.github/9

ISSUE_TEMPLATE/3

bug_report.md config.yml feature_request.md

workflows/3

ci.yml clean-clone.yml release.yml

CODEOWNERS dependabot.yml pull_request_template.md

apps/630

api/250

src/243

common/30

__tests__/3

authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts

filters/1

all-exceptions.filter.ts

guards/3

auth.guard.ts internal-service.guard.ts rate-limit.guard.ts

interceptors/2

actor-context.interceptor.ts bigint-serialization.interceptor.ts

middleware/2

idempotency.test.ts idempotency.ts

pipes/1

zod-validation.pipe.ts

actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts

config/1

env.ts

lib/11

__tests__/5

crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts

authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts

modules/197

ai/28

__tests__/4

ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts

generator/4

executor.ts generate.controller.ts generate.dto.ts generate.service.ts

ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts

api-keys/3

api-keys.controller.ts api-keys.module.ts api-keys.service.ts

audit/2

audit-log.controller.ts audit.module.ts

auth/4

auth.controller.ts auth.module.ts auth.service.ts dto.ts

automations/5

automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts

blocks/5

__tests__/1

batch-version-cas.test.ts

block.service.ts blocks.controller.ts blocks.module.ts dto.ts

comments/4

comments.controller.ts comments.module.ts comments.service.ts dto.ts

databases/9

__tests__/3

normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts

database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts

docs/2

docs.controller.ts docs.module.ts

files/10

__tests__/1

quota.test.ts

dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts

forms/18

debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts

health/3

health.controller.ts health.module.ts health.service.ts

integrations/3

integrations.controller.ts integrations.module.ts integrations.service.ts

internal/12

__tests__/2

flush-query-shape.test.ts internal.endpoints.test.ts

ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts

notifications/3

notifications.controller.ts notifications.module.ts notifications.service.ts

oauth/6

__tests__/1

oauth.scopes.test.ts

oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts

org/15

audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts

orgs/5

dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts

pages/4

dto.ts page.service.ts pages.controller.ts pages.module.ts

scim/15

__tests__/3

email-mapping.test.ts etag.test.ts filters.test.ts

etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts

search/4

__tests__/1

search.service.test.ts

search.controller.ts search.module.ts search.service.ts

sessions/3

sessions.controller.ts sessions.module.ts sessions.service.ts

share/3

share.controller.ts share.module.ts share.service.ts

sso/16

__tests__/4

enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts

enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts

teams/4

dto.ts teams.controller.ts teams.module.ts teams.service.ts

users/4

dto.ts users.controller.ts users.module.ts users.service.ts

webhooks/3

webhooks.controller.ts webhooks.module.ts webhooks.service.ts

workspaces/4

dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts

types/1

xmldom.d.ts

app.module.ts constants.ts main.ts

_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts

realtime/33

src/17

auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts

test/11

auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts

.env.example Dockerfile package.json README.md tsconfig.json

web/255

src/244

app/45

__tests__/1

theme-tokens.test.ts

(app)/26

w/25

[workspace]/25

ask/1

page.tsx

databases/1

[id]/1

page.tsx

favorites/1

page.tsx

files/1

page.tsx

notifications/1

page.tsx

page/4

[id]/4

[block]/1

page.tsx

share/1

page.tsx

layout.tsx page.tsx

search/1

page.tsx

settings/10

appearance/1

page.tsx

automations/3

[id]/1

page.tsx

new/1

page.tsx

page.tsx

billing/1

page.tsx

developers/1

page.tsx

members/1

page.tsx

permissions/1

page.tsx

teams/1

page.tsx

page.tsx

shared/1

page.tsx

templates/1

page.tsx

trash/1

page.tsx

layout.tsx page.tsx

layout.tsx

(auth)/4

login/1

page.tsx

register/1

page.tsx

reset-password/1

page.tsx

layout.tsx

api/2

metrics/1

route.ts

v1/1

health/1

route.ts

f/1

[slug]/1

page.tsx

health/1

ready/1

route.ts

org/2

[orgId]/2

admin/2

integrations/1

page.tsx

page.tsx

share/1

[id]/1

page.tsx

error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx

components/118

admin/10

org-admin/8

ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx

ScimCard.tsx SsoTabs.tsx

ai/6

ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx

automations/5

action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx

collaboration/6

CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx

comments/3

comment-panel.tsx comment-thread.tsx mention-input.tsx

database/27

__tests__/2

cell-editor.test.tsx cell-renderer.test.tsx

AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx

dialogs/7

__tests__/1

move-to-dialog.test.tsx

create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx

editor/19

__tests__/3

code-block-text.test.ts code-block.test.tsx expandable.test.tsx

block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx

files/4

FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx

form/4

form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx

layout/8

__tests__/1

page-tree-icon.test.tsx

command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx

mentions/3

__tests__/1

mention-model.test.ts

mention-model.ts MentionPopup.tsx

search/3

ask-ai-search.tsx results-list.tsx search-dialog.tsx

settings/10

api-keys/4

ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx

webhooks/5

CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx

settings-shell.tsx

ui/3

confirm-dialog.tsx form.tsx toaster.tsx

hooks/21

__tests__/4

realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx

realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts

lib/50

__tests__/21

ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts

files/7

__tests__/2

picker.test.ts upload.test.ts

api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts

ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts

stores/8

__tests__/1

block-patch-store.test.ts

block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts

instrumentation.ts middleware.ts

.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts

worker/92

src/87

__tests__/13

ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts

health/1

server.ts

lib/12

__tests__/1

clamav.test.ts

clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts

processors/56

automations/28

__tests__/3

condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts

executors/17

assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts

condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts

files/15

__tests__/4

errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts

steps/4

finalize.ts metadata.ts scan.ts thumbnails.ts

cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts

search-index/4

builders.ts grants.ts index.ts processor.ts

ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts

config.ts events.ts index.ts logger.ts queues.ts

.env.example Dockerfile package.json README.md tsconfig.json

docs/73

api/17

ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md

architecture/10

ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md

database/2

database-architecture.md redis-keys.md

development/8

admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md

product/4

functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md

requirements/1

requirements-matrix.md

security/5

audit-report.md files.md forms.md license-allowlist.md security-architecture.md

tasks/16

phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md

ui/9

ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md

support-matrix.md

infrastructure/71

caddy/1

Caddyfile

docker/6

init/1

01-extensions.sql

opensearch/1

init-indices.json

.env.docker docker-compose.yml opensearch-init.sh README.md

kubernetes/40

observability/20

alertmanager/1

alertmanager.yaml

grafana/8

dashboards/6

ai.json api-overview.json infra.json realtime.json search.json workers-queues.json

provisioning/2

dashboards/1

dashboards.yaml

datasources/1

datasource.yaml

prometheus/3

alerts.yaml recording-rules.yaml scrape.yaml

scripts/1

sync-sources.mjs

alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml

postgres/7

configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml

api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml

nginx/2

nginx.conf README.md

observability/14

alertmanager/1

alertmanager.yaml

grafana/8

dashboards/6

ai.json api-overview.json infra.json realtime.json search.json workers-queues.json

