.github/9
ISSUE_TEMPLATE/3bug_report.md config.yml feature_request.md
workflows/3ci.yml clean-clone.yml release.yml
CODEOWNERS dependabot.yml pull_request_template.md
apps/630
api/250
src/243
common/30
__tests__/3authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts
filters/1all-exceptions.filter.ts
guards/3auth.guard.ts internal-service.guard.ts rate-limit.guard.ts
interceptors/2actor-context.interceptor.ts bigint-serialization.interceptor.ts
middleware/2idempotency.test.ts idempotency.ts
pipes/1zod-validation.pipe.ts
actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts
config/1env.ts
lib/11
__tests__/5crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts
authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts
modules/197
ai/28
__tests__/4ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts
generator/4executor.ts generate.controller.ts generate.dto.ts generate.service.ts
ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts
api-keys/3api-keys.controller.ts api-keys.module.ts api-keys.service.ts
audit/2audit-log.controller.ts audit.module.ts
auth/4auth.controller.ts auth.module.ts auth.service.ts dto.ts
automations/5automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts
blocks/5
__tests__/1batch-version-cas.test.ts
block.service.ts blocks.controller.ts blocks.module.ts dto.ts
comments/4comments.controller.ts comments.module.ts comments.service.ts dto.ts
databases/9
__tests__/3normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts
database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts
docs/2docs.controller.ts docs.module.ts
files/10
__tests__/1quota.test.ts
dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts
forms/18debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts
health/3health.controller.ts health.module.ts health.service.ts
integrations/3integrations.controller.ts integrations.module.ts integrations.service.ts
internal/12
__tests__/2flush-query-shape.test.ts internal.endpoints.test.ts
ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts
notifications/3notifications.controller.ts notifications.module.ts notifications.service.ts
oauth/6
__tests__/1oauth.scopes.test.ts
oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts
org/15audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts
orgs/5dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts
pages/4dto.ts page.service.ts pages.controller.ts pages.module.ts
scim/15
__tests__/3email-mapping.test.ts etag.test.ts filters.test.ts
etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts
search/4
__tests__/1search.service.test.ts
search.controller.ts search.module.ts search.service.ts
sessions/3sessions.controller.ts sessions.module.ts sessions.service.ts
share/3share.controller.ts share.module.ts share.service.ts
sso/16
__tests__/4enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts
enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts
teams/4dto.ts teams.controller.ts teams.module.ts teams.service.ts
users/4dto.ts users.controller.ts users.module.ts users.service.ts
webhooks/3webhooks.controller.ts webhooks.module.ts webhooks.service.ts
workspaces/4dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts
types/1xmldom.d.ts
app.module.ts constants.ts main.ts
_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts
realtime/33
src/17auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts
test/11auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts
.env.example Dockerfile package.json README.md tsconfig.json
web/255
src/244
app/45
__tests__/1theme-tokens.test.ts
(app)/26
w/25
[workspace]/25
ask/1page.tsx
databases/1
[id]/1page.tsx
favorites/1page.tsx
files/1page.tsx
notifications/1page.tsx
page/4
[id]/4
[block]/1page.tsx
share/1page.tsx
layout.tsx page.tsx
search/1page.tsx
settings/10
appearance/1page.tsx
automations/3
[id]/1page.tsx
new/1page.tsx
page.tsx
billing/1page.tsx
developers/1page.tsx
members/1page.tsx
permissions/1page.tsx
teams/1page.tsx
page.tsx
shared/1page.tsx
templates/1page.tsx
trash/1page.tsx
layout.tsx page.tsx
layout.tsx
(auth)/4
login/1page.tsx
register/1page.tsx
reset-password/1page.tsx
layout.tsx
api/2
metrics/1route.ts
v1/1
health/1route.ts
f/1
[slug]/1page.tsx
health/1
ready/1route.ts
org/2
[orgId]/2
admin/2
integrations/1page.tsx
page.tsx
share/1
[id]/1page.tsx
error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx
components/118
admin/10
org-admin/8ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx
ScimCard.tsx SsoTabs.tsx
ai/6ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx
automations/5action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx
collaboration/6CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx
comments/3comment-panel.tsx comment-thread.tsx mention-input.tsx
database/27
__tests__/2cell-editor.test.tsx cell-renderer.test.tsx
AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx
dialogs/7
