[ { "path": ".dockerignore", "content": ".env\n.dockerignore\nspec.yaml\n**/target\ntarget/\ndeploy/\ntests/\ndocker/Dockerfile\nscripts/\n" }, { "path": ".github/FUNDING.yml", "content": "ko_fi: appflowy\n\n" }, { "path": ".github/ISSUE_TEMPLATE/bug_report.md", "content": "---\nname: Bug report\nabout: Create a report to help us improve\ntitle: \"[Bug] Untitled Bug Issue\"\nlabels: ''\nassignees: ''\n\n---\n\n**Describe the bug**\nA clear and concise description of what the bug is.\n\n**To Reproduce**\nSteps to reproduce the behavior:\n1. Go to '...'\n2. Click on '....'\n3. Scroll down to '....'\n4. See error\n\n**Expected behavior**\nA clear and concise description of what you expected to happen.\n\n**Screenshots**\nIf applicable, add screenshots to help explain your problem.\n\n**Desktop (please complete the following information):**\n - OS: [e.g. iOS]\n - Browser [e.g. chrome, safari]\n - Version [e.g. 22]\n\n**Additional context**\n - Environment [e.g. flutter doctor -v or rustup show]\nAdd any other context about the problem here.\n" }, { "path": ".github/ISSUE_TEMPLATE/feature_request.md", "content": "---\nname: Feature request\nabout: Suggest an idea for this project\ntitle: \"[FR] Untitled Feature Request\"\nlabels: ''\nassignees: ''\n\n---\n\n**1~3 main use cases of the proposed feature**\nEx: As a ... , I want to set a reminder for a checkbox item so that I can be reminded by the system at a specific time.\n\n**what types of users can benefit from using your proposed feature**\nEx: busy students who tend to forget their paper deadlines\n\n**Additional context**\nAdd any other context or screenshots about the feature request here.\n" }, { "path": ".github/workflows/audit.yml", "content": "name: Security audit\non:\n schedule:\n - cron: '0 0 * * *'\n push:\n paths:\n - '**/Cargo.toml'\n - '**/Cargo.lock'\njobs:\n security_audit:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v3\n - uses: taiki-e/install-action@cargo-deny\n - name: Scan for vulnerabilities\n run:\n cargo deny check advisories" }, { "path": ".github/workflows/build_test_docker_image.yaml", "content": "name: Manually Build Selected Docker Images\n\non:\n workflow_dispatch:\n inputs:\n branch:\n description: \"Branch to build from\"\n required: true\n default: \"main\"\n debug_version:\n description: \"Enter the release version tag (e.g. 0.9.30). The built image will be tagged as xxx:0.9.30-amd64.\"\n required: true\n archs:\n description: \"Target architectures (comma separated), e.g. linux/amd64,linux/arm64\"\n required: false\n default: \"linux/amd64\"\n build_gotrue:\n description: \"Build GoTrue image\"\n type: boolean\n required: false\n default: false\n build_appflowy_cloud:\n description: \"Build AppFlowy Cloud image\"\n type: boolean\n required: false\n default: true\n build_admin_frontend:\n description: \"Build Admin Frontend image\"\n type: boolean\n required: false\n default: false\n build_appflowy_worker:\n description: \"Build AppFlowy Worker image\"\n type: boolean\n required: false\n default: true\n\njobs:\n setup:\n runs-on: ubuntu-22.04\n outputs:\n matrix: ${{ steps.set-matrix.outputs.matrix }}\n steps:\n - name: Set up architecture matrix\n id: set-matrix\n run: |\n # Convert comma-separated archs to JSON array and extract arch names\n archs=\"${{ github.event.inputs.archs }}\"\n # Replace linux/ prefix and convert to JSON array\n matrix_archs=$(echo \"$archs\" | sed 's/linux\\///g' | sed 's/,/\",\"/g' | sed 's/^/[\"/' | sed 's/$/\"]/')\n echo \"matrix={\\\"arch\\\":$matrix_archs}\" >> $GITHUB_OUTPUT\n echo \"Generated matrix: {\\\"arch\\\":$matrix_archs}\"\n\n gotrue:\n runs-on: ubuntu-22.04\n needs: setup\n if: ${{ github.event.inputs.build_gotrue == 'true' }}\n strategy:\n matrix: ${{ fromJson(needs.setup.outputs.matrix) }}\n steps:\n - name: Checkout repository\n uses: actions/checkout@v3\n with:\n ref: ${{ github.event.inputs.branch }}\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Build and push GoTrue image\n uses: docker/build-push-action@v5\n with:\n context: .\n file: ./docker/gotrue/Dockerfile\n platforms: linux/${{ matrix.arch }}\n push: true\n tags: |\n appflowyinc/gotrue:${{ github.event.inputs.debug_version }}-${{ matrix.arch }}-internal\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n appflowy_cloud:\n runs-on: ubuntu-22.04\n needs: setup\n if: ${{ github.event.inputs.build_appflowy_cloud == 'true' }}\n strategy:\n matrix: ${{ fromJson(needs.setup.outputs.matrix) }}\n steps:\n - name: Checkout repository\n uses: actions/checkout@v3\n with:\n ref: ${{ github.event.inputs.branch }}\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Build and push AppFlowy Cloud image\n uses: docker/build-push-action@v5\n with:\n context: .\n platforms: linux/${{ matrix.arch }}\n push: true\n tags: |\n ${{ secrets.DOCKER_HUB_USERNAME }}/appflowy_cloud:${{ github.event.inputs.debug_version }}-${{ matrix.arch }}-internal\n provenance: false\n build-args: |\n PROFILE=release\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n admin_frontend:\n runs-on: ubuntu-22.04\n needs: setup\n if: ${{ github.event.inputs.build_admin_frontend == 'true' }}\n strategy:\n matrix: ${{ fromJson(needs.setup.outputs.matrix) }}\n steps:\n - name: Checkout repository\n uses: actions/checkout@v3\n with:\n ref: ${{ github.event.inputs.branch }}\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Build and push Admin Frontend image\n uses: docker/build-push-action@v5\n with:\n context: .\n file: ./admin_frontend/Dockerfile\n platforms: linux/${{ matrix.arch }}\n push: true\n tags: |\n ${{ secrets.DOCKER_HUB_USERNAME }}/admin_frontend:${{ github.event.inputs.debug_version }}-${{ matrix.arch }}-internal\n provenance: false\n build-args: |\n PROFILE=release\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n appflowy_worker:\n runs-on: ubuntu-22.04\n needs: setup\n if: ${{ github.event.inputs.build_appflowy_worker == 'true' }}\n strategy:\n matrix: ${{ fromJson(needs.setup.outputs.matrix) }}\n steps:\n - name: Checkout repository\n uses: actions/checkout@v3\n with:\n ref: ${{ github.event.inputs.branch }}\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Build and push AppFlowy Worker image\n uses: docker/build-push-action@v5\n with:\n context: .\n file: ./services/appflowy-worker/Dockerfile\n platforms: linux/${{ matrix.arch }}\n push: true\n tags: |\n ${{ secrets.DOCKER_HUB_USERNAME }}/appflowy_worker:${{ github.event.inputs.debug_version }}-${{ matrix.arch }}-internal\n provenance: false\n build-args: |\n PROFILE=release\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout" }, { "path": ".github/workflows/client_api_check.yml", "content": "name: ClientAPI Check\n\non:\n push:\n branches: [ main ]\n pull_request:\n types: [ opened, synchronize, reopened ]\n branches: [ main ]\n\njobs:\n test:\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v3\n - uses: dtolnay/rust-toolchain@stable\n - uses: Swatinem/rust-cache@v2\n with:\n workspaces: |\n AppFlowy-Cloud\n\n - name: Install cargo-tree\n run: cargo install cargo-tree\n\n - name: Install wasm-pack\n run: cargo install wasm-pack\n\n - name: install prerequisites\n run: |\n sudo apt-get update\n sudo apt-get install protobuf-compiler\n\n - name: Build ClientAPI\n working-directory: ./libs/client-api\n run: cargo build --features \"enable_brotli\"\n\n - name: Check ClientAPI Dependencies\n working-directory: ./libs/client-api\n run: bash ../../script/client_api_deps_check.sh\n\n" }, { "path": ".github/workflows/commitlint.yml", "content": "name: Lint Commit Messages\non: [pull_request, push]\n\njobs:\n commitlint:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v2\n with:\n fetch-depth: 0\n - uses: wagoid/commitlint-github-action@v4\n\n" }, { "path": ".github/workflows/integration_test.yml", "content": "name: AppFlowy-Cloud Integrations\n\non:\n push:\n branches: [ main ]\n paths:\n - 'src/**'\n - 'libs/**'\n - 'services/**'\n - 'admin_frontend/**'\n pull_request:\n branches: [ main ]\n paths:\n - 'src/**'\n - 'libs/**'\n - 'services/**'\n - 'admin_frontend/**'\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}\n cancel-in-progress: true\n\nenv:\n LOCALHOST_URL: http://localhost\n LOCALHOST_WS: ws://localhost/ws/v1\n LOCALHOST_WS_V2: ws://localhost/ws/v2\n APPFLOWY_REDIS_URI: redis://redis:6379\n APPFLOWY_AI_REDIS_URL: redis://redis:6379\n LOCALHOST_GOTRUE: http://localhost/gotrue\n POSTGRES_PASSWORD: password\n DATABASE_URL: postgres://postgres:password@localhost:5432/postgres\n SQLX_OFFLINE: true\n RUST_TOOLCHAIN: \"1.86.0\"\n APPFLOWY_AI_VERSION: \"0.9.38-amd64\"\n\njobs:\n setup:\n name: Setup Environment and Build Images\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v4\n - name: Install prerequisites\n run: |\n sudo apt-get update\n sudo apt-get install protobuf-compiler\n sudo update-ca-certificates\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n with:\n driver-opts: network=host\n\n - name: Build Docker Images\n run: |\n export DOCKER_DEFAULT_PLATFORM=linux/amd64\n cp deploy.env .env\n docker compose build \\\n --parallel \\\n --build-arg BUILDKIT_INLINE_CACHE=1 \\\n --build-arg PROFILE=debug \\\n appflowy_cloud appflowy_worker admin_frontend\n\n - name: Save Docker Images\n run: |\n docker save appflowyinc/appflowy_cloud:latest | gzip > appflowy_cloud.tar.gz\n docker save appflowyinc/appflowy_worker:latest | gzip > appflowy_worker.tar.gz\n docker save appflowyinc/admin_frontend:latest | gzip > admin_frontend.tar.gz\n\n - name: Upload Docker Images as Artifacts\n uses: actions/upload-artifact@v4\n with:\n name: docker-images\n path: |\n appflowy_cloud.tar.gz\n appflowy_worker.tar.gz\n admin_frontend.tar.gz\n retention-days: 1\n\n test:\n name: Integration Tests\n runs-on: ubuntu-latest\n needs: setup\n timeout-minutes: 60\n strategy:\n matrix:\n include:\n - test_service: \"appflowy_cloud\"\n test_cmd: \"--workspace --exclude appflowy-ai-client --features ai-test-enabled\"\n - test_service: \"appflowy_cloud_new_sync\"\n test_cmd: \"--features sync-v2 --test main collab\"\n - test_service: \"appflowy_worker\"\n test_cmd: \"-p appflowy-worker\"\n - test_service: \"admin_frontend\"\n test_cmd: \"-p admin_frontend\"\n steps:\n - uses: actions/checkout@v4\n - uses: dtolnay/rust-toolchain@stable\n - uses: Swatinem/rust-cache@v2\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n workspaces: \"AppFlowy-Cloud\"\n\n - name: Download Docker Images\n uses: actions/download-artifact@v4\n with:\n name: docker-images\n\n - name: Load Docker Images\n run: |\n docker load < appflowy_cloud.tar.gz\n docker load < appflowy_worker.tar.gz\n docker load < admin_frontend.tar.gz\n\n - name: Copy and rename deploy.env to .env\n run: cp deploy.env .env\n\n - name: Replace values in .env\n run: |\n # log level\n sed -i 's|RUST_LOG=.*|RUST_LOG='appflowy_cloud=trace,appflowy_worker=trace,database=trace,indexer=trace'|' .env\n sed -i 's|GOTRUE_SMTP_USER=.*|GOTRUE_SMTP_USER=${{ secrets.CI_GOTRUE_SMTP_USER }}|' .env\n sed -i 's|GOTRUE_SMTP_PASS=.*|GOTRUE_SMTP_PASS=${{ secrets.CI_GOTRUE_SMTP_PASS }}|' .env\n sed -i 's|GOTRUE_SMTP_ADMIN_EMAIL=.*|GOTRUE_SMTP_ADMIN_EMAIL=${{ secrets.CI_GOTRUE_SMTP_ADMIN_EMAIL }}|' .env\n sed -i 's|GOTRUE_EXTERNAL_GOOGLE_ENABLED=.*|GOTRUE_EXTERNAL_GOOGLE_ENABLED=true|' .env\n sed -i 's|GOTRUE_MAILER_AUTOCONFIRM=.*|GOTRUE_MAILER_AUTOCONFIRM=false|' .env\n sed -i 's|API_EXTERNAL_URL=http://your-host/gotrue|API_EXTERNAL_URL=http://localhost/gotrue|' .env\n sed -i 's|GOTRUE_RATE_LIMIT_EMAIL_SENT=100|GOTRUE_RATE_LIMIT_EMAIL_SENT=1000|' .env\n sed -i 's|APPFLOWY_MAILER_SMTP_USERNAME=.*|APPFLOWY_MAILER_SMTP_USERNAME=${{ secrets.CI_GOTRUE_SMTP_USER }}|' .env\n sed -i 's|APPFLOWY_MAILER_SMTP_PASSWORD=.*|APPFLOWY_MAILER_SMTP_PASSWORD=${{ secrets.CI_GOTRUE_SMTP_PASS }}|' .env\n sed -i 's|AI_OPENAI_API_KEY=.*|AI_OPENAI_API_KEY=${{ secrets.CI_OPENAI_API_KEY }}|' .env\n sed -i 's|AI_OPENAI_API_SUMMARY_MODEL=.*|AI_OPENAI_API_SUMMARY_MODEL=\"gpt-4o-mini\"|' .env\n sed -i 's|APPFLOWY_EMBEDDING_CHUNK_SIZE=.*|APPFLOWY_EMBEDDING_CHUNK_SIZE=500|' .env\n sed -i 's|APPFLOWY_EMBEDDING_CHUNK_OVERLAP=.*|APPFLOWY_EMBEDDING_CHUNK_OVERLAP=50|' .env\n sed -i 's|AI_ANTHROPIC_API_KEY=.*|AI_ANTHROPIC_API_KEY=${{ secrets.CI_AI_ANTHROPIC_API_KEY }}|' .env\n sed -i 's|AI_APPFLOWY_HOST=.*|AI_APPFLOWY_HOST=http://localhost|' .env\n sed -i 's|APPFLOWY_WEB_URL=.*|APPFLOWY_WEB_URL=http://localhost:3000|' .env\n sed -i 's|.*APPFLOWY_S3_PRESIGNED_URL_ENDPOINT=.*|APPFLOWY_S3_PRESIGNED_URL_ENDPOINT=http://localhost/minio-api|' .env\n shell: bash\n\n - name: Update Nginx Configuration\n # the wasm-pack headless tests will run on random ports, so we need to allow all origins\n run: sed -i 's/http:\\/\\/127\\.0\\.0\\.1:8000/http:\\/\\/127.0.0.1/g' nginx/nginx.conf\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Run Docker-Compose\n run: |\n export APPFLOWY_WORKER_VERSION=latest\n export APPFLOWY_CLOUD_VERSION=latest\n export APPFLOWY_ADMIN_FRONTEND_VERSION=latest\n export APPFLOWY_AI_VERSION=${{ env.APPFLOWY_AI_VERSION }}\n docker compose -f docker-compose-ci.yml up -d\n docker ps -a\n\n - name: Wait for services to be ready\n run: |\n echo \"Waiting for services to be ready...\"\n timeout 300 bash -c 'until curl -f http://localhost/health 2>/dev/null; do sleep 5; done' || echo \"Health check timeout - proceeding anyway\"\n\n - name: Install prerequisites\n run: |\n sudo apt-get update\n sudo apt-get install -y protobuf-compiler\n\n - name: Run Tests\n run: |\n echo \"Running tests for ${{ matrix.test_service }} with flags: ${{ matrix.test_cmd }}\"\n RUST_LOG=\"info\" DISABLE_CI_TEST_LOG=\"true\" cargo test ${{ matrix.test_cmd }} -- --skip stress_test\n\n - name: Server Logs\n if: failure()\n run: |\n docker ps -a\n docker compose -f docker-compose-ci.yml logs\n\n - name: AI Logs\n if: failure()\n run: |\n docker logs appflowy-cloud-ai-1\n" }, { "path": ".github/workflows/push_latest_docker.yml", "content": "name: DockerHub Build and Push\n\n#`DOCKER_HUB_USERNAME` is the username you use to log in to Docker Hub at https://hub.docker.com/. It's your Docker Hub\n# account username.\n\n#`DOCKER_HUB_ACCESS_TOKEN` is a security token that you should create in your Docker Hub account settings, specifically\n# under \"account settings / security.\" This token should be generated with read and write access permissions to Docker\n# Hub repositories. It allows you to authenticate and interact with Docker Hub programmatically, such as pushing and pulling Docker images or making API requests.\n\non:\n push:\n tags:\n - 'v[0-9]+.[0-9]+.[0-9]+*' # Trigger for tags like v1.2.3\n - '[0-9]+.[0-9]+.[0-9]+*' # Trigger for tags like 1.2.3 or 1.2.3-alpha\n\nenv:\n CARGO_TERM_COLOR: always\n LATEST_TAG: latest\n\njobs:\n gotrue_image:\n runs-on: ubuntu-22.04\n steps:\n - name: Check out the repository\n uses: actions/checkout@v3\n with:\n fetch-depth: 1\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Build and Push GoTrue\n run: |\n export TAG=${GITHUB_REF#refs/*/}\n docker buildx build --platform linux/amd64,linux/arm64 -t appflowyinc/gotrue:${TAG} -t appflowyinc/gotrue:latest -f docker/gotrue/Dockerfile --push docker/gotrue\n\n appflowy_cloud_image:\n runs-on: ${{ matrix.job.os }}\n env:\n IMAGE_NAME: ${{ secrets.DOCKER_HUB_USERNAME }}/appflowy_cloud\n strategy:\n fail-fast: false\n matrix:\n job:\n - { os: \"ubuntu-22.04\", name: \"amd64\", docker_platform: \"linux/amd64\" }\n - { os: \"ubuntu-22.04-arm\", name: \"arm64v8\", docker_platform: \"linux/arm64\" }\n\n steps:\n - name: Check out the repository\n uses: actions/checkout@v2\n with:\n fetch-depth: 1\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Extract metadata\n id: meta\n uses: docker/metadata-action@v4\n with:\n images: registry.hub.docker.com/${{ env.IMAGE_NAME }}\n\n - name: Build and push ${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n uses: docker/build-push-action@v5\n with:\n platforms: ${{ matrix.job.docker_platform }}\n push: true\n tags: |\n ${{ env.IMAGE_NAME }}:${{ env.LATEST_TAG }}-${{ matrix.job.name }}\n ${{ env.IMAGE_NAME }}:${{ env.GIT_TAG }}-${{ matrix.job.name }}\n labels: ${{ steps.meta.outputs.labels }}\n provenance: false\n build-args: |\n PROFILE=release\n FEATURES=\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n appflowy_cloud_docker_manifest:\n runs-on: ubuntu-22.04\n needs: [ appflowy_cloud_image ]\n strategy:\n fail-fast: false\n matrix:\n job:\n - { image_name: \"appflowy_cloud\" }\n\n steps:\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:version\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-arm64v8\n push: true\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:latest\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-arm64v8\n push: true\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n admin_frontend_image:\n runs-on: ${{ matrix.job.os }}\n env:\n IMAGE_NAME: ${{ secrets.DOCKER_HUB_USERNAME }}/admin_frontend\n strategy:\n fail-fast: false\n matrix:\n job:\n - { os: \"ubuntu-22.04\", name: \"amd64\", docker_platform: \"linux/amd64\" }\n - { os: \"ubuntu-22.04-arm\", name: \"arm64v8\", docker_platform: \"linux/arm64\" }\n\n steps:\n - name: Check out the repository\n uses: actions/checkout@v2\n with:\n fetch-depth: 1\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Extract metadata\n id: meta\n uses: docker/metadata-action@v4\n with:\n images: registry.hub.docker.com/${{ env.IMAGE_NAME }}\n\n - name: Build and push ${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n uses: docker/build-push-action@v5\n with:\n platforms: ${{ matrix.job.docker_platform }}\n file: ./admin_frontend/Dockerfile\n push: true\n tags: |\n ${{ env.IMAGE_NAME }}:${{ env.LATEST_TAG }}-${{ matrix.job.name }}\n ${{ env.IMAGE_NAME }}:${{ env.GIT_TAG }}-${{ matrix.job.name }}\n labels: ${{ steps.meta.outputs.labels }}\n provenance: false\n build-args: |\n PROFILE=release\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n admin_frontend_docker_manifest:\n runs-on: ubuntu-22.04\n needs: [ admin_frontend_image ]\n strategy:\n fail-fast: false\n matrix:\n job:\n - { image_name: \"admin_frontend\" }\n\n steps:\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:version\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-arm64v8\n push: true\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:latest\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-arm64v8\n push: true\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n appflowy_worker_image:\n runs-on: ${{ matrix.job.os }}\n env:\n IMAGE_NAME: ${{ secrets.DOCKER_HUB_USERNAME }}/appflowy_worker\n strategy:\n fail-fast: false\n matrix:\n job:\n - { os: \"ubuntu-22.04\", name: \"amd64\", docker_platform: \"linux/amd64\" }\n - { os: \"ubuntu-22.04-arm\", name: \"arm64v8\", docker_platform: \"linux/arm64\" }\n\n steps:\n - name: Check out the repository\n uses: actions/checkout@v2\n with:\n fetch-depth: 1\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Extract metadata\n id: meta\n uses: docker/metadata-action@v4\n with:\n images: registry.hub.docker.com/${{ env.IMAGE_NAME }}\n\n - name: Build and push ${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n uses: docker/build-push-action@v5\n with:\n platforms: ${{ matrix.job.docker_platform }}\n file: ./services/appflowy-worker/Dockerfile\n push: true\n tags: |\n ${{ env.IMAGE_NAME }}:${{ env.LATEST_TAG }}-${{ matrix.job.name }}\n ${{ env.IMAGE_NAME }}:${{ env.GIT_TAG }}-${{ matrix.job.name }}\n labels: ${{ steps.meta.outputs.labels }}\n provenance: false\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n\n appflowy_worker_manifest:\n runs-on: ubuntu-22.04\n needs: [ appflowy_worker_image ]\n strategy:\n fail-fast: false\n matrix:\n job:\n - { image_name: \"appflowy_worker\" }\n\n steps:\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Get git tag\n id: vars\n run: |\n T=${GITHUB_REF#refs/*/} # Remove \"refs/*/\" prefix from GITHUB_REF\n echo \"GIT_TAG=$T\" >> $GITHUB_ENV\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:version\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.GIT_TAG }}-arm64v8\n push: true\n\n - name: Create and push manifest for ${{ matrix.job.image_name }}:latest\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}\n images: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-amd64,${{ secrets.DOCKER_HUB_USERNAME }}/${{ matrix.job.image_name }}:${{ env.LATEST_TAG }}-arm64v8\n push: true\n\n - name: Logout from Docker Hub\n if: always()\n run: docker logout\n" }, { "path": ".github/workflows/rustlint.yml", "content": "name: Lint\n\non:\n push:\n branches: [ main ]\n pull_request:\n types: [ opened, synchronize, reopened ]\n branches: [ main ]\n\nenv:\n SQLX_VERSION: 0.7.1\n SQLX_FEATURES: \"rustls,postgres\"\n SQLX_OFFLINE: true\n RUST_TOOLCHAIN: \"1.86.0\"\n\njobs:\n test:\n name: fmt & clippy\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v3\n - uses: actions-rs/toolchain@v1\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n override: true\n components: rustfmt, clippy\n profile: minimal\n\n - name: install prerequisites\n run: |\n sudo apt-get update\n sudo apt-get install protobuf-compiler\n\n - uses: Swatinem/rust-cache@v2\n with:\n workspaces: |\n AppFlowy-Cloud\n key: ${{ runner.os }}-cargo-clippy-${{ hashFiles('**/Cargo.lock') }}\n restore-keys: |\n ${{ runner.os }}-cargo-clippy-\n\n - name: Copy and rename dev.env to .env\n run: cp dev.env .env\n\n - name: Code Gen\n working-directory: ./script\n run: ./code_gen.sh\n\n - name: Rustfmt\n run: |\n cargo fmt --check\n\n - name: Clippy\n run: cargo clippy --all-targets --all-features --tests -- -D warnings\n" }, { "path": ".github/workflows/stress_test.yml", "content": "name: AppFlowy-Cloud Stress Test\n\non: [ pull_request ]\n\nconcurrency:\n group: stress-test-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}\n cancel-in-progress: true\n\nenv:\n SQLX_OFFLINE: true\n RUST_TOOLCHAIN: \"1.86.0\"\n POSTGRES_HOST: localhost\n REDIS_HOST: localhost\n LOCALHOST_GOTRUE: http://localhost/gotrue\n DATABASE_URL: postgres://postgres:password@localhost:5432/postgres\n\njobs:\n test:\n name: Collab Stress Tests\n runs-on: self-hosted-appflowy3\n\n steps:\n - name: Checkout Repository\n uses: actions/checkout@v3\n\n - name: Install Rust Toolchain\n uses: dtolnay/rust-toolchain@stable\n\n - name: Copy and Rename dev.env to .env\n run: cp dev.env .env\n\n - name: Install Prerequisites\n run: |\n brew update\n if ! brew list libpq &>/dev/null; then\n echo \"Installing libpq...\"\n brew install libpq\n else\n echo \"libpq is already installed.\"\n fi\n\n if ! brew list sqlx-cli &>/dev/null; then\n echo \"Installing sqlx-cli...\"\n brew install sqlx-cli\n else\n echo \"sqlx-cli is already installed.\"\n fi\n\n if ! brew list protobuf &>/dev/null; then\n echo \"Installing protobuf...\"\n brew install protobuf\n else\n echo \"protobuf is already installed.\"\n fi\n\n - name: Replace Values in .env\n run: |\n sed -i '' 's|RUST_LOG=.*|RUST_LOG=debug|' .env\n sed -i '' 's|API_EXTERNAL_URL=.*|API_EXTERNAL_URL=http://localhost:9999|' .env\n sed -i '' 's|APPFLOWY_INDEXER_ENABLED=.*|APPFLOWY_INDEXER_ENABLED=false|' .env\n\n sed -i '' 's|APPFLOWY_GOTRUE_BASE_URL=.*|APPFLOWY_GOTRUE_BASE_URL=http://localhost:9999|' .env\n sed -i '' 's|GOTRUE_MAILER_AUTOCONFIRM=.*|GOTRUE_MAILER_AUTOCONFIRM=false|' .env\n sed -i '' 's|APPFLOWY_DATABASE_URL=.*|APPFLOWY_DATABASE_URL=postgres://postgres:password@localhost:5432/postgres|' .env\n\n cat .env\n shell: bash\n\n - name: Start Docker Compose Services\n run: |\n docker compose -f docker-compose-dev.yml down\n docker compose -f docker-compose-dev.yml up -d\n ./script/code_gen.sh\n cargo sqlx database create && cargo sqlx migrate run\n\n - name: Run Server and Test\n run: |\n cargo run --package xtask -- --stress-test\n" }, { "path": ".github/workflows/wasm_publish.yml", "content": "name: Manual NPM Package Publish\n\non:\n workflow_dispatch:\n inputs:\n working_directory:\n description: 'Working directory (e.g., libs/client-api-wasm)'\n required: true\n default: 'libs/client-api-wasm'\n package_name:\n description: 'Which package to publish'\n required: true\n default: '@appflowyinc/client-api-wasm'\n type: choice\n options:\n - '@appflowyinc/client-api-wasm'\n package_version:\n description: 'Package version'\n required: true\n\nenv:\n NODE_VERSION: '20.12.0'\n RUST_TOOLCHAIN: \"1.86.0\"\njobs:\n publish:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v3\n - uses: actions-rs/toolchain@v1\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n\n - name: Setup Node.js\n uses: actions/setup-node@v1\n with:\n node-version: ${{ env.NODE_VERSION }}\n\n - uses: Swatinem/rust-cache@v2\n with:\n workspaces: |\n AppFlowy-Cloud\n\n - name: Install wasm-pack\n run: cargo install wasm-pack\n\n - name: Build with wasm-pack\n run: wasm-pack build --release\n working-directory: ${{ github.event.inputs.working_directory }}\n\n - name: Update name\n working-directory: ${{ github.event.inputs.working_directory }}/pkg\n run: |\n jq '.name = \"${{ github.event.inputs.package_name }}\"' package.json > package.json.tmp\n mv package.json.tmp package.json\n - name: Update version\n working-directory: ${{ github.event.inputs.working_directory }}/pkg\n run: |\n npm version ${{ github.event.inputs.package_version }}\n\n - name: Configure npm for wasm-pack\n run: echo \"//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}\" > ${{ github.event.inputs.working_directory }}/pkg/.npmrc\n\n - name: Publish package\n run: |\n npm config set access public\n wasm-pack publish\n working-directory: ${{ github.event.inputs.working_directory }}/pkg\n env:\n NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}\n" }, { "path": ".github/workflows/web_docker.yml", "content": "name: AppFlowy Web image build and push\non:\n workflow_dispatch:\n inputs:\n version:\n description: 'AppFlowy Web version'\n required: true\nenv:\n IMAGE_NAME: ${{ secrets.DOCKER_HUB_USERNAME }}/appflowy_web\njobs:\n build:\n runs-on: ${{ matrix.os }}\n strategy:\n matrix:\n include:\n - os: ubuntu-24.04\n platform: linux/amd64\n - os: ubuntu-24.04-arm\n platform: linux/arm64\n steps:\n - name: Prepare\n run: |\n PLATFORM=${{ matrix.platform }}\n VERSION=${{ github.event.inputs.version }}\n IMAGE_TAG=${VERSION#v}\n echo \"PLATFORM_PAIR=${PLATFORM//\\//-}\" >> $GITHUB_ENV\n echo \"IMAGE_TAG=${IMAGE_TAG}\" >> $GITHUB_ENV\n\n - name: Check out the repository\n uses: actions/checkout@v3\n with:\n fetch-depth: 1\n\n - name: Set up QEMU\n uses: docker/setup-qemu-action@v3\n\n - name: Log in to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Build and push\n id: build\n uses: docker/build-push-action@v6\n with:\n platforms: ${{ matrix.platform }}\n tags: |\n ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}-${{ env.PLATFORM_PAIR }}\n ${{ env.IMAGE_NAME }}:latest-${{ env.PLATFORM_PAIR }}\n build-args: VERSION=${{ github.event.inputs.version }}\n context: docker/web\n provenance: false\n push: true\n merge:\n runs-on: ubuntu-24.04\n needs:\n - build\n steps:\n - name: Prepare\n run: |\n VERSION=${{ github.event.inputs.version }}\n IMAGE_TAG=${VERSION#v}\n echo \"IMAGE_TAG=${IMAGE_TAG}\" >> $GITHUB_ENV\n - name: Login to Docker Hub\n uses: docker/login-action@v3\n with:\n username: ${{ secrets.DOCKER_HUB_USERNAME }}\n password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}\n\n - name: Set up Docker Buildx\n uses: docker/setup-buildx-action@v3\n\n - name: Create and push manifest\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}\n images: ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}-linux-amd64,${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}-linux-arm64\n push: true\n\n - name: Create and push manifest\n uses: Noelware/docker-manifest-action@0.4.3\n with:\n inputs: ${{ env.IMAGE_NAME }}:latest\n images: ${{ env.IMAGE_NAME }}:latest-linux-amd64,${{ env.IMAGE_NAME }}:latest-linux-arm64\n push: true\n" }, { "path": ".gitignore", "content": "# Generated by Cargo\n# will have compiled files and executables\n**/target/\n\n# These are backup files generated by rustfmt\n**/*.rs.bk\n.idea/\n**/temp/**\npackage-lock.json\nyarn.lock\nnode_modules\n**/libs/AppFlowy-Collab/\ndata/\n.env\n.logs\nflake.nix\nflake.lock\n.envrc\n.direnv/\n.claude\n\n**/.DS_Store\n**/.env.*\n\ndocker-compose.override.yml\n.serena\n" }, { "path": ".sqlx/query-0389af6b225125d09c5a75b443561dba4d97b786d040e5b8d5a76de36716beb2.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid\\n FROM af_collab\\n WHERE workspace_id = $1\\n AND partition_key = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"0389af6b225125d09c5a75b443561dba4d97b786d040e5b8d5a76de36716beb2\"\n}\n" }, { "path": ".sqlx/query-05e89f62ff993fa2e4b0002c0022bba9706359e402b07b15ccdeb67492625064.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT updated_at, blob\\n FROM af_collab\\n WHERE oid = $1 AND partition_key = $2 AND deleted_at IS NULL;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"05e89f62ff993fa2e4b0002c0022bba9706359e402b07b15ccdeb67492625064\"\n}\n" }, { "path": ".sqlx/query-06096ba1131e78d3da5df25a4b0a1193f11c9782abaf91faf263a116f90e51af.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_collab (oid, blob, len, partition_key, owner_uid, workspace_id, updated_at)\\n SELECT * FROM UNNEST($1::uuid[], $2::bytea[], $3::int[], $4::int[], $5::bigint[], $6::uuid[], $7::timestamp with time zone[])\\n ON CONFLICT (oid)\\n DO UPDATE SET blob = excluded.blob, len = excluded.len, updated_at = excluded.updated_at where af_collab.workspace_id = excluded.workspace_id\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\",\n \"ByteaArray\",\n \"Int4Array\",\n \"Int4Array\",\n \"Int8Array\",\n \"UuidArray\",\n \"TimestamptzArray\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"06096ba1131e78d3da5df25a4b0a1193f11c9782abaf91faf263a116f90e51af\"\n}\n" }, { "path": ".sqlx/query-075b89cfe2572d28e7adfc29bbe52fef4afdd5013686f7294efd966739886f0d.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT email FROM af_user WHERE uid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"075b89cfe2572d28e7adfc29bbe52fef4afdd5013686f7294efd966739886f0d\"\n}\n" }, { "path": ".sqlx/query-0781735c56d22370302beec06863dccbbb9e664b212de93e5073508a82b91609.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace\\n SET default_published_view_id = $1\\n WHERE workspace_id = $2\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"0781735c56d22370302beec06863dccbbb9e664b212de93e5073508a82b91609\"\n}\n" }, { "path": ".sqlx/query-081abcd7f80664e8acd205833b0f9ca43bc1ccc03d992e7b1c45c3e401a6007a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n database_storage_id\\n FROM public.af_workspace\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"081abcd7f80664e8acd205833b0f9ca43bc1ccc03d992e7b1c45c3e401a6007a\"\n}\n" }, { "path": ".sqlx/query-084655c4e26f78c9c0924ea39a099dc9c00ee73dc6ade2dcff27c03042ebe8c3.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_workspace_invite_code (workspace_id, invite_code, expires_at)\\n VALUES ($1, $2, $3)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Timestamp\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"084655c4e26f78c9c0924ea39a099dc9c00ee73dc6ade2dcff27c03042ebe8c3\"\n}\n" }, { "path": ".sqlx/query-09cf032adce81ba99362b3df50ba104f4e1eb2d538350c65cf615ea13f1c37f0.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_template_view\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"09cf032adce81ba99362b3df50ba104f4e1eb2d538350c65cf615ea13f1c37f0\"\n}\n" }, { "path": ".sqlx/query-09ff850490eab213cfa0ad88ece9ce7baa39beabee19754fd993268d29552eb9.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_chat_messages (chat_id, author, content, meta_data)\\n VALUES ($1, $2, $3, $4)\\n RETURNING message_id, created_at\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"message_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Jsonb\",\n \"Text\",\n \"Jsonb\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"09ff850490eab213cfa0ad88ece9ce7baa39beabee19754fd993268d29552eb9\"\n}\n" }, { "path": ".sqlx/query-0affbd65859d6299c6ba736797f970b86552b83d95316ec3f54f93501e00b522.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id\\n FROM af_workspace\\n WHERE owner_uid = (SELECT uid FROM public.af_user WHERE uuid = $1)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"0affbd65859d6299c6ba736797f970b86552b83d95316ec3f54f93501e00b522\"\n}\n" }, { "path": ".sqlx/query-0d9c62acb33b96bb81536d1ad3121174403bcd40b777eb8d384fe8e81e1db3c4.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT invite_code\\n FROM af_workspace_invite_code\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"invite_code\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"0d9c62acb33b96bb81536d1ad3121174403bcd40b777eb8d384fe8e81e1db3c4\"\n}\n" }, { "path": ".sqlx/query-0eeb2af3c6974c7e6d1c20bb4b08965eae9b0a291c7cef6451208b7740b9804c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH last_mentioned AS (\\n SELECT\\n person_id,\\n MAX(mentioned_at) AS last_mentioned_at\\n FROM af_page_mention\\n WHERE workspace_id = $1\\n GROUP BY person_id\\n )\\n\\n SELECT\\n au.uuid,\\n COALESCE(awmp.name, au.name) AS \\\"name!\\\",\\n au.email,\\n awm.role_id AS \\\"role!\\\",\\n COALESCE(awmp.avatar_url, au.metadata ->> 'icon_url') AS \\\"avatar_url\\\",\\n awmp.cover_image_url,\\n awmp.custom_image_url,\\n awmp.description,\\n lm.last_mentioned_at\\n FROM af_workspace_member awm\\n JOIN af_user au ON awm.uid = au.uid\\n LEFT JOIN af_workspace_member_profile awmp ON (awm.uid = awmp.uid AND awm.workspace_id = awmp.workspace_id)\\n LEFT JOIN last_mentioned lm ON au.uuid = lm.person_id\\n WHERE awm.workspace_id = $1\\n ORDER BY lm.last_mentioned_at DESC NULLS LAST\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"cover_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"custom_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"last_mentioned_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n null,\n false,\n false,\n null,\n true,\n true,\n true,\n null\n ]\n },\n \"hash\": \"0eeb2af3c6974c7e6d1c20bb4b08965eae9b0a291c7cef6451208b7740b9804c\"\n}\n" }, { "path": ".sqlx/query-12c52797d87c0ec56ffe6d8baf24501a276fdac4453399190dc221de89b611f8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, namespace, is_original\\n FROM af_workspace_namespace\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"namespace\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"is_original\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"12c52797d87c0ec56ffe6d8baf24501a276fdac4453399190dc221de89b611f8\"\n}\n" }, { "path": ".sqlx/query-1545a42d784a1a5fa8e9ed6128814608b9230b64ce23dcd85de444a7aa01bf9e.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n au.uuid,\\n COALESCE(awmp.name, au.name) AS \\\"name!\\\",\\n au.email,\\n awm.role_id AS \\\"role!\\\",\\n COALESCE(awmp.avatar_url, au.metadata ->> 'icon_url') AS \\\"avatar_url\\\",\\n awmp.cover_image_url,\\n awmp.custom_image_url,\\n awmp.description\\n FROM af_workspace_member awm\\n JOIN af_user au ON awm.uid = au.uid\\n LEFT JOIN af_workspace_member_profile awmp ON (awm.uid = awmp.uid AND awm.workspace_id = awmp.workspace_id)\\n WHERE awm.workspace_id = $1\\n AND au.uuid = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"cover_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"custom_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n null,\n false,\n false,\n null,\n true,\n true,\n true\n ]\n },\n \"hash\": \"1545a42d784a1a5fa8e9ed6128814608b9230b64ce23dcd85de444a7aa01bf9e\"\n}\n" }, { "path": ".sqlx/query-15613595695e2e722c45712931ce0eb8d2a3deb1bb665d1f091f354a3ad96b92.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM af_published_collab\\n WHERE workspace_id = $1\\n AND publish_name = $2\\n AND unpublished_at IS NULL\\n )\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"15613595695e2e722c45712931ce0eb8d2a3deb1bb665d1f091f354a3ad96b92\"\n}\n" }, { "path": ".sqlx/query-16208887bc2f2ca6b5f3df8062a12b482908f9f113c0474eeae75f6784b5e0fc.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_published_view_reaction (comment_id, view_id, created_by, reaction_type)\\n VALUES ($1, $2, (SELECT uid FROM af_user WHERE uuid = $3), $4)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"16208887bc2f2ca6b5f3df8062a12b482908f9f113c0474eeae75f6784b5e0fc\"\n}\n" }, { "path": ".sqlx/query-18207c125d5f974894576ee1dcfe406b221e9119f570403ec7a41ae1359b3f6c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n workspace_id,\\n inviter AS inviter_uid,\\n (SELECT uid FROM public.af_user WHERE LOWER(email) = LOWER(invitee_email)) AS invitee_uid,\\n status,\\n role_id AS role\\n FROM\\n public.af_workspace_invitation\\n WHERE id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"inviter_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"invitee_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"status\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n null,\n false,\n false\n ]\n },\n \"hash\": \"18207c125d5f974894576ee1dcfe406b221e9119f570403ec7a41ae1359b3f6c\"\n}\n" }, { "path": ".sqlx/query-1ae2809504bb6ea7dabcb5b5acfed09b0dd2e382e9fec3430680192df63876b8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT af.uuid\\n FROM af_published_collab apc\\n JOIN af_user af ON af.uid = apc.published_by\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"1ae2809504bb6ea7dabcb5b5acfed09b0dd2e382e9fec3430680192df63876b8\"\n}\n" }, { "path": ".sqlx/query-1b1ff4352abb6dad982279ee99c8dccb3621b55a838998c1b9803982ae10f622.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \" SELECT uid, uuid FROM af_user\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": []\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"1b1ff4352abb6dad982279ee99c8dccb3621b55a838998c1b9803982ae10f622\"\n}\n" }, { "path": ".sqlx/query-1bd79541a2b351b11ae94fe8a7aad408f9b563fd123099aa701a1e07ce797d2f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n af_user.uuid\\n FROM public.af_workspace_member\\n JOIN public.af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n AND role_id != $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"1bd79541a2b351b11ae94fe8a7aad408f9b563fd123099aa701a1e07ce797d2f\"\n}\n" }, { "path": ".sqlx/query-1c8f022ff5add11376dbbc17efd874dd31fd908c4f17be1bded18dbc689e3b36.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE public.af_workspace\\n SET is_initialized = $2\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Bool\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"1c8f022ff5add11376dbbc17efd874dd31fd908c4f17be1bded18dbc689e3b36\"\n}\n" }, { "path": ".sqlx/query-1e36d9b3adf957524af88f997f12e5eeeaabda218c3709540e4a4c2df0180047.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace\\n SET settings = $1\\n WHERE workspace_id = $2\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Jsonb\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"1e36d9b3adf957524af88f997f12e5eeeaabda218c3709540e4a4c2df0180047\"\n}\n" }, { "path": ".sqlx/query-21195760ea7ed2dc4eda1dc2bd0eed9afcc63651ba6e67e7db675307e3b87821.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE public.af_workspace\\n SET workspace_name = $1\\n WHERE workspace_id = $2\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"21195760ea7ed2dc4eda1dc2bd0eed9afcc63651ba6e67e7db675307e3b87821\"\n}\n" }, { "path": ".sqlx/query-2167ca10f5c560d8d4121d57d425c84482fa1dd52ee6f2cc7934e7d356b0dee6.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT default_published_view_id\\n FROM af_workspace\\n WHERE workspace_id = (SELECT workspace_id FROM af_workspace_namespace WHERE namespace = $1)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"default_published_view_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"2167ca10f5c560d8d4121d57d425c84482fa1dd52ee6f2cc7934e7d356b0dee6\"\n}\n" }, { "path": ".sqlx/query-21f66ca39be3377f8c5e4b218123e266fe8e03260ecd1891c644820892dda2b2.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT * FROM af_collab_snapshot\\n WHERE sid = $1 AND oid = $2 AND workspace_id = $3 AND deleted_at IS NULL;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"sid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"oid\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"len\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"encrypt\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\",\n \"Text\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n true,\n true,\n false,\n false\n ]\n },\n \"hash\": \"21f66ca39be3377f8c5e4b218123e266fe8e03260ecd1891c644820892dda2b2\"\n}\n" }, { "path": ".sqlx/query-223e530f8605f6d00789344565666f57705151e3c2318519e877b22f8ffc871b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n apc.view_id,\\n apc.publish_name,\\n au.email AS publisher_email,\\n apc.created_at AS publish_timestamp,\\n apc.comments_enabled,\\n apc.duplicate_enabled\\n FROM af_published_collab apc\\n JOIN af_user au ON apc.published_by = au.uid\\n WHERE workspace_id = $1\\n AND unpublished_at IS NULL\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"publish_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"publisher_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"publish_timestamp\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"comments_enabled\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"duplicate_enabled\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"223e530f8605f6d00789344565666f57705151e3c2318519e877b22f8ffc871b\"\n}\n" }, { "path": ".sqlx/query-229a99b7a3a2f136babd5499c2a1047fe840903acf0d06e57fb78ca9b03e7008.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, snapshot, snapshot_version, created_at\\n FROM af_snapshot_meta\\n WHERE oid = $1 AND partition_key = $2\\n ORDER BY created_at DESC\\n LIMIT 1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"snapshot\",\n \"type_info\": \"Bytea\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"snapshot_version\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"created_at\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"229a99b7a3a2f136babd5499c2a1047fe840903acf0d06e57fb78ca9b03e7008\"\n}\n" }, { "path": ".sqlx/query-2394226650959b34ae80b1948b7a111720b3ea5da48934d8d7e395ecc84e6985.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_template_view SET\\n updated_at = NOW(),\\n name = $2,\\n description = $3,\\n about = $4,\\n view_url = $5,\\n creator_id = $6,\\n is_new_template = $7,\\n is_featured = $8\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Uuid\",\n \"Bool\",\n \"Bool\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"2394226650959b34ae80b1948b7a111720b3ea5da48934d8d7e395ecc84e6985\"\n}\n" }, { "path": ".sqlx/query-24c5fb37a4391d590e83d2710e9a2ee7f4d06efcdd6034df1f67bb0d9db45716.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT name, email FROM af_user WHERE uuid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"24c5fb37a4391d590e83d2710e9a2ee7f4d06efcdd6034df1f67bb0d9db45716\"\n}\n" }, { "path": ".sqlx/query-2593b975fcf2dcf0129a1390fd8e2888d440e07c904d7eb3ca14957be8bc6069.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT * FROM public.af_permissions WHERE id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"access_level\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"2593b975fcf2dcf0129a1390fd8e2888d440e07c904d7eb3ca14957be8bc6069\"\n}\n" }, { "path": ".sqlx/query-2902fd3a9faa9481754d38b29abb543640c0b5564dca8f0141c7de2b8aab9551.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid,workspace_id,owner_uid,deleted_at,created_at,updated_at\\n FROM af_collab\\n WHERE oid = $1 AND partition_key = $2 AND deleted_at IS NULL;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n true,\n true,\n false\n ]\n },\n \"hash\": \"2902fd3a9faa9481754d38b29abb543640c0b5564dca8f0141c7de2b8aab9551\"\n}\n" }, { "path": ".sqlx/query-291f0916b7868f3598b50f659689b9c77d34112c2a2fff9fc04775da9f97e46d.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM af_workspace\\n WHERE workspace_id = $1\\n ) AS user_exists;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"user_exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"291f0916b7868f3598b50f659689b9c77d34112c2a2fff9fc04775da9f97e46d\"\n}\n" }, { "path": ".sqlx/query-29279a0a97beb08aea84d588374c7534c28bd9c4da24b1ee20245109f5c33880.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace_member\\n SET updated_at = $3\\n WHERE uid = $1\\n AND workspace_id = $2;\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Int8\",\n \"Uuid\",\n \"Timestamptz\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"29279a0a97beb08aea84d588374c7534c28bd9c4da24b1ee20245109f5c33880\"\n}\n" }, { "path": ".sqlx/query-2b0754f55889a20c294d2a77ba8d3fa34c8174856abfdede34797851183a177a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS (\\n SELECT 1\\n FROM public.af_workspace\\n WHERE\\n workspace_id = $1\\n AND owner_uid = (\\n SELECT uid FROM public.af_user WHERE email = $2\\n )\\n ) AS \\\"is_owner\\\";\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"is_owner\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"2b0754f55889a20c294d2a77ba8d3fa34c8174856abfdede34797851183a177a\"\n}\n" }, { "path": ".sqlx/query-2c0a776a787bc748857873b682d2fa3c549ffeaf767aa8ee05b09b3857505ded.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\nSELECT\\n w.settings['disable_search_indexing']::boolean as disable_search_indexing,\\n CASE\\n WHEN w.settings['disable_search_indexing']::boolean THEN\\n FALSE\\n ELSE\\n EXISTS (SELECT 1 FROM af_collab_embeddings m WHERE m.oid = $2::uuid)\\n END as has_index\\nFROM af_workspace w\\nWHERE w.workspace_id = $1\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"disable_search_indexing\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"has_index\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null,\n null\n ]\n },\n \"hash\": \"2c0a776a787bc748857873b682d2fa3c549ffeaf767aa8ee05b09b3857505ded\"\n}\n" }, { "path": ".sqlx/query-2c496e29533dd27117fbb688ba2324f04d7cc306181fcf3f82079d5639f632c4.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_chat\\n SET deleted_at = now()\\n WHERE chat_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"2c496e29533dd27117fbb688ba2324f04d7cc306181fcf3f82079d5639f632c4\"\n}\n" }, { "path": ".sqlx/query-2d6d00669ea7d598d69d848d143f33e8c144d35b3d4c5293f98344b2c62fe6c8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT namespace\\n FROM af_workspace_namespace\\n WHERE workspace_id = (SELECT workspace_id FROM af_workspace_namespace WHERE namespace = $1)\\n AND is_original = FALSE\\n ORDER BY created_at DESC\\n LIMIT 1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"namespace\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"2d6d00669ea7d598d69d848d143f33e8c144d35b3d4c5293f98344b2c62fe6c8\"\n}\n" }, { "path": ".sqlx/query-2dda0bc4d9486a49c0af00d8ee4408c970a2ba3533217c130281e7db5a4e3d6b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, metadata\\n FROM af_published_collab\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"metadata\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"2dda0bc4d9486a49c0af00d8ee4408c970a2ba3533217c130281e7db5a4e3d6b\"\n}\n" }, { "path": ".sqlx/query-30a592588fe20bb1444178b7ee9e73e37d1d55572f936988528178bfa10158e5.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT true\\n FROM af_published_collab\\n WHERE view_id = $1\\n AND published_by = (SELECT uid FROM af_user WHERE uuid = $2)\\n UNION ALL\\n SELECT true\\n FROM af_published_view_comment\\n WHERE view_id = $1\\n AND comment_id = $3\\n AND created_by = (SELECT uid FROM af_user WHERE uuid = $2)\\n ) AS \\\"exists\\\";\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"30a592588fe20bb1444178b7ee9e73e37d1d55572f936988528178bfa10158e5\"\n}\n" }, { "path": ".sqlx/query-315840e0657ea0b8d162635b4cc21ce84a09fd7ea14ea07980869a80ee06900c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_page_mention (workspace_id, view_id, view_name, person_id, block_id, mentioned_by, mentioned_at, require_notification)\\n VALUES ($1, $2, $3, $4, $5, $6, current_timestamp, $7)\\n ON CONFLICT (workspace_id, view_id, person_id) DO UPDATE\\n SET mentioned_by = EXCLUDED.mentioned_by,\\n mentioned_at = EXCLUDED.mentioned_at,\\n block_id = EXCLUDED.block_id,\\n require_notification = EXCLUDED.require_notification,\\n notified = false\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Text\",\n \"Uuid\",\n \"Text\",\n \"Int8\",\n \"Bool\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"315840e0657ea0b8d162635b4cc21ce84a09fd7ea14ea07980869a80ee06900c\"\n}\n" }, { "path": ".sqlx/query-32fd3dcd1a3e02c32ddedb232b6af2e7f9ea160354528f3299cca62367af10f7.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_workspace_member (workspace_id, uid, role_id)\\n VALUES ($1, $2, $3)\\n ON CONFLICT (workspace_id, uid) DO NOTHING\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"32fd3dcd1a3e02c32ddedb232b6af2e7f9ea160354528f3299cca62367af10f7\"\n}\n" }, { "path": ".sqlx/query-340b8cef5a7676541b86505cdf103fcb5b54c40a9d6e599dc1d9dc0a95e1e862.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH creator_number_of_templates AS (\\n SELECT\\n creator_id,\\n COUNT(1)::int AS number_of_templates\\n FROM af_template_view\\n WHERE name ILIKE $1\\n GROUP BY creator_id\\n )\\n\\n SELECT\\n creator.creator_id AS \\\"id!\\\",\\n name AS \\\"name!\\\",\\n avatar_url AS \\\"avatar_url!\\\",\\n ARRAY_AGG((link_type, url)) FILTER (WHERE link_type IS NOT NULL) AS \\\"account_links: Vec\\\",\\n COALESCE(number_of_templates, 0) AS \\\"number_of_templates!\\\"\\n FROM af_template_creator creator\\n LEFT OUTER JOIN af_template_creator_account_link account_link\\n USING (creator_id)\\n LEFT OUTER JOIN creator_number_of_templates\\n USING (creator_id)\\n WHERE name ILIKE $1\\n GROUP BY (creator.creator_id, name, avatar_url, number_of_templates)\\n ORDER BY created_at ASC\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id!\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"avatar_url!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"account_links: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"number_of_templates!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n null\n ]\n },\n \"hash\": \"340b8cef5a7676541b86505cdf103fcb5b54c40a9d6e599dc1d9dc0a95e1e862\"\n}\n" }, { "path": ".sqlx/query-354166a6fa147dc6e17bfc14cb68d3a72a2e7c3aa2d115686deb12086786e034.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT role_id FROM af_workspace_member\\n WHERE workspace_id = $1 AND uid = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"role_id\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"354166a6fa147dc6e17bfc14cb68d3a72a2e7c3aa2d115686deb12086786e034\"\n}\n" }, { "path": ".sqlx/query-35622d4ebede28dd28b613edcf3970ad258286f176ce86e88bd662a602e4ad58.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_quick_note (workspace_id, uid, data) VALUES ($1, $2, $3)\\n RETURNING quick_note_id AS id, data, created_at AS \\\"created_at!\\\", updated_at AS \\\"last_updated_at!\\\"\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"data\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at!\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"last_updated_at!\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\",\n \"Jsonb\"\n ]\n },\n \"nullable\": [\n false,\n false,\n true,\n true\n ]\n },\n \"hash\": \"35622d4ebede28dd28b613edcf3970ad258286f176ce86e88bd662a602e4ad58\"\n}\n" }, { "path": ".sqlx/query-36733444fc8fac851fb540105ea6c9dca785455ae44ae518b98d8b57082e11d8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM public.af_workspace_member\\n JOIN af_roles ON af_workspace_member.role_id = af_roles.id\\n WHERE workspace_id = $1\\n AND af_workspace_member.uid = (\\n SELECT uid FROM public.af_user WHERE uuid = $2\\n )\\n AND af_roles.name = 'Owner'\\n ) AS \\\"exists\\\";\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"36733444fc8fac851fb540105ea6c9dca785455ae44ae518b98d8b57082e11d8\"\n}\n" }, { "path": ".sqlx/query-3865d921d76ac0d0eb16065738cddf82cb71945504116b0a04da759209b9c250.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, indexed_at\\n FROM af_collab\\n WHERE oid = ANY (SELECT UNNEST($1::uuid[]))\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"indexed_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n true\n ]\n },\n \"hash\": \"3865d921d76ac0d0eb16065738cddf82cb71945504116b0a04da759209b9c250\"\n}\n" }, { "path": ".sqlx/query-3b2daf263b4022e69c819edb55d412da8ad3fe4377155d8485fbaf186069f389.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n uuid,\\n email,\\n name,\\n metadata ->> 'icon_url' AS avatar_url\\n FROM af_user\\n WHERE uid = $1;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null\n ]\n },\n \"hash\": \"3b2daf263b4022e69c819edb55d412da8ad3fe4377155d8485fbaf186069f389\"\n}\n" }, { "path": ".sqlx/query-3bb5b82d46c55bbfd51319310a3cd065c4b796462a1ddf3c17617ee65ce9961a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_chat (chat_id, name, workspace_id, rag_ids)\\n VALUES ($1, $2, $3, $4)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Uuid\",\n \"Jsonb\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"3bb5b82d46c55bbfd51319310a3cd065c4b796462a1ddf3c17617ee65ce9961a\"\n}\n" }, { "path": ".sqlx/query-3c2c94b9ac0a329b92847d7176a7435f894c5ef3b3b11e3e2ae03a8ec454a6d8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH af_user_row AS (\\n SELECT * FROM af_user WHERE uuid = $1\\n )\\n SELECT\\n af_user_row.uid,\\n af_user_row.uuid,\\n af_user_row.email,\\n af_user_row.password,\\n af_user_row.name,\\n af_user_row.metadata,\\n af_user_row.encryption_sign,\\n af_user_row.deleted_at,\\n af_user_row.updated_at,\\n af_user_row.created_at,\\n (\\n SELECT af_workspace_member.workspace_id\\n FROM af_workspace_member\\n JOIN af_workspace\\n ON af_workspace_member.workspace_id = af_workspace.workspace_id\\n WHERE af_workspace_member.uid = af_user_row.uid\\n AND COALESCE(af_workspace.is_initialized, true) = true\\n ORDER BY af_workspace_member.updated_at DESC\\n LIMIT 1\\n ) AS latest_workspace_id\\n FROM af_user_row\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"password\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"metadata\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"encryption_sign\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 10,\n \"name\": \"latest_workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n true,\n true,\n true,\n true,\n null\n ]\n },\n \"hash\": \"3c2c94b9ac0a329b92847d7176a7435f894c5ef3b3b11e3e2ae03a8ec454a6d8\"\n}\n" }, { "path": ".sqlx/query-3ca587826f0598e7786c765dcb2fcd6ae08d8aa404f02920307547c769a3f91b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH\\n updated_creator AS (\\n UPDATE af_template_creator\\n SET name = $2, avatar_url = $3, updated_at = NOW()\\n WHERE creator_id = $1\\n RETURNING creator_id, name, avatar_url\\n ),\\n account_links AS (\\n INSERT INTO af_template_creator_account_link (creator_id, link_type, url)\\n SELECT updated_creator.creator_id as creator_id, link_type, url FROM\\n UNNEST($4::text[], $5::text[]) AS t(link_type, url)\\n CROSS JOIN updated_creator\\n RETURNING\\n creator_id,\\n link_type,\\n url\\n ),\\n creator_number_of_templates AS (\\n SELECT\\n creator_id,\\n COUNT(1)::int AS number_of_templates\\n FROM af_template_view\\n WHERE creator_id = $1\\n GROUP BY creator_id\\n )\\n SELECT\\n updated_creator.creator_id AS id,\\n name,\\n avatar_url,\\n ARRAY_AGG((link_type, url)) FILTER (WHERE link_type IS NOT NULL) AS \\\"account_links: Vec\\\",\\n COALESCE(number_of_templates, 0) AS \\\"number_of_templates!\\\"\\n FROM updated_creator\\n LEFT OUTER JOIN account_links\\n USING (creator_id)\\n LEFT OUTER JOIN creator_number_of_templates\\n USING (creator_id)\\n GROUP BY (id, name, avatar_url, number_of_templates)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"account_links: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"number_of_templates!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Text\",\n \"TextArray\",\n \"TextArray\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n null\n ]\n },\n \"hash\": \"3ca587826f0598e7786c765dcb2fcd6ae08d8aa404f02920307547c769a3f91b\"\n}\n" }, { "path": ".sqlx/query-3cfb0a6d9a798f29422bc4bf4a52d3c86c3aae98c173b83c60eb57504a3d2c7c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_snapshot_meta (oid, workspace_id, snapshot, snapshot_version, partition_key, created_at)\\n VALUES ($1, $2, $3, $4, $5, $6)\\n ON CONFLICT DO NOTHING\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\",\n \"Bytea\",\n \"Int4\",\n \"Int4\",\n \"Int8\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"3cfb0a6d9a798f29422bc4bf4a52d3c86c3aae98c173b83c60eb57504a3d2c7c\"\n}\n" }, { "path": ".sqlx/query-3d3309a4ae7a88b3f7c9608dd78a1c1dc9b237a37e29722bcd2910bd23f9d873.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_related_template_view\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"3d3309a4ae7a88b3f7c9608dd78a1c1dc9b237a37e29722bcd2910bd23f9d873\"\n}\n" }, { "path": ".sqlx/query-3fdd28c263edf5c91ab8b770e6106d4890ec4bae2ff3c20f80c40cb4042d9e03.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT SUM(len) FROM af_collab WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"sum\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"3fdd28c263edf5c91ab8b770e6106d4890ec4bae2ff3c20f80c40cb4042d9e03\"\n}\n" }, { "path": ".sqlx/query-40db0a61665bdb9f7e9d1ce2a6c0eb05703e36e83c87802a72630388588de8cd.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, COUNT(*) AS member_count\\n FROM af_workspace_member\\n WHERE workspace_id = ANY($1) AND role_id != $2\\n GROUP BY workspace_id\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"member_count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n null\n ]\n },\n \"hash\": \"40db0a61665bdb9f7e9d1ce2a6c0eb05703e36e83c87802a72630388588de8cd\"\n}\n" }, { "path": ".sqlx/query-4123fa8796e8b56225155f79c2ee4c4dacda5ef51e858ce7dcb9877c7d55bd53.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH invited_workspace_member AS (\\n SELECT\\n invite_code,\\n COUNT(*) AS member_count,\\n COUNT(CASE WHEN uid = $2 THEN uid END) > 0 AS is_member\\n FROM af_workspace_invite_code\\n JOIN af_workspace_member USING (workspace_id)\\n WHERE invite_code = $1\\n AND (expires_at IS NULL OR expires_at > NOW())\\n GROUP BY invite_code\\n )\\n SELECT\\n workspace_id,\\n owner_profile.name AS \\\"owner_name!\\\",\\n owner_profile.metadata ->> 'icon_url' AS owner_avatar,\\n af_workspace.workspace_name AS \\\"workspace_name!\\\",\\n af_workspace.icon AS workspace_icon_url,\\n invited_workspace_member.member_count AS \\\"member_count!\\\",\\n invited_workspace_member.is_member AS \\\"is_member!\\\"\\n FROM af_workspace_invite_code\\n JOIN af_workspace USING (workspace_id)\\n JOIN af_user AS owner_profile ON af_workspace.owner_uid = owner_profile.uid\\n JOIN invited_workspace_member USING (invite_code)\\n WHERE invite_code = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"owner_name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_avatar\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"workspace_name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"workspace_icon_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"member_count!\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"is_member!\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n null,\n true,\n false,\n null,\n null\n ]\n },\n \"hash\": \"4123fa8796e8b56225155f79c2ee4c4dacda5ef51e858ce7dcb9877c7d55bd53\"\n}\n" }, { "path": ".sqlx/query-425b0b5ffbe3f1b80aedf15b8df1640c879d8d45883eee8b1e2fbd64eaf283d6.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_template_category\\n WHERE category_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"425b0b5ffbe3f1b80aedf15b8df1640c879d8d45883eee8b1e2fbd64eaf283d6\"\n}\n" }, { "path": ".sqlx/query-441316f35ca8c24bf78167f9fec48e28c05969bbbbe3d0e3d9e1569a375de476.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT * FROM af_blob_metadata\\n WHERE workspace_id = $1 AND file_id = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"file_id\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"file_type\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"file_size\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"modified_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"status\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"source\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"source_metadata\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"441316f35ca8c24bf78167f9fec48e28c05969bbbbe3d0e3d9e1569a375de476\"\n}\n" }, { "path": ".sqlx/query-4476f271f4ea8c83428b4178c43ee2894e380a7c3ae3cbc782f438fabc45de8b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_access_request\\n WHERE request_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"4476f271f4ea8c83428b4178c43ee2894e380a7c3ae3cbc782f438fabc45de8b\"\n}\n" }, { "path": ".sqlx/query-44e4be501db0375fbd8ad8ed923bef887e361fe466ab46bdd6663f6cf97413a8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH new_workspace AS (\\n INSERT INTO public.af_workspace (owner_uid, workspace_name, icon, is_initialized)\\n VALUES ((SELECT uid FROM public.af_user WHERE uuid = $1), $2, $3, $4)\\n RETURNING *\\n )\\n SELECT\\n workspace_id,\\n database_storage_id,\\n owner_uid,\\n owner_profile.name AS owner_name,\\n owner_profile.email AS owner_email,\\n new_workspace.created_at,\\n workspace_type,\\n new_workspace.deleted_at,\\n workspace_name,\\n icon\\n FROM new_workspace\\n JOIN public.af_user AS owner_profile ON new_workspace.owner_uid = owner_profile.uid;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"owner_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"owner_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Text\",\n \"Bool\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n true,\n true,\n false\n ]\n },\n \"hash\": \"44e4be501db0375fbd8ad8ed923bef887e361fe466ab46bdd6663f6cf97413a8\"\n}\n" }, { "path": ".sqlx/query-4f5951e61713d04963524b84648c9ff8c7be05f0089f6fd26fc6e0e0afeae579.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT reply_message_id\\n FROM af_chat_messages\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"reply_message_id\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"4f5951e61713d04963524b84648c9ff8c7be05f0089f6fd26fc6e0e0afeae579\"\n}\n" }, { "path": ".sqlx/query-4fc0611c846f86be652d42eb8ae21a5da0353fe810856aaabe91d7963329d098.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n ac.oid as object_id,\\n ace.partition_key,\\n ac.indexed_at,\\n ace.updated_at\\n FROM af_collab_embeddings ac\\n JOIN af_collab ace ON ac.oid = ace.oid\\n WHERE ac.oid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"object_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"partition_key\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"indexed_at\",\n \"type_info\": \"Timestamp\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"4fc0611c846f86be652d42eb8ae21a5da0353fe810856aaabe91d7963329d098\"\n}\n" }, { "path": ".sqlx/query-51a3a723b1825da7b9abd9cb36db0cf8220abf063098a73e4a6fc3f87352b395.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT metadata\\n FROM af_published_collab\\n WHERE workspace_id = (SELECT workspace_id FROM af_workspace_namespace WHERE namespace = $1)\\n AND unpublished_at IS NULL\\n AND publish_name = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"metadata\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"51a3a723b1825da7b9abd9cb36db0cf8220abf063098a73e4a6fc3f87352b395\"\n}\n" }, { "path": ".sqlx/query-523087b0101a35abfc70a561272acec7a357491a86901f7927b8242173b5c8c8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH\\n new_creator AS (\\n INSERT INTO af_template_creator (name, avatar_url)\\n VALUES ($1, $2)\\n RETURNING creator_id, name, avatar_url\\n ),\\n account_links AS (\\n INSERT INTO af_template_creator_account_link (creator_id, link_type, url)\\n SELECT new_creator.creator_id as creator_id, link_type, url FROM\\n UNNEST($3::text[], $4::text[]) AS t(link_type, url)\\n CROSS JOIN new_creator\\n RETURNING\\n creator_id,\\n link_type,\\n url\\n )\\n SELECT\\n new_creator.creator_id AS id,\\n name,\\n avatar_url,\\n ARRAY_AGG((link_type, url)) FILTER (WHERE link_type IS NOT NULL) AS \\\"account_links: Vec\\\",\\n 0 AS \\\"number_of_templates!\\\"\\n FROM new_creator\\n LEFT OUTER JOIN account_links\\n USING (creator_id)\\n GROUP BY (id, name, avatar_url)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"account_links: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"number_of_templates!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Text\",\n \"TextArray\",\n \"TextArray\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n null\n ]\n },\n \"hash\": \"523087b0101a35abfc70a561272acec7a357491a86901f7927b8242173b5c8c8\"\n}\n" }, { "path": ".sqlx/query-52b936c6adf43ec5c7e777ad9379dec30b750fefad73684e552481f709006d04.