provisioning/2

dashboards/1

dashboards.yaml

datasources/1

datasource.yaml

prometheus/3

alerts.yaml recording-rules.yaml scrape.yaml

scripts/1

dashboard-completeness.mjs

README.md

terraform/8

compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf

packages/289

ai/24

src/20

providers/7

anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts

schemas/2

database.ts generate.ts

adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts

package.json README.md tsconfig.json vitest.config.ts

auth/11

src/7

index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts

package.json README.md tsconfig.json vitest.config.ts

collaboration/17

src/13

awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

config/7

src/4

eslint.base.js index.ts prettier.base.json tsconfig.base.json

package.json README.md tsconfig.json

database-client/5

src/2

index.test.ts index.ts

package.json README.md tsconfig.json

database-engine/33

src/29

filter/2

filter.test.ts index.ts

formula/8

evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts

query/6

group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts

relations/2

index.ts relations.test.ts

rollups/2

index.ts rollups.test.ts

values/5

dates.ts index.ts registry.ts types.ts values.test.ts

views/3

buttons.ts index.ts views.test.ts

index.ts

package.json README.md tsconfig.json vitest.config.ts

editor/25

src/21

marks/1

highlight.ts

nodes/2

equation.ts mention.ts

autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

observability/20

src/16

__tests__/8

db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts

index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts

package.json README.md tsconfig.json vitest.config.ts

permissions/11

src/7

index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts

package.json README.md tsconfig.json vitest.config.ts

search/22

src/18

chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

shared/61

src/57

dto/17

ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts

events/8

audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts

realtime/6

comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts

automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts

package.json README.md tsconfig.json vitest.config.ts

storage/16

src/12

client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts

package.json README.md tsconfig.json vitest.config.ts

ui/37

src/33

components/19

avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx

color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts

package.json README.md tsconfig.json vitest.config.ts

prisma/16

migrations/13

20260927000000_init/1

migration.sql

20260928000000_search_documents_content_hash/1

migration.sql

20260929000000_workspace_usage_storage_bytes/1

migration.sql

20260930000000_form_submitted_notification_type/1

migration.sql

20261001000000_ai_phase12/1

migration.sql

20261002000000_webhooks_secret_encrypted_dlq/1

migration.sql

20261002111436_webhook_delivery_latency/1

migration.sql

20261002120000_org_admin_2fa_retention_unique/1

migration.sql

20261002215124_audit_export/1

migration.sql

20261003210000_perf_indexes_hot_paths/1

migration.sql

20261004004500_perf_indexes_hot_paths_2/1

migration.sql

migration_lock.toml README.md

schema.prisma seed.ts verify.ts

scripts/7

backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh

tests/169

e2e/63

.auth/1

user.json

fixtures/7

files/6

clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt

realtime.ts

mocks/2

oidc-issuer.ts saml-idp.ts

playwright-report/3

data/2

a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm

index.html

reports/1

files-security.json

specs/34

ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts

test-results-final-flow/3

final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2

test-failed-1.png trace.zip

.last-run.json

utils/4

api.ts dnd.ts search-lag.ts wait.ts

.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json

fixtures/1

files/1

make-sparse.ts

integration/60

ai-capability/2

ai-app.capability.test.ts gateway.capability.test.ts

drill/2

seed-drill.mjs verify-restore.mjs

fixtures/5

files/5

clip.mp4 clip.wav doc.pdf hero-1400.png note.txt

helpers/3

api.ts containers.ts seed.ts

realtime/11

control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts

ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts

performance/28

fixtures/1

search-100k.ts

helpers/2

seed-100k.mjs seed-1k-load.mjs

reports/7

api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json

api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs

security/16

helpers/1

app.ts

audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts

README.md

.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json

archive.tartests/performance/archive.tarraw← performance31,744 B← Back to the app