__tests__/1move-to-dialog.test.tsx
create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx
editor/19
__tests__/3code-block-text.test.ts code-block.test.tsx expandable.test.tsx
block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx
files/4FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx
form/4form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx
layout/8
__tests__/1page-tree-icon.test.tsx
command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx
mentions/3
__tests__/1mention-model.test.ts
mention-model.ts MentionPopup.tsx
search/3ask-ai-search.tsx results-list.tsx search-dialog.tsx
settings/10
api-keys/4ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx
webhooks/5CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx
settings-shell.tsx
ui/3confirm-dialog.tsx form.tsx toaster.tsx
hooks/21
__tests__/4realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx
realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts
lib/50
__tests__/21ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts
files/7
__tests__/2picker.test.ts upload.test.ts
api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts
ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts
stores/8
__tests__/1block-patch-store.test.ts
block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts
instrumentation.ts middleware.ts
.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts
worker/92
src/87
__tests__/13ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts
health/1server.ts
lib/12
__tests__/1clamav.test.ts
clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts
processors/56
automations/28
__tests__/3condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts
executors/17assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts
condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts
files/15
__tests__/4errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts
steps/4finalize.ts metadata.ts scan.ts thumbnails.ts
cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts
search-index/4builders.ts grants.ts index.ts processor.ts
ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts
config.ts events.ts index.ts logger.ts queues.ts
.env.example Dockerfile package.json README.md tsconfig.json
docs/73
api/17ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md
architecture/10ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md
database/2database-architecture.md redis-keys.md
development/8admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md
product/4functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md
requirements/1requirements-matrix.md
security/5audit-report.md files.md forms.md license-allowlist.md security-architecture.md
tasks/16phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md
ui/9ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md
support-matrix.md
infrastructure/71
caddy/1Caddyfile
docker/6
init/101-extensions.sql
opensearch/1init-indices.json
.env.docker docker-compose.yml opensearch-init.sh README.md
kubernetes/40
observability/20
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1sync-sources.mjs
alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml
postgres/7configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml
api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml
nginx/2nginx.conf README.md
observability/14
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1dashboard-completeness.mjs
README.md
terraform/8compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf
packages/289
ai/24
src/20
providers/7anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts
schemas/2database.ts generate.ts
adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts
package.json README.md tsconfig.json vitest.config.ts
auth/11
src/7index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
collaboration/17
src/13awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
config/7
src/4eslint.base.js index.ts prettier.base.json tsconfig.base.json
package.json README.md tsconfig.json
database-client/5
src/2index.test.ts index.ts
package.json README.md tsconfig.json
database-engine/33
src/29
filter/2filter.test.ts index.ts
formula/8evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts
query/6group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts
relations/2index.ts relations.test.ts
rollups/2index.ts rollups.test.ts
values/5dates.ts index.ts registry.ts types.ts values.test.ts
views/3buttons.ts index.ts views.test.ts
index.ts
package.json README.md tsconfig.json vitest.config.ts
editor/25
src/21
marks/1highlight.ts
nodes/2equation.ts mention.ts
autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
observability/20
src/16
__tests__/8db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts
index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts
package.json README.md tsconfig.json vitest.config.ts
permissions/11
src/7index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts
