map((b) => ({ ...b, version: 1 }));
490  }
491 
492  /** Canonicalize an op (move: one anchor — the wire contract — so the two
493   *  codecs' anchor choices compare equal when they are the same slot). */
494  function normOp(op: Record<string, unknown>): unknown {
495    if (op.op === "insert") {
496      const block = op.block as Record<string, unknown>;
497      return {
498        op: "insert",
499        block: {
500          type: block.type,
501          content: sortKeys(block.content),
502          properties: block.properties !== undefined ? sortKeys(block.properties) : undefined,
503          parentId: block.parentId ?? null,
504          position: block.position,
505        },
506      };
507    }
508    if (op.op === "update") {
509      const patch = op.patch as Record<string, unknown>;
510      return {
511        op: "update",
512        id: op.id,
513        patch: {
514          ...(patch.content !== undefined ? { content: sortKeys(patch.content) } : {}),
515          ...(patch.properties !== undefined ? { properties: sortKeys(patch.properties) } : {}),
516          ...(patch.position !== undefined ? { position: patch.position } : {}),
517        },
518      };
519    }
520    if (op.op === "move") {
521      return {
522        op: "move",
523        id: op.id,
524        anchor: (op.before as string | undefined) ?? (op.after as string | undefined) ?? null,
525      };
526    }
527    return { op: "delete", id: op.id };
528  }
529 
530  it("diffBlocks (editor) and diffBlockSets (collaboration) emit identical wire ops", () => {
531    const p1 = generatePosition();
532    const p2 = generatePosition(p1);
533    const p3 = generatePosition(p2);
534    const p4 = generatePosition(p3);
535    const p5 = generatePosition(p4);
536    const prev: BlockLike[] = [
537      mk("a", p1),
538      mk("col", p2, "column", { width: 300 }),
539      mk("b", p3),
540      mk("c1", p4, "paragraph", { text: "C1" }, { parentId: "col" }),
541      mk("c2", p5, "paragraph", { text: "C2" }, { parentId: "col" }),
542    ];
543    // next: a edited; b moved after col (root); c1 moved into root after b;
544    // c2 deleted; d inserted before col.
545    const q1 = generatePosition();
546    const q2 = generatePosition(q1);
547    const q3 = generatePosition(q2);
548    const q4 = generatePosition(q3);
549    const q5 = generatePosition(q4);
550    const next: BlockLike[] = [
551      { id: "a", type: "paragraph", content: { text: "edited" }, parentId: null, position: q1 },
552      mk("col", q2, "column", { width: 300 }),
553      mk("d", q3),
554      mk("b", q4),
555      mk("c1", q5, "paragraph", { text: "C1" }),
556    ];
557 
558    const editorOps = diffBlocks(toEditorBlocks(prev), toEditorBlocks(next)).operations;
559    const collabOps = diffBlockSets(prev, next);
560 
561    // Both parse against the shared wire schema (the superRefine one-anchor
562    // rule + the per-type content validation on inserts).
563    for (const op of [...editorOps, ...collabOps]) {
564      expect(blockOperationSchema.safeParse(op).success).toBe(true);
565    }
566    expect(collabOps.map(normOp)).toEqual(editorOps.map(normOp));
567 
568    // Applying the editor's ops to the plain prev set reproduces `next`'s
569    // SHAPE: the same blocks in the same parents in the same relative order
570    // with the same content/properties. The wire `move` op carries no
571    // `position` (the applier recomputes it from the anchors), and the
572    // editor codec's wire `insert` carries no `id` (the server assigns one
573    // for a NEW user-created block — the collab codec's diff, by contrast,
574    // PRESERVES an existing block's id, which the rebase needs; both are
575    // schema-valid since `id` is optional). Either way the exact position
576    // strings and any inserted-block id are NOT reproducible from the wire —
577    // `shapeOf` drops both and keys each sibling by its parent-relative
578    // rank instead.
579    const applied = applyBlockOperations(prev, editorOps);
580    expect(shapeOf(applied)).toEqual(shapeOf(next));
581  });
582 
583  it("unchanged sets produce zero ops in both codecs", () => {
584    const prev = [mk("a", generatePosition()), mk("b", generatePosition("0001"))];
585    expect(diffBlocks(toEditorBlocks(prev), toEditorBlocks(prev)).operations).toEqual([]);
586    expect(diffBlockSets(prev, prev)).toEqual([]);
587  });
588 
589  it("diff → apply round-trips the next state (100 random mutations, property)", () => {
590    fc.assert(
591      fc.property(fc.integer({ min: 1, max: 4096 }), (seed) => {
592        const rng = mulberry32(seed);
593        const base = genForest(rng);
594        if (base.length < 2) return; // need a survivor + a movable block
595        // One random mutation (delete / edit / property / reorder /
596        // parent-change) on a copy of the base forest.
597        const next = base.map((b) => ({ ...b, content: { ...b.content } as BlockLike["content"] }));
598        const target = next[Math.floor(rng() * next.length)] as BlockLike;
599        const mode = Math.floor(rng() * 5);
600        if (mode === 0) {
601          next.splice(next.indexOf(target), 1);
602        } else if (mode === 1) {
603          // Type-aware content edit: a block type only carries the slots its
604          // mapping defines (a `child_page` has `{pageId}`, no `text`), so a
605          // blind `text` injection would produce schema-INVALID content the
606          // mapping-driven Y.Doc applier rightly drops (the plain applier
607          // blindly keeps it) — testing malformed ops, not the contract.