1metadata.json0000644000000000000000000000561615260342742011734 0ustar0000000000000000{
2  "type": "js",
3  "options": {
4    "paused": null,
5    "vus": null,
6    "duration": null,
7    "iterations": null,
8    "stages": null,
9    "scenarios": {
10      "edit": {
11        "executor": "ramping-vus",
12        "startTime": null,
13        "gracefulStop": "10s",
14        "env": null,
15        "exec": "editLoad",
16        "tags": null,
17        "startVUs": 0,
18        "stages": [
19          {
20            "duration": "5m0s",
21            "target": 10000
22          },
23          {
24            "duration": "15m0s",
25            "target": 10000
26          }
27        ],
28        "gracefulRampDown": null
29      },
30      "presence": {
31        "executor": "constant-vus",
32        "startTime": "0s",
33        "gracefulStop": null,
34        "env": null,
35        "exec": "presenceChurn",
36        "tags": null,
37        "vus": 10,
38        "duration": "20m0s"
39      },
40      "verify": {
41        "executor": "constant-vus",
42        "startTime": "0s",
43        "gracefulStop": null,
44        "env": null,
45        "exec": "verifyWriters",
46        "tags": null,
47        "vus": 4,
48        "duration": "20m10s"
49      }
50    },
51    "executionSegment": null,
52    "executionSegmentSequence": null,
53    "noSetup": null,
54    "setupTimeout": null,
55    "noTeardown": null,
56    "teardownTimeout": null,
57    "rps": null,
58    "dns": {
59      "ttl": null,
60      "select": null,
61      "policy": null
62    },
63    "maxRedirects": null,
64    "userAgent": null,
65    "batch": null,
66    "batchPerHost": null,
67    "httpDebug": null,
68    "insecureSkipTLSVerify": null,
69    "tlsCipherSuites": null,
70    "tlsVersion": null,
71    "tlsAuth": null,
72    "throw": null,
73    "thresholds": {
74      "connect_ms": [
75        "p(95)<1000"
76      ],
77      "join_failures": [
78        "rate<0.001"
79      ],
80      "op_ack_ms": [
81        "p(95)<200"
82      ],
83      "protocol_errors": [
84        "count<1"
85      ],
86      "ws_unexpected_closes": [
87        "rate<0.005"
88      ]
89    },
90    "blacklistIPs": null,
91    "blockHostnames": null,
92    "hosts": null,
93    "noConnectionReuse": null,
94    "noVUConnectionReuse": null,
95    "minIterationDuration": null,
96    "ext": null,
97    "summaryTrendStats": [
98      "avg",
99      "min",
100      "med",
101      "p(90)",
102      "p(95)",
103      "p(99)",
104      "max"
105    ],
106    "summaryTimeUnit": null,
107    "systemTags": [
108      "check",
109      "error",
110      "error_code",
111      "expected_response",
112      "group",
113      "method",
114      "name",
115      "proto",
116      "scenario",
117      "service",
118      "status",
119      "subproto",
120      "tls_version",
121      "url"
122    ],
123    "tags": null,
124    "metricSamplesBufferSize": null,
125    "noCookiesReset": null,
126    "discardResponseBodies": null
127  },
128  "filename": "file:///home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory/tests/performance/realtime-load.js",
129  "pwd": "file:///home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory/tests/performance",
130  "env": {},
131  "compatibilityMode": "extended",
132  "k6version": "0.57.0",
133  "goos": "linux"
134}
135data0000644000000000000000000005176415260342742010122 0ustar0000000000000000/**
136 * AI Software Factory — k6: realtime 10k load (TASK-0135, the §26 matrix).
137 *
138 * Scenario (the spec, verbatim):
139 *   - connect   10,000 concurrent ws over 5 min (100 rooms × 100 conns,
140 *               jittered join), then held 15 min steady state.
141 *   - edit      all 10k send block-edit (Yjs update) ops, 200 msg/s aggregate
142 *               (rate-limited per-conn: 200/10000 = 0.02 msg/s = 1 op/50 s).
143 *   - presence  1,000 presence identities, join/leave churn 10/min.
144 *   - (verify)  a dedicated room the zero-dropped-op hash check targets.
145 *
146 * Thresholds (staging-hard):
147 *   op_ack_ms           p(95) < 200 ms   (client-observed send-update → ack)
148 *   connect_ms          p(95) < 1 000 ms (connect → hello)
149 *   protocol_errors     count  < 1       (0 FORBIDDEN / bad_update / error)
150 *   ws_unexpected_closes rate  < 0.005   (disconnects < 0.5%, excl. the
151 *                                          scripted clean close at deadline)
152 *
153 * Zero-dropped Yjs ops (the spec's "final doc state hash equals the
154 * sequential-replay hash") is a HOST-SIDE check, not a k6 threshold — k6's