package.json README.md tsconfig.json vitest.config.ts
search/22
src/18chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
shared/61
src/57
dto/17ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts
events/8audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts
realtime/6comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts
automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts
package.json README.md tsconfig.json vitest.config.ts
storage/16
src/12client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
ui/37
src/33
components/19avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx
color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
prisma/16
migrations/13
20260927000000_init/1migration.sql
20260928000000_search_documents_content_hash/1migration.sql
20260929000000_workspace_usage_storage_bytes/1migration.sql
20260930000000_form_submitted_notification_type/1migration.sql
20261001000000_ai_phase12/1migration.sql
20261002000000_webhooks_secret_encrypted_dlq/1migration.sql
20261002111436_webhook_delivery_latency/1migration.sql
20261002120000_org_admin_2fa_retention_unique/1migration.sql
20261002215124_audit_export/1migration.sql
20261003210000_perf_indexes_hot_paths/1migration.sql
20261004004500_perf_indexes_hot_paths_2/1migration.sql
migration_lock.toml README.md
schema.prisma seed.ts verify.ts
scripts/7backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh
tests/169
e2e/63
.auth/1user.json
fixtures/7
files/6clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt
realtime.ts
mocks/2oidc-issuer.ts saml-idp.ts
playwright-report/3
data/2a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm
index.html
reports/1files-security.json
specs/34ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts
test-results-final-flow/3
final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2test-failed-1.png trace.zip
.last-run.json
utils/4api.ts dnd.ts search-lag.ts wait.ts
.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json
fixtures/1
files/1make-sparse.ts
integration/60
ai-capability/2ai-app.capability.test.ts gateway.capability.test.ts
drill/2seed-drill.mjs verify-restore.mjs
fixtures/5
files/5clip.mp4 clip.wav doc.pdf hero-1400.png note.txt
helpers/3api.ts containers.ts seed.ts
realtime/11control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts
ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts
performance/28
fixtures/1search-100k.ts
helpers/2seed-100k.mjs seed-1k-load.mjs
reports/7api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json
api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs
security/16
helpers/1app.ts
audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts
README.md
.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json
search-100k.tstests/performance/fixtures/search-100k.tsraw← fixtures19,216 B← Back to the app
1/**
2 * AI Software Factory — 100,000-doc search fixture seeder (TASK-0100).
3 *
4 * Seeds the OpenSearch content index with 100k synthetic docs (a realistic
5 * 7-type mix) PLUS a minimal deterministic Postgres footprint — 2 workspaces,
6 * 200 users, 200 memberships, 2 teams — so the k6 suite (search-search.k6.js)
7 * can mint real HS256 access JWTs for perf users that pass the API's auth +
8 * tenant scope (the viewer's workspaceIds come from DB memberships, never
9 * the token).
10 *
11 * DESIGN NOTES (why this shape):
12 *  - **OS-only docs, no `search_documents` mirror rows.** The fixtures are
13 *    data, not source rows: the worker's reconcile sweep (contentHash over
14 *    mirror rows) never sees them, and `runReindex` only removes orphans when
15 *    explicitly triggered for a workspace — so the fixtures are inert to the
16 *    indexing pipeline and reset is a single `delete_by_query`. No DB doc
17 *    rows means seeding 100k is seconds, not minutes (the < 10 min budget).
18 *  - **Deterministic ids + bodies** (index-derived, no RNG): re-running
19 *    `seed` is an idempotent no-op for OpenSearch (same `_id`s → `_bulk`
20 *    index op is an upsert) and the DB createMany uses skipDuplicates.
21 *  - **Doc mix** (spec req 2: 10k pages × 7-type mix, 100k total):
22 *      pages 41937 (41.9%) · records 26211 (26.2%) · files 15726 (15.7%)
23 *      comments 10484 (10.5%) · databases 5242 (5.2%) · user docs 400 (0.4%)
24 *    RECORDED CONFLICT (task file): the spec's "5% users" is infeasible —
25 *    user docs are workspace-scoped (`user:<ws>:<uid>`), so 200 users × 2
26 *    workspaces yield at most 400 user docs (0.4%). The six other types are
27 *    scaled proportionally to keep the 100k total.
28 *    BUG FIXED (2026-09-29, S6): the original counts were the UNSCALED
29 *    spec-percentage values (39840/24900/14940/9960/4980/400) and summed to
30 *    95,020 — the script's own total===100_000 guard rejected them at boot.
31 *    The five non-user types are now rescaled to fill the 100,000-400
32 *    remainder in their original proportion.