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO public.af_workspace_invitation (\\n id,\\n workspace_id,\\n inviter,\\n invitee_email,\\n role_id\\n )\\n VALUES (\\n $1,\\n $2,\\n (SELECT uid FROM public.af_user WHERE uuid = $3),\\n $4,\\n $5\\n )\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Uuid\",\n \"Text\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"52b936c6adf43ec5c7e777ad9379dec30b750fefad73684e552481f709006d04\"\n}\n" }, { "path": ".sqlx/query-53d87db17bb9c1d002adc82ba9f2c07ff33ea987a1157d7f6fd2344091b98deb.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n avr.comment_id,\\n avr.reaction_type,\\n ARRAY_AGG((au.uuid, au.name, au.email, au.metadata ->> 'icon_url')) AS \\\"react_users!: Vec\\\"\\n FROM af_published_view_reaction avr\\n INNER JOIN af_user au ON avr.created_by = au.uid\\n WHERE view_id = $1\\n GROUP BY comment_id, reaction_type\\n ORDER BY MIN(avr.created_at)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"comment_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"reaction_type\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"react_users!: Vec\",\n \"type_info\": \"RecordArray\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n null\n ]\n },\n \"hash\": \"53d87db17bb9c1d002adc82ba9f2c07ff33ea987a1157d7f6fd2344091b98deb\"\n}\n" }, { "path": ".sqlx/query-594af4041e0778476a699536316007f0a264f7d3db9de6326ef8082a2a898995.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT id, invitee_email\\n FROM public.af_workspace_invitation\\n WHERE workspace_id = $1\\n AND status = 0\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"invitee_email\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"594af4041e0778476a699536316007f0a264f7d3db9de6326ef8082a2a898995\"\n}\n" }, { "path": ".sqlx/query-598e731078fc6417039cc16772eb5bc6c74d24c1a8018a981d2175a483dc699c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_access_request (\\n workspace_id,\\n view_id,\\n uid,\\n status\\n )\\n VALUES ($1, $2, $3, $4)\\n RETURNING request_id\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"request_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Int8\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"598e731078fc6417039cc16772eb5bc6c74d24c1a8018a981d2175a483dc699c\"\n}\n" }, { "path": ".sqlx/query-59b2a7854bb8f0d7ee34b9dfa4e3db5cac8e25fdebe186ba2cbd65012eb91f5f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, view_id\\n FROM af_published_collab\\n WHERE workspace_id = (SELECT workspace_id FROM af_workspace_namespace WHERE namespace = $1)\\n AND publish_name = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"59b2a7854bb8f0d7ee34b9dfa4e3db5cac8e25fdebe186ba2cbd65012eb91f5f\"\n}\n" }, { "path": ".sqlx/query-5c2d58bfdedbb1be71337a97d5ed5a2921f83dd549507b2834a4d2582d2c361b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_collab_embeddings e\\n USING af_collab c\\n WHERE e.oid = c.oid\\n AND c.workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"5c2d58bfdedbb1be71337a97d5ed5a2921f83dd549507b2834a4d2582d2c361b\"\n}\n" }, { "path": ".sqlx/query-5cce5f82c0fb9237f724478e2167243bc772c092910f07b8226431a6dd70a7da.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"DELETE FROM af_quick_note WHERE quick_note_id = $1\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"5cce5f82c0fb9237f724478e2167243bc772c092910f07b8226431a6dd70a7da\"\n}\n" }, { "path": ".sqlx/query-5d408d36790ade4da1ceeb68b4a183aa7d9abc27b0ec42c2a3c5af26ad80f128.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT uid FROM af_user WHERE uuid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"5d408d36790ade4da1ceeb68b4a183aa7d9abc27b0ec42c2a3c5af26ad80f128\"\n}\n" }, { "path": ".sqlx/query-5d51aef40f7e0716338b406263240dbc5e4a64cec6f1be10a3676e4f86ce4557.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_template_creator_account_link\\n WHERE creator_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"5d51aef40f7e0716338b406263240dbc5e4a64cec6f1be10a3676e4f86ce4557\"\n}\n" }, { "path": ".sqlx/query-5e0d58f612425e1cf36dfc7f56691cfb8f6def1a3d29645922cb437d11ce62ef.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT COUNT(*)\\n FROM public.af_chat_messages\\n WHERE chat_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"5e0d58f612425e1cf36dfc7f56691cfb8f6def1a3d29645922cb437d11ce62ef\"\n}\n" }, { "path": ".sqlx/query-620167841bb2acdd1c9c6aadf8245e3a483d87dc006d4e361e994ce2c5d768cd.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM af_workspace_namespace\\n WHERE namespace = $1\\n )\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"620167841bb2acdd1c9c6aadf8245e3a483d87dc006d4e361e994ce2c5d768cd\"\n}\n" }, { "path": ".sqlx/query-62ed61bcf92fc0c3756f57d0fe05cdd12e70072f5646fe48790ad189a6e96b12.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH template_with_creator_account_link AS (\\n SELECT\\n template.view_id,\\n template.creator_id,\\n COALESCE(\\n ARRAY_AGG((link_type, url)::account_link_type) FILTER (WHERE link_type IS NOT NULL),\\n '{}'\\n ) AS account_links\\n FROM af_template_view template\\n JOIN af_published_collab\\n USING (view_id)\\n JOIN af_template_creator creator\\n USING (creator_id)\\n LEFT OUTER JOIN af_template_creator_account_link account_link\\n USING (creator_id)\\n WHERE view_id = $1\\n GROUP BY (view_id, template.creator_id)\\n ),\\n related_template_with_category AS (\\n SELECT\\n template.related_view_id,\\n ARRAY_AGG(\\n (\\n template_category.category_id,\\n template_category.name,\\n template_category.icon,\\n template_category.bg_color\\n )::template_category_minimal_type\\n ) AS categories\\n FROM af_related_template_view template\\n JOIN af_template_view_template_category template_template_category\\n ON template.related_view_id = template_template_category.view_id\\n JOIN af_template_category template_category\\n USING (category_id)\\n WHERE template.view_id = $1\\n GROUP BY template.related_view_id\\n ),\\n template_with_related_template AS (\\n SELECT\\n template.view_id,\\n ARRAY_AGG(\\n (\\n template.related_view_id,\\n related_template.created_at,\\n related_template.updated_at,\\n related_template.name,\\n related_template.description,\\n related_template.view_url,\\n (\\n creator.creator_id,\\n creator.name,\\n creator.avatar_url\\n )::template_creator_minimal_type,\\n related_template_with_category.categories,\\n related_template.is_new_template,\\n related_template.is_featured\\n )::template_minimal_type\\n ) AS related_templates\\n FROM af_related_template_view template\\n JOIN af_template_view related_template\\n ON template.related_view_id = related_template.view_id\\n JOIN af_template_creator creator\\n ON related_template.creator_id = creator.creator_id\\n JOIN related_template_with_category\\n ON template.related_view_id = related_template_with_category.related_view_id\\n WHERE template.view_id = $1\\n GROUP BY template.view_id\\n ),\\n template_with_category AS (\\n SELECT\\n view_id,\\n COALESCE(\\n ARRAY_AGG((\\n vtc.category_id,\\n name,\\n icon,\\n bg_color,\\n description,\\n category_type,\\n priority\\n )) FILTER (WHERE vtc.category_id IS NOT NULL),\\n '{}'\\n ) AS categories\\n FROM af_template_view_template_category vtc\\n JOIN af_template_category tc\\n ON vtc.category_id = tc.category_id\\n WHERE view_id = $1\\n GROUP BY view_id\\n ),\\n creator_number_of_templates AS (\\n SELECT\\n creator_id,\\n COUNT(*) AS number_of_templates\\n FROM af_template_view\\n GROUP BY creator_id\\n )\\n\\n SELECT\\n template.view_id,\\n template.created_at,\\n template.updated_at,\\n template.name,\\n template.description,\\n template.about,\\n template.view_url,\\n (\\n creator.creator_id,\\n creator.name,\\n creator.avatar_url,\\n template_with_creator_account_link.account_links,\\n creator_number_of_templates.number_of_templates\\n )::template_creator_type AS \\\"creator!: AFTemplateCreatorRow\\\",\\n template_with_category.categories AS \\\"categories!: Vec\\\",\\n COALESCE(template_with_related_template.related_templates, '{}') AS \\\"related_templates!: Vec\\\",\\n template.is_new_template,\\n template.is_featured\\n FROM af_template_view template\\n JOIN af_template_creator creator\\n USING (creator_id)\\n JOIN template_with_creator_account_link\\n ON template.view_id = template_with_creator_account_link.view_id\\n LEFT OUTER JOIN template_with_related_template\\n ON template.view_id = template_with_related_template.view_id\\n JOIN template_with_category\\n ON template.view_id = template_with_category.view_id\\n LEFT OUTER JOIN creator_number_of_templates\\n ON template.creator_id = creator_number_of_templates.creator_id\\n WHERE template.view_id = $1\\n\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"about\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"view_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"creator!: AFTemplateCreatorRow\",\n \"type_info\": {\n \"Custom\": {\n \"name\": \"template_creator_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"creator_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"avatar_url\",\n \"Text\"\n ],\n [\n \"account_links\",\n {\n \"Custom\": {\n \"name\": \"account_link_type[]\",\n \"kind\": {\n \"Array\": {\n \"Custom\": {\n \"name\": \"account_link_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"link_type\",\n \"Text\"\n ],\n [\n \"url\",\n \"Text\"\n ]\n ]\n }\n }\n }\n }\n }\n }\n ],\n [\n \"number_of_templates\",\n \"Int4\"\n ]\n ]\n }\n }\n }\n },\n {\n \"ordinal\": 8,\n \"name\": \"categories!: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"related_templates!: Vec\",\n \"type_info\": {\n \"Custom\": {\n \"name\": \"template_minimal_type[]\",\n \"kind\": {\n \"Array\": {\n \"Custom\": {\n \"name\": \"template_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"view_id\",\n \"Uuid\"\n ],\n [\n \"created_at\",\n \"Timestamptz\"\n ],\n [\n \"updated_at\",\n \"Timestamptz\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"description\",\n \"Text\"\n ],\n [\n \"view_url\",\n \"Text\"\n ],\n [\n \"creator\",\n {\n \"Custom\": {\n \"name\": \"template_creator_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"creator_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"avatar_url\",\n \"Text\"\n ]\n ]\n }\n }\n }\n ],\n [\n \"categories\",\n {\n \"Custom\": {\n \"name\": \"template_category_minimal_type[]\",\n \"kind\": {\n \"Array\": {\n \"Custom\": {\n \"name\": \"template_category_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"category_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"icon\",\n \"Text\"\n ],\n [\n \"bg_color\",\n \"Text\"\n ]\n ]\n }\n }\n }\n }\n }\n }\n ],\n [\n \"is_new_template\",\n \"Bool\"\n ],\n [\n \"is_featured\",\n \"Bool\"\n ]\n ]\n }\n }\n }\n }\n }\n }\n },\n {\n \"ordinal\": 10,\n \"name\": \"is_new_template\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 11,\n \"name\": \"is_featured\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false,\n null,\n null,\n null,\n false,\n false\n ]\n },\n \"hash\": \"62ed61bcf92fc0c3756f57d0fe05cdd12e70072f5646fe48790ad189a6e96b12\"\n}\n" }, { "path": ".sqlx/query-6380f5a6ded2dab8f18de42541c9d77c2f3af512e3f66e1b731ca7c00c9ea8f8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO public.af_workspace_member (workspace_id, uid, role_id)\\n SELECT $1, af_user.uid, $3\\n FROM public.af_user\\n WHERE\\n af_user.email = $2\\n ON CONFLICT (workspace_id, uid)\\n DO NOTHING;\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"6380f5a6ded2dab8f18de42541c9d77c2f3af512e3f66e1b731ca7c00c9ea8f8\"\n}\n" }, { "path": ".sqlx/query-63f0871525ed70bd980223de574d241c0b738cfb7b0ea1fc808f02c0e05b9a2f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n avr.reaction_type,\\n ARRAY_AGG((au.uuid, au.name, au.email, au.metadata ->> 'icon_url')) AS \\\"react_users!: Vec\\\",\\n avr.comment_id\\n FROM af_published_view_reaction avr\\n INNER JOIN af_user au ON avr.created_by = au.uid\\n WHERE comment_id = $1\\n GROUP BY comment_id, reaction_type\\n ORDER BY MIN(avr.created_at)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"reaction_type\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"react_users!: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"comment_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n null,\n false\n ]\n },\n \"hash\": \"63f0871525ed70bd980223de574d241c0b738cfb7b0ea1fc808f02c0e05b9a2f\"\n}\n" }, { "path": ".sqlx/query-66218110851919b05b95b008a17547547d23f6baeeff8a5521b2b246126adc34.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT name, meta_data, rag_ids\\n FROM af_chat\\n WHERE chat_id = $1 AND deleted_at IS NULL\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"rag_ids\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"66218110851919b05b95b008a17547547d23f6baeeff8a5521b2b246126adc34\"\n}\n" }, { "path": ".sqlx/query-6716ec4787f7155af97a4890730f4b3fe564ead8d99f8355ac249f9b39316238.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH workspace_member_count AS (\\n SELECT\\n workspace_id,\\n COUNT(*) AS member_count\\n FROM af_workspace_member\\n WHERE workspace_id = $1 AND role_id != $3\\n GROUP BY workspace_id\\n )\\n\\n SELECT\\n af_workspace.workspace_id,\\n database_storage_id,\\n owner_uid,\\n owner_profile.name as owner_name,\\n owner_profile.email as owner_email,\\n af_workspace.created_at,\\n workspace_type,\\n af_workspace.deleted_at,\\n workspace_name,\\n icon,\\n workspace_member_count.member_count AS \\\"member_count!\\\",\\n role_id AS \\\"role!\\\"\\n FROM public.af_workspace\\n JOIN public.af_user owner_profile ON af_workspace.owner_uid = owner_profile.uid\\n JOIN af_workspace_member ON (af_workspace.workspace_id = af_workspace_member.workspace_id\\n AND af_workspace_member.uid = $2)\\n JOIN workspace_member_count ON af_workspace.workspace_id = workspace_member_count.workspace_id\\n WHERE af_workspace.workspace_id = $1\\n AND COALESCE(af_workspace.is_initialized, true) = true;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"owner_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"owner_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 10,\n \"name\": \"member_count!\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 11,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n true,\n true,\n false,\n null,\n false\n ]\n },\n \"hash\": \"6716ec4787f7155af97a4890730f4b3fe564ead8d99f8355ac249f9b39316238\"\n}\n" }, { "path": ".sqlx/query-67b381fdcd20f8cfe782d939e56bf94f105cdb23a59fefb846afe8105d91d129.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH request_id_workspace_member_count AS (\\n SELECT\\n request_id,\\n COUNT(*) AS member_count\\n FROM af_access_request\\n JOIN af_workspace_member USING (workspace_id)\\n WHERE request_id = $1\\n GROUP BY request_id\\n )\\n SELECT\\n request_id,\\n view_id,\\n (\\n workspace_id,\\n af_workspace.database_storage_id,\\n af_workspace.owner_uid,\\n owner_profile.name,\\n owner_profile.email,\\n af_workspace.created_at,\\n af_workspace.workspace_type,\\n af_workspace.deleted_at,\\n af_workspace.workspace_name,\\n af_workspace.icon,\\n request_id_workspace_member_count.member_count\\n ) AS \\\"workspace!: AFWorkspaceWithMemberCountRow\\\",\\n (\\n af_user.uid,\\n af_user.uuid,\\n af_user.name,\\n af_user.email,\\n af_user.metadata ->> 'icon_url'\\n ) AS \\\"requester!: AFAccessRequesterColumn\\\",\\n status AS \\\"status: AFAccessRequestStatusColumn\\\",\\n af_access_request.created_at AS created_at\\n FROM af_access_request\\n JOIN af_user USING (uid)\\n JOIN af_workspace USING (workspace_id)\\n JOIN af_user AS owner_profile ON af_workspace.owner_uid = owner_profile.uid\\n JOIN request_id_workspace_member_count USING (request_id)\\n WHERE request_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"request_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"workspace!: AFWorkspaceWithMemberCountRow\",\n \"type_info\": \"Record\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"requester!: AFAccessRequesterColumn\",\n \"type_info\": \"Record\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"status: AFAccessRequestStatusColumn\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n null,\n null,\n false,\n false\n ]\n },\n \"hash\": \"67b381fdcd20f8cfe782d939e56bf94f105cdb23a59fefb846afe8105d91d129\"\n}\n" }, { "path": ".sqlx/query-6821f1e02da2c71cdf0566a163c85ff185bf0ba89c770254c9c15880ba76a553.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_name\\n FROM public.af_workspace\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"6821f1e02da2c71cdf0566a163c85ff185bf0ba89c770254c9c15880ba76a553\"\n}\n" }, { "path": ".sqlx/query-6935572cb23700243fbbd3dc382cdbf56edaadc4aab7855c237bce68e29414c0.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, blob\\n FROM af_collab\\n WHERE oid = ANY($1) AND deleted_at IS NULL;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"6935572cb23700243fbbd3dc382cdbf56edaadc4aab7855c237bce68e29414c0\"\n}\n" }, { "path": ".sqlx/query-6aca3fde126cb1761c0a5ce1fbfa793bdbac4aed137cdf60eb3f277f36d7bf7a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n category_id AS id,\\n name,\\n description,\\n icon,\\n bg_color,\\n category_type AS \\\"category_type: AFTemplateCategoryTypeColumn\\\",\\n priority\\n FROM af_template_category\\n WHERE category_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"bg_color\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"category_type: AFTemplateCategoryTypeColumn\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"priority\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"6aca3fde126cb1761c0a5ce1fbfa793bdbac4aed137cdf60eb3f277f36d7bf7a\"\n}\n" }, { "path": ".sqlx/query-6ca2a2fa10d5334183d98176998d41f36948fe5624e290a32d0b50bc9fb256bf.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n updated_at as updated_at,\\n oid as row_id\\n FROM af_collab\\n WHERE workspace_id = $1\\n AND oid = ANY($2)\\n AND updated_at > $3\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"row_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\",\n \"Timestamptz\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"6ca2a2fa10d5334183d98176998d41f36948fe5624e290a32d0b50bc9fb256bf\"\n}\n" }, { "path": ".sqlx/query-6cc4a7da11a37413c9951983ee3f30de933cc6357a66c8e10366fde27acaefea.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_blob_metadata\\n (workspace_id, file_id, file_type, file_size)\\n VALUES ($1, $2, $3, $4)\\n ON CONFLICT (workspace_id, file_id) DO UPDATE SET\\n file_type = $3,\\n file_size = $4\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Varchar\",\n \"Varchar\",\n \"Int8\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"6cc4a7da11a37413c9951983ee3f30de933cc6357a66c8e10366fde27acaefea\"\n}\n" }, { "path": ".sqlx/query-6f5d6d79587d7f7a52c920acccfe338a8c001ea30b722d3a6a1a60259d47913c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT content,meta_data\\n FROM af_chat_messages\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"6f5d6d79587d7f7a52c920acccfe338a8c001ea30b722d3a6a1a60259d47913c\"\n}\n" }, { "path": ".sqlx/query-6fbcd1c32c638530461c74f8c8195a5b1e1e6f7a389a6a60d889c88c5f47302a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS (\\n SELECT 1 FROM af_collab\\n WHERE oid = $1 AND deleted_at IS NULL\\n )\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"6fbcd1c32c638530461c74f8c8195a5b1e1e6f7a389a6a60d889c88c5f47302a\"\n}\n" }, { "path": ".sqlx/query-71c15686124c05a4fdef066738eadd0ab17d6af1bfeffc480c8fe52a4e6edab8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT file_id FROM af_blob_metadata\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"file_id\",\n \"type_info\": \"Varchar\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"71c15686124c05a4fdef066738eadd0ab17d6af1bfeffc480c8fe52a4e6edab8\"\n}\n" }, { "path": ".sqlx/query-74de473589a405c3ab567e72a881869321095e2de497b2c1866c547f939c359c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT * FROM af_blob_metadata\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"file_id\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"file_type\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"file_size\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"modified_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"status\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"source\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"source_metadata\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"74de473589a405c3ab567e72a881869321095e2de497b2c1866c547f939c359c\"\n}\n" }, { "path": ".sqlx/query-75dc8578510ae696bf4bcdd780f7cefc666b4436cf53edf30a98dd2ff7926799.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n au.uuid,\\n COALESCE(awmp.name, au.name) AS \\\"name!\\\",\\n au.email,\\n awm.role_id AS \\\"role!\\\",\\n COALESCE(awmp.avatar_url, au.metadata ->> 'icon_url') AS \\\"avatar_url\\\",\\n awmp.cover_image_url,\\n awmp.custom_image_url,\\n awmp.description\\n FROM af_workspace_member awm\\n JOIN af_user au ON awm.uid = au.uid\\n LEFT JOIN af_workspace_member_profile awmp ON (awm.uid = awmp.uid AND awm.workspace_id = awmp.workspace_id)\\n WHERE awm.workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"cover_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"custom_image_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n null,\n false,\n false,\n null,\n true,\n true,\n true\n ]\n },\n \"hash\": \"75dc8578510ae696bf4bcdd780f7cefc666b4436cf53edf30a98dd2ff7926799\"\n}\n" }, { "path": ".sqlx/query-770a4979e137ca08c5ea625259221f9d397a56defb8e498eb92da7b3a8af612b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"UPDATE af_quick_note SET data = $1, updated_at = NOW() WHERE quick_note_id = $2\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Jsonb\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"770a4979e137ca08c5ea625259221f9d397a56defb8e498eb92da7b3a8af612b\"\n}\n" }, { "path": ".sqlx/query-786a59b28265397658aecf0318beeedece2a7f5bea80b9189f3989721035c593.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH user_workspace_id AS (\\n SELECT workspace_id\\n FROM af_workspace_member\\n JOIN af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_user.uuid = $1\\n ),\\n workspace_member_count AS (\\n SELECT\\n workspace_id,\\n COUNT(*) AS member_count\\n FROM af_workspace_member\\n JOIN user_workspace_id USING (workspace_id)\\n WHERE role_id != $2\\n GROUP BY workspace_id\\n )\\n\\n SELECT\\n w.workspace_id,\\n w.database_storage_id,\\n w.owner_uid,\\n u.name AS owner_name,\\n u.email AS owner_email,\\n w.created_at,\\n w.workspace_type,\\n w.deleted_at,\\n w.workspace_name,\\n w.icon,\\n wmc.member_count AS \\\"member_count!\\\",\\n wm.role_id AS \\\"role!\\\"\\n FROM af_workspace w\\n JOIN af_workspace_member wm ON w.workspace_id = wm.workspace_id\\n JOIN public.af_user u ON w.owner_uid = u.uid\\n JOIN workspace_member_count wmc ON w.workspace_id = wmc.workspace_id\\n WHERE wm.uid = (\\n SELECT uid FROM public.af_user WHERE uuid = $1\\n )\\n AND COALESCE(w.is_initialized, true) = true;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"owner_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"owner_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 10,\n \"name\": \"member_count!\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 11,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n true,\n true,\n false,\n null,\n false\n ]\n },\n \"hash\": \"786a59b28265397658aecf0318beeedece2a7f5bea80b9189f3989721035c593\"\n}\n" }, { "path": ".sqlx/query-78a191e21a7e7a07eee88ed02c7fbf7035f908b8e4057f7ace1b3b5d433424fe.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_collab\\n SET deleted_at = $2\\n WHERE oid = $1;\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Timestamptz\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"78a191e21a7e7a07eee88ed02c7fbf7035f908b8e4057f7ace1b3b5d433424fe\"\n}\n" }, { "path": ".sqlx/query-794c4ced16801b3e98a62eb44c18c14137dd09b11be73442a7f46b2f938b8445.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT message_id, content, created_at, author, meta_data, reply_message_id\\n FROM af_chat_messages\\n WHERE chat_id = $1\\n AND reply_message_id = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"message_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"author\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"reply_message_id\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"794c4ced16801b3e98a62eb44c18c14137dd09b11be73442a7f46b2f938b8445\"\n}\n" }, { "path": ".sqlx/query-7a4c7da16e99ff3875bdd7e0d189e26c3c1ab49672bace41992aecc446061850.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"SElECT settings FROM af_workspace WHERE workspace_id = $1\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"settings\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"7a4c7da16e99ff3875bdd7e0d189e26c3c1ab49672bace41992aecc446061850\"\n}\n" }, { "path": ".sqlx/query-7a86f93afe6e77d4481920b08ed38926446f6473107d68dfcd82ffecddcee890.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n awn.namespace,\\n apc.publish_name,\\n apc.view_id,\\n au.email AS publisher_email,\\n apc.created_at AS publish_timestamp,\\n apc.unpublished_at AS unpublished_timestamp,\\n apc.comments_enabled,\\n apc.duplicate_enabled\\n FROM af_published_collab apc\\n JOIN af_user au ON apc.published_by = au.uid\\n JOIN af_workspace aw ON apc.workspace_id = aw.workspace_id\\n JOIN af_workspace_namespace awn ON aw.workspace_id = awn.workspace_id AND awn.is_original = TRUE\\n WHERE apc.view_id = ANY($1);\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"namespace\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"publish_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"publisher_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"publish_timestamp\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"unpublished_timestamp\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"comments_enabled\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"duplicate_enabled\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n false\n ]\n },\n \"hash\": \"7a86f93afe6e77d4481920b08ed38926446f6473107d68dfcd82ffecddcee890\"\n}\n" }, { "path": ".sqlx/query-7aa6e41c80f0b2906d46e73ae05e8e70e133b7edd450b102715b8a487d6055ac.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT metadata, blob\\n FROM af_published_collab\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"metadata\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"7aa6e41c80f0b2906d46e73ae05e8e70e133b7edd450b102715b8a487d6055ac\"\n}\n" }, { "path": ".sqlx/query-7f6b1db5fd7b4e235f1e04d9d990fa2d47edfed23e692fbab778d387b2861a22.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT name FROM af_user WHERE uuid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"7f6b1db5fd7b4e235f1e04d9d990fa2d47edfed23e692fbab778d387b2861a22\"\n}\n" }, { "path": ".sqlx/query-811b6b01de4fdb06ad58185a5c49dfaa31aef8ea30ab3421d4afc13822fc0a9c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT c.oid, c.partition_key, c.updated_at, c.blob\\n FROM af_collab c\\n WHERE c.workspace_id = $1\\n AND c.deleted_at IS NULL\\n AND c.created_at > $2\\n ORDER BY updated_at\\n LIMIT $3\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"partition_key\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Timestamptz\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"811b6b01de4fdb06ad58185a5c49dfaa31aef8ea30ab3421d4afc13822fc0a9c\"\n}\n" }, { "path": ".sqlx/query-816a026ca4c25329b2fb24d59efde9ab71798ff8b31ce7320e02344d4e8b3e42.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_published_view_reaction\\n WHERE comment_id = $1 AND created_by = (SELECT uid FROM af_user WHERE uuid = $2) AND reaction_type = $3\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"816a026ca4c25329b2fb24d59efde9ab71798ff8b31ce7320e02344d4e8b3e42\"\n}\n" }, { "path": ".sqlx/query-834638eb3c38eb2c220aa23ac928874d87606b47ef3bb80540614ce2f8453936.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_snapshot_state (oid, workspace_id, doc_state, doc_state_version, deps_snapshot_id, partition_key, created_at)\\n VALUES ($1, $2, $3, $4, $5, $6, $7)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\",\n \"Bytea\",\n \"Int4\",\n \"Uuid\",\n \"Int4\",\n \"Int8\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"834638eb3c38eb2c220aa23ac928874d87606b47ef3bb80540614ce2f8453936\"\n}\n" }, { "path": ".sqlx/query-842243ea6ca59135ae539060ff37b80791e76aa268a44642ede515f315e80c01.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_chat_messages\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"842243ea6ca59135ae539060ff37b80791e76aa268a44642ede515f315e80c01\"\n}\n" }, { "path": ".sqlx/query-84c224af99f654e2e0ba11a411376794855483eedb0c30b1873ed660ca8d10cd.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n uuid,\\n name,\\n metadata ->> 'icon_url' AS avatar_url\\n FROM af_user\\n WHERE uid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n null\n ]\n },\n \"hash\": \"84c224af99f654e2e0ba11a411376794855483eedb0c30b1873ed660ca8d10cd\"\n}\n" }, { "path": ".sqlx/query-84e600f13d61c56a45133e7458d5152e68dec72030e5789bf4149a333b6ebdf5.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_template_view_template_category\\n WHERE view_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"84e600f13d61c56a45133e7458d5152e68dec72030e5789bf4149a333b6ebdf5\"\n}\n" }, { "path": ".sqlx/query-852c729791d5b5eb2dde5772ccbcd24579486e43886d95a11481991fdf28efa8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_collab (oid, blob, len, partition_key, owner_uid, workspace_id, updated_at)\\n VALUES ($1, $2, $3, $4, $5, $6, COALESCE($7, NOW())) ON CONFLICT (oid)\\n DO UPDATE SET blob = $2, len = $3, owner_uid = $5, updated_at = COALESCE($7, NOW()) WHERE excluded.workspace_id = af_collab.workspace_id;\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Bytea\",\n \"Int4\",\n \"Int4\",\n \"Int8\",\n \"Uuid\",\n \"Timestamptz\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"852c729791d5b5eb2dde5772ccbcd24579486e43886d95a11481991fdf28efa8\"\n}\n" }, { "path": ".sqlx/query-85e9688218913dee85480932273ff6cf75d29af45638b195e73d73b6048806bf.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_workspace_member_profile (workspace_id, uid, name, avatar_url, cover_image_url, custom_image_url, description)\\n VALUES ($1, $2, $3, $4, $5, $6, $7)\\n ON CONFLICT (workspace_id, uid) DO UPDATE\\n SET name = EXCLUDED.name,\\n avatar_url = EXCLUDED.avatar_url,\\n cover_image_url = EXCLUDED.cover_image_url,\\n custom_image_url = EXCLUDED.custom_image_url,\\n description = EXCLUDED.description\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"85e9688218913dee85480932273ff6cf75d29af45638b195e73d73b6048806bf\"\n}\n" }, { "path": ".sqlx/query-865fe86df6d04f8abb6d477af13f8a2392a742f4027d99c290f0f156df48be07.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n fragment_id,\\n content_type,\\n content,\\n embedding as \\\"embedding!: Option\\\",\\n metadata,\\n fragment_index,\\n embedder_type\\n FROM af_collab_embeddings\\n WHERE oid = $1\\n ORDER BY fragment_index\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"fragment_id\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"content_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"embedding!: Option\",\n \"type_info\": {\n \"Custom\": {\n \"name\": \"vector\",\n \"kind\": \"Simple\"\n }\n }\n },\n {\n \"ordinal\": 4,\n \"name\": \"metadata\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"fragment_index\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"embedder_type\",\n \"type_info\": \"Int2\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n true,\n true,\n true,\n true,\n true\n ]\n },\n \"hash\": \"865fe86df6d04f8abb6d477af13f8a2392a742f4027d99c290f0f156df48be07\"\n}\n" }, { "path": ".sqlx/query-87628d6739441a22229d08832d09cbf4598c36204a6885b2e279c848cedcfa75.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT COUNT(*)\\n FROM af_published_collab\\n WHERE workspace_id = $1\\n AND view_id = ANY($2)\\n AND published_by = (SELECT uid FROM af_user WHERE uuid = $3)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"87628d6739441a22229d08832d09cbf4598c36204a6885b2e279c848cedcfa75\"\n}\n" }, { "path": ".sqlx/query-88516b9a2a424bc7697337d6f16b0d6e94b919597d709f930467423c5b4c0ec2.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT * FROM af_collab_snapshot\\n WHERE workspace_id = $1 AND oid = $2 AND deleted_at IS NULL\\n ORDER BY created_at DESC\\n LIMIT 1;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"sid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"oid\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"len\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"encrypt\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n true,\n true,\n false,\n false\n ]\n },\n \"hash\": \"88516b9a2a424bc7697337d6f16b0d6e94b919597d709f930467423c5b4c0ec2\"\n}\n" }, { "path": ".sqlx/query-8cd79c307813a509119230c7673f86471463a06ad9a84764da8d5bb1e6168e1c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n af_user.uid,\\n af_user.name,\\n af_user.email,\\n af_user.metadata ->> 'icon_url' AS avatar_url,\\n af_workspace_member.role_id AS role,\\n af_workspace_member.created_at\\n FROM public.af_workspace_member\\n JOIN public.af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n AND role_id != $2\\n ORDER BY af_workspace_member.created_at ASC;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n false,\n true\n ]\n },\n \"hash\": \"8cd79c307813a509119230c7673f86471463a06ad9a84764da8d5bb1e6168e1c\"\n}\n" }, { "path": ".sqlx/query-90a302af791eeb5c5f60c3f95145e0e73c2a1652c5b547e4118bac1d005300de.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id\\n FROM af_workspace_invite_code\\n WHERE invite_code = $1\\n AND (expires_at IS NULL OR expires_at > NOW())\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"90a302af791eeb5c5f60c3f95145e0e73c2a1652c5b547e4118bac1d005300de\"\n}\n" }, { "path": ".sqlx/query-90afca9cc8b6d4ca31e8ddf1ce466411b5034639df91b739f5cbe2af0ffb6811.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, fragment_id\\n FROM af_collab_embeddings\\n WHERE oid = ANY($1::uuid[])\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"fragment_id\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"90afca9cc8b6d4ca31e8ddf1ce466411b5034639df91b739f5cbe2af0ffb6811\"\n}\n" }, { "path": ".sqlx/query-92c4d0e22b1f6f117c9f19589832f5f89cb5b903eee3c12f5e5fc0f70f3236e1.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_published_collab\\n SET\\n blob = E''::bytea,\\n unpublished_at = NOW()\\n WHERE workspace_id = $1\\n AND view_id = ANY($2)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"92c4d0e22b1f6f117c9f19589832f5f89cb5b903eee3c12f5e5fc0f70f3236e1\"\n}\n" }, { "path": ".sqlx/query-936faba4e3c8fc3685d68f561a2c2d4f386c77cffde6f25702c19758a12669ce.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace_member\\n SET\\n role_id = $1\\n WHERE workspace_id = $2 AND uid = (\\n SELECT uid FROM af_user WHERE email = $3\\n )\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Int4\",\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"936faba4e3c8fc3685d68f561a2c2d4f386c77cffde6f25702c19758a12669ce\"\n}\n" }, { "path": ".sqlx/query-93f6a59171d7cd08d321c777f24255621280fbcf6a2c009afd601eac16c9ba3a.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT view_id\\n FROM af_published_collab\\n WHERE workspace_id = $1\\n AND unpublished_at IS NULL\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"93f6a59171d7cd08d321c777f24255621280fbcf6a2c009afd601eac16c9ba3a\"\n}\n" }, { "path": ".sqlx/query-94555a25b986992bd3cfb67bd36ff015d39bdd78ac20d56570306616bf10faf3.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_published_collab (workspace_id, view_id, publish_name, published_by, metadata, blob, comments_enabled, duplicate_enabled)\\n SELECT * FROM UNNEST(\\n (SELECT array_agg((SELECT $1::uuid)) FROM generate_series(1, $9))::uuid[],\\n $2::uuid[],\\n $3::text[],\\n (SELECT array_agg((SELECT uid FROM af_user WHERE uuid = $4)) FROM generate_series(1, $9))::bigint[],\\n $5::jsonb[],\\n $6::bytea[],\\n $7::boolean[],\\n $8::boolean[]\\n )\\n ON CONFLICT (workspace_id, view_id) DO UPDATE\\n SET metadata = EXCLUDED.metadata,\\n blob = EXCLUDED.blob,\\n published_by = EXCLUDED.published_by,\\n publish_name = EXCLUDED.publish_name\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\",\n \"TextArray\",\n \"Uuid\",\n \"JsonbArray\",\n \"ByteaArray\",\n \"BoolArray\",\n \"BoolArray\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"94555a25b986992bd3cfb67bd36ff015d39bdd78ac20d56570306616bf10faf3\"\n}\n" }, { "path": ".sqlx/query-95b1b405028c45c074121110d046f42f8229f150c2384671802ee7c1ef9e376d.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_access_request\\n SET status = $2\\n WHERE request_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"95b1b405028c45c074121110d046f42f8229f150c2384671802ee7c1ef9e376d\"\n}\n" }, { "path": ".sqlx/query-95b4d7508569cac38c78d21a0a471772d3703e5678ee7ca0cd32d60f5343be91.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_chat_messages (chat_id, author, content)\\n VALUES ($1, $2, $3)\\n RETURNING message_id, created_at\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"message_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Jsonb\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"95b4d7508569cac38c78d21a0a471772d3703e5678ee7ca0cd32d60f5343be91\"\n}\n" }, { "path": ".sqlx/query-95c00cd1ce7cdb8f5c8f45d5262d371b1b3c3f903f4eab9c0070d9916e3f8c12.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n avc.comment_id,\\n avc.created_at,\\n avc.updated_at AS last_updated_at,\\n avc.content,\\n avc.reply_comment_id,\\n avc.is_deleted,\\n (au.uuid, au.name, au.email, au.metadata ->> 'icon_url') AS \\\"user: AFWebUserWithEmailColumn\\\",\\n (NOT avc.is_deleted AND ($2 OR au.uuid = $3)) AS \\\"can_be_deleted!\\\"\\n FROM af_published_view_comment avc\\n LEFT OUTER JOIN af_user au ON avc.created_by = au.uid\\n WHERE view_id = $1\\n ORDER BY avc.created_at DESC\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"comment_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"last_updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"reply_comment_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"is_deleted\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"user: AFWebUserWithEmailColumn\",\n \"type_info\": \"Record\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"can_be_deleted!\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Bool\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n true,\n false,\n null,\n null\n ]\n },\n \"hash\": \"95c00cd1ce7cdb8f5c8f45d5262d371b1b3c3f903f4eab9c0070d9916e3f8c12\"\n}\n" }, { "path": ".sqlx/query-9ab1ff2abc6d51bc5a48a1dc6c294bbfdbe0d5f11a5e2ffc8c1973217b80307b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_published_view_comment (view_id, created_by, content, reply_comment_id)\\n VALUES ($1, (SELECT uid FROM af_user WHERE uuid = $2), $3, $4)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\",\n \"Text\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"9ab1ff2abc6d51bc5a48a1dc6c294bbfdbe0d5f11a5e2ffc8c1973217b80307b\"\n}\n" }, { "path": ".sqlx/query-9b2a8297fa991418b255fc5cb6ad70d695c4dceed20bdc557bfedfc820511126.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_template_category\\n SET\\n name = $2,\\n description = $3,\\n icon = $4,\\n bg_color = $5,\\n category_type = $6,\\n priority = $7,\\n updated_at = NOW()\\n WHERE category_id = $1\\n RETURNING\\n category_id AS id,\\n name,\\n description,\\n icon,\\n bg_color,\\n category_type AS \\\"category_type: AFTemplateCategoryTypeColumn\\\",\\n priority\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"bg_color\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"category_type: AFTemplateCategoryTypeColumn\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"priority\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Int4\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"9b2a8297fa991418b255fc5cb6ad70d695c4dceed20bdc557bfedfc820511126\"\n}\n" }, { "path": ".sqlx/query-a18d0c9536dba734715903c8e8f0b7be30d3e7a477c4ddd03533b781df2fb2c7.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n awn.namespace,\\n apc.publish_name,\\n apc.view_id,\\n au.email AS publisher_email,\\n apc.created_at AS publish_timestamp,\\n apc.unpublished_at AS unpublished_timestamp,\\n apc.comments_enabled,\\n apc.duplicate_enabled\\n FROM af_published_collab apc\\n JOIN af_user au ON apc.published_by = au.uid\\n JOIN af_workspace aw ON apc.workspace_id = aw.workspace_id\\n JOIN af_workspace_namespace awn ON aw.workspace_id = awn.workspace_id AND awn.is_original = TRUE\\n WHERE apc.workspace_id = $1 AND apc.unpublished_at IS NULL;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"namespace\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"publish_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"publisher_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"publish_timestamp\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"unpublished_timestamp\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"comments_enabled\",\n \"type_info\": \"Bool\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"duplicate_enabled\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n false\n ]\n },\n \"hash\": \"a18d0c9536dba734715903c8e8f0b7be30d3e7a477c4ddd03533b781df2fb2c7\"\n}\n" }, { "path": ".sqlx/query-a3ab30d48e4a10aff1fbfa9dbc5d275a06598610bc471893c8c0febfc36c4737.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"SELECT EXISTS(SELECT 1 FROM af_chat_messages WHERE chat_id = $1 AND message_id > $2)\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"a3ab30d48e4a10aff1fbfa9dbc5d275a06598610bc471893c8c0febfc36c4737\"\n}\n" }, { "path": ".sqlx/query-a3c235bd5df50f80ec93c3d9f6da8db7e17e89788f30c5b6432c582992b6a009.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_published_collab\\n WHERE workspace_id = $1\\n AND publish_name = ANY($2::text[])\\n RETURNING publish_name\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"publish_name\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"TextArray\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"a3c235bd5df50f80ec93c3d9f6da8db7e17e89788f30c5b6432c582992b6a009\"\n}\n" }, { "path": ".sqlx/query-a527a90fcb69c58a5e711555b6ee56e7b92ceabe746279eccd7ae3e9fa918e96.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n af_user.uid,\\n af_user.name,\\n af_user.email,\\n af_user.metadata ->> 'icon_url' AS avatar_url,\\n af_workspace_member.role_id AS role,\\n af_workspace_member.created_at\\n FROM public.af_workspace_member\\n JOIN public.af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n AND af_workspace_member.uid = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n false,\n true\n ]\n },\n \"hash\": \"a527a90fcb69c58a5e711555b6ee56e7b92ceabe746279eccd7ae3e9fa918e96\"\n}\n" }, { "path": ".sqlx/query-a75bf8b11d832d154716d4618595b117da583a31b51baaf7b84e9ee0d0e3109c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n person_id\\n FROM af_page_mention\\n WHERE workspace_id = $1\\n AND mentioned_by = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"person_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"a75bf8b11d832d154716d4618595b117da583a31b51baaf7b84e9ee0d0e3109c\"\n}\n" }, { "path": ".sqlx/query-a7c03becdf9954611ac7ad96e1f5bb5e8364f095f1cc4dc23719b218eb032973.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT deleted_at IS NOT NULL AS is_deleted\\n FROM af_collab\\n WHERE oid = $1;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"is_deleted\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"a7c03becdf9954611ac7ad96e1f5bb5e8364f095f1cc4dc23719b218eb032973\"\n}\n" }, { "path": ".sqlx/query-aa75996ca6aa12f0bcaa5fb092ac279f8a94aadcc29d0e2b652dc420506835e7.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, role_id\\n FROM af_workspace_member\\n WHERE workspace_id = ANY($1)\\n AND uid = (SELECT uid FROM public.af_user WHERE uuid = $2)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"role_id\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false\n ]\n },\n \"hash\": \"aa75996ca6aa12f0bcaa5fb092ac279f8a94aadcc29d0e2b652dc420506835e7\"\n}\n" }, { "path": ".sqlx/query-b16f38d563d4d0b35f06978a8b2c76dc5121b0e59f8b5992c9dad05dd101c8ad.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n i.id AS invite_id,\\n i.workspace_id,\\n w.workspace_name,\\n u_inviter.email AS inviter_email,\\n u_inviter.name AS inviter_name,\\n i.status,\\n i.updated_at,\\n u_inviter.metadata->>'icon_url' AS inviter_icon,\\n w.icon AS workspace_icon,\\n (SELECT COUNT(*) FROM public.af_workspace_member m WHERE m.workspace_id = i.workspace_id) AS member_count\\n FROM\\n public.af_workspace_invitation i\\n JOIN public.af_workspace w ON i.workspace_id = w.workspace_id\\n JOIN public.af_user u_inviter ON i.inviter = u_inviter.uid\\n JOIN public.af_user u_invitee ON u_invitee.uuid = $1\\n WHERE\\n LOWER(i.invitee_email) = LOWER(u_invitee.email)\\n AND ($2::SMALLINT IS NULL OR i.status = $2);\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"invite_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"inviter_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"inviter_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"status\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"inviter_icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"member_count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int2\"\n ]\n },\n \"nullable\": [\n false,\n false,\n true,\n false,\n false,\n false,\n false,\n null,\n false,\n null\n ]\n },\n \"hash\": \"b16f38d563d4d0b35f06978a8b2c76dc5121b0e59f8b5992c9dad05dd101c8ad\"\n}\n" }, { "path": ".sqlx/query-b5024138772e13557df973c1c021daf74aab97b5874d7366c478c18ae2e89e58.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT uid FROM af_user WHERE email = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"b5024138772e13557df973c1c021daf74aab97b5874d7366c478c18ae2e89e58\"\n}\n" }, { "path": ".sqlx/query-b509712055858af398fd12ddd1a8c3da54280cf55f0c53f340bddbf4bf09b3e0.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_related_template_view (view_id, related_view_id)\\n SELECT $1 AS view_id, related_view_id\\n FROM UNNEST($2::uuid[]) AS t(related_view_id)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"b509712055858af398fd12ddd1a8c3da54280cf55f0c53f340bddbf4bf09b3e0\"\n}\n" }, { "path": ".sqlx/query-ba815f67aab3f302a2982225b72c6113bbd9bc87326e4f0a3b44dadbb5f47920.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"SELECT uid, role_id as role, workspace_id FROM af_workspace_member\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": []\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"ba815f67aab3f302a2982225b72c6113bbd9bc87326e4f0a3b44dadbb5f47920\"\n}\n" }, { "path": ".sqlx/query-bbb3c31ea7e9c0a3bdabbc23b2730ee0254f38a7c1457f917c8f37f1e1aefa12.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_chat_messages\\n SET reply_message_id = $2\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Int8\",\n \"Int8\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"bbb3c31ea7e9c0a3bdabbc23b2730ee0254f38a7c1457f917c8f37f1e1aefa12\"\n}\n" }, { "path": ".sqlx/query-bd34e351ea1adc0d12d4f1cce5a855089b7f39a431dea2903c3e0b9a220640b8.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH creator_number_of_templates AS (\\n SELECT\\n creator_id,\\n COUNT(1)::int AS number_of_templates\\n FROM af_template_view\\n WHERE creator_id = $1\\n GROUP BY creator_id\\n )\\n SELECT\\n creator.creator_id AS \\\"id!\\\",\\n name AS \\\"name!\\\",\\n avatar_url AS \\\"avatar_url!\\\",\\n ARRAY_AGG((link_type, url)) FILTER (WHERE link_type IS NOT NULL) AS \\\"account_links: Vec\\\",\\n COALESCE(number_of_templates, 0) AS \\\"number_of_templates!\\\"\\n FROM af_template_creator creator\\n LEFT OUTER JOIN af_template_creator_account_link account_link\\n USING (creator_id)\\n LEFT OUTER JOIN creator_number_of_templates\\n USING (creator_id)\\n WHERE creator.creator_id = $1\\n GROUP BY (creator.creator_id, name, avatar_url, number_of_templates)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id!\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"avatar_url!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"account_links: Vec\",\n \"type_info\": \"RecordArray\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"number_of_templates!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n null\n ]\n },\n \"hash\": \"bd34e351ea1adc0d12d4f1cce5a855089b7f39a431dea2903c3e0b9a220640b8\"\n}\n" }, { "path": ".sqlx/query-bde2b88ffb1b59362c7ae82369892c79131c175924f95e5d48d75931fb846f41.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT email FROM af_user WHERE uuid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"bde2b88ffb1b59362c7ae82369892c79131c175924f95e5d48d75931fb846f41\"\n}\n" }, { "path": ".sqlx/query-bf9bff5c65ba051329ed2b694eff62808f971a8262b6e1649d91526ab3a3870d.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id, namespace, is_original\\n FROM af_workspace_namespace\\n WHERE workspace_id = $1\\n AND namespace = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"namespace\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"is_original\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"bf9bff5c65ba051329ed2b694eff62808f971a8262b6e1649d91526ab3a3870d\"\n}\n" }, { "path": ".sqlx/query-c335b73ad499b67100e4ce3131a526ddf1745488597c3392ae05e4b398a8715e.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_template_creator\\n WHERE creator_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"c335b73ad499b67100e4ce3131a526ddf1745488597c3392ae05e4b398a8715e\"\n}\n" }, { "path": ".sqlx/query-c360ec37792d567535ccd2a5011d92c7a201f516e92e204db855167f381c58b1.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n workspace_id,\\n database_storage_id,\\n owner_uid,\\n owner_profile.name as owner_name,\\n owner_profile.email as owner_email,\\n af_workspace.created_at,\\n workspace_type,\\n af_workspace.deleted_at,\\n workspace_name,\\n icon\\n FROM public.af_workspace\\n JOIN public.af_user owner_profile ON af_workspace.owner_uid = owner_profile.uid\\n WHERE af_workspace.workspace_id = $1\\n AND COALESCE(af_workspace.is_initialized, true) = true;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"owner_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"owner_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n true,\n true,\n false\n ]\n },\n \"hash\": \"c360ec37792d567535ccd2a5011d92c7a201f516e92e204db855167f381c58b1\"\n}\n" }, { "path": ".sqlx/query-c43d414f6fcaed34e059f55abaaa0bd1343cacf4d04e98481a4787a4b965ce94.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace_namespace\\n SET namespace = $1\\n WHERE workspace_id = $2\\n AND namespace = $3\\n AND is_original = FALSE\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"c43d414f6fcaed34e059f55abaaa0bd1343cacf4d04e98481a4787a4b965ce94\"\n}\n" }, { "path": ".sqlx/query-c81848346ed2ff85f1d5fb8041fba648137a927762b385b97054552c00793a50.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_workspace_invite_code\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"c81848346ed2ff85f1d5fb8041fba648137a927762b385b97054552c00793a50\"\n}\n" }, { "path": ".sqlx/query-c843fb8517b1e364016b85a9e94927673bf8311bfbf723b610d59ecfef3fafce.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM public.af_workspace_member\\n WHERE\\n workspace_id = $1\\n AND uid = (\\n SELECT uid FROM public.af_user WHERE email = $2\\n )\\n -- Ensure the user to be deleted is not the original owner.\\n -- 1. TODO(nathan): User must transfer ownership to another user first.\\n -- 2. User must have at least one workspace\\n AND uid <> (\\n SELECT owner_uid FROM public.af_workspace WHERE workspace_id = $1\\n );\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"c843fb8517b1e364016b85a9e94927673bf8311bfbf723b610d59ecfef3fafce\"\n}\n" }, { "path": ".sqlx/query-c8b1f57c5ddce8006a8e137be07f13b455f59657f5fcef67d69905ecec4cb063.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n w.workspace_name AS \\\"workspace_name!\\\",\\n pm.workspace_id,\\n pm.view_id,\\n pm.view_name,\\n mentioner.name AS \\\"mentioner_name!\\\",\\n mentioner.metadata ->> 'icon_url' AS \\\"mentioner_avatar_url\\\",\\n pm.person_id AS \\\"mentioned_person_id\\\",\\n mentioned_person.name AS \\\"mentioned_person_name!\\\",\\n mentioned_person.email AS \\\"mentioned_person_email!\\\",\\n pm.mentioned_at AS \\\"mentioned_at!\\\",\\n pm.block_id\\n FROM af_page_mention AS pm\\n JOIN af_workspace AS w ON pm.workspace_id = w.workspace_id\\n JOIN af_user AS mentioned_person\\n ON pm.person_id = mentioned_person.uuid\\n JOIN af_user AS mentioner\\n ON pm.mentioned_by = mentioner.uid\\n WHERE pm.mentioned_at > NOW() - $1::INTERVAL\\n AND require_notification\\n AND NOT notified\\n FOR UPDATE SKIP LOCKED\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"view_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"mentioner_name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"mentioner_avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"mentioned_person_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"mentioned_person_name!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"mentioned_person_email!\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"mentioned_at!\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 10,\n \"name\": \"block_id\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Interval\"\n ]\n },\n \"nullable\": [\n true,\n false,\n false,\n false,\n false,\n null,\n false,\n false,\n false,\n true,\n true\n ]\n },\n \"hash\": \"c8b1f57c5ddce8006a8e137be07f13b455f59657f5fcef67d69905ecec4cb063\"\n}\n" }, { "path": ".sqlx/query-ca2a21db67716e3f12b9f9240c1dba1b7cbe0bec1f59ef132fed53942ebad317.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_template_view (\\n view_id,\\n name,\\n description,\\n about,\\n view_url,\\n creator_id,\\n is_new_template,\\n is_featured\\n )\\n VALUES ($1, $2, $3, $4, $5, $6, $7, $8)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Uuid\",\n \"Bool\",\n \"Bool\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"ca2a21db67716e3f12b9f9240c1dba1b7cbe0bec1f59ef132fed53942ebad317\"\n}\n" }, { "path": ".sqlx/query-cb2375ad0094baefed417645b781f40dcabfbfe4a4738c99bb4efff649e6a0e6.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_template_category (name, description, icon, bg_color, category_type, priority)\\n VALUES ($1, $2, $3, $4, $5, $6)\\n RETURNING\\n category_id AS id,\\n name,\\n description,\\n icon,\\n bg_color,\\n category_type AS \\\"category_type: AFTemplateCategoryTypeColumn\\\",\\n priority\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"bg_color\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"category_type: AFTemplateCategoryTypeColumn\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"priority\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Text\",\n \"Text\",\n \"Text\",\n \"Int4\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"cb2375ad0094baefed417645b781f40dcabfbfe4a4738c99bb4efff649e6a0e6\"\n}\n" }, { "path": ".sqlx/query-cbe8402053d42529dce158b446d09a00982e1d7cdc33835776bfbefb4b4c1854.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT view_id\\n FROM af_published_collab\\n WHERE workspace_id = $1\\n AND unpublished_at IS NULL\\n AND publish_name = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"view_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"cbe8402053d42529dce158b446d09a00982e1d7cdc33835776bfbefb4b4c1854\"\n}\n" }, { "path": ".sqlx/query-cbf1d3d9fdeb672eacd4b008879787bc1f0b22a554fb249d4e12a665d9767cbd.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n ac.oid as object_id,\\n ace.partition_key,\\n ac.indexed_at,\\n ace.updated_at\\n FROM af_collab_embeddings ac\\n JOIN af_collab ace ON ac.oid = ace.oid\\n WHERE ac.oid = ANY($1)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"object_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"partition_key\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"indexed_at\",\n \"type_info\": \"Timestamp\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"cbf1d3d9fdeb672eacd4b008879787bc1f0b22a554fb249d4e12a665d9767cbd\"\n}\n" }, { "path": ".sqlx/query-cce2abeed3399ad0b8867901735c5883c8d35fa82d6e0596c56eaf02c36a7e4f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, deleted_at IS NOT NULL AS is_deleted\\n FROM af_collab\\n WHERE oid = ANY($1);\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"is_deleted\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"UuidArray\"\n ]\n },\n \"nullable\": [\n false,\n null\n ]\n },\n \"hash\": \"cce2abeed3399ad0b8867901735c5883c8d35fa82d6e0596c56eaf02c36a7e4f\"\n}\n" }, { "path": ".sqlx/query-d0a24b554fe420d7ebf856ae7f1525aff3695fc97e2f43041dc54a4e62a88746.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM af_blob_metadata\\n WHERE workspace_id = $1 AND file_id = $2\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"d0a24b554fe420d7ebf856ae7f1525aff3695fc97e2f43041dc54a4e62a88746\"\n}\n" }, { "path": ".sqlx/query-d0e5f5097b35a15f19e9e7faf2c62336d5f130e939331e84c7d834f6028ea673.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_collab\\n SET indexed_at = $1\\n WHERE oid = $2 AND partition_key = $3\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Timestamptz\",\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"d0e5f5097b35a15f19e9e7faf2c62336d5f130e939331e84c7d834f6028ea673\"\n}\n" }, { "path": ".sqlx/query-d1ab621e0b6e8bc24f8fa8cbb975ae3b7f9f366cac02d66b5291d7207295ca29.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT message_id, content, created_at, author, meta_data, reply_message_id\\n FROM af_chat_messages\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"message_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"author\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"reply_message_id\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"d1ab621e0b6e8bc24f8fa8cbb975ae3b7f9f366cac02d66b5291d7207295ca29\"\n}\n" }, { "path": ".sqlx/query-d1f845717b19636e61d1d96d7a5629754f3ded9bda9116953bd1b40bd80551ae.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_collab_snapshot (oid, blob, len, encrypt, workspace_id)\\n VALUES ($1, $2, $3, $4, $5)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Bytea\",\n \"Int4\",\n \"Int4\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"d1f845717b19636e61d1d96d7a5629754f3ded9bda9116953bd1b40bd80551ae\"\n}\n" }, { "path": ".sqlx/query-d2e87c077e5702cd57a88e23e1eabe4b0badd98ef99da1b185bffa8d5c9ed298.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"SELECT EXISTS(SELECT 1 FROM af_chat_messages WHERE chat_id = $1 AND message_id < $2)\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"d2e87c077e5702cd57a88e23e1eabe4b0badd98ef99da1b185bffa8d5c9ed298\"\n}\n" }, { "path": ".sqlx/query-d366aca6b187f086e5a8281081adec190bbb3cd5256c5a77ed321b99cd34bbbc.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n af_user.uid,\\n af_user.name,\\n af_user.email,\\n af_user.metadata ->> 'icon_url' AS avatar_url,\\n af_workspace_member.role_id AS role,\\n af_workspace_member.created_at\\n FROM public.af_workspace_member\\n JOIN public.af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n AND af_user.uuid = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n false,\n true\n ]\n },\n \"hash\": \"d366aca6b187f086e5a8281081adec190bbb3cd5256c5a77ed321b99cd34bbbc\"\n}\n" }, { "path": ".sqlx/query-d388782f755f0b164ef36c168af142baeb9bbd3cc2b8b7cd736b346580be8790.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS (SELECT 1 FROM af_collab WHERE oid = $1 LIMIT 1)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"d388782f755f0b164ef36c168af142baeb9bbd3cc2b8b7cd736b346580be8790\"\n}\n" }, { "path": ".sqlx/query-d492c20dec54c7335744dcc139b95f30a80f06d9fd48de644630adf183e1ac34.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT COUNT(*)\\n FROM public.af_workspace_member\\n WHERE workspace_id = $1\\n AND role_id != $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"d492c20dec54c7335744dcc139b95f30a80f06d9fd48de644630adf183e1ac34\"\n}\n" }, { "path": ".sqlx/query-d4fa2c5f3c455be4694235009e82efdd99d366e3b0374f78efec8dd560f88d95.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT uid\\n FROM af_workspace_member\\n WHERE workspace_id = $1\\n ORDER BY created_at ASC\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"d4fa2c5f3c455be4694235009e82efdd99d366e3b0374f78efec8dd560f88d95\"\n}\n" }, { "path": ".sqlx/query-d61523de25986b47a382d36a1f18e590420f1b1285d024f5554cc02c375d6476.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM af_user\\n WHERE uuid = $1\\n ) AS user_exists;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"user_exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"d61523de25986b47a382d36a1f18e590420f1b1285d024f5554cc02c375d6476\"\n}\n" }, { "path": ".sqlx/query-d756ec630d5b75dd0dc7df2339847e28bdf07a790e65fd40a64d7f9022f430bd.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE public.af_workspace\\n SET icon = $1\\n WHERE workspace_id = $2\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"d756ec630d5b75dd0dc7df2339847e28bdf07a790e65fd40a64d7f9022f430bd\"\n}\n" }, { "path": ".sqlx/query-d84ab58e78653688e7c392ffad00d6e039be5ccb9c5b99b7088cc41cfe981873.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT message_id, content, created_at, author, meta_data, reply_message_id\\n FROM af_chat_messages\\n WHERE chat_id = $1\\n ORDER BY created_at ASC\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"message_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"content\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"author\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"reply_message_id\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"d84ab58e78653688e7c392ffad00d6e039be5ccb9c5b99b7088cc41cfe981873\"\n}\n" }, { "path": ".sqlx/query-d90e7efaca54b92de038b6eef20a7bd36be747dc38f7943fe299799c623038be.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n af_user.uid,\\n af_user.name,\\n af_user.email,\\n af_user.metadata ->> 'icon_url' AS avatar_url,\\n af_workspace_member.role_id AS role,\\n af_workspace_member.created_at\\n FROM public.af_workspace_member\\n JOIN public.af_workspace USING(workspace_id)\\n JOIN public.af_user ON af_workspace.owner_uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"avatar_url\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"role\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n null,\n false,\n true\n ]\n },\n \"hash\": \"d90e7efaca54b92de038b6eef20a7bd36be747dc38f7943fe299799c623038be\"\n}\n" }, { "path": ".sqlx/query-d921f52e4bc3fef72c810e19455a2fa4fbd52f5a1f3a1838b146d001eadabd47.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace_member\\n SET updated_at = CURRENT_TIMESTAMP\\n WHERE uid = (SELECT uid FROM public.af_user WHERE uuid = $1) AND workspace_id = $2;\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"d921f52e4bc3fef72c810e19455a2fa4fbd52f5a1f3a1838b146d001eadabd47\"\n}\n" }, { "path": ".sqlx/query-da1434fe116cbb48bc5aac0b6905dd748f096bf78d3cdcfea3a576b4aaeba5fc.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_chat_messages\\n SET content = $2,\\n author = $3,\\n created_at = CURRENT_TIMESTAMP,\\n meta_data = $4\\n WHERE message_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Int8\",\n \"Text\",\n \"Jsonb\",\n \"Jsonb\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"da1434fe116cbb48bc5aac0b6905dd748f096bf78d3cdcfea3a576b4aaeba5fc\"\n}\n" }, { "path": ".sqlx/query-dbc31936b3e79632f9c8bae449182274d9d75766bd9a5c383b96bd60e9c5c866.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT rag_ids\\n FROM af_chat\\n WHERE chat_id = $1 AND deleted_at IS NULL\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"rag_ids\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"dbc31936b3e79632f9c8bae449182274d9d75766bd9a5c383b96bd60e9c5c866\"\n}\n" }, { "path": ".sqlx/query-dc600fc160b55be22fb77e285fd7e5e646ef359fdbca9b62c6aefede5ebff606.