155 * goja VM has no Yjs to hash a doc. `run-realtime-load.sh` (this dir) does it:
156 * the k6 `verify-writers` scenario sends a fixed, known set of Yjs updates to
157 * the `page:verify` room; the runner connects, full-syncs that room, and asserts
158 * the server's final doc state hashes to the same value as a fresh Yjs doc with
159 * exactly those updates applied in order. A lost update changes the hash.
160 *
161 * Protocol (the real TASK-0091 contract — packages/shared frames.ts), reusing
162 * tests/performance/realtime-1k.js conventions:
163 *   connect:  <K6_REALTIME_URL>/realtime?token=<jwt>&room=page:<pageId>
164 *             header: X-Forwarded-For: 10.100.<a>.<b>   (per-VU identity)
165 *   hello:    {type:"hello", connId, canEdit, serverTime, roomPeers}
166 *   update:   binary 0x01 + YjsUpdate  → server logs it and replies
167 *   ack:      {type:"ack", seq}         (the op-ack — measured here)
168 *   awareness: binary 0x02 + JSON state
169 *   ping:     {type:"ping", ts}         → {type:"ping-pong", ts}
170 *
171 * Why 10,000 distinct identities + distinct source IPs (MANDATORY): the
172 * server caps 100 live sockets/user + 10/user control + 30/min connect per
173 * source IP. One shared token can never reach 10,000 (the 101st is 429). Each
174 * VU mints its own HS256 JWT (k6/crypto) for a distinct seeded user id and
175 * presents a per-socket X-Forwarded-For, so the server must run
176 * REALTIME_TRUST_PROXY=1. The identities + EDIT grants come from the seeder
177 * (helpers/seed-1k-load.mjs with K6_USERS=10000 + K6_PAGE_IDS = 100 rooms).
178 *
179 * Env:
180 *   K6_REALTIME_URL    ws base (default ws://localhost:4001)
181 *   K6_JWT_SECRET      shared HS256 secret (required — must match the server)
182 *   K6_WORKSPACE_ID    the loaded workspace (required)
183 *   K6_PAGE_IDS        100 room page ids, comma-separated (required)
184 *   K6_VUS             total edit VUs (default 10000)
185 *   K6_RAMP_SECONDS    ramp 0→VUS (default 300 = 5 min)
186 *   K6_HOLD_SECONDS    steady state (default 900 = 15 min)
187 *   K6_PRESENCE_VUS    presence identities (default 1000)
188 *   K6_OP_ACK_P95_MS   op-ack p95 budget (default 200)
189 *   K6_CONNECT_P95_MS  connect p95 budget (default 1000)
190 *   K6_STRICT          "1" hard (default) / "0" report-only (trivially-true
191 *                      thresholds; the run still prints real values)
192 *
193 * Run (staging):  K6_STRICT=1 … run-realtime-load.sh
194 * Run (smoke):    K6_PROFILE=smoke pnpm --dir tests/performance realtime-load
195 */
196import ws from "k6/ws";
197import crypto from "k6/crypto";
198import encoding from "k6/encoding";
199import { sleep } from "k6";
200import { Trend, Rate, Counter } from "k6/metrics";
201 
202const OP_ACK_MS = new Trend("op_ack_ms", true);
203const CONNECT_MS = new Trend("connect_ms", true);
204const RTT_MS = new Trend("rtt_ms", true);
205const joinFailures = new Rate("join_failures");
206const protocolErrors = new Counter("protocol_errors");
207const unexpectedCloses = new Rate("ws_unexpected_closes");
208const updateAcks = new Counter("update_acks");
209const presenceJoins = new Counter("presence_joins");
210 
211const WS_URL = __ENV.K6_REALTIME_URL || "ws://localhost:4001";
212const SECRET = __ENV.K6_JWT_SECRET || "";
213const WORKSPACE_ID = __ENV.K6_WORKSPACE_ID || "";
214const PAGE_IDS = String(__ENV.K6_PAGE_IDS || "").split(",").filter(Boolean);
215const SMOKE = __ENV.K6_PROFILE === "smoke";
216const STRICT = (__ENV.K6_STRICT || "1") !== "0";
217 
218const VUS = parseInt(__ENV.K6_VUS || (SMOKE ? "100" : "10000"), 10);
219const RAMP_SECONDS = parseInt(__ENV.K6_RAMP_SECONDS || (SMOKE ? "10" : "300"), 10);
220const HOLD_SECONDS = parseInt(__ENV.K6_HOLD_SECONDS || (SMOKE ? "20" : "900"), 10);
221const PRESENCE_VUS = parseInt(__ENV.K6_PRESENCE_VUS || (SMOKE ? "10" : "1000"), 10);
222const OP_ACK_P95_MS = parseInt(__ENV.K6_OP_ACK_P95_MS || "200", 10);
223const CONNECT_P95_MS = parseInt(__ENV.K6_CONNECT_P95_MS || "1000", 10);
224 
225// 200 msg/s aggregate across VUS ⇒ per-VU cadence (rate-limited per-conn).
226const MSG_INTERVAL_MS = Math.max(100, Math.round((VUS * 1000) / 200));
227// Presence churn: 10 join/leave cycles per minute fleet-wide. A small active
228// set of `PRESENCE_ACTIVE` VUs (constant-vus) each runs one join→awareness→
229// leave cycle per minute; each wave draws PRESENCE_ACTIVE DISTINCT identities
230// (see presenceChurn), advancing the pool by that many — so all PRESENCE_VUS
231// identities are exercised over the run. Smoke caps the pool to 10 (the