33 *  - **Permission mix** (spec: 50% workspace / 25% team / 25% private):
34 *    the grants snapshot matches the worker's `buildGrantSnapshot` shapes
35 *    exactly (packages/search GrantSnapshot) so the query-time permission
36 *    filter exercises all three visibility paths.
37 *  - **Bodies 200–2,000 chars**, every body contains the shared tokens
38 *    "factory" + "search" so the k6 query always has BM25 hits (an empty
39 *    result is a different code path than the top-k latency we measure).
40 *
41 * Usage (repo root, Prisma client generated; the Docker/CI search stack up):
42 *
43 *   pnpm --dir tests/performance perf:seed:search   (reset + seed 100k)
44 *   pnpm --dir tests/performance perf:reset:search  (drop fixtures only)
45 *   tsx tests/performance/fixtures/search-100k.ts status
46 *
47 * Env (all optional — CI sets them; local defaults match the dev stack):
48 *   DATABASE_URL        Postgres DSN (default postgresql://factory:factory@localhost:5432/factory)
49 *   SEARCH_URL          OpenSearch base (default http://localhost:9200)
50 *   SEARCH_USERNAME / SEARCH_PASSWORD  basic auth (empty → none, dev default)
51 *   K6_SEARCH_WORKSPACES  comma list (default perf-search-a,perf-search-b)
52 */
53import { createHash } from "node:crypto";
54import { PrismaClient } from "@prisma/client";
55import { contentMapping } from "@factory/search";
56import type { GrantSnapshot, SearchDoc } from "@factory/search";
57 
58// ---------------------------------------------------------------------------
59// Deterministic fixture config
60// ---------------------------------------------------------------------------
61 
62const WORKSPACES = (
63  process.env.K6_SEARCH_WORKSPACES || "perf-search-a,perf-search-b"
64)
65  .split(",")
66  .map((s) => s.trim())
67  .filter(Boolean);
68 
69const USER_COUNT = 200; // perf-search-u-000 … perf-search-u-199
70const TEAM_PER_WS = WORKSPACES.map((ws) => `perf-search-team-${ws.slice(-1)}`);
71 
72// 100,000 docs, six types (user docs capped at 200 users × 2 ws = 400 — see
73// header conflict note). Counts are exact; total === 100000.
74const DOC_COUNTS = {
75  page: 41_937,
76  record: 26_211,
77  file: 15_726,
78  comment: 10_484,
79  database: 5_242,
80  user: 400,
81} as const;
82const TOTAL_DOCS = Object.values(DOC_COUNTS).reduce((a, b) => a + b, 0);
83if (TOTAL_DOCS !== 100_000) {
84  throw new Error(`fixture mix changed — total ${TOTAL_DOCS} !== 100000; update the mix intentionally`);
85}
86 
87const BULK_BATCH = 5_000; // ~30 MB worst case per _bulk request
88const BASE_TIME = Date.parse("2026-01-01T00:00:00Z");
89 
90const SEARCH_URL = (process.env.SEARCH_URL || "http://localhost:9200").replace(/\/+$/, "");
91const OS_USER = process.env.SEARCH_USERNAME || "";
92const OS_PASS = process.env.SEARCH_PASSWORD || "";
93 
94const prisma = new PrismaClient();
95 
96const pad = (n: number, w: number) => String(n).padStart(w, "0");
97const userPrefix = "perf-search-u-";
98const userId = (i: number) => `${userPrefix}${pad(i, 3)}`;
99const wsOf = (i: number) => WORKSPACES[i % WORKSPACES.length];
100const teamOf = (i: number) => TEAM_PER_WS[i % TEAM_PER_WS.length];
101const createdByOf = (i: number) => userId(i % USER_COUNT);
102 
103// Shared filler words; every body carries "factory" + "search" (guaranteed
104// BM25 hits for the k6 query) plus rotating content so BM25 scores vary.