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH recent_template AS (\\n SELECT\\n template_template_category.category_id,\\n template_template_category.view_id,\\n category.name,\\n category.icon,\\n category.bg_color,\\n ROW_NUMBER() OVER (PARTITION BY template_template_category.category_id ORDER BY template.created_at DESC) AS recency\\n FROM af_template_view_template_category template_template_category\\n JOIN af_template_category category\\n USING (category_id)\\n JOIN af_template_view template\\n USING (view_id)\\n JOIN af_published_collab\\n USING (view_id)\\n ),\\n template_group_by_category_and_view AS (\\n SELECT\\n category_id,\\n view_id,\\n ARRAY_AGG((\\n category_id,\\n name,\\n icon,\\n bg_color\\n )::template_category_minimal_type) AS categories\\n FROM recent_template\\n WHERE recency <= $1\\n GROUP BY category_id, view_id\\n ),\\n template_group_by_category_and_view_with_creator_and_template_details AS (\\n SELECT\\n template_group_by_category_and_view.category_id,\\n (\\n template.view_id,\\n template.created_at,\\n template.updated_at,\\n template.name,\\n template.description,\\n template.view_url,\\n (\\n creator.creator_id,\\n creator.name,\\n creator.avatar_url\\n )::template_creator_minimal_type,\\n template_group_by_category_and_view.categories,\\n template.is_new_template,\\n template.is_featured\\n )::template_minimal_type AS template\\n FROM template_group_by_category_and_view\\n JOIN af_template_view template\\n USING (view_id)\\n JOIN af_template_creator creator\\n USING (creator_id)\\n ),\\n template_group_by_category AS (\\n SELECT\\n category_id,\\n ARRAY_AGG(template) AS templates\\n FROM template_group_by_category_and_view_with_creator_and_template_details\\n GROUP BY category_id\\n )\\n SELECT\\n (\\n template_group_by_category.category_id,\\n category.name,\\n category.icon,\\n category.bg_color\\n )::template_category_minimal_type AS \\\"category!: AFTemplateCategoryMinimalRow\\\",\\n templates AS \\\"templates!: Vec\\\"\\n FROM template_group_by_category\\n JOIN af_template_category category\\n USING (category_id)\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"category!: AFTemplateCategoryMinimalRow\",\n \"type_info\": {\n \"Custom\": {\n \"name\": \"template_category_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"category_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"icon\",\n \"Text\"\n ],\n [\n \"bg_color\",\n \"Text\"\n ]\n ]\n }\n }\n }\n },\n {\n \"ordinal\": 1,\n \"name\": \"templates!: Vec\",\n \"type_info\": {\n \"Custom\": {\n \"name\": \"template_minimal_type[]\",\n \"kind\": {\n \"Array\": {\n \"Custom\": {\n \"name\": \"template_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"view_id\",\n \"Uuid\"\n ],\n [\n \"created_at\",\n \"Timestamptz\"\n ],\n [\n \"updated_at\",\n \"Timestamptz\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"description\",\n \"Text\"\n ],\n [\n \"view_url\",\n \"Text\"\n ],\n [\n \"creator\",\n {\n \"Custom\": {\n \"name\": \"template_creator_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"creator_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"avatar_url\",\n \"Text\"\n ]\n ]\n }\n }\n }\n ],\n [\n \"categories\",\n {\n \"Custom\": {\n \"name\": \"template_category_minimal_type[]\",\n \"kind\": {\n \"Array\": {\n \"Custom\": {\n \"name\": \"template_category_minimal_type\",\n \"kind\": {\n \"Composite\": [\n [\n \"category_id\",\n \"Uuid\"\n ],\n [\n \"name\",\n \"Text\"\n ],\n [\n \"icon\",\n \"Text\"\n ],\n [\n \"bg_color\",\n \"Text\"\n ]\n ]\n }\n }\n }\n }\n }\n }\n ],\n [\n \"is_new_template\",\n \"Bool\"\n ],\n [\n \"is_featured\",\n \"Bool\"\n ]\n ]\n }\n }\n }\n }\n }\n }\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n null,\n null\n ]\n },\n \"hash\": \"dc600fc160b55be22fb77e285fd7e5e646ef359fdbca9b62c6aefede5ebff606\"\n}\n" }, { "path": ".sqlx/query-e219696c80f1d4c38260ebeb50ec78e344975eef6760951dbf6201c01b8ceef0.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE public.af_workspace_invitation\\n SET status = 1\\n WHERE LOWER(invitee_email) = (SELECT LOWER(email) FROM public.af_user WHERE uuid = $1)\\n AND id = $2\\n AND status = 0\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"e219696c80f1d4c38260ebeb50ec78e344975eef6760951dbf6201c01b8ceef0\"\n}\n" }, { "path": ".sqlx/query-e2b4d66736962d1e3d0b9cf687ce5c5e653b465462f53433a28cf314e5c87d6c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH ins_user AS (\\n INSERT INTO af_user (uid, uuid, email, name)\\n VALUES ($1, $2, $3, $4)\\n RETURNING uid\\n ),\\n owner_role AS (\\n SELECT id FROM af_roles WHERE name = 'Owner'\\n ),\\n ins_workspace AS (\\n INSERT INTO af_workspace (owner_uid)\\n SELECT uid FROM ins_user\\n RETURNING workspace_id, owner_uid\\n )\\n SELECT workspace_id FROM ins_workspace;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\",\n \"Uuid\",\n \"Text\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"e2b4d66736962d1e3d0b9cf687ce5c5e653b465462f53433a28cf314e5c87d6c\"\n}\n" }, { "path": ".sqlx/query-e38e66d89806471f358b317778de35a68da4b9e6ca6e4b6a7c437ca7493b858c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT uuid FROM af_user WHERE uid = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"uuid\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int8\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"e38e66d89806471f358b317778de35a68da4b9e6ca6e4b6a7c437ca7493b858c\"\n}\n" }, { "path": ".sqlx/query-e6159a03f1521b44de59858cd95c48e62cabefba6cac629c104eec75d2868bf3.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n WITH user_workspace_id AS (\\n SELECT workspace_id\\n FROM af_workspace_member\\n JOIN af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_user.uuid = $1\\n ),\\n workspace_member_count AS (\\n SELECT\\n workspace_id,\\n COUNT(*) AS member_count\\n FROM af_workspace_member\\n JOIN user_workspace_id USING (workspace_id)\\n WHERE role_id != $2\\n GROUP BY workspace_id\\n )\\n\\n SELECT\\n w.workspace_id,\\n w.database_storage_id,\\n w.owner_uid,\\n u.name AS owner_name,\\n u.email AS owner_email,\\n w.created_at,\\n w.workspace_type,\\n w.deleted_at,\\n w.workspace_name,\\n w.icon,\\n wmc.member_count AS \\\"member_count!\\\",\\n wm.role_id AS \\\"role!\\\"\\n FROM af_workspace w\\n JOIN af_workspace_member wm ON w.workspace_id = wm.workspace_id\\n JOIN public.af_user u ON w.owner_uid = u.uid\\n JOIN workspace_member_count wmc ON w.workspace_id = wmc.workspace_id\\n WHERE wm.uid = (\\n SELECT uid FROM public.af_user WHERE uuid = $1\\n )\\n AND wm.role_id != $2\\n AND COALESCE(w.is_initialized, true) = true;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"database_storage_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"owner_uid\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"owner_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"owner_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"workspace_type\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 10,\n \"name\": \"member_count!\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 11,\n \"name\": \"role!\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n false,\n true,\n false,\n true,\n true,\n false,\n null,\n false\n ]\n },\n \"hash\": \"e6159a03f1521b44de59858cd95c48e62cabefba6cac629c104eec75d2868bf3\"\n}\n" }, { "path": ".sqlx/query-e6a0e771ffacfdec95ef8c36de769448384fda4350aa630becebd0e5add632f4.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_published_view_comment\\n SET is_deleted = true\\n WHERE comment_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"e6a0e771ffacfdec95ef8c36de769448384fda4350aa630becebd0e5add632f4\"\n}\n" }, { "path": ".sqlx/query-ea239353f73904400915ec89640ac71985a8d5b39037f567a3e2ac1c5eea8f64.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_workspace_namespace\\n VALUES ($1, $2, FALSE)\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"ea239353f73904400915ec89640ac71985a8d5b39037f567a3e2ac1c5eea8f64\"\n}\n" }, { "path": ".sqlx/query-eb142b33bd6d0d9f3ceb597be9251eac710a463d1052ba10c41b207dbf63efe1.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT workspace_id\\n FROM af_workspace_namespace\\n WHERE namespace = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"eb142b33bd6d0d9f3ceb597be9251eac710a463d1052ba10c41b207dbf63efe1\"\n}\n" }, { "path": ".sqlx/query-ed9bce7f35c4dd8d41427bc56db67adf175044a8d31149b3745ceb8f9b3c82fa.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT oid, snapshot, snapshot_version, created_at\\n FROM af_snapshot_meta\\n WHERE oid = $1 AND partition_key = $2\\n ORDER BY created_at DESC\",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"oid\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"snapshot\",\n \"type_info\": \"Bytea\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"snapshot_version\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"created_at\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"ed9bce7f35c4dd8d41427bc56db67adf175044a8d31149b3745ceb8f9b3c82fa\"\n}\n" }, { "path": ".sqlx/query-ef947984b00fdd32271e7e76d8b5d035cd4ca211b600787fda18d62a34b4c04b.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM public.af_workspace_member\\n JOIN public.af_user ON af_workspace_member.uid = af_user.uid\\n WHERE af_workspace_member.workspace_id = $1\\n AND LOWER(af_user.email) = LOWER($2)\\n ) AS \\\"exists\\\";\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Text\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"ef947984b00fdd32271e7e76d8b5d035cd4ca211b600787fda18d62a34b4c04b\"\n}\n" }, { "path": ".sqlx/query-f05042dd22f862603e63f63d47b93e579545c79cabe15d32304a47ca7665a55f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT p.id, p.name, p.access_level, p.description FROM af_permissions p\\n JOIN af_role_permissions rp ON p.id = rp.permission_id\\n WHERE rp.role_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"id\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"name\",\n \"type_info\": \"Varchar\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"access_level\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"description\",\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Int4\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n true\n ]\n },\n \"hash\": \"f05042dd22f862603e63f63d47b93e579545c79cabe15d32304a47ca7665a55f\"\n}\n" }, { "path": ".sqlx/query-f18d6e075a522b0ce5935351dd57ab0dda4d8b4ed3881c2ad0bc09c07c43e6fe.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_collab_snapshot (oid, blob, len, encrypt, workspace_id)\\n VALUES ($1, $2, $3, $4, $5)\\n RETURNING sid AS snapshot_id, oid AS object_id, created_at\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"snapshot_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"object_id\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Bytea\",\n \"Int4\",\n \"Int4\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"f18d6e075a522b0ce5935351dd57ab0dda4d8b4ed3881c2ad0bc09c07c43e6fe\"\n}\n" }, { "path": ".sqlx/query-f409626142553d4496d15b5dfa7da8a5a238da86f56c930c09a261f2efa1f55c.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT sid as \\\"snapshot_id\\\", oid as \\\"object_id\\\", created_at\\n FROM af_collab_snapshot\\n WHERE oid = $1 AND deleted_at IS NULL\\n ORDER BY created_at DESC;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"snapshot_id\",\n \"type_info\": \"Int8\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"object_id\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"f409626142553d4496d15b5dfa7da8a5a238da86f56c930c09a261f2efa1f55c\"\n}\n" }, { "path": ".sqlx/query-f54ced785b4fdd22c9236b566996d5d9d4a8c91902e4029fe8f8f30f3af39b39.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n INSERT INTO af_template_view_template_category (view_id, category_id)\\n SELECT $1 as view_id, category_id FROM\\n UNNEST($2::uuid[]) AS category_id\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"UuidArray\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"f54ced785b4fdd22c9236b566996d5d9d4a8c91902e4029fe8f8f30f3af39b39\"\n}\n" }, { "path": ".sqlx/query-f58a2f05efbda0698d27d83be5c6816fc46e3de33f926c6343bcbfa90a387b07.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n DELETE FROM public.af_workspace\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"f58a2f05efbda0698d27d83be5c6816fc46e3de33f926c6343bcbfa90a387b07\"\n}\n" }, { "path": ".sqlx/query-f68cc2042d6aa78feeb33640e9ef13f46c5e10ee269ea0bd965b0e57dee6cf94.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT c.workspace_id, c.oid, c.partition_key\\n FROM af_collab c\\n JOIN af_workspace w ON c.workspace_id = w.workspace_id\\n WHERE c.workspace_id = $1\\n AND NOT COALESCE(w.settings['disable_search_indexing']::boolean, false)\\n AND c.indexed_at IS NULL\\n ORDER BY c.updated_at DESC\\n LIMIT $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"oid\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"partition_key\",\n \"type_info\": \"Int4\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false\n ]\n },\n \"hash\": \"f68cc2042d6aa78feeb33640e9ef13f46c5e10ee269ea0bd965b0e57dee6cf94\"\n}\n" }, { "path": ".sqlx/query-f78c2c56568dcee0b93e759ee517fb87d6d115a02856a756d481ea4c863c0327.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT snapshot_id, oid, doc_state, doc_state_version, deps_snapshot_id, created_at\\n FROM af_snapshot_state\\n WHERE oid = $1 AND partition_key = $2 AND created_at >= $3\\n ORDER BY created_at ASC\\n LIMIT 1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"snapshot_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"oid\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"doc_state\",\n \"type_info\": \"Bytea\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"doc_state_version\",\n \"type_info\": \"Int4\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"deps_snapshot_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"created_at\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Int4\",\n \"Int8\"\n ]\n },\n \"nullable\": [\n false,\n false,\n false,\n false,\n true,\n false\n ]\n },\n \"hash\": \"f78c2c56568dcee0b93e759ee517fb87d6d115a02856a756d481ea4c863c0327\"\n}\n" }, { "path": ".sqlx/query-f9c28d0fa124ef543259c6869d7c517deabda3af9a67c6e59d8e15c0245c83a0.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT default_published_view_id\\n FROM af_workspace\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"default_published_view_id\",\n \"type_info\": \"Uuid\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"f9c28d0fa124ef543259c6869d7c517deabda3af9a67c6e59d8e15c0245c83a0\"\n}\n" }, { "path": ".sqlx/query-fa92aff963d9a0c69fb203f76f54728c67d52a68eada59ba3bd445c4b8aeceef.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT EXISTS(\\n SELECT 1\\n FROM af_workspace_invitation\\n WHERE id = $1 AND LOWER(invitee_email) = (SELECT LOWER(email) FROM af_user WHERE uuid = $2)\\n )\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"exists\",\n \"type_info\": \"Bool\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n null\n ]\n },\n \"hash\": \"fa92aff963d9a0c69fb203f76f54728c67d52a68eada59ba3bd445c4b8aeceef\"\n}\n" }, { "path": ".sqlx/query-faf37892741717680e9a8d8e7d8decaba571d0dd129b57334aad7c63e2a2ef59.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT\\n i.id AS invite_id,\\n i.workspace_id,\\n w.workspace_name,\\n u_inviter.email AS inviter_email,\\n u_inviter.name AS inviter_name,\\n i.status,\\n i.updated_at,\\n u_inviter.metadata->>'icon_url' AS inviter_icon,\\n w.icon AS workspace_icon,\\n (SELECT COUNT(*) FROM public.af_workspace_member m WHERE m.workspace_id = i.workspace_id) AS member_count\\n FROM\\n public.af_workspace_invitation i\\n JOIN public.af_workspace w ON i.workspace_id = w.workspace_id\\n JOIN public.af_user u_inviter ON i.inviter = u_inviter.uid\\n JOIN public.af_user u_invitee ON u_invitee.uuid = $1\\n WHERE\\n LOWER(i.invitee_email) = LOWER(u_invitee.email)\\n AND i.id = $2;\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"invite_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"workspace_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"inviter_email\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"inviter_name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"status\",\n \"type_info\": \"Int2\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"updated_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 7,\n \"name\": \"inviter_icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 8,\n \"name\": \"workspace_icon\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 9,\n \"name\": \"member_count\",\n \"type_info\": \"Int8\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\",\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n true,\n false,\n false,\n false,\n false,\n null,\n false,\n null\n ]\n },\n \"hash\": \"faf37892741717680e9a8d8e7d8decaba571d0dd129b57334aad7c63e2a2ef59\"\n}\n" }, { "path": ".sqlx/query-fb21df2827de97055cdc1c493b079b29667f75b18169c909c4c8341697fd0105.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT *\\n FROM af_chat\\n WHERE chat_id = $1 AND deleted_at IS NULL\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"chat_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 1,\n \"name\": \"created_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 2,\n \"name\": \"deleted_at\",\n \"type_info\": \"Timestamptz\"\n },\n {\n \"ordinal\": 3,\n \"name\": \"name\",\n \"type_info\": \"Text\"\n },\n {\n \"ordinal\": 4,\n \"name\": \"rag_ids\",\n \"type_info\": \"Jsonb\"\n },\n {\n \"ordinal\": 5,\n \"name\": \"workspace_id\",\n \"type_info\": \"Uuid\"\n },\n {\n \"ordinal\": 6,\n \"name\": \"meta_data\",\n \"type_info\": \"Jsonb\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": [\n false,\n false,\n true,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"fb21df2827de97055cdc1c493b079b29667f75b18169c909c4c8341697fd0105\"\n}\n" }, { "path": ".sqlx/query-fd2a37dd917717a9bb5e1db84f03f0e84e32d2fd081955389561c6567896ea9f.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n SELECT blob\\n FROM af_published_collab\\n WHERE workspace_id = (SELECT workspace_id FROM af_workspace_namespace WHERE namespace = $1)\\n AND unpublished_at IS NULL\\n AND publish_name = $2\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"ordinal\": 0,\n \"name\": \"blob\",\n \"type_info\": \"Bytea\"\n }\n ],\n \"parameters\": {\n \"Left\": [\n \"Text\",\n \"Text\"\n ]\n },\n \"nullable\": [\n false\n ]\n },\n \"hash\": \"fd2a37dd917717a9bb5e1db84f03f0e84e32d2fd081955389561c6567896ea9f\"\n}\n" }, { "path": ".sqlx/query-fffe6f01abf0e5d8649a49b5793ccb92a9f823f07c363341357ea74bf4f4a16d.json", "content": "{\n \"db_name\": \"PostgreSQL\",\n \"query\": \"\\n UPDATE af_workspace\\n SET default_published_view_id = NULL\\n WHERE workspace_id = $1\\n \",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Left\": [\n \"Uuid\"\n ]\n },\n \"nullable\": []\n },\n \"hash\": \"fffe6f01abf0e5d8649a49b5793ccb92a9f823f07c363341357ea74bf4f4a16d\"\n}\n" }, { "path": "Cargo.toml", "content": "[package]\nname = \"appflowy-cloud\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html\n\n[dependencies]\nactix.workspace = true\nactix-web.workspace = true\nactix-http = { workspace = true, default-features = false, features = [\n \"openssl\",\n \"compress-brotli\",\n \"compress-gzip\",\n] }\nactix-rt = \"2.9.0\"\nactix-web-actors = { version = \"4.3\" }\nactix-service = \"2.0.2\"\nactix-identity = \"0.6.0\"\nactix-session = { version = \"0.8\", features = [\"redis-rs-tls-session\"] }\nactix-multipart = { version = \"0.7.2\", features = [\"derive\"] }\nzstd.workspace = true\n\n# serde\nserde_json.workspace = true\nserde_repr.workspace = true\nserde.workspace = true\n\ntokio = { workspace = true, features = [\n \"macros\",\n \"rt-multi-thread\",\n \"sync\",\n \"fs\",\n \"time\",\n \"full\",\n] }\ntokio-stream.workspace = true\ntokio-util = { version = \"0.7.10\", features = [\"io\"] }\nfutures-util = { workspace = true, features = [\"std\", \"io\"] }\nchrono.workspace = true\nsecrecy.workspace = true\nrand = { version = \"0.8\", features = [\"std_rng\"] }\nanyhow.workspace = true\nreqwest = { workspace = true, features = [\n \"json\",\n \"rustls-tls\",\n \"cookies\",\n \"stream\",\n] }\nunicode-segmentation = \"1.10\"\nlazy_static.workspace = true\nfancy-regex = \"0.11.0\"\nbytes.workspace = true\nvalidator.workspace = true\nmime = \"0.3.17\"\naws-sdk-s3 = { version = \"1.88.0\", features = [\n \"behavior-version-latest\",\n \"rt-tokio\",\n] }\nredis = { workspace = true, features = [\n \"json\",\n \"tokio-comp\",\n \"connection-manager\",\n \"aio\",\n \"bytes\",\n \"uuid\",\n] }\ntracing = { version = \"0.1.40\", features = [\"log\"] }\ntracing-subscriber = { version = \"0.3.19\", features = [\n \"registry\",\n \"env-filter\",\n \"ansi\",\n \"json\",\n \"tracing-log\",\n] }\nsqlx = { workspace = true, default-features = false, features = [\n \"runtime-tokio-rustls\",\n \"macros\",\n \"postgres\",\n \"uuid\",\n \"chrono\",\n \"migrate\",\n] }\nasync-trait.workspace = true\nprometheus-client.workspace = true\nitertools = \"0.11\"\nuuid.workspace = true\ntokio-tungstenite = { version = \"0.26.1\", features = [\"native-tls\"] }\ndotenvy.workspace = true\nbrotli.workspace = true\ndashmap.workspace = true\nasync-stream.workspace = true\nfutures.workspace = true\nsemver = \"1.0.22\"\ntonic.workspace = true\nprost.workspace = true\ntonic-proto.workspace = true\nappflowy-collaborate = { path = \"services/appflowy-collaborate\" }\n\n# ai\nappflowy-ai-client = { workspace = true, features = [\"dto\", \"client-api\"] }\n\ncollab = { workspace = true, features = [\"lock_timeout\"] }\ncollab-document = { workspace = true }\ncollab-entity = { workspace = true }\ncollab-folder = { workspace = true }\ncollab-user = { workspace = true }\ncollab-database = { workspace = true }\ncollab-importer = { workspace = true }\ncollab-rt-protocol.workspace = true\n\n#Local crate\nsnowflake = { path = \"libs/snowflake\" }\ndatabase.workspace = true\ndatabase-entity.workspace = true\ngotrue = { path = \"libs/gotrue\" }\ngotrue-entity = { path = \"libs/gotrue-entity\" }\ninfra = { path = \"libs/infra\" }\naccess-control.workspace = true\napp-error = { workspace = true, features = [\n \"sqlx_error\",\n \"actix_web_error\",\n \"tokio_error\",\n \"appflowy_ai_error\",\n] }\nshared-entity = { path = \"libs/shared-entity\", features = [\"cloud\"] }\nworkspace-template = { workspace = true }\ncollab-rt-entity.workspace = true\ncollab-stream.workspace = true\nyrs.workspace = true\n\npin-project.workspace = true\nbyteorder = \"1.5.0\"\nsha2 = \"0.10.8\"\nrayon.workspace = true\nmailer.workspace = true\nasync_zip.workspace = true\nsanitize-filename.workspace = true\nfutures-lite = \"2.3.0\"\nconsole-subscriber = { version = \"0.4.1\", optional = true }\nbase64.workspace = true\nmd5.workspace = true\nnanoid = \"0.4.0\"\nindexer.workspace = true\nllm-client.workspace = true\nasync-openai.workspace = true\nappflowy-proto.workspace = true\nactix-cors = { version = \"0.7.0\", optional = true }\n\n[dev-dependencies]\nflate2 = \"1.0\"\nassert-json-diff = \"2.0.2\"\nclient-api-test = { path = \"libs/client-api-test\", features = [] }\nclient-api = { path = \"libs/client-api\", features = [\n \"test_util\",\n \"sync_verbose_log\",\n \"test_fast_sync\",\n \"enable_brotli\",\n] }\ncollab-rt-entity = { path = \"libs/collab-rt-entity\" }\nhex = \"0.4.3\"\nasync-openai.workspace = true\n\n[[bin]]\nname = \"appflowy_cloud\"\npath = \"src/main.rs\"\n\n[lib]\npath = \"src/lib.rs\"\n\n#[[bench]]\n#name = \"access_control_benchmark\"\n#harness = false\n\n[workspace]\nmembers = [\n # libs\n \"libs/snowflake\",\n \"libs/collab-rt-entity\",\n \"libs/database\",\n \"libs/database-entity\",\n \"libs/client-api\",\n \"libs/infra\",\n \"libs/shared-entity\",\n \"libs/gotrue\",\n \"libs/gotrue-entity\",\n \"admin_frontend\",\n \"libs/app-error\",\n \"libs/workspace-template\",\n \"libs/access-control\",\n \"libs/collab-rt-protocol\",\n \"libs/collab-stream\",\n \"libs/client-websocket\",\n \"libs/client-api-test\",\n \"libs/appflowy-ai-client\",\n \"libs/client-api-entity\",\n # services\n \"services/appflowy-collaborate\",\n \"services/appflowy-worker\",\n # xtask\n \"xtask\",\n \"libs/tonic-proto\",\n \"libs/mailer\",\n \"libs/indexer\",\n \"libs/llm-client\",\n \"libs/appflowy-proto\",\n]\n\n[workspace.dependencies]\nindexer = { path = \"libs/indexer\" }\ncollab-rt-entity = { path = \"libs/collab-rt-entity\" }\ncollab-rt-protocol = { path = \"libs/collab-rt-protocol\" }\ndatabase = { path = \"libs/database\" }\ndatabase-entity = { path = \"libs/database-entity\" }\nshared-entity = { path = \"libs/shared-entity\" }\ngotrue-entity = { path = \"libs/gotrue-entity\" }\naccess-control = { path = \"libs/access-control\" }\nllm-client = { path = \"libs/llm-client\" }\nappflowy-proto = { path = \"libs/appflowy-proto\" }\nmailer = { path = \"libs/mailer\" }\napp-error = { path = \"libs/app-error\" }\nasync-trait = \"0.1.77\"\nprometheus-client = \"0.22.0\"\nbrotli = \"3.4.0\"\ncollab-stream = { path = \"libs/collab-stream\" }\ndotenvy = \"0.15.7\"\nserde_json = \"1.0.111\"\nserde_repr = \"0.1.18\"\nserde = { version = \"1.0\", features = [\"derive\"] }\nbytes = \"1.9.0\"\nworkspace-template = { path = \"libs/workspace-template\" }\nuuid = { version = \"1.6.1\", features = [\"v4\", \"v5\"] }\nanyhow = \"1.0.94\"\nactix = \"0.13.3\"\nactix-web = { version = \"4.5.1\", default-features = false, features = [\n \"openssl\",\n \"compress-brotli\",\n \"compress-gzip\",\n] }\nactix-http = { version = \"3.6.0\", default-features = false }\ntokio = { version = \"1.36.0\", features = [\"sync\"] }\ntokio-stream = \"0.1.14\"\nrayon = \"1.10.0\"\nfutures-util = \"0.3.30\"\nbincode = \"1.3.3\"\nclient-websocket = { path = \"libs/client-websocket\" }\ninfra = { path = \"libs/infra\" }\ntracing = { version = \"0.1\", features = [\"log\"] }\ngotrue = { path = \"libs/gotrue\" }\nredis = \"0.29\"\nsqlx = { version = \"0.8.1\", default-features = false }\ndashmap = \"5.5.3\"\nfutures = \"0.3.30\"\nasync-stream = \"0.3.5\"\nreqwest = \"0.12.9\"\nlazy_static = \"1.4.0\"\ntonic = \"0.12.3\"\nprost = \"0.13.3\"\ntonic-proto = { path = \"libs/tonic-proto\" }\nappflowy-ai-client = { path = \"libs/appflowy-ai-client\", default-features = false }\npgvector = { version = \"0.4\", features = [\"sqlx\"] }\nclient-api-entity = { path = \"libs/client-api-entity\" }\nasync_zip = { version = \"0.0.17\", features = [\"full\"] }\nsanitize-filename = \"0.5.0\"\nbase64 = \"0.22\"\nmd5 = \"0.7.0\"\npin-project = \"1.1.5\"\narc-swap = { version = \"1.7\" }\nvalidator = \"0.19\"\nzstd = { version = \"0.13.2\", features = [] }\nchrono = { version = \"0.4.39\", features = [\n \"serde\",\n \"clock\",\n], default-features = false }\nhttp = \"0.2.12\"\ntokio-tungstenite = \"0.20\"\nsecrecy = { version = \"0.8.0\", features = [\"serde\"] }\nthiserror = \"2.0\"\n# collaboration\nyrs = { version = \"0.23.5\", features = [\"sync\"] }\ncollab = { version = \"0.2.0\" }\ncollab-entity = { version = \"0.2.0\" }\ncollab-folder = { version = \"0.2.0\" }\ncollab-document = { version = \"0.2.0\" }\ncollab-database = { version = \"0.2.0\" }\ncollab-user = { version = \"0.2.0\" }\ncollab-importer = { version = \"0.1.0\" }\nasync-openai = \"0.28.0\"\ncollab-plugins = { version = \"0.2.0\" }\nsmallvec = \"1.15.0\"\n\n[profile.release]\nlto = true\nopt-level = 3\ncodegen-units = 1\n\n[profile.profiling]\ninherits = \"release\"\ndebug = true\n\n[profile.ci]\ninherits = \"release\"\nopt-level = 2\nlto = false\n\n\n[patch.crates-io]\n# It's diffcult to resovle different version with the same crate used in AppFlowy Frontend and the Client-API crate.\n# So using patch to workaround this issue.\ncollab = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-entity = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-folder = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-document = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-user = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-database = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-importer = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\ncollab-plugins = { git = \"https://github.com/AppFlowy-IO/AppFlowy-Collab\", rev = \"e59260e524f33104b0ddcd6bb8f6218cad0f7e18\" }\n\n[features]\nhistory = []\n# Some AI test features are not available for self-hosted AppFlowy Cloud. Therefore, AI testing is disabled by default.\nai-test-enabled = [\"client-api-test/ai-test-enabled\"]\n# Enable Debugging for Tokio Runtime with Tokio Console\n# Reference: https://github.com/tokio-rs/console\n# Steps to Enable and Use Tokio Console:\n# 1. Run your application with debugging enabled:\n# RUST_BACKTRACE=1 RUST_LOG=trace cargo run --package xtask\n# 2. Install the Tokio Console CLI (if not already installed):\n# cargo install --locked tokio-console\n# 3. Open a new terminal and start the Tokio Console:\n# tokio-console\ntokio-runtime-profile = [\"console-subscriber\", \"tokio/tracing\"]\nsync-v2 = [\"client-api-test/v2\"]\n# Enable CORS support for development environments (required when using dev.env configuration)\n# This allows frontend applications to access the backend during local development\nuse_actix_cors = [\"actix-cors\"]\n" }, { "path": "Dockerfile", "content": "# syntax=docker/dockerfile:1\n# Using cargo-chef to manage Rust build cache effectively\nFROM lukemathwalker/cargo-chef:latest-rust-1.86 as chef\n\nWORKDIR /app\nRUN apt update && apt install lld clang -y\n\nFROM chef as planner\nCOPY . .\n# Compute a lock-like file for our project\nRUN cargo chef prepare --recipe-path recipe.json\n\nFROM chef as builder\n\n# Update package lists and install protobuf-compiler along with other build dependencies\nRUN apt update && apt install -y protobuf-compiler lld clang\n\n# Specify a default value for FEATURES; it could be an empty string if no features are enabled by default\nARG FEATURES=\"\"\nARG PROFILE=\"release\"\n\nCOPY --from=planner /app/recipe.json recipe.json\nENV CARGO_BUILD_JOBS=4\nENV CARGO_NET_GIT_FETCH_WITH_CLI=true\nENV CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse\n# Reduce memory usage during compilation\nRUN echo \"Building appflowy cloud with profile: ${PROFILE}\"\nRUN if [ \"$PROFILE\" = \"release\" ]; then \\\n cargo chef cook --release --recipe-path recipe.json; \\\n else \\\n cargo chef cook --recipe-path recipe.json; \\\n fi\n\nCOPY . .\nENV SQLX_OFFLINE true\n\n# Build the project\nRUN echo \"Building with profile: ${PROFILE}, features: ${FEATURES}, \"\nRUN if [ \"$PROFILE\" = \"release\" ]; then \\\n cargo build --release --features \"${FEATURES}\" --bin appflowy_cloud; \\\n else \\\n cargo build --features \"${FEATURES}\" --bin appflowy_cloud; \\\n fi\n\nFROM debian:bookworm-slim AS runtime\nWORKDIR /app\nRUN apt-get update -y \\\n && apt-get install -y --no-install-recommends openssl ca-certificates curl \\\n && update-ca-certificates \\\n # Clean up\n && apt-get autoremove -y \\\n && apt-get clean -y \\\n && rm -rf /var/lib/apt/lists/*\n\n# Copy the binary from the appropriate target directory\nARG PROFILE=\"release\"\nRUN echo \"Building with profile: ${PROFILE}\"\nRUN if [ \"$PROFILE\" = \"release\" ]; then \\\n echo \"Using release binary\"; \\\n else \\\n echo \"Using debug binary\"; \\\n fi\nCOPY --from=builder /app/target/$PROFILE/appflowy_cloud /usr/local/bin/appflowy_cloud\nENV APP_ENVIRONMENT production\nENV RUST_BACKTRACE 1\n\nARG APPFLOWY_APPLICATION_PORT\nARG PORT\nENV PORT=${APPFLOWY_APPLICATION_PORT:-${PORT:-8000}}\nEXPOSE $PORT\n\nCMD [\"appflowy_cloud\"]\n" }, { "path": "LICENSE", "content": " GNU AFFERO GENERAL PUBLIC LICENSE\n Version 3, 19 November 2007\n\n Copyright (C) 2007 Free Software Foundation, Inc. \n Everyone is permitted to copy and distribute verbatim copies\n of this license document, but changing it is not allowed.\n\n Preamble\n\n The GNU Affero General Public License is a free, copyleft license for\nsoftware and other kinds of works, specifically designed to ensure\ncooperation with the community in the case of network server software.\n\n The licenses for most software and other practical works are designed\nto take away your freedom to share and change the works. By contrast,\nour General Public Licenses are intended to guarantee your freedom to\nshare and change all versions of a program--to make sure it remains free\nsoftware for all its users.\n\n When we speak of free software, we are referring to freedom, not\nprice. Our General Public Licenses are designed to make sure that you\nhave the freedom to distribute copies of free software (and charge for\nthem if you wish), that you receive source code or can get it if you\nwant it, that you can change the software or use pieces of it in new\nfree programs, and that you know you can do these things.\n\n Developers that use our General Public Licenses protect your rights\nwith two steps: (1) assert copyright on the software, and (2) offer\nyou this License which gives you legal permission to copy, distribute\nand/or modify the software.\n\n A secondary benefit of defending all users' freedom is that\nimprovements made in alternate versions of the program, if they\nreceive widespread use, become available for other developers to\nincorporate. Many developers of free software are heartened and\nencouraged by the resulting cooperation. However, in the case of\nsoftware used on network servers, this result may fail to come about.\nThe GNU General Public License permits making a modified version and\nletting the public access it on a server without ever releasing its\nsource code to the public.\n\n The GNU Affero General Public License is designed specifically to\nensure that, in such cases, the modified source code becomes available\nto the community. It requires the operator of a network server to\nprovide the source code of the modified version running there to the\nusers of that server. Therefore, public use of a modified version, on\na publicly accessible server, gives the public access to the source\ncode of the modified version.\n\n An older license, called the Affero General Public License and\npublished by Affero, was designed to accomplish similar goals. This is\na different license, not a version of the Affero GPL, but Affero has\nreleased a new version of the Affero GPL which permits relicensing under\nthis license.\n\n The precise terms and conditions for copying, distribution and\nmodification follow.\n\n TERMS AND CONDITIONS\n\n 0. Definitions.\n\n \"This License\" refers to version 3 of the GNU Affero General Public License.\n\n \"Copyright\" also means copyright-like laws that apply to other kinds of\nworks, such as semiconductor masks.\n\n \"The Program\" refers to any copyrightable work licensed under this\nLicense. Each licensee is addressed as \"you\". \"Licensees\" and\n\"recipients\" may be individuals or organizations.\n\n To \"modify\" a work means to copy from or adapt all or part of the work\nin a fashion requiring copyright permission, other than the making of an\nexact copy. The resulting work is called a \"modified version\" of the\nearlier work or a work \"based on\" the earlier work.\n\n A \"covered work\" means either the unmodified Program or a work based\non the Program.\n\n To \"propagate\" a work means to do anything with it that, without\npermission, would make you directly or secondarily liable for\ninfringement under applicable copyright law, except executing it on a\ncomputer or modifying a private copy. Propagation includes copying,\ndistribution (with or without modification), making available to the\npublic, and in some countries other activities as well.\n\n To \"convey\" a work means any kind of propagation that enables other\nparties to make or receive copies. Mere interaction with a user through\na computer network, with no transfer of a copy, is not conveying.\n\n An interactive user interface displays \"Appropriate Legal Notices\"\nto the extent that it includes a convenient and prominently visible\nfeature that (1) displays an appropriate copyright notice, and (2)\ntells the user that there is no warranty for the work (except to the\nextent that warranties are provided), that licensees may convey the\nwork under this License, and how to view a copy of this License. If\nthe interface presents a list of user commands or options, such as a\nmenu, a prominent item in the list meets this criterion.\n\n 1. Source Code.\n\n The \"source code\" for a work means the preferred form of the work\nfor making modifications to it. \"Object code\" means any non-source\nform of a work.\n\n A \"Standard Interface\" means an interface that either is an official\nstandard defined by a recognized standards body, or, in the case of\ninterfaces specified for a particular programming language, one that\nis widely used among developers working in that language.\n\n The \"System Libraries\" of an executable work include anything, other\nthan the work as a whole, that (a) is included in the normal form of\npackaging a Major Component, but which is not part of that Major\nComponent, and (b) serves only to enable use of the work with that\nMajor Component, or to implement a Standard Interface for which an\nimplementation is available to the public in source code form. A\n\"Major Component\", in this context, means a major essential component\n(kernel, window system, and so on) of the specific operating system\n(if any) on which the executable work runs, or a compiler used to\nproduce the work, or an object code interpreter used to run it.\n\n The \"Corresponding Source\" for a work in object code form means all\nthe source code needed to generate, install, and (for an executable\nwork) run the object code and to modify the work, including scripts to\ncontrol those activities. However, it does not include the work's\nSystem Libraries, or general-purpose tools or generally available free\nprograms which are used unmodified in performing those activities but\nwhich are not part of the work. For example, Corresponding Source\nincludes interface definition files associated with source files for\nthe work, and the source code for shared libraries and dynamically\nlinked subprograms that the work is specifically designed to require,\nsuch as by intimate data communication or control flow between those\nsubprograms and other parts of the work.\n\n The Corresponding Source need not include anything that users\ncan regenerate automatically from other parts of the Corresponding\nSource.\n\n The Corresponding Source for a work in source code form is that\nsame work.\n\n 2. Basic Permissions.\n\n All rights granted under this License are granted for the term of\ncopyright on the Program, and are irrevocable provided the stated\nconditions are met. This License explicitly affirms your unlimited\npermission to run the unmodified Program. The output from running a\ncovered work is covered by this License only if the output, given its\ncontent, constitutes a covered work. This License acknowledges your\nrights of fair use or other equivalent, as provided by copyright law.\n\n You may make, run and propagate covered works that you do not\nconvey, without conditions so long as your license otherwise remains\nin force. You may convey covered works to others for the sole purpose\nof having them make modifications exclusively for you, or provide you\nwith facilities for running those works, provided that you comply with\nthe terms of this License in conveying all material for which you do\nnot control copyright. Those thus making or running the covered works\nfor you must do so exclusively on your behalf, under your direction\nand control, on terms that prohibit them from making any copies of\nyour copyrighted material outside their relationship with you.\n\n Conveying under any other circumstances is permitted solely under\nthe conditions stated below. Sublicensing is not allowed; section 10\nmakes it unnecessary.\n\n 3. Protecting Users' Legal Rights From Anti-Circumvention Law.\n\n No covered work shall be deemed part of an effective technological\nmeasure under any applicable law fulfilling obligations under article\n11 of the WIPO copyright treaty adopted on 20 December 1996, or\nsimilar laws prohibiting or restricting circumvention of such\nmeasures.\n\n When you convey a covered work, you waive any legal power to forbid\ncircumvention of technological measures to the extent such circumvention\nis effected by exercising rights under this License with respect to\nthe covered work, and you disclaim any intention to limit operation or\nmodification of the work as a means of enforcing, against the work's\nusers, your or third parties' legal rights to forbid circumvention of\ntechnological measures.\n\n 4. Conveying Verbatim Copies.\n\n You may convey verbatim copies of the Program's source code as you\nreceive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice;\nkeep intact all notices stating that this License and any\nnon-permissive terms added in accord with section 7 apply to the code;\nkeep intact all notices of the absence of any warranty; and give all\nrecipients a copy of this License along with the Program.\n\n You may charge any price or no price for each copy that you convey,\nand you may offer support or warranty protection for a fee.\n\n 5. Conveying Modified Source Versions.\n\n You may convey a work based on the Program, or the modifications to\nproduce it from the Program, in the form of source code under the\nterms of section 4, provided that you also meet all of these conditions:\n\n a) The work must carry prominent notices stating that you modified\n it, and giving a relevant date.\n\n b) The work must carry prominent notices stating that it is\n released under this License and any conditions added under section\n 7. This requirement modifies the requirement in section 4 to\n \"keep intact all notices\".\n\n c) You must license the entire work, as a whole, under this\n License to anyone who comes into possession of a copy. This\n License will therefore apply, along with any applicable section 7\n additional terms, to the whole of the work, and all its parts,\n regardless of how they are packaged. This License gives no\n permission to license the work in any other way, but it does not\n invalidate such permission if you have separately received it.\n\n d) If the work has interactive user interfaces, each must display\n Appropriate Legal Notices; however, if the Program has interactive\n interfaces that do not display Appropriate Legal Notices, your\n work need not make them do so.\n\n A compilation of a covered work with other separate and independent\nworks, which are not by their nature extensions of the covered work,\nand which are not combined with it such as to form a larger program,\nin or on a volume of a storage or distribution medium, is called an\n\"aggregate\" if the compilation and its resulting copyright are not\nused to limit the access or legal rights of the compilation's users\nbeyond what the individual works permit. Inclusion of a covered work\nin an aggregate does not cause this License to apply to the other\nparts of the aggregate.\n\n 6. Conveying Non-Source Forms.\n\n You may convey a covered work in object code form under the terms\nof sections 4 and 5, provided that you also convey the\nmachine-readable Corresponding Source under the terms of this License,\nin one of these ways:\n\n a) Convey the object code in, or embodied in, a physical product\n (including a physical distribution medium), accompanied by the\n Corresponding Source fixed on a durable physical medium\n customarily used for software interchange.\n\n b) Convey the object code in, or embodied in, a physical product\n (including a physical distribution medium), accompanied by a\n written offer, valid for at least three years and valid for as\n long as you offer spare parts or customer support for that product\n model, to give anyone who possesses the object code either (1) a\n copy of the Corresponding Source for all the software in the\n product that is covered by this License, on a durable physical\n medium customarily used for software interchange, for a price no\n more than your reasonable cost of physically performing this\n conveying of source, or (2) access to copy the\n Corresponding Source from a network server at no charge.\n\n c) Convey individual copies of the object code with a copy of the\n written offer to provide the Corresponding Source. This\n alternative is allowed only occasionally and noncommercially, and\n only if you received the object code with such an offer, in accord\n with subsection 6b.\n\n d) Convey the object code by offering access from a designated\n place (gratis or for a charge), and offer equivalent access to the\n Corresponding Source in the same way through the same place at no\n further charge. You need not require recipients to copy the\n Corresponding Source along with the object code. If the place to\n copy the object code is a network server, the Corresponding Source\n may be on a different server (operated by you or a third party)\n that supports equivalent copying facilities, provided you maintain\n clear directions next to the object code saying where to find the\n Corresponding Source. Regardless of what server hosts the\n Corresponding Source, you remain obligated to ensure that it is\n available for as long as needed to satisfy these requirements.\n\n e) Convey the object code using peer-to-peer transmission, provided\n you inform other peers where the object code and Corresponding\n Source of the work are being offered to the general public at no\n charge under subsection 6d.\n\n A separable portion of the object code, whose source code is excluded\nfrom the Corresponding Source as a System Library, need not be\nincluded in conveying the object code work.\n\n A \"User Product\" is either (1) a \"consumer product\", which means any\ntangible personal property which is normally used for personal, family,\nor household purposes, or (2) anything designed or sold for incorporation\ninto a dwelling. In determining whether a product is a consumer product,\ndoubtful cases shall be resolved in favor of coverage. For a particular\nproduct received by a particular user, \"normally used\" refers to a\ntypical or common use of that class of product, regardless of the status\nof the particular user or of the way in which the particular user\nactually uses, or expects or is expected to use, the product. A product\nis a consumer product regardless of whether the product has substantial\ncommercial, industrial or non-consumer uses, unless such uses represent\nthe only significant mode of use of the product.\n\n \"Installation Information\" for a User Product means any methods,\nprocedures, authorization keys, or other information required to install\nand execute modified versions of a covered work in that User Product from\na modified version of its Corresponding Source. The information must\nsuffice to ensure that the continued functioning of the modified object\ncode is in no case prevented or interfered with solely because\nmodification has been made.\n\n If you convey an object code work under this section in, or with, or\nspecifically for use in, a User Product, and the conveying occurs as\npart of a transaction in which the right of possession and use of the\nUser Product is transferred to the recipient in perpetuity or for a\nfixed term (regardless of how the transaction is characterized), the\nCorresponding Source conveyed under this section must be accompanied\nby the Installation Information. But this requirement does not apply\nif neither you nor any third party retains the ability to install\nmodified object code on the User Product (for example, the work has\nbeen installed in ROM).\n\n The requirement to provide Installation Information does not include a\nrequirement to continue to provide support service, warranty, or updates\nfor a work that has been modified or installed by the recipient, or for\nthe User Product in which it has been modified or installed. Access to a\nnetwork may be denied when the modification itself materially and\nadversely affects the operation of the network or violates the rules and\nprotocols for communication across the network.\n\n Corresponding Source conveyed, and Installation Information provided,\nin accord with this section must be in a format that is publicly\ndocumented (and with an implementation available to the public in\nsource code form), and must require no special password or key for\nunpacking, reading or copying.\n\n 7. Additional Terms.\n\n \"Additional permissions\" are terms that supplement the terms of this\nLicense by making exceptions from one or more of its conditions.\nAdditional permissions that are applicable to the entire Program shall\nbe treated as though they were included in this License, to the extent\nthat they are valid under applicable law. If additional permissions\napply only to part of the Program, that part may be used separately\nunder those permissions, but the entire Program remains governed by\nthis License without regard to the additional permissions.\n\n When you convey a copy of a covered work, you may at your option\nremove any additional permissions from that copy, or from any part of\nit. (Additional permissions may be written to require their own\nremoval in certain cases when you modify the work.) You may place\nadditional permissions on material, added by you to a covered work,\nfor which you have or can give appropriate copyright permission.\n\n Notwithstanding any other provision of this License, for material you\nadd to a covered work, you may (if authorized by the copyright holders of\nthat material) supplement the terms of this License with terms:\n\n a) Disclaiming warranty or limiting liability differently from the\n terms of sections 15 and 16 of this License; or\n\n b) Requiring preservation of specified reasonable legal notices or\n author attributions in that material or in the Appropriate Legal\n Notices displayed by works containing it; or\n\n c) Prohibiting misrepresentation of the origin of that material, or\n requiring that modified versions of such material be marked in\n reasonable ways as different from the original version; or\n\n d) Limiting the use for publicity purposes of names of licensors or\n authors of the material; or\n\n e) Declining to grant rights under trademark law for use of some\n trade names, trademarks, or service marks; or\n\n f) Requiring indemnification of licensors and authors of that\n material by anyone who conveys the material (or modified versions of\n it) with contractual assumptions of liability to the recipient, for\n any liability that these contractual assumptions directly impose on\n those licensors and authors.\n\n All other non-permissive additional terms are considered \"further\nrestrictions\" within the meaning of section 10. If the Program as you\nreceived it, or any part of it, contains a notice stating that it is\ngoverned by this License along with a term that is a further\nrestriction, you may remove that term. If a license document contains\na further restriction but permits relicensing or conveying under this\nLicense, you may add to a covered work material governed by the terms\nof that license document, provided that the further restriction does\nnot survive such relicensing or conveying.\n\n If you add terms to a covered work in accord with this section, you\nmust place, in the relevant source files, a statement of the\nadditional terms that apply to those files, or a notice indicating\nwhere to find the applicable terms.\n\n Additional terms, permissive or non-permissive, may be stated in the\nform of a separately written license, or stated as exceptions;\nthe above requirements apply either way.\n\n 8. Termination.\n\n You may not propagate or modify a covered work except as expressly\nprovided under this License. Any attempt otherwise to propagate or\nmodify it is void, and will automatically terminate your rights under\nthis License (including any patent licenses granted under the third\nparagraph of section 11).\n\n However, if you cease all violation of this License, then your\nlicense from a particular copyright holder is reinstated (a)\nprovisionally, unless and until the copyright holder explicitly and\nfinally terminates your license, and (b) permanently, if the copyright\nholder fails to notify you of the violation by some reasonable means\nprior to 60 days after the cessation.\n\n Moreover, your license from a particular copyright holder is\nreinstated permanently if the copyright holder notifies you of the\nviolation by some reasonable means, this is the first time you have\nreceived notice of violation of this License (for any work) from that\ncopyright holder, and you cure the violation prior to 30 days after\nyour receipt of the notice.\n\n Termination of your rights under this section does not terminate the\nlicenses of parties who have received copies or rights from you under\nthis License. If your rights have been terminated and not permanently\nreinstated, you do not qualify to receive new licenses for the same\nmaterial under section 10.\n\n 9. Acceptance Not Required for Having Copies.\n\n You are not required to accept this License in order to receive or\nrun a copy of the Program. Ancillary propagation of a covered work\noccurring solely as a consequence of using peer-to-peer transmission\nto receive a copy likewise does not require acceptance. However,\nnothing other than this License grants you permission to propagate or\nmodify any covered work. These actions infringe copyright if you do\nnot accept this License. Therefore, by modifying or propagating a\ncovered work, you indicate your acceptance of this License to do so.\n\n 10. Automatic Licensing of Downstream Recipients.\n\n Each time you convey a covered work, the recipient automatically\nreceives a license from the original licensors, to run, modify and\npropagate that work, subject to this License. You are not responsible\nfor enforcing compliance by third parties with this License.\n\n An \"entity transaction\" is a transaction transferring control of an\norganization, or substantially all assets of one, or subdividing an\norganization, or merging organizations. If propagation of a covered\nwork results from an entity transaction, each party to that\ntransaction who receives a copy of the work also receives whatever\nlicenses to the work the party's predecessor in interest had or could\ngive under the previous paragraph, plus a right to possession of the\nCorresponding Source of the work from the predecessor in interest, if\nthe predecessor has it or can get it with reasonable efforts.\n\n You may not impose any further restrictions on the exercise of the\nrights granted or affirmed under this License. For example, you may\nnot impose a license fee, royalty, or other charge for exercise of\nrights granted under this License, and you may not initiate litigation\n(including a cross-claim or counterclaim in a lawsuit) alleging that\nany patent claim is infringed by making, using, selling, offering for\nsale, or importing the Program or any portion of it.\n\n 11. Patents.\n\n A \"contributor\" is a copyright holder who authorizes use under this\nLicense of the Program or a work on which the Program is based. The\nwork thus licensed is called the contributor's \"contributor version\".\n\n A contributor's \"essential patent claims\" are all patent claims\nowned or controlled by the contributor, whether already acquired or\nhereafter acquired, that would be infringed by some manner, permitted\nby this License, of making, using, or selling its contributor version,\nbut do not include claims that would be infringed only as a\nconsequence of further modification of the contributor version. For\npurposes of this definition, \"control\" includes the right to grant\npatent sublicenses in a manner consistent with the requirements of\nthis License.\n\n Each contributor grants you a non-exclusive, worldwide, royalty-free\npatent license under the contributor's essential patent claims, to\nmake, use, sell, offer for sale, import and otherwise run, modify and\npropagate the contents of its contributor version.\n\n In the following three paragraphs, a \"patent license\" is any express\nagreement or commitment, however denominated, not to enforce a patent\n(such as an express permission to practice a patent or covenant not to\nsue for patent infringement). To \"grant\" such a patent license to a\nparty means to make such an agreement or commitment not to enforce a\npatent against the party.\n\n If you convey a covered work, knowingly relying on a patent license,\nand the Corresponding Source of the work is not available for anyone\nto copy, free of charge and under the terms of this License, through a\npublicly available network server or other readily accessible means,\nthen you must either (1) cause the Corresponding Source to be so\navailable, or (2) arrange to deprive yourself of the benefit of the\npatent license for this particular work, or (3) arrange, in a manner\nconsistent with the requirements of this License, to extend the patent\nlicense to downstream recipients. \"Knowingly relying\" means you have\nactual knowledge that, but for the patent license, your conveying the\ncovered work in a country, or your recipient's use of the covered work\nin a country, would infringe one or more identifiable patents in that\ncountry that you have reason to believe are valid.\n\n If, pursuant to or in connection with a single transaction or\narrangement, you convey, or propagate by procuring conveyance of, a\ncovered work, and grant a patent license to some of the parties\nreceiving the covered work authorizing them to use, propagate, modify\nor convey a specific copy of the covered work, then the patent license\nyou grant is automatically extended to all recipients of the covered\nwork and works based on it.\n\n A patent license is \"discriminatory\" if it does not include within\nthe scope of its coverage, prohibits the exercise of, or is\nconditioned on the non-exercise of one or more of the rights that are\nspecifically granted under this License. You may not convey a covered\nwork if you are a party to an arrangement with a third party that is\nin the business of distributing software, under which you make payment\nto the third party based on the extent of your activity of conveying\nthe work, and under which the third party grants, to any of the\nparties who would receive the covered work from you, a discriminatory\npatent license (a) in connection with copies of the covered work\nconveyed by you (or copies made from those copies), or (b) primarily\nfor and in connection with specific products or compilations that\ncontain the covered work, unless you entered into that arrangement,\nor that patent license was granted, prior to 28 March 2007.\n\n Nothing in this License shall be construed as excluding or limiting\nany implied license or other defenses to infringement that may\notherwise be available to you under applicable patent law.\n\n 12. No Surrender of Others' Freedom.\n\n If conditions are imposed on you (whether by court order, agreement or\notherwise) that contradict the conditions of this License, they do not\nexcuse you from the conditions of this License. If you cannot convey a\ncovered work so as to satisfy simultaneously your obligations under this\nLicense and any other pertinent obligations, then as a consequence you may\nnot convey it at all. For example, if you agree to terms that obligate you\nto collect a royalty for further conveying from those to whom you convey\nthe Program, the only way you could satisfy both those terms and this\nLicense would be to refrain entirely from conveying the Program.\n\n 13. Remote Network Interaction; Use with the GNU General Public License.\n\n Notwithstanding any other provision of this License, if you modify the\nProgram, your modified version must prominently offer all users\ninteracting with it remotely through a computer network (if your version\nsupports such interaction) an opportunity to receive the Corresponding\nSource of your version by providing access to the Corresponding Source\nfrom a network server at no charge, through some standard or customary\nmeans of facilitating copying of software. This Corresponding Source\nshall include the Corresponding Source for any work covered by version 3\nof the GNU General Public License that is incorporated pursuant to the\nfollowing paragraph.\n\n Notwithstanding any other provision of this License, you have\npermission to link or combine any covered work with a work licensed\nunder version 3 of the GNU General Public License into a single\ncombined work, and to convey the resulting work. The terms of this\nLicense will continue to apply to the part which is the covered work,\nbut the work with which it is combined will remain governed by version\n3 of the GNU General Public License.\n\n 14. Revised Versions of this License.\n\n The Free Software Foundation may publish revised and/or new versions of\nthe GNU Affero General Public License from time to time. Such new versions\nwill be similar in spirit to the present version, but may differ in detail to\naddress new problems or concerns.\n\n Each version is given a distinguishing version number. If the\nProgram specifies that a certain numbered version of the GNU Affero General\nPublic License \"or any later version\" applies to it, you have the\noption of following the terms and conditions either of that numbered\nversion or of any later version published by the Free Software\nFoundation. If the Program does not specify a version number of the\nGNU Affero General Public License, you may choose any version ever published\nby the Free Software Foundation.\n\n If the Program specifies that a proxy can decide which future\nversions of the GNU Affero General Public License can be used, that proxy's\npublic statement of acceptance of a version permanently authorizes you\nto choose that version for the Program.\n\n Later license versions may give you additional or different\npermissions. However, no additional obligations are imposed on any\nauthor or copyright holder as a result of your choosing to follow a\nlater version.\n\n 15. Disclaimer of Warranty.\n\n THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY\nAPPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT\nHOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM \"AS IS\" WITHOUT WARRANTY\nOF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,\nTHE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\nPURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM\nIS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF\nALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n 16. Limitation of Liability.\n\n IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING\nWILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS\nTHE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE\nUSE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF\nDATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD\nPARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),\nEVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF\nSUCH DAMAGES.\n\n 17. Interpretation of Sections 15 and 16.\n\n If the disclaimer of warranty and limitation of liability provided\nabove cannot be given local legal effect according to their terms,\nreviewing courts shall apply local law that most closely approximates\nan absolute waiver of all civil liability in connection with the\nProgram, unless a warranty or assumption of liability accompanies a\ncopy of the Program in return for a fee.\n\n END OF TERMS AND CONDITIONS\n\n How to Apply These Terms to Your New Programs\n\n If you develop a new program, and you want it to be of the greatest\npossible use to the public, the best way to achieve this is to make it\nfree software which everyone can redistribute and change under these terms.\n\n To do so, attach the following notices to the program. It is safest\nto attach them to the start of each source file to most effectively\nstate the exclusion of warranty; and each file should have at least\nthe \"copyright\" line and a pointer to where the full notice is found.\n\n \n Copyright (C) \n\n This program is free software: you can redistribute it and/or modify\n it under the terms of the GNU Affero General Public License as published\n by the Free Software Foundation, either version 3 of the License, or\n (at your option) any later version.\n\n This program is distributed in the hope that it will be useful,\n but WITHOUT ANY WARRANTY; without even the implied warranty of\n MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n GNU Affero General Public License for more details.\n\n You should have received a copy of the GNU Affero General Public License\n along with this program. If not, see .\n\nAlso add information on how to contact you by electronic and paper mail.\n\n If your software can interact with users remotely through a computer\nnetwork, you should also make sure that it provides a way for users to\nget its source. For example, if your program is a web application, its\ninterface could display a \"Source\" link that leads users to an archive\nof the code. There are many ways you could offer source, and different\nsolutions will be better for different programs; see section 13 for the\nspecific requirements.\n\n You should also get your employer (if you work as a programmer) or school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.\nFor more information on this, and how to apply and follow the GNU AGPL, see\n.\n" }, { "path": "Makefile", "content": "ROOT = \"./script\"\nSEMVER_VERSION=$(shell grep version Cargo.toml | awk -F\"\\\"\" '{print $$2}' | head -n 1)\n\n.PHONY: run test\n\nrun:\n\t${ROOT}/run_local_server.sh\n\ntest:\n\t${ROOT}/run_local_test.sh\n" }, { "path": "README.md", "content": "