232// seeded smoke fixture has 100 load users; the pool only needs a slice).
233const PRESENCE_ACTIVE = 10;
234 
235// The zero-dropped-op verify room + its fixed update set (host-replayed).
236// A dedicated seeded page id for the verify room (the server only joins
237// rooms for real pages). The runner/seeder creates it (K6_PAGES includes
238// load-p-verify); overridable.
239const VERIFY_ROOM = __ENV.K6_VERIFY_PAGE_ID || "load-p-verify";
240// 4 valid Yjs updates (base64) — each inserts a distinct marker into the Y.Text
241// "k6". Re-applying is an idempotent no-op, but a LOST one is not: the final
242// doc is missing that insert, so its state hash differs from the replay.
243// (Same regenerated set as realtime-1k.js — see its header note.)
244const YJS_UPDATES = [
245  "AQGCprqECwAEAQJrNhlrNiBsb2FkIHVwZGF0ZSB2YXJpYW50IDAgAA==",
246  "AQHgk6jsCgAEAQJrNhlrNiBsb2FkIHVwZGF0ZSB2YXJpYW50IDEgAA==",
247  "AQGf2MjCBAAEAQJrNhlrNiBsb2FkIHVwZGF0ZSB2YXJpYW50IDIgAA==",
248  "AQHzmP0+AAQBAms2GWs2IGxvYWQgdXBkYXRlIHZhcmlhbnQgMyAA",
249];
250const BINARY_KIND = { Update: 0x01, Awareness: 0x02 };
251 
252/** base64url for JWT segments (no padding). */
253function b64url(input) {
254  return input.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
255}
256 
257/**
258 * Mint an access JWT (HS256, shared secret) — the exact claims shape
259 * @factory/auth/tokens + apps/realtime/src/auth.ts accept: sub, workspaces[],
260 * iat, exp (unix seconds), jti. (Reused from realtime-1k.js.)
261 */
262function mintToken(sub, workspaces) {
263  const nowSec = Math.floor(Date.now() / 1000);
264  const header = b64url(encoding.b64encode(JSON.stringify({ alg: "HS256", typ: "JWT" }), "base64"));
265  const claims = b64url(
266    encoding.b64encode(
267      JSON.stringify({
268        sub: sub,
269        workspaces: workspaces,
270        iat: nowSec,
271        exp: nowSec + 900,
272        jti: `k6-${sub}-${nowSec}`,
273      }),
274      "base64",
275    ),
276  );
277  const sig = b64url(crypto.hmac("sha256", SECRET, `${header}.${claims}`, "base64"));
278  return `${header}.${claims}.${sig}`;
279}
280 
281/** binary 0x01 + a valid Yjs update → ArrayBuffer for ws.sendBinary. */
282function updateFrame(variant) {
283  const bytes = encoding.b64decode(YJS_UPDATES[variant % YJS_UPDATES.length], "base64");
284  const out = new Uint8Array(bytes.length + 1);
285  out[0] = BINARY_KIND.Update;
286  out.set(bytes, 1);
287  return out.buffer;
288}
289 
290/** binary 0x02 + a small awareness state. */
291function awarenessFrame(userId) {
292  const payload = JSON.stringify({
293    user: { id: userId, name: "k6", color: "slate" },
294    cursor: { x: (userId.length * 7) % 800, y: (userId.length * 13) % 600 },
295  });
296  const data = encoding.b64encode(payload, "utf8");
297  const out = new Uint8Array(data.length + 1);
298  out[0] = BINARY_KIND.Awareness;
299  out.set(data, 1);
300  return out.buffer;
301}
302 
303export function setup() {
304  if (!SECRET) throw new Error("setup: K6_JWT_SECRET is required (the shared HS256 secret)");
305  if (!WORKSPACE_ID) throw new Error("setup: K6_WORKSPACE_ID is required (the seeder prints it)");
306  if (PAGE_IDS.length === 0) throw new Error("setup: K6_PAGE_IDS is required (100 room page ids)");
307  if (!SMOKE && PAGE_IDS.length < 100) {
308    throw new Error(`setup: full profile needs 100 room page ids, got ${PAGE_IDS.length}`);
309  }
310  return { ok: true };
311}
312 
313/**
314 * The 10k edit scenario: connect (jittered), hold, send Yjs update ops at the
315 * per-conn rate-limited cadence, clean close. Measures connect_ms + op_ack_ms.
316 */
317export function editLoad() {
318  const vu = __VU;
319  // 4-digit ids — the seeder (helpers/seed-1k-load.mjs) creates
320  // k6-load-u-0000 … k6-load-u-9999 (10,000 fit exactly in 4 digits).
321  const pad4 = String(vu - 1).padStart(4, "0");
322  const userId = `k6-load-u-${pad4}`;
323  const ip = `10.100.${Math.floor((vu - 1) / 256)}.${(vu - 1) % 256}`;
324  // 100 rooms × 100 conns: VU i → room (i-1) mod 100.
325  const roomIdx = (vu - 1) % Math.max(1, Math.min(100, PAGE_IDS.length));
326  const pageId = PAGE_IDS[roomIdx];
327  const token = mintToken(userId, [WORKSPACE_ID]);
328 
329  // Real thundering-herd de-correlation: a per-VU 0..~1.05 s pre-DELAY (an
330  // actual sleep, not a timestamp offset) so the 100 conns of a room don't all
331  // hit the upgrade in the same instant. The ramp already spreads joins; this
332  // adds room-level de-correlation. connectStart is the TRUE connect time