105const FILLER = (
106  "factory search performance baseline latency index workspace document " +
107  "alpha beta gamma delta epsilon zeta eta theta lambda sigma omega query " +
108  "fusion ranking snippet highlight cursor pagination tenant visibility " +
109  "snapshot grant embed vector cosine knn hybrid keyword reciprocal rank"
110).split(" ");
111 
112function bodyText(i: number): string {
113  // 200–2,000 chars, deterministic; ~40 words minimum so the BM25 field has
114  // real length statistics to work with.
115  const len = 200 + ((i * 379) % 1801);
116  const words: string[] = [];
117  let n = 0;
118  let total = 0;
119  let k = i % FILLER.length;
120  while (total < len) {
121    const w = FILLER[k++ % FILLER.length];
122    words.push(w);
123    total += w.length + 1;
124    n += 1;
125  }
126  return words.join(" ").slice(0, len);
127}
128 
129/** Deterministic 50/25/25 permission mix (spec req 2). */
130function grantsFor(i: number, ws: string): { grants: GrantSnapshot; teamId?: string } {
131  const bucket = i % 100;
132  if (bucket < 50) {
133    // workspace-visible (the member floor — the default for non-private content)
134    return { grants: { public: false, workspace: true, user: false, teams: [], users: [] }, teamId: undefined };
135  }
136  if (bucket < 75) {
137    // team grant — visible to members of the workspace's perf team
138    const teamId = teamOf((WORKSPACES.indexOf(ws) + 1) * 997 + i);
139    return { grants: { public: false, workspace: false, user: false, teams: [teamId], users: [] }, teamId };
140  }
141  // private — visible only to the creator (users: [createdBy])
142  const creator = createdByOf(i);
143  return { grants: { public: false, workspace: false, user: false, teams: [], users: [creator] }, teamId: undefined };
144}
145 
146const TITLE: Record<keyof typeof DOC_COUNTS, string> = {
147  page: (i) => `Perf Page ${pad(i, 5)} factory search fixture`,
148  record: (i) => `Perf Record ${pad(i, 5)} factory search fixture`,
149  file: (i) => `perf-report-${pad(i, 5)}.txt`,
150  comment: (i) => `Perf Comment ${pad(i, 5)} on factory search fixture`,
151  database: (i) => `Perf Database ${pad(i, 5)} factory search fixture`,
152  user: (i) => `Perf User ${pad(i % USER_COUNT, 3)}`,
153};
154 
155const MIME_TYPES = ["text/plain", "application/pdf", "text/markdown"];
156 
157function buildDoc(type: keyof typeof DOC_COUNTS, i: number): SearchDoc {
158  // BUG FIXED (2026-09-29, S6): user docs must biject over 200 users × 2
159  // workspaces (400 DISTINCT `user:<ws>:<uid>` ids). The default
160  // `wsOf(i) = WORKSPACES[i % 2]` + `userId(i % 200)` made i and i+200
161  // collide (same ws AND same uid) → only 200 distinct user docs landed
162  // (seed count 99,800 ≠ 100,000). Split the 400-slot user range in half:
163  // [0,200) → workspace 0, [200,400) → workspace 1.