\n \n \n \n \n

\n\n

\n \n \"License:\n

\n\n

\n Website •\n Twitter\n

\n\n

⚡ The AppFlowy Cloud written with Rust 🦀

\n\n# AppFlowy Cloud\n\nAppFlowy Cloud is adopting an open-core model to ensure the project's long-term sustainability.\n\nAppFlowy offers two deployment options:\n- AppFlowy Managed Cloud: AWS-hosted instances fully deployed and managed by the AppFlowy team\n- AppFlowy Self-hosted Cloud: Configurable services you can deploy on your own infrastructure\n\nThe codebase behind these two setups is a closed-source fork of this open-source codebase: https://github.com/AppFlowy-IO/AppFlowy-Cloud, combined with our proprietary code. \nThe commercial fork is distributed solely under our commercial license ([link](https://github.com/AppFlowy-IO/AppFlowy-SelfHost-Commercial/blob/main/SELF_HOST_LICENSE_AGREEMENT.md)). \n\n\n**AppFlowy Self-hosted Cloud is designed for teams and enterprises that want data control and modular, configurable components tailored to their own infrastructure.** \nIt comes with a Free tier suitable for **experienced IT professionals to test out our self-hosted solution** and allows seamless upgrades to higher tiers.\n\nThe Free tier offers:\n- One user seat (per instance)\n- AppFlowy Web App (your hosted appflowy.com/app)\n- Up to 3 guest editors who can be added to your selected AppFlowy pages and collaborate with you in real time\n- Publish pages\n- Unlimited workspaces\n\nYou can find the pricing details by visiting [this page](https://appflowy.com/docs/Self-hosted-Plans-and-Pricing), or your self-hosted admin panel, or our official website ([link](https://appflowy.com/pricing)).\n\nOpen source vs Open core:\n\nAs AppFlwy Cloud is adopting an open-core model, AppFlowy Web and AppFlowy Flutter will remain open source.\nAs part of the transition, we are consolidating and reorganizing our codebases in private repositories.\nRecently, we merged all AppFlowy Web–related development from our private repository back into the public one. You can check the [commit](https://github.com/AppFlowy-IO/AppFlowy-Web/commits/main/) for reference. We will also merge Flutter code back into [this](https://github.com/AppFlowy-IO/AppFlowy) public repository at a later stage.\n\nAppFlowy Cloud will continue to follow the open-core model for business reasons.\nYou're free to use https://github.com/AppFlowy-IO/AppFlowy-Cloud governed by its license.\n\nWe also have a few other open source repos, such as\n\n- [AppFlowy Website](https://github.com/AppFlowy-IO/AppFlowy-Website) for developers who want to build their own website following our navigation structure\n- [appflowy-editor](https://github.com/AppFlowy-IO/appflowy-editor) for Flutter developers to build their own apps\n- [appflowy-board](https://github.com/AppFlowy-IO/appflowy-board) for Flutter developers to build their own apps\n\n\n\n## Table of Contents\n\n- [🚀 Deployment](#deployment)\n\n\n## 🚀Deployment\n\n- See [deployment guide](https://appflowy.com/docs/Step-by-step-Self-Hosting-Guide---From-Zero-to-Production)\n\n" }, { "path": "SELF_HOST_LICENSE_AGREEMENT.md", "content": "APPFLOWY PTE. LTD. SOFTWARE LICENSE AGREEMENT\n\nIMPORTANT: PLEASE READ THIS SOFTWARE LICENSE AGREEMENT (\"LICENSE\nAGREEMENT\") CAREFULLY BEFORE USING THE APPFLOWY SELF-HOSTED COMMERCIAL\nSOFTWARE (\"SOFTWARE\"). BY USING THE SOFTWARE, YOU (EITHER AN INDIVIDUAL\nOR A SINGLE ENTITY) AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE\nAGREEMENT. IF YOU DO NOT AGREE TO THE TERMS OF THIS LICENSE AGREEMENT,\nDO NOT USE THE SOFTWARE.\n\n1. License Grant: Subject to the terms and conditions of this License\n Agreement, APPFLOWY PTE. LTD. (\"Licensor\") grants you a\n non-exclusive, non-transferable license to use the Software for your\n internal business purposes. This license is granted on a per-server\n (per-machine) basis.\n\n2 License Restrictions: a) You shall not copy, modify, distribute, sell,\nlease, sublicense, or transfer the Software or any portion thereof. b)\nYou shall not reverse engineer, decompile, or disassemble the Software,\nexcept to the extent expressly permitted by applicable law. c) You shall\nnot remove or alter any proprietary notices or labels on the Software.\n\n3. License Key:\n\n a) APPFLOWY PTE. LTD. will provide you with a unique license key\n (\"License Key\") to activate the Software on a specific server\n (machine).\n b) You agree that the License Key provided to you by APPFLOWY PTE.\n LTD. will be used exclusively on the designated server (machine)\n and will not be shared, transferred, or used on any other server\n (machine) without explicit written permission from APPFLOWY PTE.\n LTD.\n c) Reselling license and custom client are not allowed.\n\n4. Term and Billing:\n\n a) The license term for the Software shall be one (1) year,\n starting from the date of purchase.\n b) You agree to pay the annual license fee as specified by\n Licensor. Failure to make timely payments may result in\n suspension or termination of the license.\n\n5. Maintenance and Support:\n\n a) Support is offered via email.\n b) During the license term, Licensor may provide maintenance and\n support services for the Software as separately agreed upon or\n specified in a separate support agreement.\n c) Licensor reserves the right to modify or enhance the support\n services at its sole discretion.\n\n6. Intellectual Property:\n\n a) You acknowledge that the Software and any accompanying\n documentation are protected by intellectual property laws and\n treaties.\n b) You agree not to remove or alter any copyright, trademark, or\n other proprietary rights notices contained in or on the\n Software.\n\n7. Disclaimer of Warranty: THE SOFTWARE IS PROVIDED \"AS IS\" WITHOUT\n WARRANTY OF ANY KIND. LICENSOR DISCLAIMS ALL WARRANTIES, WHETHER\n EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO THE\n IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR\n PURPOSE, AND NON-INFRINGEMENT.\n\n8. Limitation of Liability: IN NO EVENT SHALL LICENSOR BE LIABLE FOR\n ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR\n PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO THIS LICENSE AGREEMENT\n OR THE USE OF THE SOFTWARE, EVEN IF LICENSOR HAS BEEN ADVISED OF THE\n POSSIBILITY OF SUCH DAMAGES.\n\n9. Termination: This License Agreement is effective until terminated.\n Licensor may terminate this License Agreement immediately upon\n notice to you if you breach any of the terms and conditions. Upon\n termination, you must cease all use of the Software and destroy all\n copies in your possession.\n\n10. Governing Law: This License Agreement shall be governed by and\n construed in accordance with the laws of Singapore. Any legal action\n or proceeding arising under this License Agreement shall be brought\n exclusively in the courts of Singapore.\n\n11. Entire Agreement: This License Agreement shall be governed by and\n construed in accordance with the laws of Singapore. Any legal action\n or proceeding arising under this License Agreement shall be brought\n exclusively in the courts of Singapore.\n\n12. No Refund Policy: All fees paid under this License Agreement are\n non-cancellable and non-refundable, except to the extent required by\n applicable law (e.g., if the Software is not delivered, is\n materially defective or not as described, or a mandatory statutory\n cooling‑off right applies).\n\nIf you are an EU/UK consumer, you may have a 14‑day statutory right of\nwithdrawal for digital content. By requesting immediate delivery of the\nSoftware and/or License Key and ticking the checkbox at checkout (or\nprior to key reveal), you expressly consent to immediate performance and\nacknowledge that you lose that withdrawal right once delivery occurs.\n\nBy using the Software, you acknowledge that you have read and understood\nthis License Agreement and agree to be bound by its terms and\nconditions.\n" }, { "path": "admin_frontend/Cargo.toml", "content": "[package]\nname = \"admin_frontend\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html\n\n[dependencies]\n# local dependencies\ngotrue = { path = \"../libs/gotrue\" }\ngotrue-entity = { path = \"../libs/gotrue-entity\" }\ndatabase-entity = { path = \"../libs/database-entity\" }\nshared-entity = { path = \"../libs/shared-entity\" }\n\nanyhow.workspace = true\naxum = { version = \"0.7\", features = [\"json\"] }\ntokio = { version = \"1.36\", features = [\"rt-multi-thread\", \"macros\"] }\naskama = \"0.12\"\naxum-extra = { version = \"0.9\", features = [\"cookie\"] }\nserde.workspace = true\nserde_json.workspace = true\nredis = { version = \"0.25.2\", features = [\n \"aio\",\n \"tokio-comp\",\n \"connection-manager\",\n] }\nuuid = { workspace = true, features = [\"v4\"] }\ndotenvy = \"0.15\"\nreqwest.workspace = true\ntower-service = \"0.3\"\ntower-http = { version = \"0.5\", features = [\"fs\"] }\ntower = \"0.4\"\ntracing = \"0.1\"\ntracing-subscriber = { version = \"0.3\", features = [\"env-filter\", \"json\"] }\njwt = \"0.16\"\nhuman_bytes = \"0.4.3\"\nrand = \"0.8.5\"\nsha2 = \"0.10.8\"\nbase64 = \"0.22.1\"\nurlencoding = \"2.1.3\"\n" }, { "path": "admin_frontend/Dockerfile", "content": "# syntax=docker/dockerfile:1\n# User should build from parent directory\n\nFROM lukemathwalker/cargo-chef:latest-rust-1.86 as chef\n\nWORKDIR /app\n\nFROM chef as builder\nARG PROFILE=\"release\"\nCOPY . .\nWORKDIR /app/admin_frontend\nRUN echo \"Building admin_frontend with profile: ${PROFILE}\"\nRUN if [ \"$PROFILE\" = \"release\" ]; then \\\n cargo build --release --bin admin_frontend; \\\n else \\\n cargo build --bin admin_frontend; \\\n fi\n\nFROM debian AS runtime\nWORKDIR /app\nRUN apt-get update -y \\\n && apt-get install -y --no-install-recommends libc6 libssl-dev \\\n # Clean up\n && apt-get autoremove -y \\\n && apt-get clean -y \\\n && rm -rf /var/lib/apt/lists/*\n\n# Copy the binary from the appropriate target directory\nARG PROFILE=\"release\"\nRUN echo \"Using admin_frontend with profile: ${PROFILE}\"\nRUN if [ \"$PROFILE\" = \"release\" ]; then \\\n echo \"Using release admin_frontend binary\"; \\\n else \\\n echo \"Using debug admin_frontend binary\"; \\\n fi\nCOPY --from=builder /app/target/$PROFILE/admin_frontend /usr/local/bin/admin_frontend\nCOPY --from=builder /app/admin_frontend/assets /app/assets\nENV RUST_BACKTRACE 1\nENV RUST_LOG info\n\nARG ADMIN_FRONTEND_PORT\nARG PORT\nENV PORT=${ADMIN_FRONTEND_PORT:-${PORT:-3000}}\nEXPOSE $PORT\n\nCMD [\"admin_frontend\"]\n" }, { "path": "admin_frontend/README.md", "content": "# Admin Frontend\n\n## Partial Local Environment\n\n- Go to source root folder of `AppFlowy-Cloud`\n- Start running locally dependency servers: `docker compose --file docker-compose-dev.yml up -d`\n- Start SQLX migrations `cargo sqlx database create && cargo sqlx migrate run && cargo sqlx prepare --workspace`\n- Start AppFlowy-Cloud Server `cargo run`\n- Go back to `AppFlowy-Cloud/admin_frontend` directory\n- Run `cargo watch -x run -w .`, this watch for source changes, rebuild and rerun the app.\n\n## Full Local Integration Environment\n\n- Start the whole stack: `docker compose up -d`\n- Go to [web server](localhost)\n- After editing source files, do `docker compose up -d --no-deps --build admin_frontend`\n- You might need to add `--force-recreate` flag for non build changes to take effect\n\n" }, { "path": "admin_frontend/assets/README.md", "content": "# Assets\n" }, { "path": "admin_frontend/assets/apple/logo.html", "content": "\n \n\n" }, { "path": "admin_frontend/assets/base.css", "content": ":root {\n --af-background: #1a202c;\n --line-divider: #384967;\n --af-purple: #9327ff;\n --af-dark-purple: #8427e0;\n --af-red: #fb006d;\n --af-dark-red: #e3006d;\n --af-cyan: #00c8ff;\n --af-dark-cyan: #00b5ff;\n --af-yellow: #ffce00;\n --af-dark-yellow: #ffbd00;\n --af-darker-yellow: #f7931e;\n}\n\nbody {\n font-family: sans-serif;\n background-color: var(--af-background);\n color: #e2e9f2;\n}\n\n.button {\n border: none;\n border-radius: 4px;\n margin: 4px;\n padding: 4px 8px;\n font-size: 16px;\n cursor: pointer;\n}\n\n.table {\n border-collapse: collapse; /* Collapse borders so there's no double borders */\n}\n\n.table th, .table td {\n padding: 8px;\n}\n\n.yellow-table th {\n border: 1px solid var(--af-dark-yellow);\n background-color: var(--af-yellow);\n}\n\n.yellow-table td {\n border: 1px solid var(--af-dark-yellow);\n}\n\n.red-table th {\n border: 1px solid var(--af-dark-red);\n background-color: var(--af-red);\n}\n\n.red-table td {\n border: 1px solid var(--af-dark-red);\n}\n\n.cyan-table th {\n border: 1px solid var(--af-dark-cyan);\n background-color: var(--af-cyan);\n}\n\n.cyan-table td {\n border: 1px solid var(--af-dark-cyan);\n}\n\n.purple-table th {\n border: 1px solid var(--af-dark-purple);\n background-color: var(--af-purple);\n}\n\n.purple-table td {\n border: 1px solid var(--af-dark-purple);\n}\n\n.purple:hover {\n background-color: var(--af-dark-purple);\n}\n\n.purple {\n background-color: var(--af-dark-purple);\n}\n\n.purple:hover {\n background-color: var(--af-purple);\n}\n\n.red {\n background-color: var(--af-dark-red);\n}\n\n.red:hover {\n background-color: var(--af-red);\n}\n\n.cyan {\n background-color: var(--af-dark-cyan);\n}\n\n.cyan:hover {\n background-color: var(--af-cyan);\n}\n\n.yellow {\n background-color: var(--af-darker-yellow);\n}\n\n.yellow:hover {\n background-color: var(--af-yellow);\n}\n\n.input {\n box-sizing: border-box;\n border-radius: 4px;\n border: 1px solid var(--line-divider);\n margin: 4px 0;\n padding: 4px 8px;\n font-size: 16px;\n color: inherit;\n background-color: inherit;\n outline: none;\n}\n\n.input:hover {\n border-color: var(--af-dark-cyan);\n}\n\n.input:focus {\n border-color: var(--af-cyan);\n}\n\n.loading-button {\n filter: brightness(0.7);\n}\n\n.oauth-item-inner {\n border: 1px solid;\n border-color: var(--line-divider);\n width: 100%;\n margin: 4px;\n border-radius: 8px;\n}\n\n.oauth-item-inner:hover {\n border-color: var(--af-dark-cyan);\n}\n\n.divider {\n border: none;\n border-top: 1px solid var(--line-divider);\n}\n" }, { "path": "admin_frontend/assets/discord/README.md", "content": "# Discord\n\n- Assets are derived from: https://discord.com/branding\n" }, { "path": "admin_frontend/assets/discord/logo.html", "content": "\n \n\n" }, { "path": "admin_frontend/assets/github/README.md", "content": "# Github\n\n- Assets derived from: https://github.com/logos\n" }, { "path": "admin_frontend/assets/github/logo.html", "content": "\n \n\n" }, { "path": "admin_frontend/assets/google/README.md", "content": "# Google OAuth Sign Logo\n\nAssets in this directory are generated from: https://developers.google.com/identity/branding-guidelines\n" }, { "path": "admin_frontend/assets/google/logo.css", "content": ".gsi-material-button {\n -moz-user-select: none;\n -webkit-user-select: none;\n -ms-user-select: none;\n -webkit-appearance: none;\n background-color: #f2f2f2;\n background-image: none;\n border: none;\n -webkit-border-radius: 20px;\n border-radius: 20px;\n -webkit-box-sizing: border-box;\n box-sizing: border-box;\n color: #1f1f1f;\n cursor: pointer;\n font-family: \"Roboto\", arial, sans-serif;\n font-size: 14px;\n height: 40px;\n letter-spacing: 0.25px;\n outline: none;\n overflow: hidden;\n padding: 0;\n position: relative;\n text-align: center;\n -webkit-transition:\n background-color 0.218s,\n border-color 0.218s,\n box-shadow 0.218s;\n transition:\n background-color 0.218s,\n border-color 0.218s,\n box-shadow 0.218s;\n vertical-align: middle;\n white-space: nowrap;\n width: 40px;\n max-width: 400px;\n min-width: min-content;\n}\n\n.gsi-material-button .gsi-material-button-icon {\n height: 20px;\n margin-right: 12px;\n min-width: 20px;\n width: 20px;\n margin: 0;\n padding: 10px;\n}\n\n.gsi-material-button .gsi-material-button-content-wrapper {\n -webkit-align-items: center;\n align-items: center;\n display: flex;\n -webkit-flex-direction: row;\n flex-direction: row;\n -webkit-flex-wrap: nowrap;\n flex-wrap: nowrap;\n height: 100%;\n justify-content: space-between;\n position: relative;\n width: 100%;\n}\n\n.gsi-material-button .gsi-material-button-contents {\n -webkit-flex-grow: 1;\n flex-grow: 1;\n font-family: \"Roboto\", arial, sans-serif;\n font-weight: 500;\n overflow: hidden;\n text-overflow: ellipsis;\n vertical-align: top;\n}\n\n.gsi-material-button .gsi-material-button-state {\n -webkit-transition: opacity 0.218s;\n transition: opacity 0.218s;\n bottom: 0;\n left: 0;\n opacity: 0;\n position: absolute;\n right: 0;\n top: 0;\n}\n\n.gsi-material-button:disabled {\n cursor: default;\n background-color: #ffffff61;\n}\n\n.gsi-material-button:disabled .gsi-material-button-state {\n background-color: #1f1f1f1f;\n}\n\n.gsi-material-button:disabled .gsi-material-button-contents {\n opacity: 38%;\n}\n\n.gsi-material-button:disabled .gsi-material-button-icon {\n opacity: 38%;\n}\n\n.gsi-material-button:not(:disabled):active .gsi-material-button-state,\n.gsi-material-button:not(:disabled):focus .gsi-material-button-state {\n background-color: #001d35;\n opacity: 12%;\n}\n\n.gsi-material-button:not(:disabled):hover {\n -webkit-box-shadow:\n 0 1px 2px 0 rgba(60, 64, 67, 0.3),\n 0 1px 3px 1px rgba(60, 64, 67, 0.15);\n box-shadow:\n 0 1px 2px 0 rgba(60, 64, 67, 0.3),\n 0 1px 3px 1px rgba(60, 64, 67, 0.15);\n}\n\n.gsi-material-button:not(:disabled):hover .gsi-material-button-state {\n background-color: #001d35;\n opacity: 8%;\n}\n" }, { "path": "admin_frontend/assets/google/logo.html", "content": "\n \n \n \n \n \n\n" }, { "path": "admin_frontend/assets/home.css", "content": "#home {\n display: flex;\n}\n\n#sidebar-content {\n width: 100%;\n}\n" }, { "path": "admin_frontend/assets/login.css", "content": "#login-parent {\n display: flex;\n align-items: center;\n justify-content: center;\n width: 100%;\n flex-direction: column;\n}\n\n#login-splash {\n display: flex;\n align-items: center;\n justify-content: center;\n flex-direction: column;\n}\n\n#login-signin {\n min-width: 256px;\n max-width: 512px;\n height: 100vh;\n display: flex;\n flex-direction: column;\n align-items: center;\n justify-content: center;\n}\n\n#oauth-container {\n display: flex;\n flex-direction: row;\n align-items: center;\n justify-content: center;\n width: 100%;\n flex-wrap: wrap;\n}\n\n.oauth-icon {\n margin: 12px;\n width: 48px;\n}\n" }, { "path": "admin_frontend/assets/logo.html", "content": "\n \n \n \n \n \n \n \n \n \n \n \n \n\n" }, { "path": "admin_frontend/assets/message.css", "content": "@keyframes slideIn {\n from {\n top: -20%;\n }\n to {\n top: 1%;\n }\n}\n\n.message.slideIn {\n animation: slideIn 0.2s forwards;\n}\n\n.message {\n border: none;\n border-radius: 4px;\n padding: 8px 16px;\n display: none;\n position: fixed;\n left: 50%;\n transform: translateX(-50%);\n color: #fff;\n z-index: 1;\n}\n" }, { "path": "admin_frontend/assets/minio/logo.html", "content": "\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n" }, { "path": "admin_frontend/assets/navigate.css", "content": ".nav-item {\n border-bottom: 2px solid;\n}\n\n.svg-container {\n margin: 16px;\n display: flex; /* Using Flexbox for alignment */\n height: 64px;\n align-items: center; /* Vertically center the SVG */\n justify-content: flex-start; /* Align the SVG to the left */\n}\n\n.svg-container:hover {\n filter: drop-shadow(0px 0px 8px);\n}\n\n.svg-container svg {\n height: 100%;\n width: auto;\n display: block;\n}\n" }, { "path": "admin_frontend/assets/postgres/logo.html", "content": "\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n" }, { "path": "admin_frontend/assets/sidebar.css", "content": "#sidebar {\n display: flex;\n flex-direction: column;\n width: 128px;\n height: 100vh;\n}\n\n.sidebar-item {\n padding: 16px 16px; /* Padding to give button-like space */\n cursor: pointer; /* Changing the cursor on hover to indicate clickability */\n}\n\n.sidebar-item:hover {\n text-shadow: 0 0 8px;\n}\n" }, { "path": "admin_frontend/assets/top_menu_bar.css", "content": "#top-menu-bar {\n display: flex;\n justify-content: space-between;\n align-items: center;\n}\n\n#top-menu-bar-left {\n display: flex;\n align-items: center;\n justify-content: space-between;\n}\n\n#top-menu-bar-right {\n display: flex;\n text-align: right;\n}\n" }, { "path": "admin_frontend/dev.env", "content": "GOTRUE_URL=http://localhost:9999\nREDIS_URL=redis://localhost:6379\nRUST_LOG=trace\n" }, { "path": "admin_frontend/src/askama_entities.rs", "content": "use database_entity::dto::AFWorkspace;\n\nuse crate::ext::entities::WorkspaceMember;\n\npub struct WorkspaceWithMembers {\n pub workspace: AFWorkspace,\n pub members: Vec,\n}\n" }, { "path": "admin_frontend/src/config.rs", "content": "use tracing::warn;\n\n#[derive(Debug, Clone)]\npub struct Config {\n pub host: String,\n pub port: u16,\n pub redis_url: String,\n pub gotrue_url: String,\n pub appflowy_cloud_url: String,\n pub oauth: OAuthConfig,\n pub path_prefix: String,\n}\n\n#[derive(Debug, Clone)]\npub struct OAuthConfig {\n pub client_id: String,\n pub client_secret: Option,\n pub allowable_redirect_uris: Vec,\n}\n\nimpl Config {\n pub fn from_env() -> Result {\n let cfg = Config {\n host: get_or_default(\"ADMIN_FRONTEND_HOST\", \"0.0.0.0\"),\n port: get_or_default(\"ADMIN_FRONTEND_PORT\", \"3000\")\n .parse()\n .map_err(|e| anyhow::anyhow!(\"failed to parse ADMIN_FRONTEND_PORT as u16, err: {}\", e))?,\n redis_url: get_or_default(\"ADMIN_FRONTEND_REDIS_URL\", \"redis://localhost:6379\"),\n gotrue_url: get_or_default(\"ADMIN_FRONTEND_GOTRUE_URL\", \"http://localhost:9999\"),\n appflowy_cloud_url: get_or_default(\n \"ADMIN_FRONTEND_APPFLOWY_CLOUD_URL\",\n \"http://localhost:8000\",\n ),\n oauth: OAuthConfig {\n client_id: get_or_default(\"ADMIN_FRONTEND_OAUTH_CLIENT_ID\", \"appflowy_cloud\"),\n client_secret: get_optional(\"ADMIN_FRONTEND_OAUTH_CLIENT_SECRET\"),\n allowable_redirect_uris: get_or_default(\n \"ADMIN_FRONTEND_OAUTH_ALLOWABLE_REDIRECT_URIS\",\n \"http://localhost:3000\",\n )\n .split(',')\n .map(|s| s.to_string())\n .collect(),\n },\n path_prefix: get_or_default(\"ADMIN_FRONTEND_PATH_PREFIX\", \"\"),\n };\n Ok(cfg)\n }\n}\n\nfn get_or_default(key: &str, default: &str) -> String {\n std::env::var(key).unwrap_or_else(|e| {\n warn!(\n \"failed to get env var: {}, err: {}, using default: {}\",\n key, e, default\n );\n default.to_string()\n })\n}\n\nfn get_optional(key: &str) -> Option {\n let s = match std::env::var(key) {\n Ok(s) => s,\n Err(err) => {\n warn!(\"failed to get env var: {}, err: {}\", key, err);\n return None;\n },\n };\n if s.is_empty() {\n warn!(\"env var: {} is empty\", key);\n None\n } else {\n Some(s)\n }\n}\n" }, { "path": "admin_frontend/src/error.rs", "content": "use std::borrow::Cow;\n\nuse axum::{\n http::{status, StatusCode},\n response::{IntoResponse, Redirect},\n};\n\nuse crate::ext;\n\npub struct WebApiError<'a> {\n pub status_code: status::StatusCode,\n pub payload: Cow<'a, str>,\n}\n\nimpl<'a> WebApiError<'a> {\n pub fn new(status_code: status::StatusCode, payload: S) -> Self\n where\n S: Into>,\n {\n WebApiError {\n status_code,\n payload: payload.into(),\n }\n }\n}\n\nimpl IntoResponse for WebApiError<'_> {\n fn into_response(self) -> axum::response::Response {\n let status = self.status_code;\n let payload = self.payload.into_owned(); // Converts Cow into String\n (status, payload).into_response()\n }\n}\n\nimpl From for WebApiError<'_> {\n fn from(v: gotrue_entity::error::GoTrueError) -> Self {\n WebApiError::new(status::StatusCode::UNAUTHORIZED, v.to_string())\n }\n}\n\nimpl From for WebApiError<'_> {\n fn from(v: redis::RedisError) -> Self {\n WebApiError::new(status::StatusCode::INTERNAL_SERVER_ERROR, v.to_string())\n }\n}\n\npub enum WebAppError {\n Askama(askama::Error),\n LoginRedirectRequired(String),\n ExtApi(ext::error::Error),\n Redis(redis::RedisError),\n BadRequest(String),\n}\n\nimpl IntoResponse for WebAppError {\n fn into_response(self) -> axum::response::Response {\n match self {\n WebAppError::Askama(e) => {\n tracing::error!(\"askama error: {:?}\", e);\n status::StatusCode::INTERNAL_SERVER_ERROR.into_response()\n },\n WebAppError::LoginRedirectRequired(base_path) => {\n Redirect::to(&format!(\"{}/login\", base_path)).into_response()\n },\n WebAppError::ExtApi(e) => e.into_response(),\n WebAppError::Redis(e) => {\n tracing::error!(\"redis error: {:?}\", e);\n status::StatusCode::INTERNAL_SERVER_ERROR.into_response()\n },\n WebAppError::BadRequest(e) => {\n tracing::error!(\"bad request: {:?}\", e);\n status::StatusCode::BAD_REQUEST.into_response()\n },\n }\n }\n}\n\nimpl From for WebAppError {\n fn from(v: redis::RedisError) -> Self {\n WebAppError::Redis(v)\n }\n}\n\nimpl From for WebAppError {\n fn from(v: askama::Error) -> Self {\n WebAppError::Askama(v)\n }\n}\n\nimpl From for WebAppError {\n fn from(v: ext::error::Error) -> Self {\n WebAppError::ExtApi(v)\n }\n}\n\nimpl From for WebApiError<'_> {\n fn from(v: ext::error::Error) -> Self {\n match v {\n ext::error::Error::NotOk(code, payload) => {\n WebApiError::new(StatusCode::from_u16(code).unwrap(), payload)\n },\n err => WebApiError::new(StatusCode::INTERNAL_SERVER_ERROR, format!(\"{:?}\", err)),\n }\n }\n}\n" }, { "path": "admin_frontend/src/ext/api.rs", "content": "use database_entity::dto::{AFRole, AFWorkspace, AFWorkspaceInvitation};\nuse shared_entity::dto::{auth_dto::SignInTokenResponse, workspace_dto::WorkspaceMemberInvitation};\n\nuse super::{\n check_response,\n entities::{\n UserProfile, UserUsageLimit, WorkspaceBlobUsage, WorkspaceDocUsage, WorkspaceMember,\n WorkspaceUsageLimits,\n },\n error::Error,\n from_json_response,\n};\n\npub async fn get_user_owned_workspaces(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let user_profile = get_user_profile(access_token, appflowy_cloud_base_url).await?;\n let owned_workspaces = get_user_workspaces(access_token, appflowy_cloud_base_url)\n .await?\n .into_iter()\n .filter(|w| w.owner_uid == user_profile.uid)\n .collect::>();\n Ok(owned_workspaces)\n}\n\npub async fn get_user_workspaces(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\"{}/api/workspace\", appflowy_cloud_base_url))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\npub async fn get_user_workspace_limit(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\"{}/api/user/limit\", appflowy_cloud_base_url))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\npub async fn get_user_workspace_usages(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let user_workspaces = get_user_owned_workspaces(access_token, appflowy_cloud_base_url).await?;\n\n let mut workspace_usages: Vec = Vec::with_capacity(user_workspaces.len());\n for user_workspace in user_workspaces {\n let workspace_id = user_workspace.workspace_id.to_string();\n let members =\n get_workspace_members(&workspace_id, access_token, appflowy_cloud_base_url).await?;\n let total_blob_size =\n get_user_workspace_blob_usage(&workspace_id, access_token, appflowy_cloud_base_url)\n .await\n .map(|u| human_bytes::human_bytes(u.consumed_capacity as f64))\n .unwrap_or_else(|err| {\n tracing::error!(\"Error getting user workspace blob usage: {:?}\", err);\n \"0\".to_owned()\n });\n let total_doc_size = {\n get_user_workspace_doc_usage(&workspace_id, access_token, appflowy_cloud_base_url)\n .await\n .map(|u| human_bytes::human_bytes(u.total_document_size as f64))\n .unwrap_or_else(|err| {\n tracing::error!(\"Error getting user workspace doc usage: {:?}\", err);\n \"0\".to_owned()\n })\n };\n\n workspace_usages.push(WorkspaceUsageLimits {\n name: user_workspace.workspace_name,\n member_count: members.len(),\n total_doc_size,\n total_blob_size,\n });\n }\n\n Ok(workspace_usages)\n}\n\npub async fn get_workspace_members(\n workspace_id: &str,\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\n \"{}/api/workspace/{}/member\",\n appflowy_cloud_base_url, workspace_id\n ))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\npub async fn get_pending_workspace_invitations(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\n \"{}/api/workspace/invite?status=Pending\",\n appflowy_cloud_base_url\n ))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\npub async fn get_accepted_workspace_invitations(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result, Error> {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\n \"{}/api/workspace/invite?status=Accepted\",\n appflowy_cloud_base_url\n ))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\nasync fn get_user_workspace_blob_usage(\n workspace_id: &str,\n access_token: &str,\n appflowy_cloud_gateway_base_url: &str,\n) -> Result {\n let http_client = reqwest::Client::new();\n let resp = http_client\n .get(format!(\n \"{}/api/file_storage/{}/usage\",\n appflowy_cloud_gateway_base_url, workspace_id\n ))\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\nasync fn get_user_workspace_doc_usage(\n workspace_id: &str,\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result {\n let http_client = reqwest::Client::new();\n let url = format!(\n \"{}/api/workspace/{}/usage\",\n appflowy_cloud_base_url, workspace_id\n );\n let resp = http_client\n .get(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n\n from_json_response(resp).await\n}\n\npub async fn get_user_profile(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result {\n let http_client = reqwest::Client::new();\n let url = format!(\"{}/api/user/profile\", appflowy_cloud_base_url);\n let resp = http_client\n .get(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n from_json_response(resp).await\n}\n\npub async fn invite_user_to_workspace(\n access_token: &str,\n workspace_id: &str,\n user_email: &str,\n appflowy_cloud_base_url: &str,\n) -> Result<(), Error> {\n let invi = vec![WorkspaceMemberInvitation {\n email: user_email.to_string(),\n role: AFRole::Member,\n skip_email_send: true,\n ..Default::default()\n }];\n\n let http_client = reqwest::Client::new();\n let url = format!(\n \"{}/api/workspace/{}/invite\",\n appflowy_cloud_base_url, workspace_id\n );\n let resp = http_client\n .post(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .json(&invi)\n .send()\n .await?;\n\n check_response(resp).await\n}\n\npub async fn leave_workspace(\n access_token: &str,\n workspace_id: &str,\n appflowy_cloud_base_url: &str,\n) -> Result<(), Error> {\n let http_client = reqwest::Client::new();\n let url = format!(\n \"{}/api/workspace/{}/leave\",\n appflowy_cloud_base_url, workspace_id\n );\n let resp = http_client\n .post(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .json(&())\n .send()\n .await?;\n\n check_response(resp).await\n}\n\npub async fn accept_workspace_invitation(\n access_token: &str,\n invite_id: &str,\n appflowy_cloud_base_url: &str,\n) -> Result<(), Error> {\n let http_client = reqwest::Client::new();\n let url = format!(\n \"{}/api/workspace/accept-invite/{}\",\n appflowy_cloud_base_url, invite_id\n );\n let resp = http_client\n .post(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .json(&())\n .send()\n .await?;\n\n check_response(resp).await\n}\n\npub async fn verify_token_cloud(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result<(), Error> {\n let http_client = reqwest::Client::new();\n let url = format!(\n \"{}/api/user/verify/{}\",\n appflowy_cloud_base_url, access_token\n );\n let resp = http_client\n .get(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n let _: SignInTokenResponse = from_json_response(resp).await?;\n Ok(())\n}\n\npub async fn delete_current_user(\n access_token: &str,\n appflowy_cloud_base_url: &str,\n) -> Result<(), Error> {\n let http_client = reqwest::Client::new();\n let url = format!(\"{}/api/user\", appflowy_cloud_base_url);\n let resp = http_client\n .delete(url)\n .header(\"Authorization\", format!(\"Bearer {}\", access_token))\n .send()\n .await?;\n check_response(resp).await?;\n Ok(())\n}\n" }, { "path": "admin_frontend/src/ext/entities.rs", "content": "use serde::{Deserialize, Serialize};\nuse uuid::Uuid;\n\n#[derive(Debug, Deserialize)]\n#[allow(dead_code)]\npub struct JsonResponse {\n pub code: u16,\n pub data: T,\n}\n\n#[derive(Deserialize)]\npub struct UserUsageLimit {\n pub workspace_count: i64,\n}\n\n#[derive(Serialize)]\npub struct WorkspaceUsageLimits {\n pub name: String,\n pub member_count: usize,\n pub total_doc_size: String,\n pub total_blob_size: String,\n}\n\n#[derive(Deserialize)]\n#[allow(dead_code)]\npub struct WorkspaceMember {\n pub name: String,\n pub email: String,\n pub role: String,\n}\n\n#[derive(Deserialize, Serialize)]\npub struct WorkspaceBlobUsage {\n pub consumed_capacity: u64,\n}\n\n#[derive(Deserialize)]\npub struct WorkspaceDocUsage {\n pub total_document_size: i64,\n}\n\n#[derive(Deserialize)]\n#[allow(dead_code)]\npub struct UserProfile {\n pub uid: i64,\n pub uuid: Uuid,\n pub email: Option,\n pub password: Option,\n pub name: Option,\n pub metadata: Option,\n pub encryption_sign: Option,\n pub latest_workspace_id: Uuid,\n pub updated_at: i64,\n}\n" }, { "path": "admin_frontend/src/ext/error.rs", "content": "use axum::response::{IntoResponse, Response};\nuse shared_entity::response::AppResponseError;\n\n#[derive(Debug)]\n#[allow(dead_code)]\npub enum Error {\n NotOk(u16, String), // HTTP status code, payload\n Reqwest(reqwest::Error),\n AppFlowyCloud(AppResponseError),\n Unhandled(String),\n}\n\nimpl From for Error {\n fn from(err: reqwest::Error) -> Self {\n Error::Reqwest(err)\n }\n}\n\nimpl IntoResponse for Error {\n fn into_response(self) -> Response {\n match self {\n Error::NotOk(status_code, payload) => Response::builder()\n .status(status_code)\n .body(payload.into())\n .unwrap(),\n err => Response::builder()\n .status(500)\n .body(format!(\"Unhandled error: {:?}\", err).into())\n .unwrap(),\n }\n }\n}\n" }, { "path": "admin_frontend/src/ext/mod.rs", "content": "use shared_entity::response::{AppResponseError, ErrorCode};\n\nuse crate::ext::entities::JsonResponse;\n\npub mod api;\npub mod entities;\npub mod error;\n\nasync fn from_json_response(resp: reqwest::Response) -> Result\nwhere\n T: serde::de::DeserializeOwned,\n{\n if !resp.status().is_success() {\n let status = resp.status();\n let payload = resp.text().await?;\n return Err(error::Error::NotOk(status.as_u16(), payload));\n }\n\n let payload = resp.text().await?;\n match serde_json::from_str::>(&payload) {\n Ok(data) => Ok(data.data),\n Err(_) => match serde_json::from_str::(&payload) {\n Ok(af_cloud_err) => Err(error::Error::AppFlowyCloud(af_cloud_err)),\n Err(err) => Err(error::Error::Unhandled(format!(\n \"Failed to parse JSON response: {:?}, Payload: {}\",\n err, payload\n ))),\n },\n }\n}\n\nasync fn check_response(resp: reqwest::Response) -> Result<(), error::Error> {\n let status = resp.status();\n let payload = resp.text().await?;\n\n if !status.is_success() {\n return Err(error::Error::NotOk(status.as_u16(), payload));\n }\n\n if let Ok(cloud_err) = serde_json::from_str::(&payload) {\n if cloud_err.code == ErrorCode::Ok {\n return Ok(());\n } else {\n return Err(error::Error::AppFlowyCloud(cloud_err));\n }\n };\n\n Ok(())\n}\n" }, { "path": "admin_frontend/src/lib.rs", "content": "pub mod config;\npub mod models;\npub mod session;\n" }, { "path": "admin_frontend/src/main.rs", "content": "mod askama_entities;\nmod config;\nmod error;\nmod ext;\nmod models;\nmod response;\nmod session;\nmod templates;\nmod web_api;\nmod web_app;\n\nuse axum::{response::Redirect, routing::get, Router};\nuse models::AppState;\nuse tokio::net::TcpListener;\nuse tower_http::services::ServeDir;\nuse tracing::info;\n\nuse crate::config::Config;\n\n#[tokio::main]\nasync fn main() {\n // load from .env\n dotenvy::dotenv().ok();\n\n // set up tracing\n tracing_subscriber::fmt()\n .json()\n .with_env_filter(tracing_subscriber::EnvFilter::from_default_env())\n .with_line_number(true)\n .init();\n\n let config = Config::from_env().unwrap();\n info!(\"config loaded: {:?}\", &config);\n\n let gotrue_client = gotrue::api::Client::new(reqwest::Client::new(), &config.gotrue_url);\n gotrue_client\n .health()\n .await\n .expect(\"gotrue health check failed\");\n info!(\"Gotrue client initialized.\");\n\n let redis_client = redis::Client::open(config.redis_url.clone())\n .expect(\"failed to create redis client\")\n .get_connection_manager()\n .await\n .expect(\"failed to get redis connection manager\");\n info!(\"Redis client initialized.\");\n\n let session_store = session::SessionStorage::new(redis_client);\n\n let address = format!(\"{}:{}\", config.host, config.port);\n let path_prefix = config.path_prefix.clone();\n let state = AppState {\n appflowy_cloud_url: config.appflowy_cloud_url.clone(),\n gotrue_client,\n session_store,\n config,\n };\n\n let web_app_router = web_app::router(state.clone()).with_state(state.clone());\n let web_api_router = web_api::router().with_state(state.clone());\n\n let favicon_redirect_url = state.prepend_with_path_prefix(\"/assets/favicon.ico\");\n let base_path_redirect_url = state.prepend_with_path_prefix(\"/web\");\n let base_app = Router::new()\n .route(\n \"/favicon.ico\",\n get(|| async {\n let favicon_redirect_url = favicon_redirect_url;\n Redirect::permanent(&favicon_redirect_url)\n }),\n )\n .route(\n \"/\",\n get(|| async {\n let base_path_redirect_url = base_path_redirect_url;\n Redirect::permanent(&base_path_redirect_url)\n }),\n )\n .nest_service(\"/web\", web_app_router)\n .nest_service(\"/web-api\", web_api_router)\n .nest_service(\"/assets\", ServeDir::new(\"assets\"));\n let app = if path_prefix.is_empty() {\n base_app\n } else {\n Router::new().nest(&path_prefix, base_app)\n };\n\n let listener = TcpListener::bind(address)\n .await\n .expect(\"failed to bind to port\");\n info!(\"listening on: {:?}\", listener);\n axum::serve(listener, app)\n .await\n .expect(\"failed to run server\");\n}\n" }, { "path": "admin_frontend/src/models.rs", "content": "use serde::{Deserialize, Serialize};\n\nuse crate::{config::Config, session};\n\n#[derive(Clone)]\npub struct AppState {\n pub appflowy_cloud_url: String,\n pub gotrue_client: gotrue::api::Client,\n pub session_store: session::SessionStorage,\n pub config: Config,\n}\n\nimpl AppState {\n pub fn prepend_with_path_prefix(&self, path: &str) -> String {\n format!(\"{}{}\", self.config.path_prefix, path)\n }\n}\n\n#[derive(Serialize, Deserialize)]\npub struct WebApiLoginRequest {\n pub email: String,\n pub password: String,\n pub redirect_to: Option,\n}\n\n#[derive(Deserialize)]\npub struct WebApiPutUserRequest {\n pub password: String,\n}\n\n#[derive(Deserialize)]\npub struct WebApiChangePasswordRequest {\n pub new_password: String,\n pub confirm_password: String,\n}\n\n#[derive(Deserialize)]\npub struct WebApiAdminCreateUserRequest {\n pub email: String,\n pub password: String,\n pub require_email_verification: bool,\n}\n\n#[derive(Deserialize)]\npub struct WebApiInviteUserRequest {\n pub email: String,\n}\n\n#[derive(Deserialize)]\npub struct WebApiCreateSSOProviderRequest {\n #[serde(rename = \"type\")]\n pub type_: String,\n pub metadata_url: String,\n}\n\n#[derive(Deserialize)]\npub struct WebAppOAuthLoginRequest {\n // Use for Login\n pub refresh_token: Option,\n\n // Use actions (with params) after login\n pub action: Option,\n\n // Workspace Invitation\n pub workspace_invitation_id: Option,\n pub workspace_name: Option,\n pub workspace_icon: Option,\n pub user_name: Option,\n pub user_icon: Option,\n pub workspace_member_count: Option,\n\n // Redirect\n pub redirect_to: Option,\n\n // Errors\n pub error: Option,\n pub error_code: Option,\n pub error_description: Option,\n}\n\n#[derive(Deserialize)]\n#[serde(rename_all = \"snake_case\")]\npub enum OAuthLoginAction {\n AcceptWorkspaceInvite,\n}\n\n#[derive(Debug, Serialize, Deserialize)]\npub struct OAuthRedirect {\n pub client_id: String,\n pub state: String,\n pub redirect_uri: String,\n pub response_type: String,\n // pub scope: Option,\n pub code_challenge: Option,\n pub code_challenge_method: Option,\n}\n\n#[derive(Debug, Serialize, Deserialize, Default)]\npub struct OAuthRedirectToken {\n pub code: String,\n pub client_id: Option,\n pub client_secret: Option,\n pub grant_type: String,\n pub redirect_uri: Option,\n pub code_verifier: Option,\n}\n\n#[derive(Debug, Deserialize)]\npub struct LoginParams {\n pub redirect_to: Option,\n}\n" }, { "path": "admin_frontend/src/response.rs", "content": "use std::borrow::Cow;\n\nuse axum::{response::IntoResponse, Json};\n\n#[derive(serde::Serialize)]\npub struct WebApiResponse\nwhere\n T: serde::Serialize,\n{\n pub code: i16,\n pub message: Cow<'static, str>,\n pub data: T,\n}\n\nimpl WebApiResponse\nwhere\n T: serde::Serialize,\n{\n pub fn new(message: Cow<'static, str>, data: T) -> Self {\n Self {\n code: 0,\n message,\n data,\n }\n }\n}\n\nimpl IntoResponse for WebApiResponse\nwhere\n T: serde::Serialize,\n{\n fn into_response(self) -> axum::response::Response {\n Json(self).into_response()\n }\n}\n\nimpl From for WebApiResponse\nwhere\n T: serde::Serialize,\n{\n fn from(data: T) -> Self {\n Self::new(\"success\".into(), data)\n }\n}\n\nimpl WebApiResponse<()> {\n pub fn from_str(message: Cow<'static, str>) -> Self {\n Self::new(message, ())\n }\n}\n" }, { "path": "admin_frontend/src/session.rs", "content": "use crate::models::AppState;\nuse std::time::{SystemTime, UNIX_EPOCH};\n\nuse axum::{\n async_trait,\n extract::{FromRequestParts, OriginalUri},\n http::request::Parts,\n response::{IntoResponse, Redirect},\n};\nuse axum_extra::extract::{cookie::Cookie, CookieJar};\nuse gotrue::grant::{Grant, RefreshTokenGrant};\nuse gotrue_entity::dto::GotrueTokenResponse;\nuse jwt::{Claims, Header};\nuse redis::{aio::ConnectionManager, AsyncCommands, FromRedisValue, ToRedisArgs};\nuse serde::{de::DeserializeOwned, Deserialize, Serialize};\n\nstatic SESSION_EXPIRATION: usize = 60 * 60 * 24; // 1 day\n\n#[derive(Clone)]\npub struct SessionStorage {\n redis_client: ConnectionManager,\n}\n\nfn session_id_key(session_id: &str) -> String {\n format!(\"web::session::{}\", session_id)\n}\n\nfn code_session_key(code: &str) -> String {\n format!(\"web::session::code::{}\", code)\n}\n\nimpl SessionStorage {\n pub fn new(redis_client: ConnectionManager) -> Self {\n Self { redis_client }\n }\n\n pub async fn get_user_session(\n &self,\n session_id: &str,\n ) -> Result, redis::RedisError> {\n let key = session_id_key(session_id);\n let user_session_optional: UserSessionOptional = self.redis_client.clone().get(&key).await?;\n Ok(user_session_optional.0)\n }\n\n pub async fn get_code_session(\n &self,\n code: &str,\n ) -> Result, redis::RedisError> {\n let key = code_session_key(code);\n let code_session_optional: CodeSessionOptional = self.redis_client.clone().get(&key).await?;\n Ok(code_session_optional.0)\n }\n\n pub async fn put_user_session(&self, user_session: &UserSession) -> redis::RedisResult<()> {\n let key = session_id_key(&user_session.session_id);\n self\n .redis_client\n .clone()\n .set_options(\n key,\n user_session,\n redis::SetOptions::default().with_expiration(redis::SetExpiry::EX(SESSION_EXPIRATION)),\n )\n .await\n }\n\n pub async fn del_user_session(&self, session_id: &str) -> redis::RedisResult<()> {\n let key = session_id_key(session_id);\n let res = self.redis_client.clone().del::<_, i64>(key).await?;\n tracing::info!