608          // Text-slot types edit their text; the rest get a full valid
609          // content replacement (still a real content-change op).
610          if (mappingForType(target.type).textSlots.includes("text")) {
611            target.content = {
612              ...target.content,
613              text: `edited ${Math.floor(rng() * 1e6)}`,
614            } as BlockLike["content"];
615          } else {
616            target.content = genContent(rng, target.type) as BlockLike["content"];
617          }
618        } else if (mode === 2) {
619          target.properties = { ...(target.properties ?? {}), color: "blue" };
620        } else {
621          // Reorder: swap target's position with another block's (same or
622          // different parent — the parent-change is the wire-gap case the
623          // appliers both resolve through the anchors).
624          const other = next[Math.floor(rng() * next.length)] as BlockLike;
625          if (other !== target) {
626            const tp = target.position;
627            target.position = other.position;
628            other.position = tp;
629            if (rng() < 0.5) target.parentId = other.parentId;
630          }
631        }
632        const ops = diffBlockSets(base, next);
633        for (const op of ops) {
634          expect(blockOperationSchema.safeParse(op).success).toBe(true);
635        }
636        // Both appliers reproduce `next`'s SHAPE from `base` + `ops`.
637        // The wire `move` carries no `position` (the applier recomputes it
638        // from the anchors) and the reorder/parent-change mutations change a
639        // block's position string without changing its slot, so the exact
640        // position strings are NOT reproducible from the wire — the invariant
641        // is shape: same blocks, same parents, same relative order, same
642        // content/properties. `shapeOf` drops ids + exact positions and keys
643        // each sibling by its parent-relative rank.
644        const plain = applyBlockOperations(base, ops);
645        expect(shapeOf(plain)).toEqual(shapeOf(next));
646        const doc = blocksToYDoc(base);
647        try {
648          applyBlockOperationsToYDoc(doc, ops);
649          expect(shapeOf(yDocToBlockList(doc))).toEqual(shapeOf(next));
650        } finally {
651          doc.destroy();
652        }
653      }),
654      { numRuns: 100, seed: 0xbeef },
655    );
656  });
657});
658 
659// --- base64 (the sync.request / sync.state encoding) -------------------------------
660 
661describe("base64 Yjs encoding", () => {
662  it("round-trips a full doc update (encodeDocAsUpdate / decodeBase64Yjs)", () => {
663    const doc = blocksToYDoc([mk("a", generatePosition(), "paragraph", { text: "state" })]);
664    try {
665      const b64 = encodeDocAsUpdate(doc);
666      const bytes = decodeBase64Yjs(b64);
667      const fresh = new Y.Doc();
668      try {
669        Y.applyUpdate(fresh, bytes);
670        expect(yDocToBlockList(fresh).map((b) => b.id)).toEqual(["a"]);
671      } finally {
672        fresh.destroy();
673      }
674    } finally {
675      doc.destroy();
676    }
677  });
678 
679  it("round-trips arbitrary byte arrays (property) + state vector + empty", () => {
680    const doc = blocksToYDoc([mk("a", generatePosition(), "paragraph", { text: "x" })]);
681    try {
682      const sv = encodeDocStateVector(doc);
683      expect(base64ToBytes(sv).length).toBeGreaterThan(0);
684      expect(Array.from(base64ToBytes(bytesToBase64(new Uint8Array(0))))).toEqual([]);
685    } finally {
686      doc.destroy();
687    }
688    fc.assert(
689      fc.property(fc.uint8Array({ maxLength: 1000 }), (bytes) => {
690        expect(Array.from(base64ToBytes(bytesToBase64(bytes)))).toEqual(Array.from(bytes));
691      }),
692      { numRuns: 50, seed: 7 },
693    );
694  });
695});
696 
697// --- structural gate ----------------------------------------------------------------
698 
699describe("mapping structural gate (BLOCK_Y_MAPPINGS vs the shared schemas)", () => {
700  it("covers exactly the shared block types", () => {
701    expect(Object.keys(BLOCK_Y_MAPPINGS).sort()).toEqual([...ALL_TYPES].sort());
702  });
703 
704  it("textSlots + rows + attrKeys exactly partition each type's content keys", () => {
705    for (const type of ALL_TYPES) {
706      const mapping = mappingForType(type);
707      const schemaShape = Object.keys(
708        (BLOCK_CONTENT_SCHEMAS[type] as { shape?: Record<string, unknown> }).shape ?? {},
709      );
710      const mapped = [
711        ...mapping.textSlots,
712        ...(mapping.hasRows ? ["rows"] : []),
713        ...mapping.attrKeys,
714      ].sort();
715      expect(mapped).toEqual([...schemaShape].sort());
716    }
717  });
718 
719  it("throws for an unknown block type", () => {
720    expect(() => mappingForType("not_a_type")).toThrow(/not in the Yjs mapping/);
721  });
722 
723  it("jsonEqual is a deep deterministic equality", () => {
724    expect(jsonEqual({ a: [1, { b: 2 }] }, { a: [1, { b: 2 }] })).toBe(true);
725    expect(jsonEqual({ a: 1 }, { a: 2 })).toBe(false);
726    expect(jsonEqual({ a: undefined }, {})).toBe(false);
727  });
728});
729