164  const ws =
165    type === "user"
166      ? WORKSPACES[Math.floor(i / USER_COUNT) % WORKSPACES.length]
167      : wsOf(i);
168  const { grants, teamId } = grantsFor(i, ws);
169  const createdAt = new Date(BASE_TIME + i * 1_000).toISOString();
170  const updatedAt = new Date(BASE_TIME + i * 1_000 + 600_000).toISOString();
171  const createdByName = `Perf User ${pad(i % USER_COUNT, 3)}`;
172  const common = {
173    type,
174    workspaceId: ws,
175    title: TITLE[type](i),
176    body: bodyText(i),
177    grants,
178    archived: false,
179    createdBy: createdByOf(i),
180    createdByName,
181    url: "",
182    createdAt,
183    updatedAt,
184  };
185 
186  switch (type) {
187    case "page": {
188      const id = `perf-pg-${pad(i, 5)}`;
189      return { ...common, docId: `page:${id}`, id, url: `/w/${ws}/page/${id}`, pageId: id, ...(teamId ? { teamId } : {}) };
190    }
191    case "record": {
192      const id = `perf-rc-${pad(i, 5)}`;
193      const dbId = `perf-db-${pad(i % DOC_COUNTS.database, 5)}`;
194      return { ...common, docId: `record:${id}`, id, databaseId: dbId, recordId: id, url: `/w/${ws}/databases/${dbId}`, ...(teamId ? { teamId } : {}) };
195    }
196    case "file": {
197      const id = `perf-fl-${pad(i, 5)}`;
198      const mimeType = MIME_TYPES[i % MIME_TYPES.length];
199      return { ...common, docId: `file:${id}`, id, size: 1_000 + ((i * 101) % 99_000), mimeType, url: `/w/${ws}`, ...(teamId ? { teamId } : {}) };
200    }
201    case "comment": {
202      const id = `perf-cm-${pad(i, 5)}`;
203      const pageId = `perf-pg-${pad(i % DOC_COUNTS.page, 5)}`;
204      return { ...common, docId: `comment:${id}`, id, pageId, url: `/w/${ws}/page/${pageId}`, ...(teamId ? { teamId } : {}) };
205    }
206    case "database": {
207      const id = `perf-db-${pad(i, 5)}`;
208      return { ...common, docId: `database:${id}`, id, databaseId: id, url: `/w/${ws}/databases/${id}`, ...(teamId ? { teamId } : {}) };
209    }
210    case "user": {
211      // Workspace-scoped user doc (mirrors the worker's buildUserDoc shape:
212      // docId `user:<ws>:<uid>`, url → the workspace). 400 docs = 200 users × 2 ws.
213      const uid = userId(i % USER_COUNT);
214      return {
215        docId: `user:${ws}:${uid}`,
216        id: uid,
217        type: "user",
218        workspaceId: ws,
219        title: TITLE.user(i),
220        body: `${createdByName} — perf fixture member of ${ws}`,
221        grants,
222        archived: false,
223        createdBy: uid,
224        createdByName,
225        url: `/w/${ws}`,
226        createdAt,
227        updatedAt,
228      };
229    }
230  }
231}
232 
233// ---------------------------------------------------------------------------
234// OpenSearch (raw fetch — the 100k _bulk exceeds the SearchClient's 5 s
235// timeout; the index bootstrap below reuses the package's canonical mapping)
236// ---------------------------------------------------------------------------
237 
238function osHeaders(): Record<string, string> {
239  const h: Record<string, string> = { "content-type": "application/json" };
240  if (OS_USER) h.authorization = "Basic " + Buffer.from(`${OS_USER}:${OS_PASS}`).toString("base64");
241  return h;
242}
243 
244async function os<T = unknown>(path: string, init: RequestInit = {}, timeoutMs = 120_000): Promise<T> {
245  const ctrl = new AbortController();
246  const t = setTimeout(() => ctrl.abort(), timeoutMs);
247  try {
248    const res = await fetch(`${SEARCH_URL}${path}`, { ...init, headers: { ...osHeaders(), ...(init.headers as Record<string, string>) }, signal: ctrl.signal });
249    const text = await res.text();
250    if (!res.ok) throw new Error(`OS ${init.method ?? "GET"} ${path} → ${res.status}: ${text.slice(0, 500)}`);
251    return (text ? (JSON.parse(text) as T) : {}) as T;
252  } finally {
253    clearTimeout(t);
254  }
255}
256 
257async function ensureIndex(): Promise<void> {
258  // The canonical mapping from @factory/search (same contentMapping() the
259  // worker's ensureContentIndex uses at startup) — 1536-dim HNSW defaults.