(\"del user session: {} res: {}\", session_id, res);\n Ok(())\n }\n\n pub async fn put_code_session(\n &self,\n code: &str,\n code_session: &CodeSession,\n ) -> redis::RedisResult<()> {\n let key = code_session_key(code);\n self\n .redis_client\n .clone()\n .set_options(\n key,\n code_session,\n redis::SetOptions::default().with_expiration(redis::SetExpiry::EX(60 * 5)), // code is valid for 5 minutes\n )\n .await\n }\n}\n\n#[derive(Debug, Serialize, Deserialize)]\npub struct CodeSession {\n pub session_id: String,\n pub code_challenge: Option,\n pub code_challenge_method: Option,\n}\nstruct CodeSessionOptional(Option);\n\nimpl ToRedisArgs for CodeSession {\n fn write_redis_args(&self, out: &mut W)\n where\n W: ?Sized + redis::RedisWrite,\n {\n let s = serde_json::to_string(self).unwrap();\n out.write_arg(s.as_bytes());\n }\n}\n\nimpl FromRedisValue for CodeSessionOptional {\n fn from_redis_value(v: &redis::Value) -> redis::RedisResult {\n let bytes = expect_redis_value_data(v)?;\n match bytes {\n Some(bytes) => {\n let session = expect_redis_json_bytes(bytes)?;\n Ok(CodeSessionOptional(Some(session)))\n },\n None => Ok(CodeSessionOptional(None)),\n }\n }\n}\n\n#[derive(Debug, Serialize, Deserialize)]\npub struct UserSession {\n pub session_id: String,\n pub token: GotrueTokenResponse,\n}\nstruct UserSessionOptional(Option);\n\n#[async_trait]\nimpl FromRequestParts for UserSession {\n type Rejection = axum::response::Response;\n\n async fn from_request_parts(\n parts: &mut Parts,\n state: &AppState,\n ) -> Result {\n let jar = match CookieJar::from_request_parts(parts, state).await {\n Ok(jar) => jar,\n Err(err) => {\n tracing::error!(\"failed to get cookie jar, error: {}\", err);\n let redirect_url = state.prepend_with_path_prefix(\"/web/login\");\n return Err(Redirect::to(&redirect_url).into_response());\n },\n };\n\n if let Some(session) =\n get_session_from_store(&jar, &state.session_store, &state.gotrue_client).await\n {\n return Ok(session);\n }\n\n let original_url = parts\n .extensions\n .get::()\n .map(|uri| urlencoding::encode(&uri.to_string()).to_string());\n\n match original_url {\n Some(url) => {\n let redirect_url =\n state.prepend_with_path_prefix(&format!(\"/web/login-v2?redirect_to={}\", url));\n Err(Redirect::to(&redirect_url).into_response())\n },\n None => {\n let redirect_url = state.prepend_with_path_prefix(\"/web/login\");\n Err(Redirect::to(&redirect_url).into_response())\n },\n }\n }\n}\n\nasync fn get_session_from_store(\n cookie_jar: &CookieJar,\n session_store: &SessionStorage,\n gotrue_client: &gotrue::api::Client,\n) -> Option {\n let session_id = match cookie_jar.get(\"session_id\") {\n Some(cookie) => cookie.value(),\n None => {\n tracing::info!(\"no session_id cookie found\");\n return None;\n },\n };\n\n let mut session = session_store\n .get_user_session(session_id)\n .await\n .unwrap_or_else(|err| {\n tracing::error!(\"failed to get session from store: {}\", err);\n None\n })?;\n\n if has_expired(session.token.access_token.as_str()) {\n // Get new pair of access token and refresh token\n let refresh_token = session.token.refresh_token;\n let new_token = match gotrue_client\n .clone()\n .token(&Grant::RefreshToken(RefreshTokenGrant { refresh_token }))\n .await\n {\n Ok(token) => token,\n Err(err) => {\n tracing::warn!(\"failed to refresh token: {}\", err);\n return None;\n },\n };\n\n session.token.access_token = new_token.access_token;\n session.token.refresh_token = new_token.refresh_token;\n\n // Update session in redis\n session_store\n .put_user_session(&session)\n .await\n .unwrap_or_else(|err| tracing::error!(\"failed to update session: {}\", err));\n }\n\n Some(session)\n}\n\nfn has_expired(access_token: &str) -> bool {\n match get_session_expiration(access_token) {\n Some(expiration_seconds) => {\n let now = SystemTime::now()\n .duration_since(UNIX_EPOCH)\n .expect(\"Time went backwards\")\n .as_secs();\n now > expiration_seconds\n },\n None => false,\n }\n}\n\nfn get_session_expiration(access_token: &str) -> Option {\n // no need to verify, let the appflowy cloud server do it\n // in that way, frontend server does not need to know the secret\n match jwt::Token::::parse_unverified(access_token) {\n Ok(unverified) => unverified.claims().registered.expiration,\n Err(e) => {\n tracing::error!(\"failed to parse unverified token: {}\", e);\n None\n },\n }\n}\n\nimpl ToRedisArgs for UserSession {\n fn write_redis_args(&self, out: &mut W)\n where\n W: ?Sized + redis::RedisWrite,\n {\n let s = serde_json::to_string(self).unwrap();\n out.write_arg(s.as_bytes());\n }\n}\n\nimpl FromRedisValue for UserSessionOptional {\n fn from_redis_value(v: &redis::Value) -> redis::RedisResult {\n let bytes = expect_redis_value_data(v)?;\n match bytes {\n Some(bytes) => {\n let session = expect_redis_json_bytes(bytes)?;\n Ok(UserSessionOptional(Some(session)))\n },\n None => Ok(UserSessionOptional(None)),\n }\n }\n}\n\nfn expect_redis_json_bytes(v: &[u8]) -> redis::RedisResult\nwhere\n T: DeserializeOwned,\n{\n let res: Result = serde_json::from_slice(v);\n match res {\n Ok(v) => Ok(v),\n Err(e) => Err(redis::RedisError::from((\n redis::ErrorKind::TypeError,\n \"redis data json deserialization failed!\",\n e.to_string(),\n ))),\n }\n}\n\nfn expect_redis_value_data(v: &redis::Value) -> redis::RedisResult> {\n match v {\n redis::Value::Data(ref bytes) => Ok(Some(bytes)),\n redis::Value::Nil => Ok(None),\n x => Err(redis::RedisError::from((\n redis::ErrorKind::TypeError,\n \"unexpected value from redis\",\n format!(\"redis value is not data: {:?}\", x),\n ))),\n }\n}\n\npub fn new_session_cookie(id: uuid::Uuid) -> Cookie<'static> {\n let mut cookie = Cookie::new(\"session_id\", id.to_string());\n cookie.set_path(\"/\");\n cookie\n}\n" }, { "path": "admin_frontend/src/templates.rs", "content": "use askama::Template;\nuse database_entity::dto::{AFWorkspace, AFWorkspaceInvitation};\nuse gotrue_entity::{dto::User, sso::SSOProvider};\n\nuse crate::{askama_entities::WorkspaceWithMembers, ext::entities::WorkspaceUsageLimits};\n\n#[derive(Template)]\n#[template(path = \"pages/redirect.html\")]\npub struct Redirect {\n pub redirect_url: String,\n}\n\n#[derive(Template)]\n#[template(path = \"pages/open_appflowy_or_download.html\")]\npub struct OpenAppFlowyOrDownload {}\n\n#[derive(Template)]\n#[template(path = \"pages/login_callback.html\")]\npub struct LoginCallback {}\n\n#[derive(Template)]\n#[template(path = \"pages/payment_success_redirect.html\")]\npub struct PaymentSuccessRedirect {}\n\n#[derive(Template)]\n#[template(path = \"components/user_usage.html\")]\npub struct UserUsage {\n pub workspace_count: usize,\n pub workspace_limit: String,\n}\n\n// ./../templates/components/workspace_usage.html\n#[derive(Template)]\n#[template(path = \"components/workspace_usage.html\")]\npub struct WorkspaceUsageList {\n pub workspace_usages: Vec,\n}\n\n#[derive(Template)]\n#[template(path = \"components/admin_sso_detail.html\")]\npub struct SsoDetail {\n pub sso_provider: SSOProvider,\n pub mapping_json: String,\n}\n\n#[derive(Template)]\n#[template(path = \"components/admin_sso_create.html\")]\npub struct SsoCreate;\n\n#[derive(Template)]\n#[template(path = \"components/admin_sso_list.html\")]\npub struct SsoList {\n pub sso_providers: Vec,\n}\n\n#[derive(Template)]\n#[template(path = \"components/change_password.html\")]\npub struct ChangePassword;\n\n#[derive(Template)]\n#[template(path = \"pages/login.html\")]\npub struct Login<'a> {\n pub path_prefix: &'a str,\n pub oauth_providers: &'a [&'a str],\n pub redirect_to: Option<&'a str>,\n pub oauth_redirect_to: &'a str,\n}\n\n#[derive(Template)]\n#[template(path = \"pages/login_v2.html\")]\npub struct LoginV2<'a> {\n pub oauth_providers: &'a [&'a str],\n pub redirect_to: Option<&'a str>,\n pub oauth_redirect_to: &'a str,\n pub path_prefix: &'a str,\n}\n\n#[derive(Template)]\n#[template(path = \"pages/home.html\")]\npub struct Home<'a> {\n pub user: &'a User,\n pub is_admin: bool,\n pub path_prefix: &'a str,\n}\n\n#[derive(Template)]\n#[template(path = \"components/create_user.html\")]\npub struct CreateUser;\n\n#[derive(Template)]\n#[template(path = \"components/invite.html\")]\npub struct Invite {\n pub shared_workspaces: Vec,\n pub owned_workspaces: Vec,\n pub pending_workspace_invitations: Vec,\n}\n\n#[derive(Template)]\n#[template(path = \"components/shared_workspaces.html\")]\npub struct SharedWorkspaces {\n pub shared_workspaces: Vec,\n}\n\n#[derive(Template)]\n#[template(path = \"components/admin_navigate.html\")]\npub struct AdminNavigate;\n\n#[derive(Template)]\n#[template(path = \"components/navigate.html\")]\npub struct Navigate;\n\n#[derive(Template)]\n#[template(path = \"pages/admin_home.html\")]\npub struct AdminHome<'a> {\n pub path_prefix: &'a str,\n pub user: &'a User,\n}\n\n#[derive(Template)]\n#[template(path = \"components/admin_users.html\")]\npub struct AdminUsers<'a> {\n pub users: &'a [gotrue_entity::dto::User],\n}\n\n#[derive(Template)]\n#[template(path = \"components/user_details.html\")]\npub struct UserDetails<'a> {\n pub user: &'a gotrue_entity::dto::User,\n}\n\n#[derive(Template)]\n#[template(path = \"components/admin_user_details.html\")]\npub struct AdminUserDetails<'a> {\n pub user: &'a gotrue_entity::dto::User,\n}\n\n// Any filter defined in the module `filters` is accessible in your template.\nmod filters {\n pub fn default(\n input: &Option,\n default_val: &str,\n ) -> ::askama::Result {\n Ok(\n input\n .as_ref()\n .map(|i| i.to_string())\n .unwrap_or_else(|| default_val.to_string()),\n )\n }\n}\n" }, { "path": "admin_frontend/src/web_api.rs", "content": "use crate::error::WebApiError;\nuse crate::ext::api::{\n accept_workspace_invitation, delete_current_user, invite_user_to_workspace, leave_workspace,\n verify_token_cloud,\n};\nuse crate::models::{AppState, WebApiLoginRequest};\nuse crate::models::{\n LoginParams, OAuthRedirect, OAuthRedirectToken, WebApiAdminCreateUserRequest,\n WebApiChangePasswordRequest, WebApiCreateSSOProviderRequest, WebApiInviteUserRequest,\n WebApiPutUserRequest,\n};\nuse crate::response::WebApiResponse;\nuse crate::session::{self, new_session_cookie, CodeSession, UserSession};\nuse axum::extract::{Path, Query};\nuse axum::http::{status, HeaderMap, StatusCode};\nuse axum::response::{IntoResponse, Redirect, Result};\nuse axum::routing::{delete, get};\nuse axum::Form;\nuse axum::{extract::State, routing::post, Router};\nuse axum_extra::extract::cookie::Cookie;\nuse axum_extra::extract::CookieJar;\nuse base64::engine::Engine;\nuse base64::prelude::BASE64_STANDARD_NO_PAD;\nuse gotrue::params::{\n AdminDeleteUserParams, AdminUserParams, CreateSSOProviderParams, GenerateLinkParams,\n MagicLinkParams,\n};\nuse gotrue_entity::dto::{GotrueTokenResponse, SignUpResponse, UpdateGotrueUserParams, User};\nuse rand::distributions::Alphanumeric;\nuse rand::Rng;\nuse sha2::Digest;\nuse tracing::info;\n\npub fn router() -> Router {\n Router::new()\n .route(\"/signin\", post(sign_in_handler))\n .route(\"/oauth-redirect\", get(oauth_redirect_handler))\n .route(\"/oauth-redirect/token\", get(oauth_redirect_token_handler))\n .route(\"/signup\", post(sign_up_handler))\n .route(\"/login-refresh/:refresh_token\", post(login_refresh_handler))\n .route(\"/logout\", post(logout_handler))\n\n // user\n .route(\"/change-password\", post(change_password_handler))\n .route(\"/oauth_login/:provider\", post(post_oauth_login_handler))\n .route(\"/invite\", post(invite_handler))\n .route(\"/workspace/:workspace_id/invite\", post(workspace_invite_handler))\n .route(\"/workspace/:workspace_id/leave\", post(leave_workspace_handler))\n .route(\"/invite/:invite_id/accept\", post(invite_accept_handler))\n .route(\"/open_app\", post(open_app_handler))\n .route(\"/delete-account\", delete(delete_account_handler))\n\n // admin\n .route(\"/admin/user\", post(admin_add_user_handler))\n .route(\n \"/admin/user/:user_uuid\",\n delete(admin_delete_user_handler).put(admin_update_user_handler),\n )\n .route(\n \"/admin/user/:email/generate-link\",\n post(post_user_generate_link_handler),\n )\n .route(\"/admin/sso\", post(admin_create_sso_handler))\n .route(\"/admin/sso/:provider_id\", delete(admin_delete_sso_handler))\n}\n\nasync fn admin_delete_sso_handler(\n State(state): State,\n session: UserSession,\n Path(provider_id): Path,\n) -> Result, WebApiError<'static>> {\n let _ = state\n .gotrue_client\n .admin_delete_sso_provider(&session.token.access_token, &provider_id)\n .await?;\n\n Ok(WebApiResponse::<()>::from_str(\"SSO Deleted\".into()))\n}\n\nasync fn admin_create_sso_handler(\n State(state): State,\n session: UserSession,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n let provider_params = CreateSSOProviderParams {\n type_: param.type_,\n metadata_url: param.metadata_url,\n ..Default::default()\n };\n\n let _ = state\n .gotrue_client\n .admin_create_sso_providers(&session.token.access_token, &provider_params)\n .await?;\n\n Ok(WebApiResponse::<()>::from_str(\"SSO Added\".into()))\n}\n\n/// Generates a URL to facilitate login redirection to the AppFlowy app from a web browser.\n///\n/// This function creates a custom URL scheme that can be used in a web browser to open the\n/// AppFlowy app and automatically handle user login based on the provided `UserSession`.\n///\n/// # Returns\n/// A `Result` containing `HeaderMap` for HTTP redirection if successful, or `WebApiError` in case of failure.\n///\n/// # Example URL Format\n/// `appflowy-flutter://login-callback#access_token=...&expires_at=...&expires_in=...&refresh_token=...&token_type=...`\n///\n/// The URL includes access token information and other relevant session details.\n///\n/// # Usage\n/// The client application should implement handling for this URL format, typically through the\n/// `sign_in_with_url` method in the `client-api` crate. See [client_api::Client::sign_in_with_url] for more details.\n///\nasync fn open_app_handler(\n session: UserSession,\n) -> Result> {\n let app_sign_in_url = format!(\n \"appflowy-flutter://login-callback#access_token={}&expires_at={}&expires_in={}&refresh_token={}&token_type={}\",\n session.token.access_token,\n session.token.expires_at,\n session.token.expires_in,\n session.token.refresh_token,\n session.token.token_type,\n );\n Ok(htmx_redirect(&app_sign_in_url).into_response())\n}\n\n/// Delete the user account and all associated data.\nasync fn delete_account_handler(\n state: State,\n session: UserSession,\n) -> Result> {\n delete_current_user(&session.token.access_token, &state.appflowy_cloud_url).await?;\n let redirect_url = state.prepend_with_path_prefix(\"/web/login\");\n Ok(Redirect::to(&redirect_url).into_response())\n}\n\n// Invite another user, this will trigger email sending\n// to the target user\nasync fn invite_handler(\n State(state): State,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n let magic_link_redirect = if state.config.path_prefix.is_empty() {\n \"/\".to_owned()\n } else {\n state.config.path_prefix.clone()\n };\n state\n .gotrue_client\n .magic_link(\n &MagicLinkParams {\n email: param.email,\n ..Default::default()\n },\n Some(magic_link_redirect),\n )\n .await?;\n Ok(WebApiResponse::<()>::from_str(\"Invitation sent\".into()))\n}\n\nasync fn workspace_invite_handler(\n State(state): State,\n session: UserSession,\n Path(workspace_id): Path,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n invite_user_to_workspace(\n &session.token.access_token,\n &workspace_id,\n ¶m.email,\n &state.appflowy_cloud_url,\n )\n .await?;\n\n Ok(WebApiResponse::<()>::from_str(\"Invitation sent\".into()))\n}\n\nasync fn leave_workspace_handler(\n State(state): State,\n session: UserSession,\n Path(workspace_id): Path,\n) -> Result, WebApiError<'static>> {\n leave_workspace(\n &session.token.access_token,\n &workspace_id,\n &state.appflowy_cloud_url,\n )\n .await?;\n\n Ok(WebApiResponse::<()>::from_str(\"Left workspace\".into()))\n}\n\nasync fn invite_accept_handler(\n State(state): State,\n session: UserSession,\n Path(invite_id): Path,\n) -> Result> {\n accept_workspace_invitation(\n &session.token.access_token,\n &invite_id,\n &state.appflowy_cloud_url,\n )\n .await?;\n\n Ok(htmx_trigger(\"workspaceInvitationAccepted\"))\n}\n\nasync fn change_password_handler(\n State(state): State,\n session: UserSession,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n if param.new_password != param.confirm_password {\n return Err(WebApiError::new(\n status::StatusCode::BAD_REQUEST,\n \"passwords do not match\",\n ));\n }\n let _user = state\n .gotrue_client\n .update_user(\n &session.token.access_token,\n &UpdateGotrueUserParams {\n password: Some(param.new_password),\n ..Default::default()\n },\n )\n .await?;\n Ok(WebApiResponse::<()>::from_str(\"Password changed\".into()))\n}\n\nasync fn post_oauth_login_handler(\n header_map: HeaderMap,\n Path(provider): Path,\n) -> Result, WebApiError<'static>> {\n let base_url = get_base_url(&header_map);\n let redirect_uri = format!(\"{}/web/oauth_login_redirect\", base_url);\n\n let oauth_url = format!(\n \"{}/authorize?provider={}&redirect_uri={}\",\n base_url, &provider, redirect_uri\n );\n Ok(oauth_url.into())\n}\n\nasync fn admin_update_user_handler(\n State(state): State,\n session: UserSession,\n Path(user_uuid): Path,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n let res = state\n .gotrue_client\n .admin_update_user(\n &session.token.access_token,\n &user_uuid,\n &AdminUserParams {\n password: Some(param.password.to_owned()),\n email_confirm: true,\n ..Default::default()\n },\n )\n .await?;\n Ok(res.into())\n}\n\nasync fn post_user_generate_link_handler(\n State(state): State,\n session: UserSession,\n Path(email): Path,\n) -> Result> {\n let res = state\n .gotrue_client\n .admin_generate_link(\n &session.token.access_token,\n &GenerateLinkParams {\n email,\n ..Default::default()\n },\n )\n .await?;\n Ok(res.action_link)\n}\n\nasync fn admin_delete_user_handler(\n State(state): State,\n session: UserSession,\n Path(user_uuid): Path,\n) -> Result, WebApiError<'static>> {\n state\n .gotrue_client\n .admin_delete_user(\n &session.token.access_token,\n &user_uuid,\n &AdminDeleteUserParams {\n should_soft_delete: false,\n },\n )\n .await?;\n Ok(().into())\n}\n\nasync fn admin_add_user_handler(\n State(state): State,\n session: UserSession,\n Form(param): Form,\n) -> Result, WebApiError<'static>> {\n let add_user_params = AdminUserParams {\n email: param.email,\n password: Some(param.password),\n email_confirm: !param.require_email_verification,\n ..Default::default()\n };\n let _user = state\n .gotrue_client\n .admin_add_user(&session.token.access_token, &add_user_params)\n .await?;\n Ok(WebApiResponse::<()>::from_str(\"User created\".into()))\n}\n\nasync fn login_refresh_handler(\n State(state): State,\n jar: CookieJar,\n Path(refresh_token): Path,\n Query(login): Query,\n) -> Result> {\n let token = state\n .gotrue_client\n .token(&gotrue::grant::Grant::RefreshToken(\n gotrue::grant::RefreshTokenGrant { refresh_token },\n ))\n .await?;\n\n // Do another round of refresh_token to consume and invalidate the old one\n let token = state\n .gotrue_client\n .token(&gotrue::grant::Grant::RefreshToken(\n gotrue::grant::RefreshTokenGrant {\n refresh_token: token.refresh_token,\n },\n ))\n .await?;\n\n session_login(State(state), token, jar, login.redirect_to.as_deref()).await\n}\n\n// login and set the cookie\n// sign up if not exist\nasync fn sign_in_handler(\n State(state): State,\n jar: CookieJar,\n Form(param): Form,\n) -> Result> {\n let WebApiLoginRequest {\n email,\n password,\n redirect_to,\n } = param;\n\n if password.is_empty() {\n let res = send_magic_link(State(state), &email).await?;\n return Ok(res.into_response());\n }\n\n // Attempt to sign in with email and password\n let token = state\n .gotrue_client\n .token(&gotrue::grant::Grant::Password(\n gotrue::grant::PasswordGrant {\n email: email.to_owned(),\n password: password.to_owned(),\n },\n ))\n .await?;\n\n session_login(State(state), token, jar, redirect_to.as_deref()).await\n}\n\nasync fn oauth_redirect_handler(\n State(state): State,\n session: UserSession,\n Query(oauth_redirect): Query,\n) -> Result> {\n {\n // OAuthRedirect verification\n if oauth_redirect.client_id != state.config.oauth.client_id {\n return Err(WebApiError::new(\n StatusCode::BAD_REQUEST,\n \"invalid client_id\",\n ));\n }\n if oauth_redirect.response_type != \"code\" {\n return Err(WebApiError::new(\n StatusCode::BAD_REQUEST,\n \"invalid response_type, only 'code' is support\",\n ));\n }\n {\n // Check if the redirect_uri is in the allowable list\n let mut found = false;\n for allowable_uri in &state.config.oauth.allowable_redirect_uris {\n if oauth_redirect.redirect_uri == *allowable_uri {\n found = true;\n break;\n }\n }\n if !found {\n return Err(WebApiError::new(\n StatusCode::BAD_REQUEST,\n format!(\n \"invalid redirect_uri: {}, allowable_uris: {}\",\n oauth_redirect.redirect_uri,\n state.config.oauth.allowable_redirect_uris.join(\", \")\n ),\n ));\n }\n }\n }\n\n let code = gen_rand_alpha_num(32);\n state\n .session_store\n .put_code_session(\n &code,\n &CodeSession {\n session_id: session.session_id.clone(),\n code_challenge: oauth_redirect.code_challenge,\n code_challenge_method: oauth_redirect.code_challenge_method,\n },\n )\n .await?;\n\n let url = format!(\n \"{}?code={}&state={}\",\n oauth_redirect.redirect_uri, code, oauth_redirect.state,\n );\n let resp = Redirect::to(&url).into_response();\n Ok(resp)\n}\n\nasync fn oauth_redirect_token_handler(\n State(state): State,\n Query(token_req): Query,\n) -> Result> {\n // Check client secret (if exists)\n if let Some(server_client_secret) = state.config.oauth.client_secret {\n match token_req.client_secret {\n Some(given_client_secret) => {\n if server_client_secret != given_client_secret {\n return Err(WebApiError::new(\n StatusCode::BAD_REQUEST,\n \"invalid client_secret\",\n ));\n }\n },\n _ => {\n return Err(WebApiError::new(\n StatusCode::BAD_REQUEST,\n \"expecting client_secret\",\n ));\n },\n }\n };\n\n let code_session = state\n .session_store\n .get_code_session(&token_req.code)\n .await?\n .ok_or_else(|| WebApiError::new(StatusCode::BAD_REQUEST, \"invalid code\"))?;\n\n if let Some(code_challenge) = code_session.code_challenge {\n match code_session.code_challenge_method.as_deref() {\n Some(\"S256\") => {\n let verifier = token_req.code_verifier.ok_or_else(|| {\n WebApiError::new(status::StatusCode::BAD_REQUEST, \"missing code_verifier\")\n })?;\n\n // get code challenge based64 decoded\n let code_challenge = BASE64_STANDARD_NO_PAD\n .decode(code_challenge)\n .map_err(|err| {\n WebApiError::new(\n status::StatusCode::BAD_REQUEST,\n format!(\"failed to base64 decode code challege: {}\", err),\n )\n })?;\n\n // hash the verifier and check against the original code challenge\n let mut hasher = sha2::Sha256::new();\n hasher.update(verifier.as_bytes());\n let verifier_hashed = hasher.finalize().to_vec();\n if verifier_hashed != code_challenge {\n return Err(WebApiError::new(\n status::StatusCode::BAD_REQUEST,\n \"invalid code_verifier\",\n ));\n }\n },\n _ => {\n return Err(WebApiError::new(\n status::StatusCode::BAD_REQUEST,\n \"invalid code_challenge_method, only support S256\",\n ));\n },\n }\n }\n\n let user_session = state\n .session_store\n .get_user_session(&code_session.session_id)\n .await?\n .ok_or_else(|| WebApiError::new(StatusCode::BAD_REQUEST, \"invalid session\"))?;\n\n let resp = axum::Json::from(user_session.token);\n Ok(resp.into_response())\n}\n\nasync fn sign_up_handler(\n State(state): State,\n jar: CookieJar,\n Form(param): Form,\n) -> Result> {\n let WebApiLoginRequest {\n email,\n password,\n redirect_to,\n } = param;\n\n if password.is_empty() {\n let res = send_magic_link(State(state), &email).await?;\n return Ok(res.into_response());\n }\n\n let sign_up_res = state\n .gotrue_client\n .sign_up(&email, &password, Some(\"/\"))\n .await?;\n\n match sign_up_res {\n // when GOTRUE_MAILER_AUTOCONFIRM=true, auto sign in\n SignUpResponse::Authenticated(token) => {\n session_login(State(state), token, jar, redirect_to.as_deref()).await\n },\n SignUpResponse::NotAuthenticated(user) => {\n info!(\"user signed up and not authenticated: {:?}\", user);\n Ok(WebApiResponse::<()>::from_str(\"Email Verification Sent\".into()).into_response())\n },\n }\n}\n\nasync fn logout_handler(\n State(state): State,\n jar: CookieJar,\n) -> Result> {\n let session_id = jar\n .get(\"session_id\")\n .ok_or(WebApiError::new(\n status::StatusCode::BAD_REQUEST,\n \"no session_id cookie\",\n ))?\n .value();\n\n state.session_store.del_user_session(session_id).await?;\n let htmx_redirect_url = format!(\"{}/web/login\", state.config.path_prefix);\n Ok(\n (\n jar.remove(Cookie::from(\"session_id\")),\n htmx_redirect(&htmx_redirect_url),\n )\n .into_response(),\n )\n}\n\nfn htmx_trigger(trigger: &str) -> HeaderMap {\n let mut h = HeaderMap::new();\n h.insert(\"HX-Trigger\", trigger.parse().unwrap());\n h\n}\n\nasync fn session_login(\n State(state): State,\n token: GotrueTokenResponse,\n jar: CookieJar,\n redirect_to: Option<&str>,\n) -> Result> {\n verify_token_cloud(\n token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n\n let new_session_id = uuid::Uuid::new_v4();\n let new_session = session::UserSession {\n session_id: new_session_id.to_string(),\n token,\n };\n state.session_store.put_user_session(&new_session).await?;\n\n let decoded_redirect_to = redirect_to.and_then(|s| match urlencoding::decode(s) {\n Ok(r) => Some(r),\n Err(err) => {\n tracing::error!(\"failed to decode redirect_to: {}\", err);\n None\n },\n });\n let default_htmx_redirect_url = format!(\"{}/web/home\", state.config.path_prefix);\n Ok(\n (\n jar.add(new_session_cookie(new_session_id)),\n htmx_redirect(\n decoded_redirect_to\n .as_deref()\n .unwrap_or(&default_htmx_redirect_url),\n ),\n )\n .into_response(),\n )\n}\n\nasync fn send_magic_link(\n State(state): State,\n email: &str,\n) -> Result, WebApiError<'static>> {\n state\n .gotrue_client\n .magic_link(\n &MagicLinkParams {\n email: email.to_owned(),\n ..Default::default()\n },\n Some(format!(\"{}/web/login-callback\", state.config.path_prefix)),\n )\n .await?;\n Ok(WebApiResponse::<()>::from_str(\"Magic Link Sent\".into()))\n}\n\nfn htmx_redirect(url: &str) -> HeaderMap {\n let mut h = HeaderMap::new();\n h.insert(\"Location\", url.parse().unwrap());\n h.insert(\"HX-Redirect\", url.parse().unwrap());\n h\n}\n\nfn get_base_url(header_map: &HeaderMap) -> String {\n let scheme = get_header_value_or_default(header_map, \"x-scheme\", \"http\");\n let host = get_header_value_or_default(header_map, \"host\", \"localhost\");\n\n format!(\"{}://{}\", scheme, host)\n}\n\nfn get_header_value_or_default<'a>(\n header_map: &'a HeaderMap,\n header_name: &str,\n default: &'a str,\n) -> &'a str {\n match header_map.get(header_name) {\n Some(v) => match v.to_str() {\n Ok(v) => v,\n Err(e) => {\n tracing::error!(\"failed to get header value {}: {}, {:?}\", header_name, e, v);\n default\n },\n },\n None => default,\n }\n}\n\nfn gen_rand_alpha_num(n: usize) -> String {\n let random_string: String = rand::thread_rng()\n .sample_iter(&Alphanumeric)\n .take(n)\n .map(char::from)\n .collect();\n random_string\n}\n" }, { "path": "admin_frontend/src/web_app.rs", "content": "use crate::askama_entities::WorkspaceWithMembers;\nuse crate::error::WebAppError;\nuse crate::ext::api::{\n accept_workspace_invitation, get_accepted_workspace_invitations,\n get_pending_workspace_invitations, get_user_owned_workspaces, get_user_profile,\n get_user_workspace_limit, get_user_workspace_usages, get_user_workspaces, get_workspace_members,\n verify_token_cloud,\n};\nuse crate::models::{LoginParams, OAuthLoginAction, WebAppOAuthLoginRequest};\nuse crate::session::{self, new_session_cookie, UserSession};\nuse askama::Template;\nuse axum::extract::{Path, Query, State};\nuse axum::response::{IntoResponse, Redirect, Result};\nuse axum::{response::Html, routing::get, Router};\nuse axum_extra::extract::CookieJar;\nuse gotrue_entity::dto::User;\n\nuse crate::{templates, AppState};\n\nstatic DEFAULT_OAUTH_REDIRECT_TO_WITHOUT_PREFIX: &str = \"/web/login-callback\";\n\npub fn router(state: AppState) -> Router {\n Router::new()\n .nest_service(\"/\", page_router().with_state(state.clone()))\n .nest_service(\"/components\", component_router().with_state(state))\n}\n\nfn page_router() -> Router {\n Router::new()\n .route(\"/\", get(home_handler))\n .route(\"/login\", get(login_handler))\n .route(\"/login-v2\", get(login_v2_handler))\n .route(\"/login-callback\", get(login_callback_handler))\n .route(\"/payment-success\", get(payment_success_handler))\n .route(\"/login-callback-query\", get(login_callback_query_handler))\n .route(\n \"/open-appflowy-or-download\",\n get(open_appflowy_or_download_handler),\n )\n .route(\"/home\", get(home_handler))\n .route(\"/admin/home\", get(admin_home_handler))\n}\n\nfn component_router() -> Router {\n Router::new()\n // User actions\n .route(\"/user/navigate\", get(user_navigate_handler))\n .route(\"/user/user\", get(user_user_handler))\n .route(\"/user/change-password\", get(user_change_password_handler))\n .route(\"/user/invite\", get(user_invite_handler))\n .route(\"/user/shared-workspaces\", get(shared_workspaces_handler))\n .route(\"/user/user-usage\", get(user_usage_handler))\n .route(\"/user/workspace-usage\", get(workspace_usage_handler))\n\n // Admin actions\n .route(\"/admin/navigate\", get(admin_navigate_handler))\n .route(\"/admin/users\", get(admin_users_handler))\n .route(\"/admin/users/:user_id\", get(admin_user_details_handler))\n .route(\"/admin/users/create\", get(admin_users_create_handler))\n // SSO\n .route(\"/admin/sso\", get(admin_sso_handler))\n .route(\"/admin/sso/create\", get(admin_sso_create_handler))\n .route(\"/admin/sso/:sso_provider_id\", get(admin_sso_detail_handler))\n}\n\nasync fn open_appflowy_or_download_handler() -> Result, WebAppError> {\n render_template(templates::OpenAppFlowyOrDownload {})\n}\n\nasync fn login_callback_handler() -> Result, WebAppError> {\n render_template(templates::LoginCallback {})\n}\n\nasync fn payment_success_handler() -> Result, WebAppError> {\n render_template(templates::PaymentSuccessRedirect {})\n}\n\nasync fn login_callback_query_handler(\n State(state): State,\n session: Option,\n Query(query): Query,\n mut jar: CookieJar,\n) -> Result {\n let refresh_token = {\n match query.refresh_token {\n Some(refresh_token) => refresh_token,\n None => match session {\n Some(session) => session.token.refresh_token,\n None => match query.error {\n Some(err) => {\n tracing::error!(\n \"OAuth login error: {:?}, code: {:?}, description: {:?}\",\n err,\n query.error_code,\n query.error_description\n );\n let redirect_url = format!(\n \"https://appflowy.io/invitation/expired?workspace_name={}&workspace_icon={}&user_name={}&user_icon={}&workspace_member_count={}\",\n query.workspace_name.unwrap_or_default(),\n query.workspace_icon.unwrap_or_default(),\n query.user_name.unwrap_or_default(),\n query.user_icon.unwrap_or_default(),\n query.workspace_member_count.unwrap_or_default());\n\n let expired_html = render_template(templates::Redirect { redirect_url })?;\n return Ok(expired_html.into_response());\n },\n None => {\n return Err(WebAppError::BadRequest(\n \"refresh_token not found\".to_string(),\n ));\n },\n },\n },\n }\n };\n\n let token = state\n .gotrue_client\n .token(&gotrue::grant::Grant::RefreshToken(\n gotrue::grant::RefreshTokenGrant { refresh_token },\n ))\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n\n verify_token_cloud(\n token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n\n let new_session_id = uuid::Uuid::new_v4();\n let new_session = session::UserSession {\n session_id: new_session_id.to_string(),\n token,\n };\n state.session_store.put_user_session(&new_session).await?;\n jar = jar.add(new_session_cookie(new_session_id));\n\n match query.action {\n Some(action) => match action {\n OAuthLoginAction::AcceptWorkspaceInvite => {\n let invite_id = query\n .workspace_invitation_id\n .ok_or(WebAppError::BadRequest(\n \"workspace_invitation_id not found\".to_string(),\n ))?;\n\n {\n // If user has already accepted the invitation, redirect to open or download AppFlowy\n let accepted_invitations = get_accepted_workspace_invitations(\n &new_session.token.access_token,\n &state.appflowy_cloud_url,\n )\n .await?;\n let found = accepted_invitations\n .iter()\n .find(|w| w.invite_id.to_string() == invite_id);\n if found.is_some() {\n let open_or_dl_html = render_template(templates::OpenAppFlowyOrDownload {})?;\n return Ok((jar, open_or_dl_html).into_response());\n }\n }\n\n if let Err(err) = accept_workspace_invitation(\n &new_session.token.access_token,\n &invite_id,\n &state.appflowy_cloud_url,\n )\n .await\n {\n tracing::error!(\"accepting workspace invitation: {:?}\", err);\n let redirect_url = format!(\n \"https://appflowy.io/invitation/expired?workspace_name={}&workspace_icon={}&user_name={}&user_icon={}&workspace_member_count={}\",\n query.workspace_name.unwrap_or_default(),\n query.workspace_icon.unwrap_or_default(),\n query.user_name.unwrap_or_default(),\n query.user_icon.unwrap_or_default(),\n query.workspace_member_count.unwrap_or_default());\n let redirect_html = render_template(templates::Redirect { redirect_url })?;\n return Ok(redirect_html.into_response());\n };\n let open_or_dl_html = render_template(templates::OpenAppFlowyOrDownload {})?;\n Ok((jar, open_or_dl_html).into_response())\n },\n },\n None => match query.redirect_to {\n Some(redirect_url) => match urlencoding::decode(&redirect_url).map(String::from) {\n Ok(redirect_url) => {\n let redirect_html = render_template(templates::Redirect { redirect_url })?;\n Ok((jar, redirect_html).into_response())\n },\n Err(err) => {\n tracing::error!(\"Error decoding redirect_url: {:?}\", err);\n home_handler(State(state), Some(new_session), jar).await\n },\n },\n None => home_handler(State(state), Some(new_session), jar).await,\n },\n }\n}\n\nasync fn admin_sso_detail_handler(\n State(state): State,\n session: UserSession,\n Path(sso_provider_id): Path,\n) -> Result, WebAppError> {\n let sso_provider = state\n .gotrue_client\n .admin_get_sso_provider(&session.token.access_token, &sso_provider_id)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n\n let mapping_json =\n serde_json::to_string_pretty(&sso_provider.saml.attribute_mapping).unwrap_or(\"\".to_owned());\n\n render_template(templates::SsoDetail {\n sso_provider,\n mapping_json,\n })\n}\n\nasync fn admin_sso_create_handler() -> Result, WebAppError> {\n render_template(templates::SsoCreate)\n}\n\nasync fn admin_sso_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let sso_providers = state\n .gotrue_client\n .admin_list_sso_providers(&session.token.access_token)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?\n .items\n .unwrap_or_default();\n\n render_template(templates::SsoList { sso_providers })\n}\n\nasync fn user_navigate_handler() -> Result, WebAppError> {\n render_template(templates::Navigate)\n}\n\nasync fn admin_navigate_handler() -> Result, WebAppError> {\n render_template(templates::AdminNavigate)\n}\n\nasync fn shared_workspaces_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let user_workspaces =\n get_user_workspaces(&session.token.access_token, &state.appflowy_cloud_url).await?;\n\n let profile = get_user_profile(\n session.token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n\n let shared_workspaces = user_workspaces\n .into_iter()\n .filter(|workspace| workspace.owner_uid != profile.uid)\n .collect::>();\n\n render_template(templates::SharedWorkspaces { shared_workspaces })\n}\n\nasync fn user_invite_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let user_workspaces =\n get_user_workspaces(&session.token.access_token, &state.appflowy_cloud_url).await?;\n\n let profile = get_user_profile(\n session.token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n\n let mut shared_workspaces = Vec::new();\n let mut owned_workspaces = Vec::with_capacity(user_workspaces.len());\n\n for workspace in user_workspaces {\n if workspace.owner_uid == profile.uid {\n let members = get_workspace_members(\n workspace.workspace_id.to_string().as_str(),\n session.token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n owned_workspaces.push(WorkspaceWithMembers { workspace, members });\n } else {\n shared_workspaces.push(workspace);\n }\n }\n\n let pending_workspace_invitations = get_pending_workspace_invitations(\n session.token.access_token.as_str(),\n state.appflowy_cloud_url.as_str(),\n )\n .await?;\n\n render_template(templates::Invite {\n shared_workspaces,\n owned_workspaces,\n pending_workspace_invitations,\n })\n}\n\nasync fn user_usage_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let workspace_count =\n get_user_owned_workspaces(&session.token.access_token, &state.appflowy_cloud_url)\n .await\n .map(|workspaces| workspaces.len())\n .unwrap_or_else(|err| {\n tracing::error!(\"Error getting user workspace count: {:?}\", err);\n 0\n });\n\n let workspace_limit =\n get_user_workspace_limit(&session.token.access_token, &state.appflowy_cloud_url)\n .await\n .map(|limit| limit.workspace_count.to_string())\n .unwrap_or_else(|err| {\n tracing::warn!(\"unable to get user workspace limit: {:?}\", err);\n \"N/A\".to_owned()\n });\n\n render_template(templates::UserUsage {\n workspace_count,\n workspace_limit,\n })\n}\n\nasync fn workspace_usage_handler(\n State(app_state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let workspace_usages =\n get_user_workspace_usages(&session.token.access_token, &app_state.appflowy_cloud_url).await?;\n render_template(templates::WorkspaceUsageList { workspace_usages })\n}\n\nasync fn admin_users_create_handler() -> Result, WebAppError> {\n render_template(templates::CreateUser)\n}\n\nasync fn user_user_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let user = state\n .gotrue_client\n .user_info(&session.token.access_token)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n render_template(templates::UserDetails { user: &user })\n}\n\nasync fn login_handler(\n State(state): State,\n Query(login): Query,\n) -> Result, WebAppError> {\n let redirect_to = login\n .redirect_to\n .as_ref()\n .map(|r| urlencoding::encode(r).to_string());\n let oauth_redirect_to = login.redirect_to.as_ref().map(|r| {\n urlencoding::encode(&format!(\n \"{}/web/login-callback?redirect_to={}\",\n state.config.path_prefix,\n urlencoding::encode(r)\n ))\n .to_string()\n });\n\n let external = state\n .gotrue_client\n .settings()\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?\n .external;\n let oauth_providers = external.oauth_providers();\n let default_oauth_redirect_to = format!(\n \"{}{}\",\n state.config.path_prefix, DEFAULT_OAUTH_REDIRECT_TO_WITHOUT_PREFIX\n );\n render_template(templates::Login {\n path_prefix: &state.config.path_prefix,\n oauth_providers: &oauth_providers,\n redirect_to: redirect_to.as_deref(),\n oauth_redirect_to: oauth_redirect_to\n .as_deref()\n .unwrap_or(&default_oauth_redirect_to),\n })\n}\n\nasync fn login_v2_handler(\n State(state): State,\n Query(login): Query,\n) -> Result, WebAppError> {\n let redirect_to = login\n .redirect_to\n .as_ref()\n .map(|r| urlencoding::encode(r).to_string());\n let oauth_redirect_to = login.redirect_to.as_ref().map(|r| {\n urlencoding::encode(&format!(\n \"{}/web/login-callback?redirect_to={}\",\n state.config.path_prefix,\n urlencoding::encode(r)\n ))\n .to_string()\n });\n\n let default_oauth_redirect_to = format!(\n \"{}{}\",\n state.config.path_prefix, DEFAULT_OAUTH_REDIRECT_TO_WITHOUT_PREFIX\n );\n render_template(templates::LoginV2 {\n oauth_providers: &[\"Google\", \"Apple\", \"Github\", \"Discord\"],\n redirect_to: redirect_to.as_deref(),\n oauth_redirect_to: oauth_redirect_to\n .as_deref()\n .unwrap_or(&default_oauth_redirect_to),\n path_prefix: &state.config.path_prefix,\n })\n}\n\nasync fn user_change_password_handler() -> Result, WebAppError> {\n render_template(templates::ChangePassword)\n}\n\npub async fn home_handler(\n State(state): State,\n session: Option,\n jar: CookieJar,\n) -> Result {\n let redirect_url = state.prepend_with_path_prefix(\"/web/login\");\n let session = match session {\n Some(session) => session,\n None => return Ok(Redirect::to(&redirect_url).into_response()),\n };\n\n let user = state\n .gotrue_client\n .user_info(&session.token.access_token)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n let home_html_str = render_template(templates::Home {\n user: &user,\n is_admin: is_admin(&user),\n path_prefix: &state.config.path_prefix,\n })?;\n Ok((jar, home_html_str).into_response())\n}\n\nasync fn admin_home_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let user = state\n .gotrue_client\n .user_info(&session.token.access_token)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n render_template(templates::AdminHome {\n user: &user,\n path_prefix: &state.config.path_prefix,\n })\n}\n\nasync fn admin_users_handler(\n State(state): State,\n session: UserSession,\n) -> Result, WebAppError> {\n let users = state\n .gotrue_client\n .admin_list_user(&session.token.access_token, None)\n .await\n .map_or_else(\n |err| {\n tracing::error!(\"Error getting user list: {:?}\", err);\n vec![]\n },\n |r| r.users,\n )\n .into_iter()\n .filter(|user| user.deleted_at.is_none())\n .collect::>();\n\n render_template(templates::AdminUsers { users: &users })\n}\n\nasync fn admin_user_details_handler(\n State(state): State,\n session: UserSession,\n Path(user_id): Path,\n) -> Result, WebAppError> {\n let user = state\n .gotrue_client\n .admin_user_details(&session.token.access_token, &user_id)\n .await\n .map_err(|_| WebAppError::LoginRedirectRequired(state.config.path_prefix.clone()))?;\n\n render_template(templates::AdminUserDetails { user: &user })\n}\n\nfn render_template(x: T) -> Result, WebAppError>\nwhere\n T: Template,\n{\n let s = x.render()?;\n Ok(Html(s))\n}\n\nfn is_admin(user: &User) -> bool {\n user.role == \"supabase_admin\"\n}\n" }, { "path": "admin_frontend/templates/components/admin_navigate.html", "content": "\n \n \n \n \n\n \n \n \n \n
PgAdmin\n \n {% include \"../assets/postgres/logo.html\" %}\n \n
Minio\n \n {% include \"../assets/minio/logo.html\" %}\n \n
" }, { "path": "admin_frontend/templates/components/admin_sidebar.html", "content": "
\n\n
\n \n Navigate\n
\n \n List Users\n \n \n Create User\n \n \n List SSO\n \n \n Create SSO\n \n\n" }, { "path": "admin_frontend/templates/components/admin_sso_create.html", "content": "
\n