333  // (after the delay) so CONNECT_MS (connect→hello) is a real, non-negative
334  // latency.
335  sleep((vu % 7) * 0.15);
336  const connectStart = Date.now();
337 
338  const url = `${WS_URL}/realtime?token=${encodeURIComponent(token)}&room=${encodeURIComponent(`page:${pageId}`)}`;
339  const holdMs = Math.max(1000, HOLD_SECONDS * 1000);
340  let joined = false;
341  let lastSentTs = 0; // for op-ack (one outstanding update per VU at this rate)
342  const sentTs = {};
343 
344  // NOTE: ws.connect's return value is NOT used for success detection. On
345  // k6 v0.57 the returned object has no reliable `.Status` (measured
346  // `undefined` on a successful join, and property access on the native
347  // value throws in goja) — so `resp.Status !== 101` would false-positive
348  // (or throw) on every HEALTHY join. The only robust success signal is the
349  // server's `hello` frame, which it sends only after the full auth + room +
350  // permission chain resolves. `joined` (set in the on-message handler below)
351  // is therefore the join-success oracle; `!joined` after the hold = a join
352  // failure (covers 401/403/400/429 upgrade rejects AND the 500-permission
353  // path, which upgrades OK but never sends hello).
354  ws.connect(
355    url,
356    { headers: { "x-forwarded-for": ip } },
357    (socket) => {
358      socket.on("message", (raw) => {
359        let msg;
360        try {
361          msg = JSON.parse(raw);
362        } catch {
363          return;
364        }
365        switch (msg.type) {
366          case "hello":
367            joined = true;
368            CONNECT_MS.add(Date.now() - connectStart); // connect → hello
369            if (msg.canEdit !== true) protocolErrors.add(1); // VIEW hello = wiring bug
370            break;
371          case "ack":
372            // op-ack: the client-observed latency of a sent update.
373            updateAcks.add(1);
374            if (lastSentTs) OP_ACK_MS.add(Date.now() - lastSentTs);
375            break;
376          case "ping-pong":
377            if (typeof msg.ts === "number" && sentTs[msg.ts]) {
378              RTT_MS.add(Date.now() - msg.ts);
379              delete sentTs[msg.ts];
380            }
381            break;
382          case "error":
383            protocolErrors.add(1);
384            break;
385          // sync.state / doc.persisted / … — ignore.
386        }
387      });
388      socket.on("binaryMessage", () => {}); // relayed updates/awareness
389      socket.on("close", () => {
390        // "Unexpected" = we HAD a good join (hello arrived) and the socket
391        // dropped before the hold window. A failed join (rejected upgrade, or
392        // the 500-permission path — no hello) is a join_failure, not an
393        // unexpected close, so gate on `joined`.
394        if (joined && Date.now() < connectStart + holdMs - 5000) unexpectedCloses.add(1);
395      });
396      socket.on("error", () => protocolErrors.add(1));
397 
398      // The rate-limited 200 msg/s aggregate: one op per MSG_INTERVAL_MS,
399      // alternating update / awareness / ping (the block-edit op is the update).
400      let tick = 0;
401      socket.setInterval(() => {
402        const r = Math.random();
403        if (r < 0.6) {
404          lastSentTs = Date.now();
405          socket.sendBinary(updateFrame(tick));
406        } else if (r < 0.8) {
407          socket.sendBinary(awarenessFrame(userId));
408        } else {
409          const ts = Date.now();
410          sentTs[ts] = true;
411          socket.send(JSON.stringify({ type: "ping", ts: ts }));
412        }
413        tick += 1;
414      }, MSG_INTERVAL_MS);
415 
416      socket.setTimeout(() => {
417        if (joined) socket.close(1000); // scripted clean close (not a disconnect)
418      }, holdMs);
419    },
420  );
421 
422  // HOLD the VU. k6 v0.57's ws.connect is NON-BLOCKING: it returns as soon as
423  // the upgrade is initiated, so without an explicit hold the iteration
424  // returns instantly and k6 fires the next one — a tight connect-retry loop
425  // (measured: ~1,068 iters/s, 42k joins in a 30 s smoke). The socket's
426  // setInterval (edit cadence) + setTimeout (scripted close at holdMs) keep
427  // the connection alive and drive the metrics; each 1 s sleep YIELDS to the
428  // socket event loop (k6 timers need the VU to yield), so the edit cadence
429  // keeps ticking. The socket's own close ends this iteration (k6 returns a
430  // VU to the pool when its socket closes).
431  const editDeadline = Date.now() + holdMs + 5_000; // grace past the scripted close