260  const mapping = contentMapping();
261  // 1) the backing index (idempotent PUT)
262  try {
263    await os("/factory-content-v1", { method: "PUT", body: JSON.stringify(mapping) });
264    process.stdout.write("  created index factory-content-v1\n");
265  } catch (err) {
266    if (!/resource_already_exists/.test(String(err))) throw err;
267  }
268  // 2) the alias → backing (atomic swap; idempotent)
269  await os("/_aliases", {
270    method: "POST",
271    body: JSON.stringify({
272      actions: [{ remove: { index: "factory-content-v1", alias: "factory-content" } }, { add: { index: "factory-content-v1", alias: "factory-content" } }],
273    }),
274  });
275}
276 
277async function bulkIndex(docs: SearchDoc[]): Promise<void> {
278  const lines: string[] = [];
279  for (const d of docs) {
280    lines.push(JSON.stringify({ index: { _index: "factory-content", _id: d.docId } }));
281    lines.push(JSON.stringify(d));
282  }
283  await os("/_bulk", { method: "POST", body: lines.join("\n") + "\n" });
284}
285 
286async function osCount(where: Record<string, unknown>): Promise<number> {
287  const out = await os<{ count: number }>("/factory-content/_count", { method: "POST", body: JSON.stringify({ query: { bool: { filter: [where] } } }) });
288  return out.count;
289}
290 
291// ---------------------------------------------------------------------------
292// Postgres footprint (JWT-valid users / workspaces / teams)
293// ---------------------------------------------------------------------------
294 
295async function seedDb(): Promise<void> {
296  const users = Array.from({ length: USER_COUNT }, (_, i) => ({
297    id: userId(i),
298    email: `${userId(i)}@factory.local`,
299    name: `Perf User ${pad(i, 3)}`,
300    // passwordHash stays null: the k6 suite MINTS JWTs (k6/crypto) for these
301    // ids — no password login exists for fixtures (spec Security: "fixture
302    // passwords never stored").
303  }));
304  await prisma.user.createMany({ data: users, skipDuplicates: true });
305 
306  const workspaces = WORKSPACES.map((id, i) => ({
307    id,
308    name: `k6 Search ${i + 1} (TASK-0100)`,
309    slug: id,
310    settings: {},
311    ownerId: userId(0),
312  }));
313  for (const ws of workspaces) {
314    await prisma.workspace.upsert({ where: { id: ws.id }, update: {}, create: ws });
315  }
316 
317  const members = Array.from({ length: USER_COUNT }, (_, i) => ({
318    workspaceId: wsOf(i),
319    userId: userId(i),
320    role: "MEMBER" as const,
321  }));
322  await prisma.workspaceMember.createMany({ data: members, skipDuplicates: true });
323 
324  for (let i = 0; i < WORKSPACES.length; i += 1) {
325    const ws = WORKSPACES[i];
326    const team = TEAM_PER_WS[i];
327    await prisma.team.upsert({
328      where: { id: team },
329      update: {},
330      create: { id: team, workspaceId: ws, name: `Perf Team ${i + 1}`, slug: team, position: "a0" },
331    });
332    // Every member of the workspace joins its perf team → the k6 users see
333    // the team-granted docs (viewer.teamIds comes from TeamMember rows).
334    const rows = await prisma.workspaceMember.findMany({ where: { workspaceId: ws }, select: { id: true, userId: true } });
335    const tm = rows.map((r) => ({ teamId: team, workspaceMemberId: r.id, userId: r.userId, role: "MEMBER" as const }));
336    if (tm.length > 0) await prisma.teamMember.createMany({ data: tm, skipDuplicates: true });
337  }
338}
339 
340async function resetDb(): Promise<void> {
341  await prisma.teamMember.deleteMany({ where: { teamId: { in: TEAM_PER_WS } } });
342  await prisma.team.deleteMany({ where: { id: { in: TEAM_PER_WS } } });
343  await prisma.workspaceMember.deleteMany({ where: { userId: { startsWith: userPrefix } } });
344  await prisma.workspace.deleteMany({ where: { id: { in: WORKSPACES } } });
345  await prisma.user.deleteMany({ where: { id: { startsWith: userPrefix } } });
346  // Defensive: any mirror rows pointing at fixture workspaces (there are none
347  // from this seeder, but a prior worker-driven run in the same env might
348  // leave some — reset must leave the index + mirror consistent, DoD).