Please enter the following information to create new SSO

\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n
Email\n \n
Metadata Url\n \n
\n \n
\n
\n
\n" }, { "path": "admin_frontend/templates/components/admin_sso_detail.html", "content": "
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
ID{{ sso_provider.id|escape }}
Entity ID{{ sso_provider.saml.entity_id|escape }}
Domains\n
    \n {% for domain in sso_provider.domains %}\n
  • {{ domain|escape }}
    • \n {% endfor %}\n
\n
Created At{{ sso_provider.created_at|escape }}
Updated At{{ sso_provider.updated_at|escape }}
Metadata XML\n {{ sso_provider.saml.metadata_xml|default(\"\")|escape }} \n
Attribute Mapping\n {{ mapping_json|escape }} \n
\n
\n" }, { "path": "admin_frontend/templates/components/admin_sso_list.html", "content": "
\n \n \n \n \n \n \n\n {% for sso_provider in sso_providers %}\n \n \n \n\n \n \n {% endfor %}\n
Entity IDCreated AtActions
{{ sso_provider.saml.entity_id|escape }}{{ sso_provider.created_at|escape }}\n \n More Info\n \n \n Delete\n \n
\n
\n" }, { "path": "admin_frontend/templates/components/admin_top_menu_bar.html", "content": "
\n
\n {% include \"../assets/logo.html\" %}\n

  AppFlowy Cloud  

\n\n \n {{ user.email|escape }}\n
\n
\n\n
\n
User
\n \n\n
\n Logout\n
\n
\n\n" }, { "path": "admin_frontend/templates/components/admin_user_details.html", "content": "
\n {% include \"user_details.html\" %}\n\n
\n \n \n \n \n \n \n \n \n \n \n
Set Password:\n \n
\n \n
\n \n\n \n \n \n \n \n\n \n \n \n \n
\n \n Generate Invite Link\n \n \n \n
\n \n
\n
\n\n \n
\n" }, { "path": "admin_frontend/templates/components/admin_users.html", "content": "
\n \n \n \n \n \n \n\n {% for user in users %}\n \n \n \n \n \n {% endfor %}\n
EmailCreated AtActions
{{ user.email|escape }}{{ user.created_at|escape }}\n \n More Info\n \n \n Delete\n \n
\n
\n" }, { "path": "admin_frontend/templates/components/appflowy_banner.html", "content": "
\n \n

AppFlowy Cloud

\n
\n" }, { "path": "admin_frontend/templates/components/change_password.html", "content": "
\n

Password Change

\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n
New Password:\n \n
Confirm Password:\n \n
\n \n
\n
\n
\n" }, { "path": "admin_frontend/templates/components/create_user.html", "content": "
\n

Please enter the following information to create a new user

\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Email:\n \n
Password:\n \n
Require Email Verification:\n \n
\n \n
\n
\n
\n" }, { "path": "admin_frontend/templates/components/invite.html", "content": "
\n

Invite another user to AppFlowy

\n
\n \n \n \n \n \n \n \n \n \n
Email:\n \n
\n \n
\n
\n\n
\n

Workspaces shared with you

\n \n {% include \"shared_workspaces.html\" %}\n
\n\n
\n

Invite another user to your workspace

\n \n \n \n \n \n \n \n \n {% for owned_workspace in owned_workspaces %}\n \n \n \n \n \n {% endfor %}\n
Workspace NameMembersInvite
{{ owned_workspace.workspace.workspace_name|escape }}\n {% for member in owned_workspace.members %} {{ member.email|escape }}\n
\n {% endfor %}\n 		\n \n \n \n \n
\n\n
\n

Invitation(s) from other user(s)

\n \n \n \n \n \n \n \n \n {% for pending_workspace_invitation in pending_workspace_invitations %}\n \n \n \n \n \n {% endfor %}\n
Workspace NameInviterAction
\n {{ pending_workspace_invitation.workspace_name|default(\"\")|escape }}\n \n {{ pending_workspace_invitation.inviter_email|default(\"\")|escape }}\n \n \n \n \n
\n\n" }, { "path": "admin_frontend/templates/components/message.html", "content": "
\n\n\n" }, { "path": "admin_frontend/templates/components/navigate.html", "content": "\n \n \n \n \n \n \n \n \n
Open AppFlowy\n
\n {% include \"../assets/logo.html\" %}\n
\n
Download AppFlowy\n \n {% include \"../assets/logo.html\" %}\n \n
\n" }, { "path": "admin_frontend/templates/components/shared_workspaces.html", "content": "\n \n \n \n \n \n \n \n {% for shared_workspace in shared_workspaces %}\n \n \n \n \n \n {% endfor %}\n
Workspace NameOwner NameAction
{{ shared_workspace.workspace_name|escape }}{{ shared_workspace.owner_name|escape }}\n \n Leave\n \n
\n" }, { "path": "admin_frontend/templates/components/sidebar.html", "content": "
\n \n Navigate\n
\n \n Change Password\n \n \n Invite\n \n \n User Usage\n \n \n Workspace Usage\n \n\n\n\n" }, { "path": "admin_frontend/templates/components/top_menu_bar.html", "content": "
\n
\n {% include \"../assets/logo.html\" %}\n

  AppFlowy Cloud  

\n\n \n {{ user.email|escape }}\n
\n \n Delete Account\n
\n \n\n
\n \n {% if is_admin %}\n
Admin
\n \n {% endif %}\n\n
\n Logout\n
\n
\n\n" }, { "path": "admin_frontend/templates/components/user_details.html", "content": "
\n

Email: {{ user.email|escape }}

\n

Role: {{ user.role|escape }}

\n

Phone: {{ user.phone|escape }}

\n

Email Confirmed At: {{ user.email_confirmed_at|default(\"-\")|escape }}

\n

Phone Confirmed At: {{ user.phone_confirmed_at|default(\"-\")|escape }}

\n

Last Sign In At: {{ user.last_sign_in_at|default(\"-\")|escape }}

\n

Created At: {{ user.created_at|escape }}

\n

Updated At: {{ user.updated_at|escape }}

\n
\n" }, { "path": "admin_frontend/templates/components/user_usage.html", "content": "
\n \n \n \n \n \n \n \n \n \n \n \n \n \n
TypeCurrentLimit
\n Workspaces\n \n {{ workspace_count|escape }}\n \n {{ workspace_limit|escape }}\n
\n
\n" }, { "path": "admin_frontend/templates/components/workspace_usage.html", "content": "
\n \n \n \n \n \n \n \n \n \n\n {% for workspace_usage in workspace_usages %}\n \n \n \n \n \n \n {% endfor %}\n\n" }, { "path": "admin_frontend/templates/layouts/base.html", "content": "\n\n \n \n \n \n {% block title %}{{ title|escape }}{% endblock %}\n \n {% block head %}{% endblock %}\n \n \n \n {% include \"components/message.html\" %}\n\n
{% block content %}{% endblock %}
\n\n \n \n
\n \n\n\n\n" }, { "path": "admin_frontend/templates/pages/admin_home.html", "content": "\n{% extends \"layouts/base.html\" %}\n\n\n{% block title %} AppFlowy Cloud Admin {% endblock %}\n\n\n{% block head %}\n\n\n\n\n{% endblock %}\n\n\n{% block content %}\n\n\n{% include \"components/admin_top_menu_bar.html\" %}\n\n
\n
\n {% include \"components/admin_sidebar.html\" %}\n
\n
\n {% include \"components/admin_navigate.html\" %}\n
\n
\n\n{% endblock %}\n" }, { "path": "admin_frontend/templates/pages/home.html", "content": "\n{% extends \"layouts/base.html\" %}\n\n\n{% block title %} AppFlowy Cloud {% endblock %}\n\n\n{% block head %}\n\n\n\n\n{% endblock %}\n\n\n{% block content %}\n\n\n{% include \"components/top_menu_bar.html\" %}\n\n
\n
\n {% include \"components/sidebar.html\" %}\n
\n
\n {% include \"components/navigate.html\" %}\n
\n
\n\n\n{% endblock %}\n" }, { "path": "admin_frontend/templates/pages/login.html", "content": "\n{% extends \"layouts/base.html\" %}\n\n\n{% block title %} AppFlowy Cloud Login {% endblock %}\n\n\n{% block head %}\n\n\n{% endblock %}\n\n\n{% block content %}\n
\n
\n
\n {% include \"../assets/logo.html\" %}\n

AppFlowy Cloud

\n
\n\n

Email Login

\n
\n
Workspace NameMembersDocument StorageObject Storage
{{ workspace_usage.name|escape }} {{ workspace_usage.member_count|escape }} {{ workspace_usage.total_doc_size|escape }} {{ workspace_usage.total_blob_size|escape }}
\n {% if let Some(redirect_to) = redirect_to %}\n \n {% endif %}\n\n \n \n \n \n \n \n \n \n
Email\n \n
Password  \n \n
\n\n \n (Magic link will be sent to email if password is not provided)\n \n
\n \n Sign In\n \n \n Sign Up\n \n
\n \n\n \n {% if oauth_providers.len() > 0 %}\n
\n \n \n \n \n \n \n
\n
\n 		 or \n
\n
\n\n

OAuth Login

\n
\n \n {% for provider in oauth_providers %}\n \n \n
  {{ provider }}
\n
\n
\n
\n
\n \n {% endfor %}\n \n \n {% endif %}\n\n   \n
\n \n \n   Support AppFlowy on Ko-fi\n \n
\n\n   \n
\n \n   By clicking logging in or signing up, you confirm that you have\n read, understood, and agreed to AppFlowy's\n Terms and\n Privacy Policy.\n \n
\n \n {% endblock %}\n\n" }, { "path": "admin_frontend/templates/pages/login_callback.html", "content": "\n" }, { "path": "admin_frontend/templates/pages/login_v2.html", "content": "\n{% extends \"layouts/base.html\" %}\n\n\n{% block title %} AppFlowy Cloud Login {% endblock %}\n\n\n{% block head %}\n\n\n{% endblock %}\n\n\n{% block content %}\n
\n
\n
\n {% include \"../assets/logo.html\" %}\n
\n

Welcome to AppFlowy

\n
\n {% if let Some(redirect_to) = redirect_to %}\n \n {% endif %}\n\n
\n \n \n Continue\n \n
\n
\n\n \n {% if oauth_providers.len() > 0 %}\n \n \n \n \n \n \n
\n
\n 		 or \n
\n
\n\n
\n
\n {% for provider in oauth_providers %}\n
\n \n
\n
\n
\n
\n   \n
Continue with {{ provider }}
\n
\n \n
\n {% endfor %}\n\n \n
\n
\n {% endif %}\n\n   \n   \n   \n
\n \n By clicking \"Continue\" above, you agreed to AppFlowy's\n Terms and\n Privacy Policy.\n \n
\n
\n {% endblock %}\n\n" }, { "path": "admin_frontend/templates/pages/open_appflowy_or_download.html", "content": "\n\n \n \n AppFlowy\n \n \n \n\n

Opening AppFlowy

\n

If AppFlowy does not open, you can click here to launch the app.

\n

If AppFlowy is not installed, you can download AppFlowy manually.

\n \n\n" }, { "path": "admin_frontend/templates/pages/payment_success_redirect.html", "content": "\n \n AppFlowy - Redirecting\n \n \n \n \n\n" }, { "path": "admin_frontend/templates/pages/redirect.html", "content": "\n\n \n \n \n Redirecting...\n \n \n

If you are not redirected, click here.

\n \n\n" }, { "path": "admin_frontend/tests/main.rs", "content": "mod oauth;\nmod utils;\n" }, { "path": "admin_frontend/tests/oauth/mod.rs", "content": "use admin_frontend::models::OAuthRedirect;\nuse admin_frontend::models::OAuthRedirectToken;\nuse base64::engine::Engine;\nuse base64::prelude::BASE64_STANDARD_NO_PAD;\nuse gotrue_entity::dto::GotrueTokenResponse;\nuse reqwest::StatusCode;\nuse reqwest::Url;\nuse sha2::Digest;\n\nuse crate::utils::AdminFrontendClient;\n\n#[tokio::test]\nasync fn oauth_sign_in() {\n let mut af_client = AdminFrontendClient::new();\n af_client\n .web_api_sign_in(\"admin@example.com\", \"password\")\n .await;\n\n let code_challenge_orginal = \"hello123\";\n let code_challenge_sha256 = {\n let mut hasher = sha2::Sha256::new();\n hasher.update(code_challenge_orginal.as_bytes());\n hasher.finalize().to_vec()\n };\n\n // OAuth Param\n let code_challenge = BASE64_STANDARD_NO_PAD.encode(code_challenge_sha256);\n let client_id = \"appflowy_cloud\";\n let state = \"state123\";\n\n {\n // redirect url not in allowed list\n let resp = af_client\n .web_api_oauth_redirect(&OAuthRedirect {\n client_id: client_id.to_string(),\n state: state.to_string(),\n redirect_uri: \"https://mywebsite.com\".to_string(),\n response_type: \"code\".to_string(),\n code_challenge: Some(code_challenge.clone()),\n code_challenge_method: Some(\"S256\".to_string()),\n })\n .await;\n assert_eq!(resp.status(), StatusCode::BAD_REQUEST);\n assert_eq!(\n resp.text().await.unwrap(),\n \"invalid redirect_uri: https://mywebsite.com, allowable_uris: http://localhost:3000\"\n );\n }\n\n {\n let resp = af_client\n .web_api_oauth_redirect(&OAuthRedirect {\n client_id: client_id.to_string(),\n state: state.to_string(),\n redirect_uri: \"http://localhost:3000\".to_string(),\n response_type: \"code\".to_string(),\n code_challenge: Some(code_challenge.clone()),\n code_challenge_method: Some(\"S256\".to_string()),\n })\n .await;\n assert_eq!(resp.status(), StatusCode::SEE_OTHER);\n\n let redirect_url = resp.headers().get(\"location\").unwrap().to_str().unwrap();\n let (code, ret_state) = extract_code_and_state(redirect_url);\n assert_eq!(ret_state, state);\n\n {\n // did not provide code_verifier\n let resp = af_client\n .web_api_oauth_redirect_token(&OAuthRedirectToken {\n code: code.clone(),\n grant_type: \"authorization_code\".to_string(),\n ..Default::default()\n })\n .await;\n assert_eq!(resp.status(), StatusCode::BAD_REQUEST);\n assert_eq!(resp.text().await.unwrap(), \"missing code_verifier\");\n }\n\n {\n let resp = af_client\n .web_api_oauth_redirect_token(&OAuthRedirectToken {\n code,\n grant_type: \"authorization_code\".to_string(),\n code_verifier: Some(code_challenge_orginal.to_string()),\n ..Default::default()\n })\n .await;\n assert_eq!(resp.status(), StatusCode::OK);\n let token_str = resp.text().await.unwrap();\n let _gotrue_token: GotrueTokenResponse = serde_json::from_str(&token_str).unwrap();\n }\n }\n}\n\nfn extract_code_and_state(url_str: &str) -> (String, String) {\n // Parse the URL\n let url = Url::parse(url_str).expect(\"Failed to parse URL\");\n\n // Extract the query parameters\n let code = url\n .query_pairs()\n .find(|(key, _)| key == \"code\")\n .map(|(_, value)| value.to_string())\n .unwrap_or_else(|| \"code not found\".to_string());\n\n let state = url\n .query_pairs()\n .find(|(key, _)| key == \"state\")\n .map(|(_, value)| value.to_string())\n .unwrap_or_else(|| \"state not found\".to_string());\n\n (code, state)\n}\n" }, { "path": "admin_frontend/tests/utils/mod.rs", "content": "pub mod test_config;\n\nuse admin_frontend::{\n config::Config,\n models::{OAuthRedirect, OAuthRedirectToken, WebApiLoginRequest},\n};\nuse test_config::TestConfig;\n\npub struct AdminFrontendClient {\n test_config: TestConfig,\n #[allow(dead_code)]\n server_config: Config,\n session_id: Option,\n http_client: reqwest::Client,\n}\n\nimpl AdminFrontendClient {\n pub fn new() -> Self {\n dotenvy::dotenv().ok();\n\n let server_config = Config::from_env().unwrap();\n let test_config = TestConfig::from_env();\n let http_client = reqwest::Client::new();\n Self {\n server_config,\n session_id: None,\n http_client,\n test_config,\n }\n }\n\n pub async fn web_api_sign_in(&mut self, email: &str, password: &str) {\n let url = format!(\n \"{}{}/web-api/signin\",\n self.test_config.hostname, self.server_config.path_prefix\n );\n let resp = self\n .http_client\n .post(&url)\n .form(&WebApiLoginRequest {\n email: email.to_string(),\n password: password.to_string(),\n redirect_to: None,\n })\n .send()\n .await\n .unwrap();\n let resp = check_resp(resp).await;\n let c = resp.cookies().find(|c| c.name() == \"session_id\").unwrap();\n self.session_id = Some(c.value().to_string());\n }\n\n pub async fn web_api_oauth_redirect(\n &mut self,\n oauth_redirect: &OAuthRedirect,\n ) -> reqwest::Response {\n let url = format!(\n \"{}{}/web-api/oauth-redirect\",\n self.test_config.hostname, self.server_config.path_prefix\n );\n let http_client = reqwest::Client::builder()\n .redirect(reqwest::redirect::Policy::none())\n .build()\n .unwrap();\n\n http_client\n .get(&url)\n .header(\"Cookie\", format!(\"session_id={}\", self.session_id()))\n .query(oauth_redirect)\n .send()\n .await\n .unwrap()\n }\n\n pub async fn web_api_oauth_redirect_token(\n &mut self,\n oauth_redirect: &OAuthRedirectToken,\n ) -> reqwest::Response {\n let url = format!(\n \"{}{}/web-api/oauth-redirect/token\",\n self.test_config.hostname, self.server_config.path_prefix\n );\n self\n .http_client\n .get(&url)\n .header(\"Cookie\", format!(\"session_id={}\", self.session_id()))\n .query(oauth_redirect)\n .send()\n .await\n .unwrap()\n }\n\n fn session_id(&self) -> &str {\n self.session_id.as_ref().unwrap()\n }\n}\n\nasync fn check_resp(resp: reqwest::Response) -> reqwest::Response {\n if resp.status() != 200 {\n println!(\"resp: {:#?}\", resp);\n let payload = resp.text().await.unwrap();\n panic!(\"payload: {:#?}\", payload)\n }\n resp\n}\n" }, { "path": "admin_frontend/tests/utils/test_config.rs", "content": "pub struct TestConfig {\n pub hostname: String,\n}\n\nimpl TestConfig {\n pub fn from_env() -> Self {\n dotenvy::dotenv().ok();\n\n let hostname =\n std::env::var(\"ADMIN_FRONTEND_TEST_HOSTNAME\").unwrap_or(\"http://localhost:3000\".to_string());\n TestConfig { hostname }\n }\n}\n" }, { "path": "assets/mailer_templates/build_production/access_request.html", "content": "\n\n\n \n \n \n \n \n \n \n Request to join the workspace\n \n\n\n
\n Approve a user's request to join the workspace.\n &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;\n
\n
\n
\n \n \n \n \n \n \n \n
\n
\n \"{{\n
\n

\n {{ username }}\n has requested access to \n {{ workspace_name }}\n

\n
\n \n \n \n \n \n
\n
\n \"{{\n
\n 		\n
{{ workspace_name }}
\n
\n {{ workspace_member_count }} members\n
\n
\n \n
\n By clicking \"Approve request\" above, the user will be added to the\n workspace.\n
\n
\n
\n

\n \n \"\"\n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/access_request_approved_notification.html", "content": "\n\n\n \n \n \n \n \n \n \n Your access request has been approved\n \n\n\n
\n Workspace access request approved notification\n &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;\n
\n
\n
\n \n \n \n \n \n \n \n
\n

\n Your request to access \n {{ workspace_name }}\n has been approved \n

\n
\n \n \n \n \n \n
\n
\n \"{{\n
\n 		\n
{{ workspace_name }}
\n
\n {{ workspace_member_count }} members\n
\n
\n \n
\n By clicking \"View workspace\" above, you confirm that you have read,\n understood, and agreed to AppFlowy's\n Terms & Conditions\n and\n Privacy Policy.\n
\n
\n
\n

\n \n \"\"\n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/confirmation.html", "content": "\n\n\n \n \n \n \n \n \n \n New sign up for AppFlowy\n\n\n
\n
\n To login to AppFlowy, follow this link {{ .ConfirmationURL }}\n
\n \n \n \n \n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n \"\"\n
\n

\n Login for AppFlowy\n

\n
\n

\n We have received a request to confirm your AppFlowy account.\n

\n

\n You can log in using either of the following options:\n

\n
\n \n \n \n \n \n \n \n \n \n \n
\n

\n Option 1: Magic Link (Fast & Easy)\n

\n

\n Click the button or link below to log in instantly\n

\n
\n \n \n \n \n
\n Login to AppFlowy\n
\n
\n

\n Or paste this into your browser:\n

\n

\n \n {{ .ConfirmationURL }}\n \n

\n
\n
\n \n \n \n \n \n \n \n
\n

\n Option 2: One-Time Password (OTP)\n

\n

\n Prefer to enter a code instead? Use the one-time code\n below\n

\n
\n {{ .Token }}\n
\n
\n

\n This code and magic link will expire in 5 minutes for security\n reasons.\n

\n

\n If you didn't initiate this login, you can safely ignore this\n email. No action is needed.\n

\n
\n

\n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n

\n \n \"Discord\"\n \n \n \"GitHub\"\n \n \n \"Reddit\"\n \n \n \"Twitter\"\n \n \n \"Youtube\"\n \n

\n

\n Copyright © 2025, AppFlowy Inc.\n

\n

\n Need Help?\n support@appflowy.io\n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/import_data_fail.html", "content": "\n\n\n \n \n \n \n \n \n \n Workspace Import Failed\n \n\n\n
\n There was an issue with your workspace import\n &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;\n
\n
\n
\n \n \n \n \n \n \n \n
\n

\n Notion Import Failed\n

\n

\n {{ error }}\n

\n
\n Join our Discord server to get quick help\n or \n report the issue on GitHub\n
\n
\n
\n

\n \n \"\"\n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/import_data_success.html", "content": "\n\n\n \n \n \n \n \n \n \n Workspace Import Success\n \n\n\n
\n Your workspace import was successful\n &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;\n
\n
\n
\n \n \n \n \n \n \n \n
\n

\n Notion Import Complete\n

\n

\n Your Notion data has been successfully imported into\n

\n

\n {{ workspace_name }}\n

\n
\n \n \n \n \n \n
\n
\n \"{{\n
\n 		\n
\n {{ workspace_name }}\n
\n
1 member
\n
\n \n
\n
\n

\n \n \"\"\n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/magic_link.html", "content": "\n\n\n \n \n \n \n \n \n \n Login for AppFlowy\n\n\n
\n
\n To login to AppFlowy, follow this link {{ .ConfirmationURL }}\n
\n \n \n \n \n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n \"\"\n
\n

Login for AppFlowy

\n
\n

We received a request to log in to your AppFlowy account.

\n

You can log in using either of the following options:

\n
\n \n \n \n \n \n \n \n \n \n \n
\n

Option 1: Magic Link (Fast & Easy)

\n

Click the button or link below to log in instantly

\n
\n \n \n \n \n
\n Login to AppFlowy\n
\n
\n

Or paste this into your browser:

\n

\n \n {{ .ConfirmationURL }}\n \n

\n
\n
\n \n \n \n \n \n \n \n
\n

Option 2: One-Time Password (OTP)

\n

Prefer to enter a code instead? Use the one-time code below

\n
\n {{ .Token }}\n
\n
\n

This code and magic link will expire in 5 minutes for security reasons.

\n

If you didn't initiate this login, you can safely ignore this email. No action is needed.

\n
\n

Bring projects, knowledge, and teams together with the power of AI.

\n

\n \n \"Discord\"\n \n \n \"GitHub\"\n \n \n \"Reddit\"\n \n \n \"Twitter\"\n \n \n \"Youtube\"\n \n

\n

Copyright © 2025, AppFlowy Inc.

\n

\n Need Help? support@appflowy.io\n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/page_mention_notification.html", "content": "\n\n\n \n \n \n \n \n \n \n \n\n\n
\n
\n \n \n \n \n
\n

\n \"AppFlowy\"\n

\n

\n {{ mentioner_name }}\n has mentioned you in \n {{ mentioned_page_name }}\n

\n

\n {{ mentioned_at }}\n

\n

\n {{ workspace_name }} / ... / {{ mentioned_page_name }}\n

\n \n
\n
\n

\n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n

\n \n \"Discord\"\n \n \n \"GitHub\"\n \n \n \"Reddit\"\n \n \n \"Twitter\"\n \n \n \"YouTube\"\n \n

\n

\n Copyright © 2025, AppFlowy Inc.\n

\n

\n Need Help?\n \n support@appflowy.io\n \n

\n undefined\n \n
\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/recovery.html", "content": "\n\n\n \n \n \n \n \n \n \n AppFlowy Password Recovery\n\n\n
\n
\n To reset your password, enter the code below in the app:\n
\n \n \n \n \n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n \"\"\n
\n

\n Reset your password\n

\n
\n

\n Someone recently requested a password reset for your AppFlowy\n account. If this was you, use the following verification code.\n

\n
\n {{ .Token }}\n
\n

\n This code will expire in 5 minutes for security reasons.\n

\n

\n If you didn't initiate this recovery, you can safely ignore this\n email. No action is needed.\n

\n
\n

\n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n

\n \n \"Discord\"\n \n \n \"GitHub\"\n \n \n \"Reddit\"\n \n \n \"Twitter\"\n \n \n \"Youtube\"\n \n

\n

\n Copyright © 2025, AppFlowy Inc.\n

\n

\n Need Help?\n support@appflowy.io\n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/build_production/workspace_invitation.html", "content": "\n\n\n \n \n \n \n \n \n \n Confirm to join the workspace\n \n\n\n
\n Please confirm your email address to join the workspace.\n &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;\n
\n
\n
\n \n \n \n \n \n \n \n
\n
\n \"{{\n
\n

\n {{ username }}\n invited you to \n {{ workspace_name }}\n

\n
\n \n \n \n \n \n
\n
\n \"{{\n
\n 		\n
\n {{ workspace_name }}\n
\n
{{ workspace_member_count }} members
\n
\n \n
\n By clicking \"Join workspace\" above, you confirm that you have read, understood, and agreed to\n AppFlowy's Terms &\n Conditions\n and Privacy\n Policy.\n
\n
\n
\n

\n \n \"\"\n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n
\n\n" }, { "path": "assets/mailer_templates/confirmation.html", "content": "\n\n\n\n\nEmail Confirmation\n\n\n \n\n
\n\n\n\n\n
\n
\"Logo\"

Log in to AppFlowy


Click the button below to securely log in or sign up. This magic link will expire in 5 minutes.

\n\n
Log in / Sign up

Confirming this request will securely log you in.

\"Twitter\"Website\"Email

If you didn’t request this email, you can safely ignore it.