432  while (Date.now() < editDeadline) sleep(1);
433 
434  // Join-failure detection — the `hello` oracle (see the note above ws.connect).
435  // No hello by the end of the hold = the join never established (bad token /
436  // 403 / 429 / 400, or the 500-permission path that upgrades but never
437  // sends hello). On a healthy post-fix server this stays ~0; on the current
438  // buggy server it is ~1.0 (the dev report prints it without blocking).
439  if (!joined) joinFailures.add(1);
440}
441 
442/**
443 * Presence churn: 10 active VUs, each a join→awareness→leave cycle once a
444 * minute (10/min fleet), round-robining the PRESENCE_VUS identity pool.
445 */
446export function presenceChurn() {
447  const cycle = __ITER + 1;
448  // 10 active VUs × one cycle per minute = 10 join/leave cycles per minute
449  // fleet-wide. The `+ (__VU - 1)` offset makes each wave draw 10 DISTINCT
450  // identities (constant-vus gives every VU its own __ITER, so without the
451  // offset all 10 VUs of a wave would reuse the same identity); each wave
452  // advances the pool by PRESENCE_ACTIVE, so all PRESENCE_VUS identities are
453  // exercised over the run.
454  const userIdx = ((cycle - 1) * PRESENCE_ACTIVE + (__VU - 1)) % PRESENCE_VUS;
455  // Presence identities reuse the seeded load-user pool (k6-load-u-XXXX —
456  // they carry the workspace EDIT grant; a k6-pres-u-* id would have no user
457  // row and 403 the join).
458  const pad4 = String(userIdx).padStart(4, "0");
459  const userId = `k6-load-u-${pad4}`;
460  const ip = `10.100.${200 + Math.floor(userIdx / 256)}.${userIdx % 256}`;
461  const pageId = PAGE_IDS[userIdx % PAGE_IDS.length];
462  const token = mintToken(userId, [WORKSPACE_ID]);
463 
464  const url = `${WS_URL}/realtime?token=${encodeURIComponent(token)}&room=${encodeURIComponent(`page:${pageId}`)}`;
465  // joined is the join-success oracle (hello frame) — see the note in
466  // editLoad. Presence joins are short; a join that never hellos within the
467  // 5 s dwell is a join_failure.
468  let joined = false;
469  ws.connect(
470    url,
471    { headers: { "x-forwarded-for": ip } },
472    (socket) => {
473      socket.on("message", (raw) => {
474        let msg;
475        try {
476          msg = JSON.parse(raw);
477        } catch {
478          return;
479        }
480        if (msg.type === "hello") {
481          joined = true;
482          presenceJoins.add(1);
483          socket.sendBinary(awarenessFrame(userId));
484        } else if (msg.type === "error") {
485          protocolErrors.add(1);
486        }
487      });
488      socket.on("binaryMessage", () => {});
489      // Short presence dwell (5 s) then leave — the join/leave churn.
490      socket.setTimeout(() => {
491        if (joined) socket.close(1000);
492      }, 5000);
493    },
494  );
495 
496  // HOLD the VU (ws.connect is non-blocking on k6 v0.57 — same as editLoad):
497  // hold ~7 s past the scripted 5 s presence dwell, then let the next cycle
498  // draw a fresh identity.
499  const presenceDeadline = Date.now() + 7_000;
500  while (Date.now() < presenceDeadline) sleep(1);
501  if (!joined) joinFailures.add(1);
502}
503 
504/**
505 * The zero-dropped-op verify writers: a small set of VUs in the dedicated
506 * `page:verify` room, each sending the 4 known Yjs updates exactly once. The
507 * host runner (run-realtime-load.sh) full-syncs this room and asserts its doc
508 * state hash == a fresh doc replayed with these 4 updates (loss ⇒ mismatch).
509 */
510export function verifyWriters() {
511  // Reuse the first seeded load users (k6-load-u-0000… — they exist in both
512  // the 100-user smoke seed and the 10,000-user full seed and carry the
513  // workspace EDIT grant).
514  const userId = `k6-load-u-${String(__VU - 1).padStart(4, "0")}`;
515  const ip = `10.100.250.${__VU}`;
516  const token = mintToken(userId, [WORKSPACE_ID]);
517  const url = `${WS_URL}/realtime?token=${encodeURIComponent(token)}&room=${encodeURIComponent(`page:${VERIFY_ROOM}`)}`;
518  // joined is the join-success oracle (hello frame) — see the note in
519  // editLoad. A verify writer that never hellos sends no updates (the update
520  // send is gated on `joined`), so the host-side hash check would already
521  // catch the loss; this metric records the join failure explicitly.
522  let joined = false;
523  ws.connect(
524    url,
525    { headers: { "x-forwarded-for": ip } },
526    (socket) => {
527      socket.on("message", (raw) => {
528        let msg;
529        try {