349  await prisma.searchDocument.deleteMany({ where: { workspaceId: { in: WORKSPACES } } });
350}
351 
352// ---------------------------------------------------------------------------
353// Actions
354// ---------------------------------------------------------------------------
355 
356async function reset(): Promise<void> {
357  const t0 = Date.now();
358  const out = await os<{ deleted: number }>("/factory-content/_delete_by_query?conflicts=proceed&refresh=true", {
359    method: "POST",
360    body: JSON.stringify({ query: { bool: { filter: [{ terms: { workspaceId: WORKSPACES } }] } } }),
361  });
362  await resetDb();
363  process.stdout.write(`reset: removed ${out.deleted} fixture docs from OS + DB fixture rows in ${((Date.now() - t0) / 1000).toFixed(1)} s\n`);
364}
365 
366async function seed(): Promise<void> {
367  const t0 = Date.now();
368  process.stdout.write(`seed: resetting existing fixtures first (idempotent)\n`);
369  await reset();
370 
371  process.stdout.write("seed: ensuring content index (canonical mapping)\n");
372  await ensureIndex();
373 
374  process.stdout.write("seed: seeding DB footprint (2 ws, 200 users, 2 teams)\n");
375  await seedDb();
376 
377  process.stdout.write(`seed: indexing ${TOTAL_DOCS.toLocaleString()} docs in _bulk (${BULK_BATCH}/batch)\n`);
378  const t1 = Date.now();
379  for (const [type, count] of Object.entries(DOC_COUNTS) as [keyof typeof DOC_COUNTS, number][]) {
380    for (let start = 0; start < count; start += BULK_BATCH) {
381      const end = Math.min(start + BULK_BATCH, count);
382      const batch = Array.from({ length: end - start }, (_, j) => buildDoc(type, start + j));
383      await bulkIndex(batch);
384      process.stdout.write(`\r  ${type}: ${end}/${count}`);
385    }
386    process.stdout.write(`\n`);
387  }
388  const osSeconds = ((Date.now() - t1) / 1000).toFixed(1);
389 
390  await os("/factory-content/_refresh", { method: "POST" });
391  const actual = await osCount({ terms: { workspaceId: WORKSPACES } });
392  const seconds = (Date.now() - t0) / 1000;
393  process.stdout.write(
394    `seed: done in ${seconds.toFixed(1)} s (OS bulk ${osSeconds} s) — ${actual.toLocaleString()} fixture docs in the index ` +
395      `(expected ${TOTAL_DOCS.toLocaleString()})\n`
396  );
397  if (actual !== TOTAL_DOCS) {
398    throw new Error(`seed count mismatch: ${actual} !== ${TOTAL_DOCS} — refuse to leave a partial fixture`);
399  }
400  // Determinism anchor (a change to the mix/bodies shifts this; informational).
401  process.stdout.write(`fixture hash: ${createHash("sha1").update(JSON.stringify(DOC_COUNTS)).digest("hex")}\n`);
402  process.stdout.write(`workspaces: ${WORKSPACES.join(", ")}\nk6 user: ${userId(0)} (member of ${wsOf(0)}, team ${teamOf(0)})\n`);
403}
404 
405async function status(): Promise<void> {
406  const count = await osCount({ terms: { workspaceId: WORKSPACES } });
407  const users = await prisma.user.count({ where: { id: { startsWith: userPrefix } } });
408  const members = await prisma.workspaceMember.count({ where: { userId: { startsWith: userPrefix } } });
409  process.stdout.write(`status: ${count.toLocaleString()} fixture docs in OS · ${users} fixture users · ${members} memberships (expected 100000/200/200)\n`);
410}
411 
412const action = process.argv[2];
413const main = async () => {
414  switch (action) {
415    case "seed":
416      await seed();
417      break;
418    case "reset":
419      await reset();
420      break;
421    case "status":
422      await status();
423      break;
424    default:
425      console.error("usage: search-100k.ts <seed|reset|status>");
426      process.exitCode = 2;
427  }
428};
429 
430main()
431  .catch((err) => {
432    console.error(err);
433    process.exitCode = 1;
434  })
435  .finally(() => prisma.$disconnect());
436