\n
\n
\n\n" }, { "path": "deny.toml", "content": "[advisories]\nignore = [\n \"RUSTSEC-2024-0384\",\n \"RUSTSEC-2025-0012\",\n]\n" }, { "path": "deploy.env", "content": "# =============================================================================\n# AppFlowy Cloud - Production Deployment Configuration\n# =============================================================================\n# This file is a template for docker compose deployment\n# Copy this file to .env and change the values as needed\n\n# Fully qualified domain name for the deployment. Replace localhost with your domain,\n# such as mydomain.com.\nFQDN=localhost\n\n# Change this to https if you are using TLS.\nSCHEME=http\n# Change this to wss if you are using TLS\nWS_SCHEME=ws\n\nAPPFLOWY_BASE_URL=${SCHEME}://${FQDN}\nAPPFLOWY_WEBSOCKET_BASE_URL=${WS_SCHEME}://${FQDN}/ws/v2\n\n# =============================================================================\n# 🗄️ DATABASE & CACHE: Core data infrastructure\n# =============================================================================\n\n# PostgreSQL Settings\nPOSTGRES_HOST=postgres\nPOSTGRES_USER=postgres\nPOSTGRES_PASSWORD=password\nPOSTGRES_PORT=5432\nPOSTGRES_DB=postgres\n\n# Redis Settings\nREDIS_HOST=redis\nREDIS_PORT=6379\n\n# =============================================================================\n# 🏗️ INFRASTRUCTURE SERVICES: Object storage and networking\n# =============================================================================\n\n# MinIO Configuration: S3-compatible object storage for file uploads and attachments\n# Docker service discovery: These values are used for container-to-container communication\n# MINIO_HOST refers to the Docker Compose service name, not an external domain/IP\n# Used by: AppFlowy Cloud, Worker services, AI service, and Admin Frontend\nMINIO_HOST=minio\nMINIO_PORT=9000\n\n# MinIO/AWS Credentials: Authentication keys for object storage access\n# Development: Uses MinIO's default credentials (minioadmin/minioadmin) for quick setup\n# Production: MUST be changed to secure, randomly generated credentials for security\n# These credentials are used across all services that access file storage\n# Security note: Default credentials are well-known and should never be used in production\nAWS_ACCESS_KEY=minioadmin\nAWS_SECRET=minioadmin\n\n# =============================================================================\n# ☁️ APPFLOWY SERVICES: Application service configuration\n# =============================================================================\n\n# AppFlowy Cloud Service Configuration\n# URL that connects to the gotrue docker container\nAPPFLOWY_GOTRUE_BASE_URL=http://gotrue:9999\n\n# URL that connects to the postgres docker container. If your password contains special characters,\n# instead of using ${POSTGRES_PASSWORD}, you will need to convert them into url encoded format.\n# For example, `p@ssword` will become `p%40ssword`.\nAPPFLOWY_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}\n\n# AppFlowy Service Configuration\n# Access Control System: Enables/disables permission-based access control\n# Controls workspace access, collaboration permissions, and realtime access restrictions\nAPPFLOWY_ACCESS_CONTROL=true\n\n# WebSocket Mailbox Configuration: Controls realtime server message handling capacity\n# Sets the maximum number of messages that can be queued in the WebSocket actor's mailbox\n# Higher values allow more concurrent WebSocket messages but use more memory\n# Lower values may cause message drops under high load but reduce memory usage\nAPPFLOWY_WEBSOCKET_MAILBOX_SIZE=6000\n\n# Database Connection Pool: Maximum number of concurrent PostgreSQL connections\n# Controls the size of the database connection pool for the AppFlowy Cloud service\n# PostgreSQL has a default limit of ~100 connections total (15 reserved for superuser)\n# Higher values improve concurrency but consume more database resources\n# Lower values reduce database load but may cause connection timeouts under load\nAPPFLOWY_DATABASE_MAX_CONNECTIONS=40\n\n# URL that connects to the redis docker container\nAPPFLOWY_REDIS_URI=redis://${REDIS_HOST}:${REDIS_PORT}\n\n# GoTrue database connection. If your password contains special characters,\n# instead of using ${POSTGRES_PASSWORD}, use the url encoded version.\n# For example, `p@ssword` will become `p%40ssword`\nGOTRUE_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?search_path=auth\n\n# =============================================================================\n# 🔐 GOTRUE: Authentication service configuration\n# =============================================================================\n\n# GoTrue Admin Credentials\n# This user will be created when GoTrue starts successfully\n# You can use this user to login to the admin panel\nGOTRUE_ADMIN_EMAIL=admin@example.com\nGOTRUE_ADMIN_PASSWORD=password\n\n# JWT Configuration\n# Authentication key, change this and keep the key safe and secret\nGOTRUE_JWT_SECRET=hello456\n\n# Expiration time in seconds for the JWT token\nGOTRUE_JWT_EXP=604800\n\n# External URL where the GoTrue service is exposed\nAPI_EXTERNAL_URL=${APPFLOWY_BASE_URL}/gotrue\n\n# User Registration & Login Settings\n# User sign up will automatically be confirmed if this is set to true.\n# If you have OAuth2 set up or smtp configured, you can set this to false\n# to enforce email confirmation or OAuth2 login instead.\n# If you set this to false, you need to either set up SMTP\nGOTRUE_MAILER_AUTOCONFIRM=true\n\n# Set this to true if users can only join by invite\nGOTRUE_DISABLE_SIGNUP=false\n\n# Number of emails that can be sent per minute\nGOTRUE_RATE_LIMIT_EMAIL_SENT=100\n\n# Email Templates\n# Optional. You can provide a public http link (eg. github) to customize your magic link template.\n# Refer to https://github.com/supabase/auth?tab=readme-ov-file#configuration for details on how to create a custom email template.\nGOTRUE_MAILER_TEMPLATES_MAGIC_LINK=\n\n# =============================================================================\n# 📧 EMAIL CONFIGURATION: SMTP settings (optional but recommended for production)\n# =============================================================================\n\n# If you intend to use mail confirmation, you need to set the SMTP configuration below\n# You would then need to set GOTRUE_MAILER_AUTOCONFIRM=false\n# Check for logs in gotrue service if there are any issues with email confirmation\n# Note that smtps will be used for port 465, otherwise plain smtp with optional STARTTLS\nGOTRUE_SMTP_HOST=smtp.gmail.com\nGOTRUE_SMTP_PORT=465\nGOTRUE_SMTP_USER=email_sender@some_company.com\nGOTRUE_SMTP_PASS=email_sender_password\nGOTRUE_SMTP_ADMIN_EMAIL=comp_admin@some_company.com\n\n# AppFlowy Cloud Mailer\n# Note that smtps (TLS) is always required, even for ports other than 465\nAPPFLOWY_MAILER_SMTP_HOST=smtp.gmail.com\nAPPFLOWY_MAILER_SMTP_PORT=465\nAPPFLOWY_MAILER_SMTP_USERNAME=email_sender@some_company.com\nAPPFLOWY_MAILER_SMTP_EMAIL=email_sender@some_company.com\nAPPFLOWY_MAILER_SMTP_PASSWORD=email_sender_password\nAPPFLOWY_MAILER_SMTP_TLS_KIND=wrapper # \"none\" \"wrapper\" \"required\" \"opportunistic\"\n\n# =============================================================================\n# 🔑 OAUTH PROVIDERS: Third-party authentication (optional)\n# =============================================================================\n# Refer to this for details: https://github.com/AppFlowy-IO/AppFlowy-Cloud/blob/main/doc/AUTHENTICATION.md\n\n# Google OAuth2\nGOTRUE_EXTERNAL_GOOGLE_ENABLED=false\nGOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=\nGOTRUE_EXTERNAL_GOOGLE_SECRET=\nGOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI=${API_EXTERNAL_URL}/callback\n\n# GitHub OAuth2\nGOTRUE_EXTERNAL_GITHUB_ENABLED=false\nGOTRUE_EXTERNAL_GITHUB_CLIENT_ID=\nGOTRUE_EXTERNAL_GITHUB_SECRET=\nGOTRUE_EXTERNAL_GITHUB_REDIRECT_URI=${API_EXTERNAL_URL}/callback\n\n# Discord OAuth2\nGOTRUE_EXTERNAL_DISCORD_ENABLED=false\nGOTRUE_EXTERNAL_DISCORD_CLIENT_ID=\nGOTRUE_EXTERNAL_DISCORD_SECRET=\nGOTRUE_EXTERNAL_DISCORD_REDIRECT_URI=${API_EXTERNAL_URL}/callback\n\n# Apple OAuth2\nGOTRUE_EXTERNAL_APPLE_ENABLED=false\nGOTRUE_EXTERNAL_APPLE_CLIENT_ID=\nGOTRUE_EXTERNAL_APPLE_SECRET=\nGOTRUE_EXTERNAL_APPLE_REDIRECT_URI=${API_EXTERNAL_URL}/callback\n\n# SAML 2.0. Refer to https://github.com/AppFlowy-IO/AppFlowy-Cloud/blob/main/doc/OKTA_SAML.md for example using Okta.\nGOTRUE_SAML_ENABLED=false\nGOTRUE_SAML_PRIVATE_KEY=\n\n# =============================================================================\n# 💾 FILE STORAGE: S3/MinIO configuration (required for file uploads)\n# =============================================================================\n\n# Storage Architecture Control: Determines the file storage backend for the entire system\n# Affects: User uploads, document attachments, collaboration snapshots, AI embeddings, import/export files\n# When true: Uses MinIO (S3-compatible) with path-style URLs and MinIO endpoint configuration\n# When false: Uses AWS S3 with region-based configuration and standard S3 URLs\n# Production options: Keep true for self-hosted MinIO, set false for AWS S3\nAPPFLOWY_S3_USE_MINIO=true\n\n# Bucket Management: Controls automatic bucket creation during AppFlowy startup\n# When true: AppFlowy automatically creates the storage bucket if it doesn't exist\n# When false: Assumes bucket exists and was created externally (recommended for production)\nAPPFLOWY_S3_CREATE_BUCKET=true\n\n# MinIO Endpoint Configuration: URL for MinIO API access\n# Uses Docker service discovery variables for container networking\n# Format combines MINIO_HOST and MINIO_PORT for internal service communication\n# Change this URL if using external MinIO instance or different networking setup\nAPPFLOWY_S3_MINIO_URL=http://${MINIO_HOST}:${MINIO_PORT}\n\n# Storage Authentication: Maps to the MinIO/AWS credentials defined above\n# These reference the AWS_ACCESS_KEY and AWS_SECRET variables for consistency\n# All AppFlowy services use these credentials to access the file storage backend\nAPPFLOWY_S3_ACCESS_KEY=${AWS_ACCESS_KEY}\nAPPFLOWY_S3_SECRET_KEY=${AWS_SECRET}\n\n# Storage Bucket: Default bucket name for all AppFlowy file storage\n# Contains: User files, document attachments, collaboration data, AI embeddings\n# Must exist in both MinIO and AWS S3 configurations\nAPPFLOWY_S3_BUCKET=appflowy\n\n# AWS S3 Configuration: Required only when APPFLOWY_S3_USE_MINIO=false\n# Uncomment and configure these settings when using AWS S3 instead of MinIO\n# APPFLOWY_S3_REGION=us-east-1\n\n# MinIO Presigned URL Endpoint: External URL for client-side file access (optional)\n# Enables direct file uploads/downloads from AppFlowy clients through presigned URLs\n# Set this to your public MinIO endpoint if using nginx proxy configuration\n# Format: Uses the external base URL with /minio-api path for API access\nAPPFLOWY_S3_PRESIGNED_URL_ENDPOINT=${APPFLOWY_BASE_URL}/minio-api\n\n# =============================================================================\n# 🤖 AI FEATURES: Optional AI capabilities (configure only if needed)\n# =============================================================================\n\n# AppFlowy AI\n# OpenAI API Authentication: Required API key for AI-powered features and semantic search\n# Controls access to OpenAI's embedding models (text-embedding-3-small) for document indexing\n# and ChatGPT models (gpt-4o-mini default) for search result summarization\n# When configured: Enables semantic document search, AI-powered search summaries, and document embeddings\n# When empty: AI features are disabled but core AppFlowy functionality remains fully operational\nAI_OPENAI_API_KEY=\n\n# If no summary model is provided, there will be no search summary when using AI search.\nAI_OPENAI_API_SUMMARY_MODEL=\n\n# Azure-hosted OpenAI API:\n# If you're using a self-hosted OpenAI API via Azure, leave AI_OPENAI_API_KEY empty\n# and set the following Azure-specific variables instead. If both are set, the standard OpenAI API will be used.\nAI_AZURE_OPENAI_API_KEY=\nAI_AZURE_OPENAI_API_BASE=\nAI_AZURE_OPENAI_API_VERSION=\n\n# AI Service Configuration (Docker container defaults)\nAI_SERVER_PORT=5001\nAI_SERVER_HOST=ai\nAI_DATABASE_URL=postgresql+psycopg://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}\nAI_REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}\nAI_APPFLOWY_BUCKET_NAME=${APPFLOWY_S3_BUCKET}\nAI_APPFLOWY_HOST=${APPFLOWY_BASE_URL}\nAI_MINIO_URL=http://${MINIO_HOST}:${MINIO_PORT}\n\n# Embedding Configuration\nAPPFLOWY_EMBEDDING_CHUNK_SIZE=2000\nAPPFLOWY_EMBEDDING_CHUNK_OVERLAP=200\n\n# =============================================================================\n# ⚙️ WORKER SERVICES: Background processing (good defaults for production)\n# =============================================================================\n\n# AppFlowy Indexer (for search functionality)\nAPPFLOWY_INDEXER_ENABLED=true\nAPPFLOWY_INDEXER_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}\nAPPFLOWY_INDEXER_REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}\nAPPFLOWY_INDEXER_EMBEDDING_BUFFER_SIZE=5000\n\n# AppFlowy Collaboration Service Configuration:\n# Controls real-time collaboration behavior and performance\n# Multi-thread: Whether collaboration service uses multiple threads (can be true for production)\n# When deployed as standalone service, can be set to true for better performance\nAPPFLOWY_COLLABORATE_MULTI_THREAD=false\n\n# Remove batch size: Number of inactive collaboration groups to remove in a single batch (default: 100)\n# Higher values improve cleanup efficiency but may cause temporary blocking\nAPPFLOWY_COLLABORATE_REMOVE_BATCH_SIZE=100\n\n# AppFlowy Worker Service\nAPPFLOWY_WORKER_REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}\nAPPFLOWY_WORKER_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}\nAPPFLOWY_WORKER_DATABASE_NAME=${POSTGRES_DB}\n\n# =============================================================================\n# Real Time Transcription\n# =============================================================================\nASSEMBLYAI_API_KEY=\nASSEMBLYAI_API_BASE=https://api.assemblyai.com/v2\nASSEMBLYAI_STREAMING_API_BASE=https://streaming.assemblyai.com/v3\n\n# =============================================================================\n# 🌐 WEB FRONTEND: AppFlowy Web interface\n# =============================================================================\n\n# AppFlowy Web\n# If your AppFlowy Web is hosted on a different domain, update this variable to the correct domain\nAPPFLOWY_WEB_URL=${APPFLOWY_BASE_URL}\n\n# If you are running AppFlowy Web locally for development purpose, use the following value instead\n# APPFLOWY_WEB_URL=http://localhost:3000\n\n# =============================================================================\n# 🗄️ PGADMIN: Database Management Web Interface\n# =============================================================================\n\n# PgAdmin credentials for database management web UI\n# You can access pgadmin at http://your-host/pgadmin\n# Use the APPFLOWY_DATABASE_URL values when connecting to the database\nPGADMIN_DEFAULT_EMAIL=admin@example.com\nPGADMIN_DEFAULT_PASSWORD=password\n\n# =============================================================================\n# 🌐 NGINX: Reverse proxy and web server configuration\n# =============================================================================\n\n# NGINX Configuration\n# Optional, change this if you want to use custom ports to expose AppFlowy\nNGINX_PORT=80\nNGINX_TLS_PORT=443\n\n# =============================================================================\n# 🛠️ INFRASTRUCTURE: Networking, logging, and admin tools\n# =============================================================================\n\n# Log level for the appflowy-cloud service\nRUST_LOG=info\n\n# Cloudflare Tunnel (Advanced Networking)\n# Leave empty unless you're using Cloudflare tunnel for secure connections\nCLOUDFLARE_TUNNEL_TOKEN=\n\n# Enable AI tests in production environment (usually false)\n# Set to true only if you want to run AI-related tests in production\nAI_TEST_ENABLED=false\n\n" }, { "path": "dev.env", "content": "# =============================================================================\n# AppFlowy Cloud - Development Environment Configuration\n# =============================================================================\n# This file is used to set the environment variables for local development\n# Copy this file to .env and change the values as needed\n\n# =============================================================================\n# 🗄️ DATABASE & CACHE: Core data infrastructure\n# =============================================================================\n\n# URL for sqlx\nDATABASE_URL=postgres://postgres:password@localhost:5432/postgres\n# Uncomment this to enable build without database\n# .sqlx files must be pregenerated\n# SQLX_OFFLINE=true\n\n# =============================================================================\n# ☁️ APPFLOWY SERVICES: Application service configuration\n# =============================================================================\n\n# GoTrue URL that the appflowy service will use to connect to gotrue\nAPPFLOWY_GOTRUE_BASE_URL=http://localhost:9999\nAPPFLOWY_DATABASE_URL=postgres://postgres:password@localhost:5432/postgres\nAPPFLOWY_ACCESS_CONTROL=true\nAPPFLOWY_WEBSOCKET_MAILBOX_SIZE=6000\nAPPFLOWY_DATABASE_MAX_CONNECTIONS=40\nAPPFLOWY_DOCUMENT_CONTENT_SPLIT_LEN=8000\n\n# =============================================================================\n# 🔐 GOTRUE: Authentication service configuration\n# =============================================================================\n\n# GoTrue Admin Credentials\n# Admin user for accessing the admin panel\nGOTRUE_ADMIN_EMAIL=admin@example.com\nGOTRUE_ADMIN_PASSWORD=password\n\n# JWT Configuration\n# Authentication key, change this and keep the key safe and secret\nGOTRUE_JWT_SECRET=hello456\n# Expiration time in seconds for the JWT token\nGOTRUE_JWT_EXP=604800\n\n# External URL where the GoTrue service is exposed\n# The email verification link provided to users will redirect them to this specified host\n# For instance, if you're running your application locally using 'docker compose up -d',\n# you can set this value to 'http://localhost'\nAPI_EXTERNAL_URL=http://localhost:9999\n\n# GoTrue Database Connection\n# Database URL that gotrue will use\nGOTRUE_DATABASE_URL=postgres://postgres:password@postgres:5432/postgres?search_path=auth\n\n# User Registration & Login Settings\n# User sign up will automatically be confirmed if this is set to true\n# If you have OAuth2 set up or smtp configured, you can set this to false\n# to enforce email confirmation or OAuth2 login instead\nGOTRUE_MAILER_AUTOCONFIRM=false\n# Set this to true if users can only join by invite\nGOTRUE_DISABLE_SIGNUP=false\n\n# Email Rate Limiting\n# Number of emails that can be sent per minute\nGOTRUE_RATE_LIMIT_EMAIL_SENT=1000\n\n# =============================================================================\n# 📧 EMAIL CONFIGURATION: Optional (only configure if you need email features)\n# =============================================================================\n\n# If you enable mail confirmation, you need to set the SMTP configuration below\n# Note that smtps will be used for port 465, otherwise plain smtp with optional STARTTLS\nGOTRUE_SMTP_HOST=smtp.gmail.com\nGOTRUE_SMTP_PORT=465\nGOTRUE_SMTP_USER=email_sender@some_company.com\nGOTRUE_SMTP_PASS=email_sender_password\nGOTRUE_SMTP_ADMIN_EMAIL=comp_admin@some_company.com\n\n# Email template URLs for different types of emails\nGOTRUE_MAILER_TEMPLATES_CONFIRMATION=https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/confirmation.html\nGOTRUE_MAILER_TEMPLATES_INVITE=https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/invite.html\nGOTRUE_MAILER_TEMPLATES_RECOVERY=https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/recovery.html\nGOTRUE_MAILER_TEMPLATES_MAGIC_LINK=https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/magic_link.html\nGOTRUE_MAILER_TEMPLATES_EMAIL_CHANGE=https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/email_change.html\n\n# AppFlowy Cloud Mailer\n# Note that smtps (TLS) is always required, even for ports other than 465\nAPPFLOWY_MAILER_SMTP_HOST=smtp.gmail.com\nAPPFLOWY_MAILER_SMTP_USERNAME=notify@appflowy.io\nAPPFLOWY_MAILER_SMTP_EMAIL=notify@appflowy.io\nAPPFLOWY_MAILER_SMTP_PASSWORD=email_sender_password\nAPPFLOWY_MAILER_SMTP_TLS_KIND=wrapper # \"none\" \"wrapper\" \"required\" \"opportunistic\"\n\n# =============================================================================\n# 🔑 OAUTH PROVIDERS: Optional (configure only the ones you want to use)\n# =============================================================================\n\n# Google OAuth2\nGOTRUE_EXTERNAL_GOOGLE_ENABLED=true\nGOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=\nGOTRUE_EXTERNAL_GOOGLE_SECRET=\nGOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI=http://localhost:9999/callback\n\n# GitHub OAuth2\nGOTRUE_EXTERNAL_GITHUB_ENABLED=false\nGOTRUE_EXTERNAL_GITHUB_CLIENT_ID=\nGOTRUE_EXTERNAL_GITHUB_SECRET=\nGOTRUE_EXTERNAL_GITHUB_REDIRECT_URI=http://localhost:9999/callback\n\n# Discord OAuth2\nGOTRUE_EXTERNAL_DISCORD_ENABLED=false\nGOTRUE_EXTERNAL_DISCORD_CLIENT_ID=\nGOTRUE_EXTERNAL_DISCORD_SECRET=\nGOTRUE_EXTERNAL_DISCORD_REDIRECT_URI=http://localhost:9999/callback\n\n# Apple OAuth2\nGOTRUE_EXTERNAL_APPLE_ENABLED=false\nGOTRUE_EXTERNAL_APPLE_CLIENT_ID=\nGOTRUE_EXTERNAL_APPLE_SECRET=\nGOTRUE_EXTERNAL_APPLE_REDIRECT_URI=http://localhost:9999/callback\n\n# =============================================================================\n# 🏗️ INFRASTRUCTURE SERVICES: Object storage and networking\n# =============================================================================\n\n# AWS credentials (used for MinIO in development)\nAWS_ACCESS_KEY=minioadmin\nAWS_SECRET=minioadmin\n\n# =============================================================================\n# 🎛️ ADMIN FRONTEND: Management interface configuration\n# =============================================================================\n\n# URL that connects to redis for admin frontend\nADMIN_FRONTEND_REDIS_URL=redis://localhost:6379\n# URL that connects to gotrue service for admin frontend\nADMIN_FRONTEND_GOTRUE_URL=http://localhost:9999\n# URL that connects to the appflowy cloud service for admin frontend\nADMIN_FRONTEND_APPFLOWY_CLOUD_URL=http://localhost:8000\n# Base URL path for the admin frontend (usually /console for production, can be empty for development)\nADMIN_FRONTEND_PATH_PREFIX=\n\n# =============================================================================\n# 💾 FILE STORAGE: Local MinIO (works out-of-the-box for development)\n# =============================================================================\n\n# File Storage\nAPPFLOWY_S3_CREATE_BUCKET=true\nAPPFLOWY_S3_USE_MINIO=true\nAPPFLOWY_S3_MINIO_URL=http://localhost:9000 # change this if you are using a different address for minio\"\nAPPFLOWY_S3_ACCESS_KEY=${AWS_ACCESS_KEY}\nAPPFLOWY_S3_SECRET_KEY=${AWS_SECRET}\nAPPFLOWY_S3_BUCKET=appflowy\n# APPFLOWY_S3_REGION=us-east-1\n\n# =============================================================================\n# 🤖 AI FEATURES: Optional (configure only if you want AI functionality)\n# =============================================================================\n\n# AppFlowy AI\n# Standard OpenAI API:\n# Set your API key here if you are using the standard OpenAI API.\nAI_OPENAI_API_KEY=\n# If no summary model is provided, there will be no search summary when using AI search.\nAI_OPENAI_API_SUMMARY_MODEL=\"gpt-4o-mini\"\n\n# Azure-hosted OpenAI API:\n# If you're using a self-hosted OpenAI API via Azure, leave AI_OPENAI_API_KEY empty\n# and set the following Azure-specific variables instead. If both are set, the standard OpenAI API will be used.\nAI_AZURE_OPENAI_API_KEY=\nAI_AZURE_OPENAI_API_BASE=\nAI_AZURE_OPENAI_API_VERSION=\n\nAI_SERVER_PORT=5001\nAI_SERVER_HOST=localhost\nAI_DATABASE_URL=postgresql+psycopg://postgres:password@localhost:5432/postgres\nAI_REDIS_URL=redis://localhost:6379\nAI_APPFLOWY_BUCKET_NAME=${APPFLOWY_S3_BUCKET}\nAI_APPFLOWY_HOST=http://localhost:8000\nAI_MINIO_URL=http://localhost:9000\n\n# Embedding Configuration\nAPPFLOWY_EMBEDDING_CHUNK_SIZE=500\nAPPFLOWY_EMBEDDING_CHUNK_OVERLAP=50\n\n# =============================================================================\n# ⚙️ WORKER SERVICES: Background processing (good defaults for development)\n# =============================================================================\n\n# AppFlowy Indexer (for search functionality)\nAPPFLOWY_INDEXER_ENABLED=true\nAPPFLOWY_INDEXER_DATABASE_URL=postgres://postgres:password@localhost:5432/postgres\nAPPFLOWY_INDEXER_REDIS_URL=redis://localhost:6379\nAPPFLOWY_INDEXER_EMBEDDING_BUFFER_SIZE=5000\n\n# AppFlowy Worker\nAPPFLOWY_WORKER_REDIS_URL=redis://localhost:6379\nAPPFLOWY_WORKER_DATABASE_URL=postgres://postgres:password@localhost:5432/postgres\n\n# =============================================================================\n# 🌐 WEB FRONTEND: AppFlowy Web interface\n# =============================================================================\n\n# AppFlowy Web\nAPPFLOWY_WEB_URL=http://localhost:3000\n\n# =============================================================================\n# 🗄️ PGADMIN: Database Management Web Interface\n# =============================================================================\n\n# PgAdmin credentials for database management web UI\n# You can access pgadmin at http://localhost/pgadmin when running with docker-compose\n# Use the DATABASE_URL values when connecting to the database\nPGADMIN_DEFAULT_EMAIL=admin@example.com\nPGADMIN_DEFAULT_PASSWORD=password\n\n# =============================================================================\n# 🛠️ DEVELOPMENT TOOLS: Database admin, monitoring, etc.\n# =============================================================================\n\n# Log level for the application\nRUST_LOG=info\n\n# Cloudflare tunnel token\nCLOUDFLARE_TUNNEL_TOKEN=\n\n# Enable AI tests in development/CI environment\n# In GitHub CI, this is enabled via the 'ai-test-enabled' feature flag\n# Set to true to run AI-related tests locally (requires valid API keys)\nAI_TEST_ENABLED=false\n" }, { "path": "doc/AUTHENTICATION.md", "content": "# Authentication\n\nFollow [this](https://appflowy.com/docs/Authentication) guide to set up\n" }, { "path": "doc/CONTRIBUTING.md", "content": "# Contributing \n\nFirst of all, thank you for contributing to AppFlowy Cloud! The goal of this document is to provide everything you need\nto know in order to contribute to AppFlowy Cloud and its different integrations.\n\n- [Assumptions](#assumptions)\n- [How to Contribute](#how-to-contribute)\n- [Development Workflow](#development-workflow)\n\n## Assumptions\n\n1. **You're familiar with [GitHub](https://github.com) and\n the [Pull Request](https://help.github.com/en/github/collaborating-with-issues-and-pull-requests/about-pull-requests)(\n PR) workflow.**\n2. **You know about the [AppFlowy community](https://discord.gg/9Q2xaN37tV). Please use this for help.**\n\n## How to Contribute\n\nContributions are welcome! Here's how you can help improve AppFlowy Cloud:\n\n1. Identify or propose enhancements or fixes by\n checking [existing issues](https://github.com/AppFlowy-IO/AppFlowy-Cloud/issues)\n or [creating a new one](https://github.com/AppFlowy-IO/AppFlowy-Cloud/issues/new/choose).\n2. [Fork the repository](https://help.github.com/en/github/getting-started-with-github/fork-a-repo) to your own GitHub\n account. Feel free to discuss your contribution with a maintainer beforehand.\n3. [Create a feature or bugfix branch](https://help.github.com/en/github/collaborating-with-issues-and-pull-requests/creating-and-deleting-branches-within-your-repository)\n in your forked repo.\n4. Familiarize yourself with the [Development Workflow](#development-workflow) for guidelines on maintaining code\n quality.\n5. Implement your changes on the new branch.\n6. [Open a Pull Request (PR)](https://help.github.com/en/github/collaborating-with-issues-and-pull-requests/creating-a-pull-request-from-a-fork)\n against the `main` branch of the original AppFlowy Cloud repo. Await feedback or approval from the maintainers.\n\n## Development Workflow\n\nBefore diving into development, familiarize yourself with the codebase and project standards by reviewing\nthe [Development Guide](./GUIDE.md).\n\n### Setting Up the Local Server\n\nTo start the server on your local machine, run the following script:\n\n```bash\n./script/run_local_server.sh\n```\n\n### Testing\n\nVerify that your changes work as expected by running the test suite:\n\n```bash\ncargo test\n```\n\n### Pull Request (PR) Requirements\n\nFor a pull request to be accepted, it must satisfy the following criteria:\n\n1. **Pass All Tests**: Your PR should not break any existing functionality and must pass all the automated tests.\n\n2. **Linting with Clippy**: Your code must adhere to the linting standards enforced\n by [`clippy`](https://github.com/rust-lang/rust-clippy). You can check for linting issues using:\n\n ```bash\n cargo clippy -- -D warnings\n ```\n\n If `clippy` isn't already installed:\n\n ```bash\n rustup update\n rustup component add clippy\n ```\n\n3. **Code Formatting**: The code must comply with established formatting rules. Use the following commands for\n formatting and checking your code:\n\n To format your code:\n\n ```bash\n cargo fmt\n ```\n\n To validate formatting:\n\n ```bash\n cargo fmt --all -- --check\n ```\n" }, { "path": "doc/DEPLOYMENT.md", "content": "# Deployment\n\nStep-by-step Self Hosting Guides - From Zero to\nProduction ([link](https://appflowy.com/docs/Step-by-step-Self-Hosting-Guide---From-Zero-to-Production))\n" }, { "path": "doc/EC2_SELF_HOST_GUIDE.md", "content": "# Installing AppFlowy-Cloud on an AWS EC2 Ubuntu Instance\n\nFollow the guide [here](https://appflowy.com/docs/Installing-AppFlowy-Cloud-on-AWS-EC2)\n" }, { "path": "doc/GUIDE.md", "content": "# AppFlowy Cloud: Comprehensive Guide\n\n## Overview of File Structure\n\n### Libraries (`libs`)\n- `libs/client-api`: API client for interfacing with AppFlowy-Cloud.\n- `libs/database`: Houses database schema and migration scripts.\n- `libs/database-entity`: Definitions for database entities.\n- `libs/gotrue`: Contains the GoTrue Authentication Server code.\n- `libs/gotrue-entity`: Entity definitions for the GoTrue Auth Server.\n- `libs/realtime`: Realtime server implementation.\n- `libs/collab-rt-entity`: Realtime server entity definitions.\n- `libs/infra`: Scripts and tools for infrastructure management.\n- `libs/app_error`: Custom error types specific to AppFlowy-Cloud.\n\n### Source Code (`src`)\n- `src/api`: Endpoints and handlers for the AppFlowy-Cloud API.\n- `src/biz`: Core business logic of the application.\n- `src/middleware`: Middleware components for API processing.\n\n### Configuration and Migration\n- `configurations`: Contains essential configuration files for various services.\n- `migrations`: Scripts for managing and migrating the Postgres database.\n\n## Service Routing and Access\n\n### Access Points Post Deployment\nAfter executing `docker compose up -d`, AppFlowy-Cloud is accessible at `http://localhost` on ports 80 and 443 with the following routing:\n\n- `/gotrue`: Redirects to the GoTrue Auth Server.\n- `/api`: AppFlowy-Cloud's HTTP API endpoint.\n- `/ws`: WebSocket endpoint for AppFlowy-Cloud.\n- `/console`: User Admin Frontend for AppFlowy.\n- `/pgadmin`: Interface for Postgres database management.\n- `/minio`: User interface for Minio object storage.\n- `/`, `/app`: AppFlowy Web.\n\n![Deployment Architecture](../assets/images/deployment_arch.png)\n\n## Dockerization and Continuous Integration\n\n#### Docker Images\nAppFlowy leverages Docker for efficient deployment and scaling. Docker images are available at:\n- `appflowy_cloud`: [Docker Hub](https://hub.docker.com/repository/docker/appflowyinc/appflowy_cloud/general)\n- `admin_frontend`: [Docker Hub](https://hub.docker.com/repository/docker/appflowyinc/admin_frontend/general)\n- `appflowy_web`: [Docker Hub](https://hub.docker.com/repository/docker/appflowyinc/appflowy_web/general)\n\n#### Automated Builds with GitHub Tags\nThe Docker images are automatically built and updated through a GitHub Actions workflow:\n\n1. **Tag Creation**: A new tag in the GitHub repository indicates a new version or release.\n2. **Automated Build Trigger**: This tag initiates the Docker image building process via GitHub Actions.\n3. **Docker Hub Updates**: The `appflowy_cloud` and `admin_frontend` images are updated on Docker Hub with the latest build.\n" }, { "path": "doc/LOCAL_BUILD.md", "content": "\n# To build a multi-architecture Docker image\n\nDocker's buildx tool, which is a part of Docker BuildKit. This tool allows you to create images for different platforms from a single build command. Here's a basic rundown of the steps:\n\n1. **Enable experimental features** by setting `\"experimental\": \"enabled\"` in your Docker configuration file (`~/.docker/config.json`).\n\n2. **Install QEMU** on your macOS to emulate different architectures:\n ```sh\n brew install qemu\n ```\n\n3. **Create a new builder** that enables buildx and specify the platforms you want to target:\n ```sh\n docker buildx create --name mybuilder --use\n ```\n\n4. **Inspect the builder** to ensure it's correctly configured and can build for the target platforms:\n ```sh\n docker buildx inspect mybuilder --bootstrap\n ```\n\n5. **Build and push the image** to Docker Hub (or another registry) for the desired platforms using the `--platform` flag:\n ```sh\n docker buildx build --platform linux/amd64,linux/arm64,linux/arm/v7 -t /myimage:latest --push .\n ```" }, { "path": "doc/OKTA_SAML.md", "content": "# Okta Authentication via SAML\nFollow [this](https://appflowy.com/docs/How-to-log-in-using-Okta-SAML-2) guide to set up \n" }, { "path": "doc/README.md", "content": "# Docs\n- Directory to contain information about usage and development.\n- [Appflowy Cloud Deployment](./DEPLOYMENT.md)\n- [Appflowy with Cloud](https://docs.appflowy.io/docs/guides/appflowy/self-hosting-appflowy)\n" }, { "path": "docker/gotrue/Dockerfile", "content": "# syntax=docker/dockerfile:1\nFROM golang as base\nWORKDIR /go/src/supabase\nRUN git clone https://github.com/AppFlowy-IO/auth.git --depth 1 --branch 0.8.0\nWORKDIR /go/src/supabase/auth\nRUN CGO_ENABLED=0 go build -o /auth .\n\nFROM alpine:3.20\nRUN adduser -D -u 1000 supabase\n\nRUN apk add --no-cache ca-certificates curl\nUSER supabase\n\nCOPY --from=base /auth .\nCOPY --from=base /go/src/supabase/auth/migrations ./migrations\n\nCOPY start.sh .\nCMD [\"./start.sh\"]\n" }, { "path": "docker/gotrue/start.sh", "content": "#!/usr/bin/env sh\n\nset -e\n./auth migrate\nif [ -n \"${GOTRUE_ADMIN_EMAIL}\" ] && [ -n \"${GOTRUE_ADMIN_PASSWORD}\" ]; then\n set +e\n echo \"Creating admin user for gotrue...\"\n command_output=$(./auth admin createuser --admin --confirm \"${GOTRUE_ADMIN_EMAIL}\" \"${GOTRUE_ADMIN_PASSWORD}\" 2>&1)\n command_status=$?\n # Check if the command failed\n if [ $command_status -ne 0 ]; then\n # Check if the output contains the specific keyword\n if echo \"$command_output\" | grep -q \"user already exists\"; then\n echo \"Admin user already exists. Skipping...\"\n else\n echo \"Command failed. Exiting.\"\n echo $command_output\n exit $command_status\n fi\n fi\nfi\nset -e\n./auth\n" }, { "path": "docker/pgadmin/servers.json", "content": "{\n \"Servers\": {\n \"1\": {\n \"Name\": \"postgres\",\n \"Group\": \"Servers\",\n \"Host\": \"postgres\",\n \"Port\": 5432,\n \"MaintenanceDB\": \"postgres\",\n \"Username\": \"postgres\"\n }\n }\n}\n" }, { "path": "docker/web/Dockerfile", "content": "# syntax=docker/dockerfile:1\nFROM node:20.12.0 AS builder\n\nWORKDIR /app\n\nARG VERSION=main\n\nRUN npm install -g pnpm@8.5.0\nRUN git clone --depth 1 --branch ${VERSION} https://github.com/AppFlowy-IO/AppFlowy-Web.git .\nRUN pnpm install\nRUN sed -i 's|https://test.appflowy.cloud||g' src/components/main/app.hooks.ts\nRUN pnpm run build\n\nFROM nginx:alpine\nCOPY --from=builder /app/dist /usr/share/nginx/html/\nCOPY nginx.conf /etc/nginx/nginx.conf\n" }, { "path": "docker/web/nginx.conf", "content": "worker_processes auto;\npid /var/run/nginx.pid;\n\nevents {\n worker_connections 1024;\n}\n\nhttp {\n include mime.types;\n default_type application/octet-stream;\n\n # Basic optimization\n sendfile on;\n tcp_nopush on;\n tcp_nodelay on;\n keepalive_timeout 65;\n\n # GZIP compression\n gzip on;\n gzip_vary on;\n gzip_min_length 1k;\n gzip_comp_level 6;\n gzip_types text/plain text/css application/json application/javascript text/xml application/xml text/javascript;\n\n server {\n listen 80;\n\n root /usr/share/nginx/html;\n index index.html;\n\n # Static files cache\n location ~* \\.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {\n expires 30d;\n add_header Cache-Control \"public, no-transform\";\n }\n\n # SPA routing\n location / {\n try_files $uri $uri/ /index.html;\n add_header Cache-Control \"no-cache, no-store, must-revalidate\";\n }\n\n # Deny access to non public path\n location ~ /\\. {\n deny all;\n }\n }\n}\n" }, { "path": "docker-compose-ci.yml", "content": "# Essential services for AppFlowy Cloud\n\nservices:\n nginx:\n restart: on-failure\n image: nginx\n ports:\n - ${NGINX_PORT:-80}:80 # Disable this if you are using TLS\n - ${NGINX_TLS_PORT:-443}:443\n volumes:\n - ./nginx/nginx.conf:/etc/nginx/nginx.conf\n - ./nginx/ssl/certificate.crt:/etc/nginx/ssl/certificate.crt\n - ./nginx/ssl/private_key.key:/etc/nginx/ssl/private_key.key\n networks:\n - shared_network\n #- ./nginx_logs:/var/log/nginx\n\n # You do not need this if you have configured to use your own s3 file storage\n # You can try to access http://localhost/minio/browser/appflowy in your browser\n minio:\n restart: on-failure\n image: minio/minio\n ports:\n - 9000:9000\n - 9001:9001\n environment:\n - MINIO_BROWSER_REDIRECT_URL=http://localhost/minio\n - MINIO_ROOT_USER=${APPFLOWY_S3_ACCESS_KEY:-minioadmin}\n - MINIO_ROOT_PASSWORD=${APPFLOWY_S3_SECRET_KEY:-minioadmin}\n command: server /data --console-address \":9001\"\n volumes:\n - minio_data:/data\n networks:\n - shared_network\n\n postgres:\n restart: on-failure\n image: pgvector/pgvector:pg15\n healthcheck:\n test: [ \"CMD\", \"pg_isready\", \"-U\", \"${POSTGRES_USER}\", \"-d\", \"${POSTGRES_DB}\", \"-p\", \"${POSTGRES_PORT:-5432}\" ]\n interval: 5s\n timeout: 5s\n retries: 6\n environment:\n - POSTGRES_USER=${POSTGRES_USER:-postgres}\n - POSTGRES_DB=${POSTGRES_DB:-postgres}\n - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-password}\n - POSTGRES_HOST=${POSTGRES_HOST:-postgres}\n - PGPORT=${POSTGRES_PORT:-5432}\n command: [\"postgres\", \"-c\", \"port=${POSTGRES_PORT:-5432}\"]\n networks:\n - shared_network\n\n redis:\n restart: on-failure\n image: redis\n ports:\n - \"6379:6379\"\n networks:\n - shared_network\n\n gotrue:\n restart: on-failure\n image: appflowyinc/gotrue:${GOTRUE_VERSION:-latest}\n depends_on:\n postgres:\n condition: service_healthy\n healthcheck:\n test: \"curl --fail http://127.0.0.1:9999/health || exit 1\"\n interval: 5s\n timeout: 5s\n retries: 12\n environment:\n # There are a lot of options to configure GoTrue. You can reference the example config:\n # https://github.com/supabase/auth/blob/master/example.env\n - GOTRUE_ADMIN_EMAIL=${GOTRUE_ADMIN_EMAIL}\n - GOTRUE_ADMIN_PASSWORD=${GOTRUE_ADMIN_PASSWORD}\n - GOTRUE_DISABLE_SIGNUP=${GOTRUE_DISABLE_SIGNUP:-false}\n - GOTRUE_SITE_URL=appflowy-flutter:// # redirected to AppFlowy application\n - GOTRUE_URI_ALLOW_LIST=** # adjust restrict if necessary\n - GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET} # authentication secret\n - GOTRUE_JWT_EXP=${GOTRUE_JWT_EXP}\n # Without this environment variable, the createuser command will create an admin\n # with the `admin` role as opposed to `supabase_admin`\n - GOTRUE_JWT_ADMIN_GROUP_NAME=supabase_admin\n - GOTRUE_DB_DRIVER=postgres\n - API_EXTERNAL_URL=${API_EXTERNAL_URL}\n - DATABASE_URL=${GOTRUE_DATABASE_URL}\n - PORT=9999\n - GOTRUE_SMTP_HOST=${GOTRUE_SMTP_HOST} # e.g. smtp.gmail.com\n - GOTRUE_SMTP_PORT=${GOTRUE_SMTP_PORT} # e.g. 465\n - GOTRUE_SMTP_USER=${GOTRUE_SMTP_USER} # email sender, e.g. noreply@appflowy.io\n - GOTRUE_SMTP_PASS=${GOTRUE_SMTP_PASS} # email password\n - GOTRUE_MAILER_URLPATHS_CONFIRMATION=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_INVITE=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_RECOVERY=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE=/gotrue/verify\n - GOTRUE_SMTP_ADMIN_EMAIL=${GOTRUE_SMTP_ADMIN_EMAIL} # email with admin privileges e.g. internal@appflowy.io\n - GOTRUE_SMTP_MAX_FREQUENCY=${GOTRUE_SMTP_MAX_FREQUENCY:-1ns} # set to 1ns for running tests\n - GOTRUE_RATE_LIMIT_EMAIL_SENT=${GOTRUE_RATE_LIMIT_EMAIL_SENT:-100} # number of email sendable per minute\n - GOTRUE_MAILER_AUTOCONFIRM=${GOTRUE_MAILER_AUTOCONFIRM:-false} # change this to true to skip email confirmation\n # Google OAuth config\n - GOTRUE_EXTERNAL_GOOGLE_ENABLED=${GOTRUE_EXTERNAL_GOOGLE_ENABLED}\n - GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=${GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID}\n - GOTRUE_EXTERNAL_GOOGLE_SECRET=${GOTRUE_EXTERNAL_GOOGLE_SECRET}\n - GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI=${GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI}\n # GITHUB OAuth config\n - GOTRUE_EXTERNAL_GITHUB_ENABLED=${GOTRUE_EXTERNAL_GITHUB_ENABLED}\n - GOTRUE_EXTERNAL_GITHUB_CLIENT_ID=${GOTRUE_EXTERNAL_GITHUB_CLIENT_ID}\n - GOTRUE_EXTERNAL_GITHUB_SECRET=${GOTRUE_EXTERNAL_GITHUB_SECRET}\n - GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI=${GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI}\n # Discord OAuth config\n - GOTRUE_EXTERNAL_DISCORD_ENABLED=${GOTRUE_EXTERNAL_DISCORD_ENABLED}\n - GOTRUE_EXTERNAL_DISCORD_CLIENT_ID=${GOTRUE_EXTERNAL_DISCORD_CLIENT_ID}\n - GOTRUE_EXTERNAL_DISCORD_SECRET=${GOTRUE_EXTERNAL_DISCORD_SECRET}\n - GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI=${GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI}\n networks:\n - shared_network\n\n appflowy_cloud:\n restart: on-failure\n ports:\n - 8000:8000\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_ENVIRONMENT=production\n - APPFLOWY_DATABASE_URL=${APPFLOWY_DATABASE_URL}\n - APPFLOWY_REDIS_URI=${APPFLOWY_REDIS_URI}\n - APPFLOWY_GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET}\n - APPFLOWY_GOTRUE_BASE_URL=${APPFLOWY_GOTRUE_BASE_URL}\n - APPFLOWY_S3_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - APPFLOWY_S3_MINIO_URL=${APPFLOWY_S3_MINIO_URL}\n - APPFLOWY_S3_ACCESS_KEY=${APPFLOWY_S3_ACCESS_KEY}\n - APPFLOWY_S3_SECRET_KEY=${APPFLOWY_S3_SECRET_KEY}\n - APPFLOWY_S3_BUCKET=${APPFLOWY_S3_BUCKET}\n - APPFLOWY_S3_REGION=${APPFLOWY_S3_REGION}\n - APPFLOWY_ACCESS_CONTROL=${APPFLOWY_ACCESS_CONTROL}\n # For the CI testing, we set the database connection to 20. The default value is 40.\n - APPFLOWY_DATABASE_MAX_CONNECTIONS=20\n - AI_SERVER_HOST=${AI_SERVER_HOST}\n - AI_SERVER_PORT=${AI_SERVER_PORT}\n - APPFLOWY_WEB_URL=${APPFLOWY_WEB_URL}\n - APPFLOWY_MAILER_SMTP_HOST=${APPFLOWY_MAILER_SMTP_HOST}\n - APPFLOWY_MAILER_SMTP_PORT=${APPFLOWY_MAILER_SMTP_PORT}\n - APPFLOWY_MAILER_SMTP_USERNAME=${APPFLOWY_MAILER_SMTP_USERNAME}\n - APPFLOWY_MAILER_SMTP_EMAIL=${APPFLOWY_MAILER_SMTP_EMAIL}\n - APPFLOWY_MAILER_SMTP_PASSWORD=${APPFLOWY_MAILER_SMTP_PASSWORD}\n - AI_OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - APPFLOWY_SEARCH_SERVICE_URL=${APPFLOWY_SEARCH_SERVICE_URL:-http://appflowy_search:4002}\n - APPFLOWY_SEARCH_REQUEST_TIMEOUT_SECS=${APPFLOWY_SEARCH_REQUEST_TIMEOUT_SECS:-10}\n - AI_ENABLED=${AI_ENABLED:-true}\n # SIGNUP_WHITELIST_ENABLED=true requires GOTRUE_DISABLE_SIGNUP=false on\n # the gotrue service — the whitelist is enforced by GoTrue's\n # BeforeUserCreated PG hook, which never runs when signup is globally\n # disabled.\n - SIGNUP_WHITELIST_ENABLED=${SIGNUP_WHITELIST_ENABLED:-false}\n - GUEST_INVITES_REQUIRE_ADMIN_APPROVAL=${GUEST_INVITES_REQUIRE_ADMIN_APPROVAL:-false}\n build:\n context: .\n dockerfile: Dockerfile\n args:\n FEATURES: \"\"\n PROFILE: ci\n networks:\n - shared_network\n image: appflowyinc/appflowy_cloud:${APPFLOWY_CLOUD_VERSION:-latest}\n depends_on:\n gotrue:\n condition: service_healthy\n appflowy_search:\n condition: service_started\n\n admin_frontend:\n restart: on-failure\n build:\n context: .\n dockerfile: ./admin_frontend/Dockerfile\n image: appflowyinc/admin_frontend:${APPFLOWY_ADMIN_FRONTEND_VERSION:-latest}\n ports:\n - 3000:3000\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - ADMIN_FRONTEND_REDIS_URL=${ADMIN_FRONTEND_REDIS_URL:-redis://redis:6379}\n - ADMIN_FRONTEND_GOTRUE_URL=${ADMIN_FRONTEND_GOTRUE_URL:-http://gotrue:9999}\n - ADMIN_FRONTEND_APPFLOWY_CLOUD_URL=${ADMIN_FRONTEND_APPFLOWY_CLOUD_URL:-http://appflowy_cloud:8000}\n - ADMIN_FRONTEND_PATH_PREFIX=${ADMIN_FRONTEND_PATH_PREFIX:-}\n networks:\n - shared_network\n depends_on:\n gotrue:\n condition: service_healthy\n appflowy_cloud:\n condition: service_started\n\n ai:\n restart: on-failure\n image: appflowyinc/appflowy_ai_premium:${APPFLOWY_AI_VERSION:-latest}\n ports:\n - \"5001:5001\"\n environment:\n - OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - AI_AWS_ACCESS_KEY_ID=${APPFLOWY_S3_ACCESS_KEY}\n - AI_AWS_SECRET_ACCESS_KEY=${APPFLOWY_S3_SECRET_KEY}\n - AI_APPFLOWY_BUCKET_NAME=${AI_APPFLOWY_BUCKET_NAME}\n - AI_SERVER_PORT=${AI_SERVER_PORT}\n - AI_DATABASE_URL=${AI_DATABASE_URL}\n - AI_REDIS_URL=${AI_REDIS_URL}\n - AI_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - AI_MINIO_URL=${AI_MINIO_URL}\n - AI_APPFLOWY_HOST=${AI_APPFLOWY_HOST}\n - SUPPORT_OPENAI_V3_IMAGE_MODEL=false\n - LOG_LEVEL=DEBUG\n networks:\n - shared_network\n\n appflowy_worker:\n restart: on-failure\n image: appflowyinc/appflowy_worker:${APPFLOWY_WORKER_VERSION:-latest}\n build:\n context: .\n dockerfile: ./services/appflowy-worker/Dockerfile\n ports:\n - \"4001:4001\"\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_WORKER_REDIS_URL=${APPFLOWY_WORKER_REDIS_URL:-redis://redis:6379}\n - APPFLOWY_WORKER_ENVIRONMENT=production\n - APPFLOWY_WORKER_DATABASE_URL=${APPFLOWY_WORKER_DATABASE_URL}\n - APPFLOWY_WORKER_DATABASE_NAME=${APPFLOWY_WORKER_DATABASE_NAME}\n - APPFLOWY_S3_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - APPFLOWY_S3_MINIO_URL=${APPFLOWY_S3_MINIO_URL}\n - APPFLOWY_S3_ACCESS_KEY=${APPFLOWY_S3_ACCESS_KEY}\n - APPFLOWY_S3_SECRET_KEY=${APPFLOWY_S3_SECRET_KEY}\n - APPFLOWY_S3_BUCKET=${APPFLOWY_S3_BUCKET}\n - APPFLOWY_S3_REGION=${APPFLOWY_S3_REGION}\n - APPFLOWY_MAILER_SMTP_HOST=${APPFLOWY_MAILER_SMTP_HOST}\n - APPFLOWY_MAILER_SMTP_PORT=${APPFLOWY_MAILER_SMTP_PORT}\n - APPFLOWY_MAILER_SMTP_USERNAME=${APPFLOWY_MAILER_SMTP_USERNAME}\n - APPFLOWY_MAILER_SMTP_EMAIL=${APPFLOWY_MAILER_SMTP_EMAIL}\n - APPFLOWY_MAILER_SMTP_PASSWORD=${APPFLOWY_MAILER_SMTP_PASSWORD}\n networks:\n - shared_network\n\n appflowy_search:\n restart: on-failure\n image: appflowyinc/appflowy_search:${APPFLOWY_SEARCH_VERSION:-latest}\n ports:\n - \"4002:4002\"\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_SEARCH_HOST=${APPFLOWY_SEARCH_HOST:-[::]}\n - APPFLOWY_SEARCH_PORT=${APPFLOWY_SEARCH_PORT:-4002}\n - APPFLOWY_SEARCH_DATABASE_URL=${APPFLOWY_DATABASE_URL}\n - APPFLOWY_SEARCH_REDIS_URL=${APPFLOWY_REDIS_URI}\n - AI_OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - AZURE_OPENAI_API_KEY=${AZURE_OPENAI_API_KEY}\n - AZURE_OPENAI_ENDPOINT=${AZURE_OPENAI_ENDPOINT}\n - AZURE_OPENAI_API_VERSION=${AZURE_OPENAI_API_VERSION}\n - APPFLOWY_BACKGROUND_INDEXER_ENABLED=true\n - APPFLOWY_INDEXER_DATABASE_ENABLED=${APPFLOWY_INDEXER_DATABASE_ENABLED:-false}\n - APPFLOWY_KEYWORD_SEARCH_ENABLED=${APPFLOWY_KEYWORD_SEARCH_ENABLED:-false}\n - APPFLOWY_KEYWORD_WORKER_ENABLED=true\n - APPFLOWY_KEYWORD_INDEX_MAP_SIZE_BYTES=${APPFLOWY_KEYWORD_INDEX_MAP_SIZE_BYTES:-0}\n - APPFLOWY_KEYWORD_INDEX_DIR=${APPFLOWY_KEYWORD_INDEX_DIR:-/var/lib/appflowy/keyword_index}\n - APPFLOWY_GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET}\n volumes:\n - keyword_index_data:/var/lib/appflowy/keyword_index\n networks:\n - shared_network\n depends_on:\n postgres:\n condition: service_healthy\n\nvolumes:\n postgres_data:\n minio_data:\n keyword_index_data:\n\nnetworks:\n shared_network:\n name: appflowy_network\n driver: bridge\n" }, { "path": "docker-compose-dev.yml", "content": "services:\n minio:\n restart: on-failure\n image: minio/minio\n ports:\n - 9000:9000\n - 9001:9001\n environment:\n - MINIO_BROWSER_REDIRECT_URL=http://localhost:9001\n command: server /data --console-address \":9001\"\n\n postgres:\n restart: on-failure\n image: pgvector/pgvector:pg15\n environment:\n - POSTGRES_USER=${POSTGRES_USER:-postgres}\n - POSTGRES_DB=${POSTGRES_DB:-postgres}\n - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-password}\n - POSTGRES_HOST=${POSTGRES_HOST:-postgres}\n - SUPABASE_PASSWORD=${SUPABASE_PASSWORD:-root}\n - PGPORT=${POSTGRES_PORT:-5432}\n command: [\"postgres\", \"-c\", \"port=${POSTGRES_PORT:-5432}\"]\n ports:\n - \"${POSTGRES_PORT:-5432}:${POSTGRES_PORT:-5432}\"\n healthcheck:\n test: [ \"CMD\", \"pg_isready\", \"-U\", \"${POSTGRES_USER}\", \"-d\", \"${POSTGRES_DB}\", \"-p\", \"${POSTGRES_PORT:-5432}\" ]\n interval: 5s\n timeout: 5s\n retries: 12\n\n redis:\n restart: on-failure\n image: redis\n ports:\n - 6379:6379\n\n gotrue:\n restart: on-failure\n image: appflowyinc/gotrue:${GOTRUE_VERSION:-latest}\n depends_on:\n postgres:\n condition: service_healthy\n environment:\n # Gotrue config: https://github.com/supabase/auth/blob/master/example.env\n - GOTRUE_ADMIN_EMAIL=${GOTRUE_ADMIN_EMAIL}\n - GOTRUE_ADMIN_PASSWORD=${GOTRUE_ADMIN_PASSWORD}\n - GOTRUE_DISABLE_SIGNUP=${GOTRUE_DISABLE_SIGNUP:-false}\n - GOTRUE_SITE_URL=appflowy-flutter:// # redirected to AppFlowy application\n - GOTRUE_URI_ALLOW_LIST=** # adjust restrict if necessary\n - GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET} # authentication secret\n - GOTRUE_JWT_EXP=${GOTRUE_JWT_EXP}\n # Without this environment variable, the createuser command will create an admin\n # with the `admin` role as opposed to `supabase_admin`\n - GOTRUE_JWT_ADMIN_GROUP_NAME=supabase_admin\n - GOTRUE_DB_DRIVER=postgres\n - API_EXTERNAL_URL=${API_EXTERNAL_URL}\n - DATABASE_URL=${GOTRUE_DATABASE_URL}\n - PORT=9999\n - GOTRUE_MAILER_URLPATHS_CONFIRMATION=/verify\n - GOTRUE_SMTP_HOST=${GOTRUE_SMTP_HOST} # e.g. smtp.gmail.com\n - GOTRUE_SMTP_PORT=${GOTRUE_SMTP_PORT} # e.g. 465\n - GOTRUE_SMTP_USER=${GOTRUE_SMTP_USER} # email sender, e.g. noreply@appflowy.io\n - GOTRUE_SMTP_PASS=${GOTRUE_SMTP_PASS} # email password\n - GOTRUE_SMTP_ADMIN_EMAIL=${GOTRUE_SMTP_ADMIN_EMAIL} # email with admin privileges e.g. internal@appflowy.io\n - GOTRUE_SMTP_MAX_FREQUENCY=${GOTRUE_SMTP_MAX_FREQUENCY:-1ns} # set to 1ns for running tests\n - GOTRUE_RATE_LIMIT_EMAIL_SENT=${GOTRUE_RATE_LIMIT_EMAIL_SENT:-100} # number of email sendable per minute\n - GOTRUE_MAILER_AUTOCONFIRM=${GOTRUE_MAILER_AUTOCONFIRM:-false} # change this to true to skip email confirmation\n # Google OAuth config\n - GOTRUE_EXTERNAL_GOOGLE_ENABLED=${GOTRUE_EXTERNAL_GOOGLE_ENABLED}\n - GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=${GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID}\n - GOTRUE_EXTERNAL_GOOGLE_SECRET=${GOTRUE_EXTERNAL_GOOGLE_SECRET}\n - GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI=${GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI}\n # Apple OAuth config\n - GOTRUE_EXTERNAL_APPLE_ENABLED=${GOTRUE_EXTERNAL_APPLE_ENABLED}\n - GOTRUE_EXTERNAL_APPLE_CLIENT_ID=${GOTRUE_EXTERNAL_APPLE_CLIENT_ID}\n - GOTRUE_EXTERNAL_APPLE_SECRET=${GOTRUE_EXTERNAL_APPLE_SECRET}\n - GOTRUE_EXTERNAL_APPLE_REDIRECT_URI=${GOTRUE_EXTERNAL_APPLE_REDIRECT_URI}\n # GITHUB OAuth config\n - GOTRUE_EXTERNAL_GITHUB_ENABLED=${GOTRUE_EXTERNAL_GITHUB_ENABLED}\n - GOTRUE_EXTERNAL_GITHUB_CLIENT_ID=${GOTRUE_EXTERNAL_GITHUB_CLIENT_ID}\n - GOTRUE_EXTERNAL_GITHUB_SECRET=${GOTRUE_EXTERNAL_GITHUB_SECRET}\n - GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI=${GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI}\n # Discord OAuth config\n - GOTRUE_EXTERNAL_DISCORD_ENABLED=${GOTRUE_EXTERNAL_DISCORD_ENABLED}\n - GOTRUE_EXTERNAL_DISCORD_CLIENT_ID=${GOTRUE_EXTERNAL_DISCORD_CLIENT_ID}\n - GOTRUE_EXTERNAL_DISCORD_SECRET=${GOTRUE_EXTERNAL_DISCORD_SECRET}\n - GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI=${GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI}\n - GOTRUE_MAILER_TEMPLATES_CONFIRMATION=${GOTRUE_MAILER_TEMPLATES_CONFIRMATION}\n ports:\n - 9999:9999\n\n pgadmin:\n restart: on-failure\n image: dpage/pgadmin4\n depends_on:\n - postgres\n environment:\n - PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL}\n - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD}\n ports:\n - 5400:80\n volumes:\n - ./docker/pgadmin/servers.json:/pgadmin4/servers.json\n\nvolumes:\n postgres_data:\n" }, { "path": "docker-compose-extras.yml", "content": "# Non-essential additional services\ninclude:\n - docker-compose.yml\n\nservices:\n tunnel:\n image: cloudflare/cloudflared\n restart: unless-stopped\n command: tunnel --no-autoupdate run\n environment:\n - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}\n\n pgadmin:\n restart: on-failure\n image: dpage/pgadmin4\n environment:\n - PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL}\n - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD}\n volumes:\n - ./docker/pgadmin/servers.json:/pgadmin4/servers.json\n" }, { "path": "docker-compose.yml", "content": "# Essential services for AppFlowy Cloud\n\nservices:\n nginx:\n restart: on-failure\n image: nginx\n ports:\n - ${NGINX_PORT:-80}:80 # Disable this if you are using TLS\n - ${NGINX_TLS_PORT:-443}:443\n volumes:\n - ./nginx/nginx.conf:/etc/nginx/nginx.conf\n - ./nginx/ssl/certificate.crt:/etc/nginx/ssl/certificate.crt\n - ./nginx/ssl/private_key.key:/etc/nginx/ssl/private_key.key\n\n # You do not need this if you have configured to use your own s3 file storage\n minio:\n restart: on-failure\n image: minio/minio\n environment:\n - MINIO_BROWSER_REDIRECT_URL=${APPFLOWY_BASE_URL?:err}/minio\n - MINIO_ROOT_USER=${APPFLOWY_S3_ACCESS_KEY:-minioadmin}\n - MINIO_ROOT_PASSWORD=${APPFLOWY_S3_SECRET_KEY:-minioadmin}\n command: server /data --console-address \":9001\"\n healthcheck:\n test: [ \"CMD\", \"curl\", \"-f\", \"http://localhost:9000/minio/health/live\" ]\n interval: 30s\n timeout: 20s\n retries: 3\n volumes:\n - minio_data:/data\n\n postgres:\n restart: on-failure\n image: pgvector/pgvector:pg16\n environment:\n - POSTGRES_USER=${POSTGRES_USER:-postgres}\n - POSTGRES_DB=${POSTGRES_DB:-postgres}\n - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-password}\n - POSTGRES_HOST=${POSTGRES_HOST:-postgres}\n - PGPORT=${POSTGRES_PORT:-5432}\n command: [ \"postgres\", \"-c\", \"port=${POSTGRES_PORT:-5432}\" ]\n healthcheck:\n test: [ \"CMD\", \"pg_isready\", \"-U\", \"${POSTGRES_USER}\", \"-d\", \"${POSTGRES_DB}\", \"-p\", \"${POSTGRES_PORT:-5432}\" ]\n interval: 5s\n timeout: 5s\n retries: 12\n volumes:\n - postgres_data:/var/lib/postgresql/data\n\n redis:\n restart: on-failure\n image: redis\n\n gotrue:\n restart: on-failure\n depends_on:\n postgres:\n condition: service_healthy\n healthcheck:\n test: \"curl --fail http://127.0.0.1:9999/health || exit 1\"\n interval: 5s\n timeout: 5s\n retries: 12\n start_period: 40s\n image: appflowyinc/gotrue:${GOTRUE_VERSION:-latest}\n environment:\n # There are a lot of options to configure GoTrue. You can reference the example config:\n # https://github.com/supabase/auth/blob/master/example.env\n # The initial GoTrue Admin user to create, if not already exists.\n - GOTRUE_ADMIN_EMAIL=${GOTRUE_ADMIN_EMAIL}\n # The initial GoTrue Admin user password to create, if not already exists.\n # If the user already exists, the update will be skipped.\n - GOTRUE_ADMIN_PASSWORD=${GOTRUE_ADMIN_PASSWORD}\n - GOTRUE_DISABLE_SIGNUP=${GOTRUE_DISABLE_SIGNUP:-false}\n - GOTRUE_SITE_URL=appflowy-flutter:// # redirected to AppFlowy application\n - GOTRUE_URI_ALLOW_LIST=** # adjust restrict if necessary\n - GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET} # authentication secret\n - GOTRUE_JWT_EXP=${GOTRUE_JWT_EXP}\n # Without this environment variable, the createuser command will create an admin\n # with the `admin` role as opposed to `supabase_admin`\n - GOTRUE_JWT_ADMIN_GROUP_NAME=supabase_admin\n - GOTRUE_DB_DRIVER=postgres\n - API_EXTERNAL_URL=${API_EXTERNAL_URL}\n - DATABASE_URL=${GOTRUE_DATABASE_URL}\n - PORT=9999\n - GOTRUE_SMTP_HOST=${GOTRUE_SMTP_HOST} # e.g. smtp.gmail.com\n - GOTRUE_SMTP_PORT=${GOTRUE_SMTP_PORT} # e.g. 465\n - GOTRUE_SMTP_USER=${GOTRUE_SMTP_USER} # email sender, e.g. noreply@appflowy.io\n - GOTRUE_SMTP_PASS=${GOTRUE_SMTP_PASS} # email password\n - GOTRUE_MAILER_URLPATHS_CONFIRMATION=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_INVITE=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_RECOVERY=/gotrue/verify\n - GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE=/gotrue/verify\n - GOTRUE_MAILER_TEMPLATES_MAGIC_LINK=${GOTRUE_MAILER_TEMPLATES_MAGIC_LINK}\n - GOTRUE_SMTP_ADMIN_EMAIL=${GOTRUE_SMTP_ADMIN_EMAIL} # email with admin privileges e.g. internal@appflowy.io\n - GOTRUE_SMTP_MAX_FREQUENCY=${GOTRUE_SMTP_MAX_FREQUENCY:-1ns} # set to 1ns for running tests\n - GOTRUE_RATE_LIMIT_EMAIL_SENT=${GOTRUE_RATE_LIMIT_EMAIL_SENT:-100} # number of email sendable per minute\n - GOTRUE_MAILER_AUTOCONFIRM=${GOTRUE_MAILER_AUTOCONFIRM:-false} # change this to true to skip email confirmation\n # Google OAuth config\n - GOTRUE_EXTERNAL_GOOGLE_ENABLED=${GOTRUE_EXTERNAL_GOOGLE_ENABLED}\n - GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=${GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID}\n - GOTRUE_EXTERNAL_GOOGLE_SECRET=${GOTRUE_EXTERNAL_GOOGLE_SECRET}\n - GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI=${GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI}\n # GITHUB OAuth config\n - GOTRUE_EXTERNAL_GITHUB_ENABLED=${GOTRUE_EXTERNAL_GITHUB_ENABLED}\n - GOTRUE_EXTERNAL_GITHUB_CLIENT_ID=${GOTRUE_EXTERNAL_GITHUB_CLIENT_ID}\n - GOTRUE_EXTERNAL_GITHUB_SECRET=${GOTRUE_EXTERNAL_GITHUB_SECRET}\n - GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI=${GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI}\n # Discord OAuth config\n - GOTRUE_EXTERNAL_DISCORD_ENABLED=${GOTRUE_EXTERNAL_DISCORD_ENABLED}\n - GOTRUE_EXTERNAL_DISCORD_CLIENT_ID=${GOTRUE_EXTERNAL_DISCORD_CLIENT_ID}\n - GOTRUE_EXTERNAL_DISCORD_SECRET=${GOTRUE_EXTERNAL_DISCORD_SECRET}\n - GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI=${GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI}\n # SAML 2.0 OAuth config\n - GOTRUE_SAML_ENABLED=${GOTRUE_SAML_ENABLED}\n - GOTRUE_SAML_PRIVATE_KEY=${GOTRUE_SAML_PRIVATE_KEY}\n\n appflowy_cloud:\n restart: on-failure\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_ENVIRONMENT=production\n - APPFLOWY_DATABASE_URL=${APPFLOWY_DATABASE_URL}\n - APPFLOWY_REDIS_URI=${APPFLOWY_REDIS_URI}\n - APPFLOWY_GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET}\n - APPFLOWY_GOTRUE_BASE_URL=${APPFLOWY_GOTRUE_BASE_URL}\n - APPFLOWY_S3_CREATE_BUCKET=${APPFLOWY_S3_CREATE_BUCKET}\n - APPFLOWY_S3_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - APPFLOWY_S3_MINIO_URL=${APPFLOWY_S3_MINIO_URL}\n - APPFLOWY_S3_ACCESS_KEY=${APPFLOWY_S3_ACCESS_KEY}\n - APPFLOWY_S3_SECRET_KEY=${APPFLOWY_S3_SECRET_KEY}\n - APPFLOWY_S3_BUCKET=${APPFLOWY_S3_BUCKET}\n - APPFLOWY_S3_REGION=${APPFLOWY_S3_REGION}\n - APPFLOWY_S3_PRESIGNED_URL_ENDPOINT=${APPFLOWY_S3_PRESIGNED_URL_ENDPOINT}\n - APPFLOWY_MAILER_SMTP_HOST=${APPFLOWY_MAILER_SMTP_HOST}\n - APPFLOWY_MAILER_SMTP_PORT=${APPFLOWY_MAILER_SMTP_PORT}\n - APPFLOWY_MAILER_SMTP_USERNAME=${APPFLOWY_MAILER_SMTP_USERNAME}\n - APPFLOWY_MAILER_SMTP_EMAIL=${APPFLOWY_MAILER_SMTP_EMAIL}\n - APPFLOWY_MAILER_SMTP_PASSWORD=${APPFLOWY_MAILER_SMTP_PASSWORD}\n - APPFLOWY_MAILER_SMTP_TLS_KIND=${APPFLOWY_MAILER_SMTP_TLS_KIND}\n - APPFLOWY_ACCESS_CONTROL=${APPFLOWY_ACCESS_CONTROL}\n - APPFLOWY_DATABASE_MAX_CONNECTIONS=${APPFLOWY_DATABASE_MAX_CONNECTIONS}\n - AI_SERVER_HOST=${AI_SERVER_HOST}\n - AI_SERVER_PORT=${AI_SERVER_PORT}\n - AI_OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - APPFLOWY_WEB_URL=${APPFLOWY_WEB_URL}\n - APPFLOWY_BASE_URL=${APPFLOWY_BASE_URL}\n - ASSEMBLYAI_API_KEY=${ASSEMBLYAI_API_KEY}\n - ASSEMBLYAI_API_BASE=${ASSEMBLYAI_API_BASE}\n - ASSEMBLYAI_STREAMING_API_BASE=${ASSEMBLYAI_STREAMING_API_BASE}\n - APPFLOWY_SEARCH_SERVICE_URL=${APPFLOWY_SEARCH_SERVICE_URL:-http://appflowy_search:4002}\n - APPFLOWY_SEARCH_REQUEST_TIMEOUT_SECS=${APPFLOWY_SEARCH_REQUEST_TIMEOUT_SECS:-10}\n - AI_ENABLED=${AI_ENABLED:-true}\n # SIGNUP_WHITELIST_ENABLED=true requires GOTRUE_DISABLE_SIGNUP=false on\n # the gotrue service. The whitelist is enforced by GoTrue's\n # BeforeUserCreated PG hook, which never runs when signup is globally\n # disabled — leaving the whitelist a no-op. Set GOTRUE_DISABLE_SIGNUP=false\n # and rely on the whitelist + invitations to gate who can sign up.\n - SIGNUP_WHITELIST_ENABLED=${SIGNUP_WHITELIST_ENABLED:-false}\n - GUEST_INVITES_REQUIRE_ADMIN_APPROVAL=${GUEST_INVITES_REQUIRE_ADMIN_APPROVAL:-false}\n image: appflowyinc/appflowy_cloud:${APPFLOWY_CLOUD_VERSION:-latest}\n healthcheck:\n test: \"curl --fail http://127.0.0.1:8000/api/health || exit 1\"\n interval: 5s\n timeout: 5s\n retries: 12\n depends_on:\n gotrue:\n condition: service_healthy\n\n admin_frontend:\n restart: on-failure\n image: appflowyinc/admin_frontend:${APPFLOWY_ADMIN_FRONTEND_VERSION:-latest}\n environment:\n - APPFLOWY_GOTRUE_BASE_URL=${APPFLOWY_GOTRUE_BASE_URL:-http://gotrue:9999}\n - APPFLOWY_BASE_URL=${APPFLOWY_BASE_URL:-http://appflowy_cloud:8000}\n\n depends_on:\n gotrue:\n condition: service_healthy\n appflowy_cloud:\n condition: service_healthy\n\n ai:\n restart: on-failure\n image: appflowyinc/appflowy_ai:${APPFLOWY_AI_VERSION:-latest}\n environment:\n - AI_SERVER_PORT=${AI_SERVER_PORT}\n - OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - DEFAULT_AI_MODEL=gpt-4.1-mini # Make sure the model is available in your OpenAI account\n - DEFAULT_AI_COMPLETION_MODEL=gpt-4.1-mini # Make sure the model is available in your OpenAI account\n - AZURE_OPENAI_API_KEY=${AZURE_OPENAI_API_KEY}\n - AZURE_OPENAI_ENDPOINT=${AZURE_OPENAI_ENDPOINT}\n - AZURE_OPENAI_API_VERSION=${AZURE_OPENAI_API_VERSION}\n - APPFLOWY_S3_ACCESS_KEY=${APPFLOWY_S3_ACCESS_KEY}\n - APPFLOWY_S3_SECRET_KEY=${APPFLOWY_S3_SECRET_KEY}\n - APPFLOWY_S3_BUCKET=${APPFLOWY_S3_BUCKET}\n - APPFLOWY_S3_REGION=${APPFLOWY_S3_REGION}\n - AI_DATABASE_URL=${APPFLOWY_DATABASE_URL}\n - AI_REDIS_URL=${APPFLOWY_REDIS_URI}\n - AI_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - AI_MINIO_URL=${APPFLOWY_S3_MINIO_URL}\n - AI_APPFLOWY_HOST=${APPFLOWY_BASE_URL}\n - APPFLOWY_GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET}\n healthcheck:\n test: [ \"CMD\", \"curl\", \"-f\", \"http://localhost:5001/health\" ]\n interval: 30s\n timeout: 10s\n retries: 3\n start_period: 40s\n depends_on:\n postgres:\n condition: service_healthy\n appflowy_cloud:\n condition: service_healthy\n\n appflowy_worker:\n restart: on-failure\n image: appflowyinc/appflowy_worker:${APPFLOWY_WORKER_VERSION:-latest}\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_ENVIRONMENT=production\n - APPFLOWY_WORKER_REDIS_URL=${APPFLOWY_WORKER_REDIS_URL:-redis://redis:6379}\n - APPFLOWY_WORKER_ENVIRONMENT=production\n - APPFLOWY_WORKER_DATABASE_URL=${APPFLOWY_WORKER_DATABASE_URL}\n - APPFLOWY_WORKER_DATABASE_NAME=${APPFLOWY_WORKER_DATABASE_NAME}\n - APPFLOWY_WORKER_IMPORT_TICK_INTERVAL=30\n - APPFLOWY_S3_USE_MINIO=${APPFLOWY_S3_USE_MINIO}\n - APPFLOWY_S3_MINIO_URL=${APPFLOWY_S3_MINIO_URL}\n - APPFLOWY_S3_ACCESS_KEY=${APPFLOWY_S3_ACCESS_KEY}\n - APPFLOWY_S3_SECRET_KEY=${APPFLOWY_S3_SECRET_KEY}\n - APPFLOWY_S3_BUCKET=${APPFLOWY_S3_BUCKET}\n - APPFLOWY_S3_REGION=${APPFLOWY_S3_REGION}\n - APPFLOWY_MAILER_SMTP_HOST=${APPFLOWY_MAILER_SMTP_HOST}\n - APPFLOWY_MAILER_SMTP_PORT=${APPFLOWY_MAILER_SMTP_PORT}\n - APPFLOWY_MAILER_SMTP_USERNAME=${APPFLOWY_MAILER_SMTP_USERNAME}\n - APPFLOWY_MAILER_SMTP_EMAIL=${APPFLOWY_MAILER_SMTP_EMAIL}\n - APPFLOWY_MAILER_SMTP_PASSWORD=${APPFLOWY_MAILER_SMTP_PASSWORD}\n - APPFLOWY_MAILER_SMTP_TLS_KIND=${APPFLOWY_MAILER_SMTP_TLS_KIND}\n depends_on:\n postgres:\n condition: service_healthy\n appflowy_cloud:\n condition: service_healthy\n\n appflowy_search:\n restart: on-failure\n image: appflowyinc/appflowy_search:${APPFLOWY_SEARCH_VERSION:-latest}\n environment:\n - RUST_LOG=${RUST_LOG:-info}\n - APPFLOWY_SEARCH_HOST=${APPFLOWY_SEARCH_HOST:-[::]}\n - APPFLOWY_SEARCH_PORT=${APPFLOWY_SEARCH_PORT:-4002}\n - APPFLOWY_SEARCH_DATABASE_URL=${APPFLOWY_DATABASE_URL}\n - APPFLOWY_SEARCH_REDIS_URL=${APPFLOWY_REDIS_URI}\n - AI_OPENAI_API_KEY=${AI_OPENAI_API_KEY}\n - AZURE_OPENAI_API_KEY=${AZURE_OPENAI_API_KEY}\n - AZURE_OPENAI_ENDPOINT=${AZURE_OPENAI_ENDPOINT}\n - AZURE_OPENAI_API_VERSION=${AZURE_OPENAI_API_VERSION}\n - APPFLOWY_BACKGROUND_INDEXER_ENABLED=true\n - APPFLOWY_INDEXER_DATABASE_ENABLED=${APPFLOWY_INDEXER_DATABASE_ENABLED:-false}\n - APPFLOWY_KEYWORD_SEARCH_ENABLED=${APPFLOWY_KEYWORD_SEARCH_ENABLED:-true}\n - APPFLOWY_KEYWORD_WORKER_ENABLED=true\n - APPFLOWY_KEYWORD_INDEX_MAP_SIZE_BYTES=${APPFLOWY_KEYWORD_INDEX_MAP_SIZE_BYTES:-2147483648}\n - APPFLOWY_KEYWORD_INDEX_DIR=${APPFLOWY_KEYWORD_INDEX_DIR:-/var/lib/appflowy/keyword_index}\n - APPFLOWY_GOTRUE_JWT_SECRET=${GOTRUE_JWT_SECRET}\n volumes:\n - keyword_index_data:/var/lib/appflowy/keyword_index\n depends_on:\n postgres:\n condition: service_healthy\n\n appflowy_web:\n restart: on-failure\n image: appflowyinc/appflowy_web:${APPFLOWY_WEB_VERSION:-latest}\n depends_on:\n appflowy_cloud:\n condition: service_healthy\n environment:\n - APPFLOWY_BASE_URL=${APPFLOWY_BASE_URL}\n - APPFLOWY_GOTRUE_BASE_URL=${APPFLOWY_BASE_URL}/gotrue\n - APPFLOWY_WS_BASE_URL=${APPFLOWY_WEBSOCKET_BASE_URL}\nvolumes:\n postgres_data:\n minio_data:\n keyword_index_data:\n" }, { "path": "email_template/.editorconfig", "content": "root = true\n\n[*]\nindent_style = space\nindent_size = 2\nend_of_line = lf\ncharset = utf-8\ntrim_trailing_whitespace = true\ninsert_final_newline = true\n" }, { "path": "email_template/.gitignore", "content": "node_modules\nbuild_local\n.vscode\n.idea\nThumbs.db\n.DS_Store\nnpm-debug.log\nyarn-error.log\n" }, { "path": "email_template/.npmrc", "content": "shamefully-hoist=true\n" }, { "path": "email_template/LICENSE", "content": "The MIT License (MIT)\n\nCopyright (c) Cosmin Popovici\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n" }, { "path": "email_template/README.md", "content": "## About\nThis contains the source code for the mail templates used by GoTrue and\nAppFlowy Cloud services.\n\n## Development\n\nRun this command and follow the prompts\n\n```bash\n# install pnpm@8.5.0\n\nnpm install -g pnpm@8.5.0\n\npnpm i\n\npnpm run dev\n```\n\n## Build\n\nRun this command to build the project to generate the final output in the assets/mailer_templates/build_production\nfolder\n\n```bash\n pnpm run build\n```\n" }, { "path": "email_template/config.js", "content": "/** @type {import('@maizzle/framework').Config} */\n\n/*\n|-------------------------------------------------------------------------------\n| Development config https://maizzle.com/docs/environments\n|-------------------------------------------------------------------------------\n|\n| The exported object contains the default Maizzle settings for development.\n| This is used when you run `maizzle build` or `maizzle serve` and it has\n| the fastest build time, since most transformations are disabled.\n|\n*/\n\nmodule.exports = {\n build: {\n templates: {\n source: \"src/templates\",\n destination: {\n path: \"build_local\",\n },\n assets: {\n source: \"src/images\",\n destination: \"images\",\n },\n },\n },\n locals: {\n cdnBaseUrl: \"\",\n userIconUrl: \"https://cdn-icons-png.flaticon.com/512/1077/1077012.png\",\n error: \"Test error message\",\n detailError: \"Test detail error message\",\n userName: \"John Doe\",\n acceptUrl: \"https://appflowy.io\",\n approveUrl: \"https://appflowy.io\",\n launchWorkspaceUrl: \"https://appflowy.io\",\n workspaceName: \"AppFlowy\",\n workspaceMembersCount: \"100\",\n workspaceIconURL: \"https://cdn-icons-png.flaticon.com/512/1078/1078013.png\",\n mentionedPageName: \"Test Page\",\n mentionedPageUrl: \"https://appflowy.io\",\n mentionerName: \"John Doe\",\n mentionerIconUrl: \"https://cdn-icons-png.flaticon.com/512/1077/1077012.png\",\n mentionedAt: \"Jul 22, 2025, 3:42 PM (UTC)\",\n },\n};\n" }, { "path": "email_template/config.production.js", "content": "/** @type {import('@maizzle/framework').Config} */\n\n/*\n|-------------------------------------------------------------------------------\n| Production config https://maizzle.com/docs/environments\n|-------------------------------------------------------------------------------\n|\n| This is where you define settings that optimize your emails for production.\n| These will be merged on top of the base config.js, so you only need to\n| specify the options that are changing.\n|\n*/\n\nmodule.exports = {\n build: {\n templates: {\n destination: {\n path: \"../assets/mailer_templates/build_production\",\n },\n },\n },\n locals: {\n cdnBaseUrl:\n \"https://raw.githubusercontent.com/AppFlowy-IO/AppFlowy-Cloud/main/assets/mailer_templates/build_production/\",\n error: \"{{ error }}\",\n detailError: \"{{ error_detail }}\",\n userIconUrl: \"{{ user_icon_url }}\",\n importFileName: \"{{ import_file_name }}\",\n importTaskId: \"{{ import_task_id }}\",\n userName: \"{{ username }}\",\n acceptUrl: \"{{ accept_url }}\",\n approveUrl: \"{{ approve_url }}\",\n launchWorkspaceUrl: \"{{ launch_workspace_url }}\",\n workspaceName: \"{{ workspace_name }}\",\n workspaceMembersCount: \"{{ workspace_member_count }}\",\n workspaceIconURL: \"{{ workspace_icon_url }}\",\n mentionedPageName: \"{{ mentioned_page_name }}\",\n mentionedPageUrl: \"{{ mentioned_page_url }}\",\n mentionerName: \"{{ mentioner_name }}\",\n mentionerIconUrl: \"{{ mentioner_icon_url }}\",\n mentionedAt: \"{{ mentioned_at }}\",\n },\n inlineCSS: true,\n removeUnusedCSS: true,\n shorthandCSS: true,\n prettify: true,\n};\n" }, { "path": "email_template/package.json", "content": "{\n \"private\": true,\n \"scripts\": {\n \"dev\": \"maizzle serve\",\n \"build\": \"maizzle build production\"\n },\n \"dependencies\": {\n \"@maizzle/framework\": \"4.4.6\",\n \"tailwindcss-box-shadow\": \"^2.0.0\",\n \"tailwindcss-email-variants\": \"^2.0.0\",\n \"tailwindcss-mso\": \"^1.4.1\",\n \"tailwindcss\": \"^3.3.0\"\n },\n \"engines\": {\n \"pnpm\": \">=8.0.0 <9.0.0\",\n \"node\": \">=14.0.0\"\n }\n}\n" }, { "path": "email_template/src/components/button.html", "content": "\n\n
\n \n \n \n \n \n \n \n \n \n
\n" }, { "path": "email_template/src/components/divider.html", "content": "\n\n\n" }, { "path": "email_template/src/components/footer.html", "content": "\n\n \n \n \n \n \n \n \n \n\n \n \n \n \n\n \n \n \n \n \n \n \n \n
\n \n
\n \n Bring projects, knowledge, and teams together with the power of\n AI.\n \n
\n \n \n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n \n \n\n \n \n \n \n \n \n Copyright © 2025, AppFlowy Inc.\n \n \n Need Help?\n \n support@appflowy.io\n \n \n \n \n \n \n \n\n" }, { "path": "email_template/src/components/spacer.html", "content": "\n\n\n \n\n\n
\n\n" }, { "path": "email_template/src/components/v-fill.html", "content": "\n\n\n\n\n" }, { "path": "email_template/src/components/v-image.html", "content": "\n\n\n\n\n" }, { "path": "email_template/src/css/resets.css", "content": "/*\n * Here is where you can add your global email CSS resets.\n *\n * We use a custom, email-specific CSS reset, instead\n * of Tailwind's web-optimized `base` layer.\n *\n * Styles defined here will be inlined.\n*/\n\nimg {\n @apply max-w-full leading-none align-middle;\n}\n" }, { "path": "email_template/src/css/tailwind.css", "content": "/* Your custom CSS resets for email */\n@import \"resets\";\n\n/* Tailwind CSS components */\n@import \"tailwindcss/components\";\n\n/**\n * @import here any custom CSS components - that is, CSS that\n * you'd want loaded before the Tailwind utilities, so the\n * utilities can still override them.\n*/\n\n/* Tailwind CSS utility classes */\n@import \"tailwindcss/utilities\";\n\n/* Your custom utility classes */\n@import \"utilities\";\n" }, { "path": "email_template/src/css/utilities.css", "content": "/*\n * Here is where you can define your custom utility classes.\n *\n * We wrap them in the `utilities` @layer directive, so\n * that Tailwind moves them to the correct location.\n *\n * More info:\n * https://tailwindcss.com/docs/functions-and-directives#layer\n*/\n\n@layer utilities {\n .break-word {\n word-break: break-word;\n }\n}\n" }, { "path": "email_template/src/layouts/main.html", "content": "\n\n\n \n \n \n \n \n \n \n \n {{{ page.title }}}\n \n \n \n\n\n \n
\n {{{ page.preheader }}}\n  ͏ \n
\n \n
\n \n
\n\n\n" }, { "path": "email_template/src/templates/access_request.html", "content": "---\ntitle: \"Request to join the workspace\"\npreheader: \"Approve a user's request to join the workspace.\"\nbodyClass: bg-purple-50\n---\n\n\n \n \n \n \n \n \n \n \n
\n
\n \n
\n

\n {{ userName }}\n has requested access to \n {{ workspaceName }}\n

\n \n \n \n \n \n \n
\n \n \n \n \n
{{ workspaceName }}
\n
\n {{ workspaceMembersCount }} members\n
\n
\n \n
Approve request
\n \n \n By clicking \"Approve request\" above, the user will be added to the\n workspace.\n \n \n
\n

\n \n \n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n

\n
\n \n\n" }, { "path": "email_template/src/templates/access_request_approved_notification.html", "content": "---\ntitle: \"Your access request has been approved\"\npreheader: \"Workspace access request approved notification\"\nbodyClass: bg-purple-50\n---\n\n\n \n \n \n \n \n \n \n \n
\n

\n Your request to access \n {{ workspaceName }}\n has been approved \n

\n \n \n \n \n \n \n
\n \n \n \n \n
{{ workspaceName }}
\n
\n {{ workspaceMembersCount }} members\n
\n
\n \n
View workspace
\n \n \n By clicking \"View workspace\" above, you confirm that you have read,\n understood, and agreed to AppFlowy's\n Terms & Conditions\n and\n Privacy Policy.\n \n \n
\n

\n \n \n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n

\n
\n \n\n" }, { "path": "email_template/src/templates/confirmation.html", "content": "---\ntitle: \"New sign up for AppFlowy\"\nbodyClass: #EEEEFC\n---\n\n\n
\n To login to AppFlowy, follow this link @{{ .ConfirmationURL }}\n
\n\n \n \n \n \n \n \n \n \n \n\n \n \n \n Login for AppFlowy\n \n \n \n\n \n \n

\n We have received a request to confirm your AppFlowy account.\n

\n

\n You can log in using either of the following options:\n

\n \n \n\n \n \n \n \n \n \n Option 1: Magic Link (Fast & Easy)\n \n \n Click the button or link below to log in instantly\n

\n \n \n\n \n \n \n \n \n Login to AppFlowy\n \n \n \n \n \n\n \n \n \n Or paste this into your browser:\n

\n

\n \n @{{ .ConfirmationURL }}\n \n

\n \n \n \n \n \n\n \n \n \n \n \n \n Option 2: One-Time Password (OTP)\n \n \n Prefer to enter a code instead? Use the one-time code\n below\n

\n \n \n\n \n \n @{{ .Token }}\n \n \n \n \n \n\n \n \n

\n This code and magic link will expire in 5 minutes for security\n reasons.\n

\n

\n If you didn't initiate this login, you can safely ignore this\n email. No action is needed.\n

\n \n \n\n \n \n \n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n\n

\n Copyright © 2025, AppFlowy Inc.\n

\n

\n Need Help?\n support@appflowy.io\n

\n \n \n \n \n \n \n\n" }, { "path": "email_template/src/templates/import_data_fail.html", "content": "---\ntitle: \"Workspace Import Failed\"\npreheader: \"There was an issue with your workspace import\"\nbodyClass: bg-purple-50\n---\n\n\n
\n \n \n \n \n \n \n \n
\n

\n Notion Import Failed\n\n

\n\n

\n {{ error }}\n

\n\n
\n Join our Discord server to get quick help\n or \n report the issue on GitHub\n
\n\n \n
\n

\n \n \n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n\n\n" }, { "path": "email_template/src/templates/import_data_success.html", "content": "---\ntitle: \"Workspace Import Success\"\npreheader: \"Your workspace import was successful\"\nbodyClass: bg-purple-50\n---\n\n\n
\n \n \n \n \n \n \n \n
\n

\n Notion Import Complete\n\n

\n\n

\n Your Notion data has been successfully imported into\n

\n

\n {{ workspaceName }}\n

\n \n \n \n \n \n \n
\n \n \"{{\n \n\n \n
\n {{ workspaceName }}\n
\n
1 member
\n\n
\n \n\n
\n Download\n
\n \n \n
\n

\n \n \n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n" }, { "path": "email_template/src/templates/magic_link.html", "content": "---\ntitle: \"Login for AppFlowy\"\nbodyClass: #EEEEFC\n---\n\n\n
\n To login to AppFlowy, follow this link @{{ .ConfirmationURL }}\n
\n\n \n \n \n \n
\n \n \n \n \n\n \n \n \n\n \n \n \n\n \n \n \n\n \n \n \n\n \n \n \n\n \n \n \n
\n \n
\n

Login for AppFlowy

\n
\n

We received a request to log in to your AppFlowy account.