530          msg = JSON.parse(raw);
531        } catch {
532          return;
533        }
534        if (msg.type === "hello") joined = true;
535        else if (msg.type === "error") protocolErrors.add(1);
536      });
537      socket.on("binaryMessage", () => {});
538      socket.on("close", () => {});
539      // Send all 4 verify updates once the room is joined, then hold.
540      socket.setTimeout(() => {
541        if (!joined) return;
542        for (let v = 0; v < YJS_UPDATES.length; v++) {
543          socket.sendBinary(updateFrame(v));
544        }
545      }, 2000);
546      socket.setTimeout(() => {
547        if (joined) socket.close(1000);
548      }, Math.max(4000, HOLD_SECONDS * 1000));
549    },
550  );
551 
552  // HOLD the VU (ws.connect is non-blocking on k6 v0.57): hold through the
553  // scripted close (max(4 s, HOLD) + the 2 s send delay) so this VU's verify
554  // updates are actually delivered before the iteration ends.
555  const verifyDeadline = Date.now() + Math.max(4000, HOLD_SECONDS * 1000) + 5_000;
556  while (Date.now() < verifyDeadline) sleep(1);
557  if (!joined) joinFailures.add(1);
558}
559 
560const HARD_THRESHOLDS = {
561  op_ack_ms: [`p(95)<${OP_ACK_P95_MS}`],
562  connect_ms: [`p(95)<${CONNECT_P95_MS}`],
563  // A load run that establishes ZERO connections has measured nothing — the
564  // op-ack / connect Trends stay empty (avg 0) and would otherwise pass the
565  // p95 budgets vacuously while 100% of handshakes fail. Gate on the
566  // establishment rate so the hard tier actually requires healthy joins.
567  // (Soft is `rate<=1` = always-pass, so report-only runs stay green.)
568  join_failures: ["rate<0.001"],
569  protocol_errors: ["count<1"],
570  ws_unexpected_closes: ["rate<0.005"],
571};
572// Report-only (K6_STRICT=0): thresholds that can NEVER fail, so the dev/main
573// tier always stays green while the summary still prints the real values.
574// NOTE: k6 Rate thresholds are a FRACTION (0..1), so `rate<=1` is the true
575// "always-pass" bound (a 100% failure rate is exactly 1.0, which would fail
576// `rate<1` — that red-on-soft bug is what the `<=` fixes).
577const SOFT_THRESHOLDS = {
578  op_ack_ms: ["avg<1e15"],
579  connect_ms: ["avg<1e15"],
580  join_failures: ["rate<=1"],
581  protocol_errors: ["count<1e15"],
582  ws_unexpected_closes: ["rate<=1"],
583};
584 
585export const options = {
586  scenarios: {
587    // 10k concurrent over RAMP (5 min), held HOLD (15 min) steady.
588    edit: {
589      executor: "ramping-vus",
590      startVUs: 0,
591      stages: [
592        { duration: `${RAMP_SECONDS}s`, target: VUS },
593        { duration: `${HOLD_SECONDS}s`, target: VUS },
594      ],
595      gracefulStop: "10s",
596      exec: "editLoad",
597    },
598    // Presence churn 10/min (PRESENCE_ACTIVE VUs × 1 cycle/min).
599    presence: {
600      executor: "constant-vus",
601      startTime: "0s",
602      duration: `${RAMP_SECONDS + HOLD_SECONDS}s`,
603      vus: PRESENCE_ACTIVE,
604      exec: "presenceChurn",
605    },
606    // Zero-dropped-op verify writers (dedicated room).
607    verify: {
608      executor: "constant-vus",
609      startTime: "0s",
610      duration: `${RAMP_SECONDS + HOLD_SECONDS + 10}s`,
611      vus: SMOKE ? 1 : 4,
612      exec: "verifyWriters",
613    },
614  },
615  thresholds: STRICT ? HARD_THRESHOLDS : SOFT_THRESHOLDS,
616  summaryTrendStats: ["avg", "min", "med", "p(90)", "p(95)", "p(99)", "max"],
617};
618file0000755000000000000000000000000015260342742010111 5ustar0000000000000000file/home0000755000000000000000000000000015260342742011041 5ustar0000000000000000file/home/nobody0000755000000000000000000000000015260342742012333 5ustar0000000000000000file/home/nobody/DeepSeek-Harness0000755000000000000000000000000015260342742015421 5ustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding0000755000000000000000000000000015260342742016624 5ustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding/notion0000755000000000000000000000000015260342742020132 5ustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory0000755000000000000000000000000015260342742024020 5ustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory/tests0000755000000000000000000000000015260342742025162 5ustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory/tests/performance0000755000000000000000000000000015260342742027463 5ustar0000000000000000realtime-load.js0000000000000000000000000000000000000000000033277 1dataustar0000000000000000file/home/nobody/DeepSeek-Harness/Coding/notion/ai-software-factory/tests/performance