\n

You can log in using either of the following options:

\n
\n \n \n \n \n\n \n \n \n\n \n \n \n
\n

Option 1: Magic Link (Fast & Easy)

\n

Click the button or link below to log in instantly

\n
\n \n \n \n \n
\n Login to AppFlowy\n
\n
\n

Or paste this into your browser:

\n

\n \n @{{ .ConfirmationURL }}\n \n

\n
\n
\n \n \n \n \n\n \n \n \n
\n

Option 2: One-Time Password (OTP)

\n

Prefer to enter a code instead? Use the one-time code below

\n
\n @{{ .Token }}\n
\n
\n

This code and magic link will expire in 5 minutes for security reasons.

\n

If you didn't initiate this login, you can safely ignore this email. No action is needed.

\n
\n

Bring projects, knowledge, and teams together with the power of AI.

\n\n

\n \n \"Discord\"\n \n \n \"GitHub\"\n \n \n \"Reddit\"\n \n \n \"Twitter\"\n \n \n \"Youtube\"\n \n

\n\n

Copyright © 2025, AppFlowy Inc.

\n

\n Need Help? support@appflowy.io\n

\n
\n
\n\n" }, { "path": "email_template/src/templates/page_mention_notification.html", "content": "---\nbodyClass: bg-[#EEEEFC]\n---\n\n\n
\n \n \n \n

\n \n

\n\n

\n {{ mentionerName }}\n has mentioned you in \n {{ mentionedPageName }}\n

\n\n \n {{ mentionedAt }}\n

\n \n {{ workspaceName }} / ... / {{ mentionedPageName }}\n

\n\n
\n \n Go to page\n \n
\n\n \n
\n\n \n
\n \n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n\n \n Copyright © 2025, AppFlowy Inc.\n

\n \n Need Help?\n \n support@appflowy.io\n \n

\n \n \n {{ timestamp }}\n \n
\n \n \n
\n
\n\n" }, { "path": "email_template/src/templates/recovery.html", "content": "---\ntitle: \"AppFlowy Password Recovery\"\nbodyClass: #EEEEFC\n---\n\n\n
\n To reset your password, enter the code below in the app:\n
\n\n \n \n \n \n \n \n \n \n \n\n \n \n \n Reset your password\n \n \n \n\n \n \n

\n Someone recently requested a password reset for your AppFlowy\n account. If this was you, use the following verification code.\n

\n \n \n \n \n @{{ .Token }}\n \n \n \n \n

\n This code will expire in 5 minutes for security reasons.\n

\n

\n If you didn't initiate this recovery, you can safely ignore this\n email. No action is needed.\n

\n \n \n\n \n \n \n Bring projects, knowledge, and teams together with the power of\n AI.\n

\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n\n

\n Copyright © 2025, AppFlowy Inc.\n

\n

\n Need Help?\n support@appflowy.io\n

\n \n \n \n \n \n \n\n" }, { "path": "email_template/src/templates/workspace_invitation.html", "content": "---\ntitle: \"Confirm to join the workspace\"\npreheader: \"Please confirm your email address to join the workspace.\"\nbodyClass: bg-purple-50\n---\n\n\n
\n \n \n \n \n \n \n \n
\n
\n \"{{\n
\n

\n {{ userName }}\n invited you to \n {{ workspaceName }}\n

\n \n \n \n \n \n \n
\n \n \"{{\n \n\n \n
\n {{ workspaceName }}\n
\n
{{ workspaceMembersCount }} members
\n
\n \n\n
\n Join workspace\n
require v0.5.6+ to continue
\n
\n \n
\n By clicking \"Join workspace\" above, you confirm that you have read, understood, and agreed to\n AppFlowy's Terms &\n Conditions\n and Privacy\n Policy.\n
\n \n
\n

\n \n \n \n

\n

\n Bring projects, knowledge, and teams together with the power of AI.\n

\n\n

\n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n \n \"Maizzle\"\n \n

\n
\n
\n" }, { "path": "email_template/tailwind.config.js", "content": "/** @type {import('tailwindcss').Config} */\nmodule.exports = {\n theme: {\n screens: {\n sm: { max: '600px' },\n xs: { max: '425px' },\n },\n extend: {\n spacing: {\n screen: '100vw',\n full: '100%',\n 0: '0',\n 0.5: '2px',\n 1: '4px',\n 1.5: '6px',\n 2: '8px',\n 2.5: '10px',\n 3: '12px',\n 3.5: '14px',\n 4: '16px',\n 4.5: '18px',\n 5: '20px',\n 5.5: '22px',\n 6: '24px',\n 6.5: '26px',\n 7: '28px',\n 7.5: '30px',\n 8: '32px',\n 8.5: '34px',\n 9: '36px',\n 9.5: '38px',\n 10: '40px',\n 11: '44px',\n 12: '48px',\n 14: '56px',\n 16: '64px',\n 20: '80px',\n 24: '96px',\n 28: '112px',\n 32: '128px',\n 36: '144px',\n 40: '160px',\n 44: '176px',\n 48: '192px',\n 52: '208px',\n 56: '224px',\n 60: '240px',\n 64: '256px',\n 72: '288px',\n 80: '320px',\n 96: '384px',\n },\n borderRadius: {\n none: '0px',\n sm: '2px',\n DEFAULT: '4px',\n md: '6px',\n lg: '8px',\n xl: '12px',\n '2xl': '16px',\n '3xl': '24px',\n },\n boxShadow: {\n sm: '0 1px 2px 0 rgba(0, 0, 0, 0.05)',\n DEFAULT: '0 1px 3px 0 rgba(0, 0, 0, 0.1), 0 1px 2px -1px rgba(0, 0, 0, 0.1)',\n md: '0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1)',\n lg: '0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -4px rgba(0, 0, 0, 0.1)',\n xl: '0 20px 25px -5px rgba(0, 0, 0, 0.1), 0 8px 10px -6px rgba(0, 0, 0, 0.1)',\n '2xl': '0 25px 50px -12px rgba(0, 0, 0, 0.25)',\n inner: 'inset 0 2px 4px 0 rgba(0, 0, 0, 0.05)',\n },\n fontFamily: {\n sans: ['ui-sans-serif', 'system-ui', '-apple-system', '\"Segoe UI\"', 'sans-serif'],\n serif: ['ui-serif', 'Georgia', 'Cambria', '\"Times New Roman\"', 'Times', 'serif'],\n mono: ['ui-monospace', 'Menlo', 'Consolas', 'monospace'],\n helvetica: ['Helvetica', 'ui-sans-serif', 'system-ui', '-apple-system', '\"Segoe UI\"', 'sans-serif'],\n },\n fontSize: {\n 0: '0',\n xxs: '11px',\n xs: '12px',\n '2xs': '13px',\n sm: '14px',\n '2sm': '15px',\n base: '16px',\n lg: '18px',\n xl: '20px',\n '2xl': '24px',\n '3xl': '30px',\n '4xl': '36px',\n '5xl': '48px',\n '6xl': '60px',\n '7xl': '72px',\n '8xl': '96px',\n '9xl': '128px',\n },\n letterSpacing: theme => ({\n ...theme('width'),\n }),\n lineHeight: theme => ({\n ...theme('width'),\n }),\n maxWidth: theme => ({\n ...theme('width'),\n xs: '160px',\n sm: '192px',\n md: '224px',\n lg: '256px',\n xl: '288px',\n '2xl': '336px',\n '3xl': '384px',\n '4xl': '448px',\n '5xl': '512px',\n '6xl': '576px',\n '7xl': '640px',\n }),\n minHeight: theme => ({\n ...theme('width'),\n }),\n minWidth: theme => ({\n ...theme('width'),\n }),\n },\n },\n corePlugins: {\n preflight: false,\n backgroundOpacity: false,\n borderOpacity: false,\n divideOpacity: false,\n placeholderOpacity: false,\n textOpacity: false,\n },\n plugins: [\n require('tailwindcss-mso'),\n require('tailwindcss-box-shadow'),\n require('tailwindcss-email-variants'),\n ],\n};\n" }, { "path": "env.deploy.secret.example", "content": "# Copy this file to .env.deploy.secret and replace the placeholder values with\n# your actual production secrets. Use this with deploy.env as your base environment.\n#\n# Usage:\n# cp env.deploy.secret.example .env.deploy.secret\n# # Edit .env.deploy.secret with your real production values\n# ./script/generate_env.sh\n# # Select \"deploy.env\" when prompted\n#\n\n# OAuth Providers (optional)\nGOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=\nGOTRUE_EXTERNAL_GOOGLE_SECRET=\n\n# AI Features (optional)\nAI_OPENAI_API_KEY=" }, { "path": "env.dev.secret.example", "content": "# Copy this file to .env.dev.secret and replace the placeholder values with your\n# actual secrets. The generate_env.sh script will merge these values into your\n# chosen base environment file (deploy.env or dev.env).\n#\n# Usage:\n# cp env.dev.secret.example .env.dev.secret\n# # Edit .env.dev.secret with your real values\n# ./script/generate_env.sh\n# # Select \"dev.env\" when prompted\n\n# OAuth Providers (optional)\nGOTRUE_EXTERNAL_GOOGLE_CLIENT_ID=\nGOTRUE_EXTERNAL_GOOGLE_SECRET=\n\n# AI Features (optional)\nAI_OPENAI_API_KEY=" }, { "path": "external_proxy_config/nginx/appflowy.site.conf", "content": "# You can use this site configuration as a template if you want to use an external reverse proxy\n# as opposed to the nginx service in the docker compose.\n# Remember to expose the ports of the docker compose services based on the configuration here, and\n# update the Nginx configuration as necessary if you map the services to different ports.\n\nmap $http_upgrade $connection_upgrade {\n default upgrade;\n '' close;\n}\n\nserver {\n server_name appflowy-cloud.example.com;\n listen 80;\n underscores_in_headers on;\n set $appflowy_cloud_backend \"http://127.0.0.1:8000\";\n set $gotrue_backend \"http://127.0.0.1:9999\";\n set $admin_frontend_backend \"http://127.0.0.1:3001\";\n set $appflowy_web_backend \"http://127.0.0.1:3000\";\n set $minio_backend \"http://127.0.0.1:9001\";\n set $minio_api_backend \"http://127.0.0.1:9000\";\n # Host name for minio, used internally within docker compose\n set $minio_internal_host \"minio:9000\";\n\n # GoTrue\n location /gotrue/ {\n proxy_pass $gotrue_backend;\n\n rewrite ^/gotrue(/.*)$ $1 break;\n\n # Allow headers like redirect_to to be handed over to the gotrue\n # for correct redirecting\n proxy_set_header Host $http_host;\n proxy_pass_request_headers on;\n }\n\n # WebSocket\n location /ws {\n proxy_pass $appflowy_cloud_backend;\n\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection \"Upgrade\";\n proxy_set_header Host $host;\n proxy_read_timeout 86400s;\n }\n\n location /api {\n proxy_pass $appflowy_cloud_backend;\n proxy_set_header X-Request-Id $request_id;\n proxy_set_header Host $http_host;\n\n location ~* ^/api/workspace/([a-zA-Z0-9_-]+)/publish$ {\n proxy_pass $appflowy_cloud_backend;\n proxy_request_buffering off;\n client_max_body_size 256M;\n }\n\n # AppFlowy-Cloud\n location /api/chat {\n proxy_pass $appflowy_cloud_backend;\n\n proxy_http_version 1.1;\n proxy_set_header Connection \"\";\n chunked_transfer_encoding on;\n proxy_buffering off;\n proxy_cache off;\n\n proxy_read_timeout 600s;\n proxy_connect_timeout 600s;\n proxy_send_timeout 600s;\n }\n\n location /api/import {\n proxy_pass $appflowy_cloud_backend;\n\n # Set headers\n proxy_set_header X-Request-Id $request_id;\n proxy_set_header Host $http_host;\n proxy_set_header X-Host $scheme://$host;\n\n # Timeouts\n proxy_read_timeout 600s;\n proxy_connect_timeout 600s;\n proxy_send_timeout 600s;\n\n # Disable buffering for large file uploads\n proxy_request_buffering off;\n proxy_buffering off;\n proxy_cache off;\n client_max_body_size 2G;\n }\n }\n\n # Minio Web UI\n # Derive from: https://min.io/docs/minio/linux/integrations/setup-nginx-proxy-with-minio.html\n # Optional Module, comment this section if you are did not deploy minio in docker-compose.yml\n # This endpoint is meant to be used for the MinIO Web UI, accessible via the admin portal\n location /minio/ {\n proxy_pass $minio_backend;\n\n rewrite ^/minio/(.*) /$1 break;\n proxy_set_header Host $http_host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_set_header X-NginX-Proxy true;\n\n ## This is necessary to pass the correct IP to be hashed\n real_ip_header X-Real-IP;\n\n proxy_connect_timeout 300s;\n\n ## To support websockets in MinIO versions released after January 2023\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection \"upgrade\";\n # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)\n # Uncomment the following line to set the Origin request to an empty string\n # proxy_set_header Origin '';\n\n chunked_transfer_encoding off;\n }\n\n # Optional Module, comment this section if you are did not deploy minio in docker-compose.yml\n # This is used for presigned url, which is needs to be exposed to the AppFlowy client application.\n location /minio-api/ {\n proxy_pass $minio_api_backend;\n\n # Set the host to internal host because the presigned url was signed against the internal host\n proxy_set_header Host $minio_internal_host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n\n rewrite ^/minio-api/(.*) /$1 break;\n\n proxy_connect_timeout 300s;\n # Default is HTTP/1, keepalive is only enabled in HTTP/1.1\n proxy_http_version 1.1;\n proxy_set_header Connection \"\";\n chunked_transfer_encoding off;\n client_max_body_size 1000M;\n }\n\n # Admin Frontend\n # Optional Module, comment this section if you are did not deploy admin_frontend in docker-compose.yml\n location /console {\n proxy_pass $admin_frontend_backend;\n\n proxy_set_header X-Scheme $scheme;\n proxy_set_header Host $host;\n }\n\n # AppFlowy Web\n location / {\n proxy_pass $appflowy_web_backend;\n proxy_set_header X-Scheme $scheme;\n proxy_set_header Host $host;\n }\n}\n" }, { "path": "libs/access-control/Cargo.toml", "content": "[package]\nname = \"access-control\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n[dependencies]\nactix-http.workspace = true\napp-error.workspace = true\nanyhow.workspace = true\nasync-trait.workspace = true\ncasbin = { version = \"2.10.1\", features = [\n \"cached\",\n \"runtime-tokio\",\n \"incremental\",\n], optional = true }\ndatabase.workspace = true\ndatabase-entity.workspace = true\nfutures-util.workspace = true\nlazy_static.workspace = true\nprometheus-client.workspace = true\nrand = \"0.8\"\nredis = { workspace = true, features = [\n \"aio\",\n \"tokio-comp\",\n \"connection-manager\",\n] }\nserde_json = { version = \"1.0\" }\nsqlx = { workspace = true, default-features = false, features = [\"postgres\"] }\ntracing.workspace = true\ntokio = { workspace = true, features = [\"macros\", \"time\", \"rt-multi-thread\"] }\ntokio-stream.workspace = true\nuuid = { workspace = true, features = [\"v4\"] }\nserde = { version = \"1.0.200\", features = [\"derive\"] }\ninfra.workspace = true\n\n[features]\ndefault = [\"casbin\"]\ncasbin = [\"dep:casbin\"]\n" }, { "path": "libs/access-control/src/act.rs", "content": "use actix_http::Method;\nuse database_entity::dto::{AFAccessLevel, AFRole};\nuse std::cmp::Ordering;\n\n/// Defines behavior for objects that can translate to a set of action identifiers.\n///\npub trait Acts {\n fn policy_acts(&self) -> Vec {\n vec![self.to_enforce_act()]\n }\n fn to_enforce_act(&self) -> String;\n fn from_enforce_act(act: &str) -> Self;\n}\n\nimpl Acts for AFAccessLevel {\n /// maps different access levels to a set of predefined action\n /// identifiers that represent permissions. It starts with a base action applicable\n /// to all access levels and extends this set based on the access level:\n ///\n /// - `ReadOnly`: Only includes the base action (`\"10\"`), indicating minimum permissions.\n /// - `ReadAndComment`: Adds `\"20\"` to the base action, allowing reading and commenting.\n /// - `ReadAndWrite`: Extends permissions to include `\"20\"` and `\"30\"`, enabling reading, commenting, and writing.\n /// - `FullAccess`: Grants all possible actions by including `\"20\"`, `\"30\"`, and `\"50\"`, representing the highest level of access.\n ///\n fn to_enforce_act(&self) -> String {\n match self {\n AFAccessLevel::ReadOnly => \"l:10\".to_string(),\n AFAccessLevel::ReadAndComment => \"l:20\".to_string(),\n AFAccessLevel::ReadAndWrite => \"l:30\".to_string(),\n AFAccessLevel::FullAccess => \"l:50\".to_string(),\n }\n }\n\n fn from_enforce_act(act: &str) -> Self {\n match act {\n \"l:10\" => AFAccessLevel::ReadOnly,\n \"l:20\" => AFAccessLevel::ReadAndComment,\n \"l:30\" => AFAccessLevel::ReadAndWrite,\n \"l:50\" => AFAccessLevel::FullAccess,\n _ => AFAccessLevel::ReadOnly,\n }\n }\n}\n\nimpl Acts for AFRole {\n /// Returns a vector of action identifiers associated with a user's role.\n ///\n /// The function maps each role to a set of actions, reflecting a permission hierarchy\n /// where higher roles inherit the permissions of the lower ones. The roles are defined\n /// as follows:\n /// - `Owner`: Has the highest level of access, including all possible actions (`\"1\"`, `\"2\"`, and `\"3\"`).\n /// - `Member`: Can perform a subset of actions allowed for owners, excluding the most privileged ones (`\"2\"` and `\"3\"`).\n /// - `Guest`: Has the least level of access, limited to the least privileged actions (`\"3\"` only).\n ///\n fn to_enforce_act(&self) -> String {\n match self {\n AFRole::Owner => \"r:1\".to_string(),\n AFRole::Member => \"r:2\".to_string(),\n AFRole::Guest => \"r:3\".to_string(),\n }\n }\n\n fn from_enforce_act(act: &str) -> Self {\n match act {\n \"r:1\" => AFRole::Owner,\n \"r:2\" => AFRole::Member,\n \"r:3\" => AFRole::Guest,\n _ => AFRole::Guest,\n }\n }\n}\n\n/// Represents the actions that can be performed on objects.\n#[derive(Debug, Clone, Eq, PartialEq)]\npub enum Action {\n Read,\n Write,\n Delete,\n}\n\nimpl PartialOrd for Action {\n fn partial_cmp(&self, other: &Self) -> Option {\n Some(self.cmp(other))\n }\n}\n\nimpl Ord for Action {\n fn cmp(&self, other: &Self) -> Ordering {\n match (self, other) {\n // Read\n (Action::Read, Action::Read) => Ordering::Equal,\n (Action::Read, _) => Ordering::Less,\n (_, Action::Read) => Ordering::Greater,\n // Write\n (Action::Write, Action::Write) => Ordering::Equal,\n (Action::Write, Action::Delete) => Ordering::Less,\n // Delete\n (Action::Delete, Action::Write) => Ordering::Greater,\n (Action::Delete, Action::Delete) => Ordering::Equal,\n }\n }\n}\n\nimpl Acts for Action {\n fn to_enforce_act(&self) -> String {\n match self {\n Action::Read => \"read\".to_string(),\n Action::Write => \"write\".to_string(),\n Action::Delete => \"delete\".to_string(),\n }\n }\n\n fn from_enforce_act(act: &str) -> Self {\n match act {\n \"read\" => Action::Read,\n \"write\" => Action::Write,\n \"delete\" => Action::Delete,\n _ => Action::Read,\n }\n }\n}\n\nimpl From<&Method> for Action {\n fn from(method: &Method) -> Self {\n match *method {\n Method::POST => Action::Write,\n Method::PUT => Action::Write,\n Method::DELETE => Action::Delete,\n _ => Action::Read,\n }\n }\n}\n" }, { "path": "libs/access-control/src/casbin/access.rs", "content": "use super::adapter::PgAdapter;\nuse crate::act::{Action, Acts};\nuse crate::entity::{ObjectType, SubjectType};\nuse crate::metrics::{tick_metric, AccessControlMetrics};\n\nuse anyhow::anyhow;\nuse app_error::AppError;\nuse casbin::function_map::OperatorFunction;\nuse casbin::rhai::{Dynamic, ImmutableString};\nuse casbin::{CachedEnforcer, CoreApi, DefaultModel, MgmtApi};\nuse database_entity::dto::{AFAccessLevel, AFRole};\n\nuse sqlx::PgPool;\n\nuse crate::casbin::enforcer_v2::{AFEnforcerV2, ConsistencyMode};\nuse std::sync::Arc;\nuse tracing::trace;\n\n/// Manages access control.\n///\n/// Stores access control policies in the form `subject, object, role`\n/// where `subject` is `uid`, `object` is `oid`, and `role` is [AFAccessLevel] or [AFRole].\n///\n/// Roles are mapped to the corresponding actions that they are allowed to perform.\n/// `FullAccess` has write\n/// `FullAccess` has read\n///\n/// Access control requests are made in the form `subject, object, action`\n/// and will be evaluated against the policies and mappings stored,\n/// according to the model defined.\n#[derive(Clone)]\npub struct AccessControl {\n enforcer: Arc,\n #[allow(dead_code)]\n access_control_metrics: Arc,\n}\n\nimpl AccessControl {\n pub async fn new(\n pg_pool: PgPool,\n redis_uri: Option<&str>,\n access_control_metrics: Arc,\n ) -> Result {\n let model = casbin_model().await?;\n let adapter = PgAdapter::new(pg_pool.clone(), access_control_metrics.clone());\n let mut enforcer = casbin::CachedEnforcer::new(model, adapter)\n .await\n .map_err(|e| {\n AppError::Internal(anyhow!(\"Failed to create access control enforcer: {}\", e))\n })?;\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n\n let enforcer = match redis_uri {\n None => AFEnforcerV2::new(enforcer).await?,\n Some(redis_uri) => AFEnforcerV2::new_with_redis(enforcer, redis_uri).await?,\n };\n\n tick_metric(\n enforcer.metrics_state.clone(),\n access_control_metrics.clone(),\n );\n Ok(Self {\n enforcer: Arc::new(enforcer),\n access_control_metrics,\n })\n }\n\n #[cfg(test)]\n pub fn with_enforcer(enforcer: AFEnforcerV2) -> Self {\n let access_control_metrics = Arc::new(AccessControlMetrics::init());\n Self {\n enforcer: Arc::new(enforcer),\n access_control_metrics,\n }\n }\n\n pub async fn update_policy(\n &self,\n sub: SubjectType,\n obj: ObjectType,\n act: T,\n ) -> Result<(), AppError>\n where\n T: Acts,\n {\n self.enforcer.update_policy(sub, obj, act).await?;\n Ok(())\n }\n\n pub async fn remove_policy(&self, sub: SubjectType, obj: ObjectType) -> Result<(), AppError> {\n self.enforcer.remove_policy(sub, obj).await?;\n Ok(())\n }\n\n /// Enforces access control policy with eventual consistency.\n ///\n /// This method provides fast policy checks by evaluating against the current state\n /// without waiting for pending policy updates to be applied. Use this when:\n /// - Performance is critical\n /// - Slight inconsistency is acceptable\n /// - You need immediate responses\n pub async fn enforce_immediately(\n &self,\n uid: &i64,\n obj: ObjectType,\n act: T,\n ) -> Result\n where\n T: Acts,\n {\n self.enforcer.enforce_policy(uid, obj, act).await\n }\n\n /// Enforces access control policy with strong consistency.\n ///\n /// This method ensures all pending policy updates are applied before evaluation,\n /// guaranteeing the most up-to-date permissions check. Use this when:\n /// - Consistency is critical (e.g., security-sensitive operations)\n /// - After policy changes that must be immediately reflected\n /// - You can afford to wait for pending updates\n pub async fn enforce_strong(\n &self,\n uid: &i64,\n obj: ObjectType,\n act: T,\n ) -> Result\n where\n T: Acts,\n {\n self\n .enforcer\n .enforce_policy_with_consistency(uid, obj, act, ConsistencyMode::Strong)\n .await\n }\n\n pub async fn enforce_weak(&self, uid: &i64, obj: ObjectType, act: T) -> Result\n where\n T: Acts,\n {\n self\n .enforcer\n .enforce_policy_with_consistency(uid, obj, act, ConsistencyMode::Eventual)\n .await\n }\n}\n\n///\n/// ## Policy Definitions:\n/// - p1 = sub=uid, obj=object_id, act=role_id\n/// - Associates a user (`uid`) with a role (`role_id`) for accessing an object (`object_id`).\n///\n/// - p2 = sub=uid, obj=object_id, act=access_level\n/// - Specifies the access level (`access_level`) a user (`uid`) has for an object (`object_id`).\n///\n/// - p3 = sub=guid, obj=object_id, act=access_level\n/// - Defines the access level (`access_level`) a group (`guid`) has for an object (`object_id`).\n///\n/// ## Role Definitions in Database:\n/// Roles and access levels are defined with the following mappings:\n/// - **Role \"1\" (Owner):** Can `delete`, `write`, and `read`.\n/// - **Role \"2\" (Member):** Can `write` and `read`.\n/// - **Role \"3\" (Guest):** Can `write` and `read`.\n///\n/// ## Access Levels:\n/// - **\"10\" (Read-only):** Permission to `read`.\n/// - **\"20\" (Read and Comment):** Permission to `read`.\n/// - **\"30\" (Read and Write):** Permissions to `read` and `write`.\n/// - **\"50\" (Full Access):** Permissions to `read`, `write`, and `delete`.\n///\n/// ## Matchers:\n/// - `m = r.sub == p.sub && p.obj == r.obj && g(p.act, r.act)`\n/// Evaluates whether the subject and object in the request match those in a policy and if the\n/// given role or access level authorizes the action.\n///\n/// ## Examples:\n/// ### Policy 1 Evaluation (User Access with Role):\n/// ```text\n/// Request: api/workspace/123, uid=1, workspace_id=123, method=GET\n/// - `r = sub = 1, obj = 123, act = read`\n/// - `p = sub = 1, obj = 123, act = 1` (Policy in DB)\n/// Evaluation:\n/// - Subject Match: `r.sub == p.sub`\n/// - Object Match: `p.obj == r.obj`\n/// - Action Permission: `g(p.act, r.act) => g(1, read) => [\"1\", \"read\"]`\n/// Result: Allow\n/// ```\n///\n/// ### Policy 3 Evaluation (Group Access with Access Level):\n/// ```text\n/// Request: api/collab/123, uid=1, object_id=123, guid=g1, method=GET\n/// - `r = sub = g1, obj = 123, act = read`\n/// - `p = sub = g1, obj = 123, act = 50` (Policy in DB)\n/// Evaluation:\n/// - Subject Match: `r.sub == p.sub`\n/// - Object Match: `p.obj == r.obj`\n/// - Enforce by Access Level: `g(p.act, r.act) => g(50, read) => [\"50\", \"read\"]`\n/// Result: Allow\n/// ```\n///\n/// casbin model online writer: https://casbin.org/editor/\npub const MODEL_CONF: &str = r###\"\n[request_definition]\nr = sub, obj, act\n\n[policy_definition]\np = sub, obj, act\n\n[role_definition]\ng = _, _ # grouping rule\n\n[policy_effect]\ne = some(where (p.eft == allow))\n\n[matchers]\nm = r.sub == p.sub && p.obj == r.obj && (g(p.act, r.act) || cmpRoleOrLevel(r.act, p.act))\n\"###;\n\npub async fn casbin_model() -> Result {\n let model = casbin::DefaultModel::from_str(MODEL_CONF)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"Failed to create access control model: {}\", e)))?;\n Ok(model)\n}\n\n/// Compares role or access level between a request and a policy.\n///\n/// it is designed to compare roles or access levels specified in the request and policy.\n/// It supports two prefixes: \"r:\" for roles and \"l:\" for access levels. When the prefixes match,\n/// it compares the values to determine if the policy's role or level is greater than or equal to\n/// the request's role or level.\n///\n/// # Arguments\n/// * `r_act` - The role or access level from the request, prefixed with \"r:\" for roles or \"l:\" for levels.\n/// * `p_act` - The role or access level from the policy, prefixed with \"r:\" for roles or \"l:\" for levels.\n///\npub fn cmp_role_or_level(r_act: ImmutableString, p_act: ImmutableString) -> Dynamic {\n trace!(\"cmp_role_or_level: r: {} p: {}\", r_act, p_act);\n\n if r_act.starts_with(\"r:\") && p_act.starts_with(\"r:\") {\n let r = AFRole::from_enforce_act(r_act.as_str());\n let p = AFRole::from_enforce_act(p_act.as_str());\n return Dynamic::from_bool(p >= r);\n }\n\n if r_act.starts_with(\"l:\") && p_act.starts_with(\"l:\") {\n let r = AFAccessLevel::from_enforce_act(r_act.as_str());\n let p = AFAccessLevel::from_enforce_act(p_act.as_str());\n return Dynamic::from_bool(p >= r);\n }\n\n if r_act.starts_with(\"l:\") && p_act.starts_with(\"r:\") {\n let r = AFAccessLevel::from_enforce_act(r_act.as_str());\n let role = AFRole::from_enforce_act(p_act.as_str());\n let p = AFAccessLevel::from(&role);\n return Dynamic::from_bool(p >= r);\n }\n\n Dynamic::from_bool(false)\n}\n\n/// Represents the entity stored at the index of the access control policy.\n/// `subject_id, object_id, role/action`\n///\n/// E.g. user1, collab::123, Owner\n///\npub const POLICY_FIELD_INDEX_SUBJECT: usize = 0;\npub const POLICY_FIELD_INDEX_OBJECT: usize = 1;\npub const POLICY_FIELD_INDEX_ACTION: usize = 2;\n\n/// Represents the entity stored at the index of the grouping.\n/// `role, action`\n///\n/// E.g. Owner, Write\n#[allow(dead_code)]\nconst GROUPING_FIELD_INDEX_ROLE: usize = 0;\n#[allow(dead_code)]\nconst GROUPING_FIELD_INDEX_ACTION: usize = 1;\n\npub(crate) async fn load_group_policies(enforcer: &mut CachedEnforcer) -> Result<(), AppError> {\n // Grouping definition of access level to action.\n let af_access_levels = [\n AFAccessLevel::ReadOnly,\n AFAccessLevel::ReadAndComment,\n AFAccessLevel::ReadAndWrite,\n AFAccessLevel::FullAccess,\n ];\n let mut grouping_policies = Vec::new();\n for level in &af_access_levels {\n // All levels can read\n grouping_policies.push([level.to_enforce_act(), Action::Read.to_enforce_act()].to_vec());\n if level.can_write() {\n grouping_policies.push([level.to_enforce_act(), Action::Write.to_enforce_act()].to_vec());\n }\n if level.can_delete() {\n grouping_policies.push([level.to_enforce_act(), Action::Delete.to_enforce_act()].to_vec());\n }\n }\n\n let af_roles = [AFRole::Owner, AFRole::Member, AFRole::Guest];\n for role in &af_roles {\n match role {\n AFRole::Owner => {\n grouping_policies.push([role.to_enforce_act(), Action::Delete.to_enforce_act()].to_vec());\n grouping_policies.push([role.to_enforce_act(), Action::Write.to_enforce_act()].to_vec());\n grouping_policies.push([role.to_enforce_act(), Action::Read.to_enforce_act()].to_vec());\n },\n AFRole::Member => {\n grouping_policies.push([role.to_enforce_act(), Action::Write.to_enforce_act()].to_vec());\n grouping_policies.push([role.to_enforce_act(), Action::Read.to_enforce_act()].to_vec());\n },\n AFRole::Guest => {\n grouping_policies.push([role.to_enforce_act(), Action::Write.to_enforce_act()].to_vec());\n grouping_policies.push([role.to_enforce_act(), Action::Read.to_enforce_act()].to_vec());\n },\n }\n }\n\n enforcer\n .add_grouping_policies(grouping_policies)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"Failed to add grouping policies: {}\", e)))?;\n Ok(())\n}\n" }, { "path": "libs/access-control/src/casbin/adapter.rs", "content": "use async_trait::async_trait;\n\nuse crate::entity::ObjectType;\nuse crate::metrics::AccessControlMetrics;\nuse casbin::Adapter;\nuse casbin::Filter;\nuse casbin::Model;\nuse casbin::Result;\n\nuse database::pg_row::AFWorkspaceMemberPermRow;\nuse database::workspace::select_workspace_member_perm_stream;\n\nuse crate::act::Acts;\nuse futures_util::stream::BoxStream;\nuse sqlx::PgPool;\nuse std::sync::Arc;\nuse std::time::Instant;\nuse tokio_stream::StreamExt;\n\n/// Implementation of [`casbin::Adapter`] for access control authorisation.\n/// Access control policies that are managed by workspace and collab CRUD.\npub struct PgAdapter {\n pg_pool: PgPool,\n access_control_metrics: Arc,\n}\n\nimpl PgAdapter {\n pub fn new(pg_pool: PgPool, access_control_metrics: Arc) -> Self {\n Self {\n pg_pool,\n access_control_metrics,\n }\n }\n}\n\n/// Loads workspace policies from a given stream of workspace member permissions.\n///\n/// This function iterates over the stream of member permissions, constructing and accumulating\n/// policies for each member. A policy is represented as a vector of strings containing the user ID,\n/// object type (workspace), and action (derived from their role within the workspace). Additional\n/// policies are added for roles with implicit permissions (e.g., owners implicitly have member and\n/// guest permissions).\n///\n/// # Arguments\n///\n/// * `stream` - A stream of `sqlx::Result` representing the database\n/// query results for workspace member permissions.\n///\n/// # Returns\n///\n/// Returns a `Result>>`, which is a vector of policies. Each policy is itself a\n/// vector containing the user ID, policy object, and action as strings. In case of an error while\n/// processing the stream, returns the error encapsulated within `Result`.\n///\n/// # Example Policy Vector\n///\n/// For a workspace owner with user ID `1` and workspace ID `123`, the function generates policies\n/// such as:\n///\n/// ```ignore\n/// [\n/// [\"1\", \"workspace:123\", \"owner\"],\n/// [\"1\", \"workspace:123\", \"member\"], // Implicit permission for owner\n/// [\"1\", \"workspace:123\", \"guest\"], // Implicit permission for owner\n/// ]\n/// ```\n///\n/// # Note\n///\n/// - The function handles additional policies for `Owner` and `Member` roles to include implicit\n/// permissions. For example, an `Owner` implicitly has `Member` and `Guest` permissions, and a\n/// `Member` implicitly has `Guest` permissions.\n/// - The policy object is derived from the `ObjectType::Workspace`, and actions are derived from\n/// member roles (`Owner`, `Member`, `Guest`) using the `to_action` method.\npub async fn load_workspace_policies(\n mut stream: BoxStream<'_, sqlx::Result>,\n) -> Result>> {\n let mut policies: Vec> = Vec::new();\n\n while let Some(Ok(member_permission)) = stream.next().await {\n let uid = member_permission.uid;\n let workspace_id = member_permission.workspace_id.to_string();\n let object_type = ObjectType::Workspace(workspace_id.to_string());\n for act in member_permission.role.policy_acts() {\n let policy = vec![\n uid.to_string(),\n object_type.policy_object(),\n act.to_string(),\n ];\n policies.push(policy);\n }\n }\n\n Ok(policies)\n}\n\n#[async_trait]\nimpl Adapter for PgAdapter {\n async fn load_policy(&mut self, model: &mut dyn Model) -> Result<()> {\n let start = Instant::now();\n let workspace_member_perm_stream = select_workspace_member_perm_stream(&self.pg_pool);\n let workspace_policies = load_workspace_policies(workspace_member_perm_stream).await?;\n\n // Policy definition `p` of type `p`. See `model.conf`\n model.add_policies(\"p\", \"p\", workspace_policies);\n\n self\n .access_control_metrics\n .record_load_all_policies_in_ms(start.elapsed().as_millis() as u64);\n\n Ok(())\n }\n\n async fn load_filtered_policy<'a>(&mut self, m: &mut dyn Model, _f: Filter<'a>) -> Result<()> {\n // No support for filtered.\n self.load_policy(m).await\n }\n async fn save_policy(&mut self, _m: &mut dyn Model) -> Result<()> {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(())\n }\n async fn clear_policy(&mut self) -> Result<()> {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(())\n }\n fn is_filtered(&self) -> bool {\n // No support for filtered.\n false\n }\n async fn add_policy(&mut self, _sec: &str, _ptype: &str, _rule: Vec) -> Result {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(true)\n }\n async fn add_policies(\n &mut self,\n _sec: &str,\n _ptype: &str,\n _rules: Vec>,\n ) -> Result {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(true)\n }\n async fn remove_policy(&mut self, _sec: &str, _ptype: &str, _rule: Vec) -> Result {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(true)\n }\n async fn remove_policies(\n &mut self,\n _sec: &str,\n _ptype: &str,\n _rules: Vec>,\n ) -> Result {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(true)\n }\n async fn remove_filtered_policy(\n &mut self,\n _sec: &str,\n _ptype: &str,\n _field_index: usize,\n _field_values: Vec,\n ) -> Result {\n // unimplemented!()\n //\n // Adapter is used only for loading policies from database\n // since policies are managed by workspace and collab CRUD.\n Ok(true)\n }\n}\n" }, { "path": "libs/access-control/src/casbin/collab.rs", "content": "use crate::{\n act::Action,\n collab::{CollabAccessControl, RealtimeAccessControl},\n entity::ObjectType,\n};\nuse app_error::AppError;\nuse async_trait::async_trait;\nuse database_entity::dto::AFAccessLevel;\nuse tracing::instrument;\nuse uuid::Uuid;\n\nuse super::access::AccessControl;\n\n#[derive(Clone)]\npub struct CollabAccessControlImpl {\n access_control: AccessControl,\n}\n\nimpl CollabAccessControlImpl {\n pub fn new(access_control: AccessControl) -> Self {\n Self { access_control }\n }\n}\n\n#[async_trait]\nimpl CollabAccessControl for CollabAccessControlImpl {\n async fn enforce_action(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n _oid: &Uuid,\n action: Action,\n ) -> Result<(), AppError> {\n // TODO: allow non workspace member to read a collab.\n\n // Anyone who can write to a workspace, can also delete a collab.\n let workspace_action = match action {\n Action::Read => Action::Read,\n Action::Write => Action::Write,\n Action::Delete => Action::Write,\n };\n\n let result = self\n .access_control\n .enforce_immediately(\n uid,\n ObjectType::Workspace(workspace_id.to_string()),\n workspace_action,\n )\n .await;\n match result {\n Ok(true) => Ok(()),\n Ok(false) => Err(AppError::NotEnoughPermissions),\n Err(e) => Err(e),\n }\n }\n\n async fn enforce_access_level(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n _oid: &Uuid,\n access_level: AFAccessLevel,\n ) -> Result<(), AppError> {\n // TODO: allow non workspace member to read a collab.\n\n // Anyone who can write to a workspace, also have full access to a collab.\n let workspace_action = match access_level {\n AFAccessLevel::ReadOnly => Action::Read,\n AFAccessLevel::ReadAndComment => Action::Read,\n AFAccessLevel::ReadAndWrite => Action::Write,\n AFAccessLevel::FullAccess => Action::Write,\n };\n\n let result = self\n .access_control\n .enforce_immediately(\n uid,\n ObjectType::Workspace(workspace_id.to_string()),\n workspace_action,\n )\n .await;\n match result {\n Ok(true) => Ok(()),\n Ok(false) => Err(AppError::NotEnoughPermissions),\n Err(e) => Err(e),\n }\n }\n\n #[instrument(level = \"info\", skip_all)]\n async fn update_access_level_policy(\n &self,\n _uid: &i64,\n _oid: &Uuid,\n _level: AFAccessLevel,\n ) -> Result<(), AppError> {\n // TODO: allow non workspace member to read a collab.\n Ok(())\n }\n\n #[instrument(level = \"info\", skip_all)]\n async fn remove_access_level(&self, _uid: &i64, _oid: &Uuid) -> Result<(), AppError> {\n // TODO: allow non workspace member to read a collab.\n Ok(())\n }\n}\n\n#[derive(Clone)]\npub struct RealtimeCollabAccessControlImpl {\n access_control: AccessControl,\n}\n\nimpl RealtimeCollabAccessControlImpl {\n pub fn new(access_control: AccessControl) -> Self {\n Self { access_control }\n }\n\n async fn can_perform_action(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n _oid: &Uuid,\n required_action: Action,\n ) -> Result {\n // TODO: allow non workspace member to read a collab.\n\n // Anyone who can write to a workspace, can also delete a collab.\n let workspace_action = match required_action {\n Action::Read => Action::Read,\n Action::Write => Action::Write,\n Action::Delete => Action::Write,\n };\n\n self\n .access_control\n .enforce_immediately(\n uid,\n ObjectType::Workspace(workspace_id.to_string()),\n workspace_action,\n )\n .await\n }\n}\n\n#[async_trait]\nimpl RealtimeAccessControl for RealtimeCollabAccessControlImpl {\n async fn can_write_collab(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n ) -> Result {\n self\n .can_perform_action(workspace_id, uid, oid, Action::Write)\n .await\n }\n\n async fn can_read_collab(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n ) -> Result {\n self\n .can_perform_action(workspace_id, uid, oid, Action::Read)\n .await\n }\n}\n\n#[cfg(test)]\nmod tests {\n use database_entity::dto::AFRole;\n use uuid::Uuid;\n\n use crate::casbin::util::tests::test_enforcer_v2;\n use crate::{\n act::Action,\n casbin::access::AccessControl,\n collab::CollabAccessControl,\n entity::{ObjectType, SubjectType},\n };\n\n #[tokio::test]\n pub async fn test_collab_access_control() {\n let enforcer = test_enforcer_v2().await;\n let uid = 1;\n let workspace_id = Uuid::new_v4();\n let oid = Uuid::new_v4();\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Member,\n )\n .await\n .unwrap();\n let access_control = AccessControl::with_enforcer(enforcer);\n let collab_access_control = super::CollabAccessControlImpl::new(access_control);\n for action in [Action::Read, Action::Write, Action::Delete] {\n collab_access_control\n .enforce_action(&workspace_id, &uid, &oid, action.clone())\n .await\n .unwrap_or_else(|_| panic!(\"Failed to enforce action: {:?}\", action));\n }\n }\n}\n" }, { "path": "libs/access-control/src/casbin/enforcer.rs", "content": "use super::access::load_group_policies;\nuse crate::act::Acts;\nuse crate::casbin::util::policies_for_subject_with_given_object;\nuse crate::entity::{ObjectType, SubjectType};\nuse crate::metrics::MetricsCalState;\nuse crate::request::PolicyRequest;\nuse anyhow::anyhow;\nuse app_error::AppError;\nuse casbin::{CachedEnforcer, CoreApi, MgmtApi};\nuse rand::Rng;\nuse std::sync::atomic::Ordering;\nuse std::time::{Duration, Instant};\nuse tokio::sync::RwLock;\nuse tokio::time::sleep;\nuse tracing::{event, instrument, trace, warn};\n\n/// Configuration for retry logic with exponential backoff\n#[derive(Clone, Debug)]\npub(crate) struct RetryConfig {\n /// Base delay for exponential backoff (before jitter)\n pub base_delay: Duration,\n /// Maximum delay between retries (cap for exponential backoff)\n pub max_delay: Duration,\n /// Maximum number of retry attempts\n pub max_retries: usize,\n /// Total timeout for all retry attempts\n pub timeout: Duration,\n /// Initial random delay range to prevent immediate thundering herd\n pub initial_jitter_max: Duration,\n}\n\nimpl Default for RetryConfig {\n fn default() -> Self {\n Self {\n base_delay: Duration::from_millis(100),\n max_delay: Duration::from_millis(1000),\n max_retries: 50,\n timeout: Duration::from_secs(5),\n initial_jitter_max: Duration::from_millis(50),\n }\n }\n}\n\n#[cfg(test)]\npub struct AFEnforcer {\n enforcer: RwLock,\n pub(crate) metrics_state: MetricsCalState,\n}\n\n#[cfg(test)]\nimpl AFEnforcer {\n pub async fn new(mut enforcer: CachedEnforcer) -> Result {\n load_group_policies(&mut enforcer).await?;\n Ok(Self {\n enforcer: RwLock::new(enforcer),\n metrics_state: MetricsCalState::new(),\n })\n }\n\n /// Retry acquiring a write lock with default configuration\n async fn retry_write(\n &self,\n ) -> Result, AppError> {\n self.retry_write_with_config(RetryConfig::default()).await\n }\n\n /// Calculate next delay using decorrelated jitter strategy\n /// Decorrelated jitter: delay = random(base_delay, last_delay * 3)\n pub(crate) fn calculate_next_delay(last_delay: &mut Duration, config: &RetryConfig) -> Duration {\n let mut rng = rand::thread_rng();\n let min_delay = config.base_delay.as_millis() as u64;\n let max_delay = std::cmp::min(\n config.max_delay.as_millis() as u64,\n last_delay.saturating_mul(3).as_millis() as u64,\n );\n let jitter_ms = rng.gen_range(min_delay..=max_delay.max(min_delay));\n let new_delay = Duration::from_millis(jitter_ms);\n *last_delay = new_delay;\n new_delay\n }\n\n /// Generate initial random delay to prevent immediate thundering herd\n pub(crate) fn generate_initial_delay(max_delay: Duration) -> Duration {\n if max_delay == Duration::ZERO {\n return Duration::ZERO;\n }\n let mut rng = rand::thread_rng();\n let delay_ms = rng.gen_range(0..=max_delay.as_millis().max(1) as u64);\n Duration::from_millis(delay_ms)\n }\n\n /// Retry acquiring a write lock with improved concurrent handling\n /// Uses advanced jitter strategies to prevent thundering herd\n #[instrument(level = \"debug\", skip_all)]\n pub(crate) async fn retry_write_with_config(\n &self,\n config: RetryConfig,\n ) -> Result, AppError> {\n let start_time = Instant::now();\n\n // Add initial random delay to prevent immediate thundering herd\n if config.initial_jitter_max > Duration::ZERO {\n let initial_delay = Self::generate_initial_delay(config.initial_jitter_max);\n sleep(initial_delay).await;\n }\n\n let mut last_delay = config.base_delay;\n let mut attempt = 0;\n\n loop {\n // Primary constraint: Check timeout first\n let elapsed = start_time.elapsed();\n if elapsed >= config.timeout {\n warn!(\n \"Timeout while acquiring write lock after {} attempts in {:?}\",\n attempt, elapsed\n );\n return Err(AppError::RetryLater(anyhow!(\n \"Timeout while acquiring write lock after {} attempts in {:?}\",\n attempt,\n elapsed\n )));\n }\n\n match self.enforcer.try_write() {\n Ok(guard) => {\n if attempt > 0 {\n trace!(\n \"Successfully acquired write lock after {} attempts in {:?}\",\n attempt + 1,\n elapsed\n );\n }\n return Ok(guard);\n },\n Err(_) => {\n attempt += 1;\n\n // Calculate next delay\n let delay = Self::calculate_next_delay(&mut last_delay, &config);\n\n // Check if delay would exceed timeout (primary constraint)\n if start_time.elapsed() + delay >= config.timeout {\n warn!(\n \"Next retry delay ({:?}) would exceed timeout, stopping after {} attempts in {:?}\",\n delay,\n attempt,\n start_time.elapsed()\n );\n return Err(AppError::RetryLater(anyhow!(\n \"Would exceed timeout with next retry delay after {} attempts in {:?}\",\n attempt,\n start_time.elapsed()\n )));\n }\n\n // Secondary constraint: Safety limit to prevent infinite retries (only if we have a bug)\n if attempt >= config.max_retries {\n warn!(\n \"🚨 Reached maximum retry safety limit ({}) - this should rarely happen! Elapsed: {:?}\",\n config.max_retries,\n start_time.elapsed()\n );\n return Err(AppError::RetryLater(anyhow!(\n \"Reached maximum retry safety limit ({}) after {:?}\",\n config.max_retries,\n start_time.elapsed()\n )));\n }\n\n trace!(\n \"Failed to acquire write lock on attempt {}, retrying after {:?} (elapsed: {:?})\",\n attempt,\n delay,\n start_time.elapsed()\n );\n\n sleep(delay).await;\n },\n }\n }\n }\n\n /// Update policy for a user.\n /// If the policy is already exist, then it will return Ok(false).\n ///\n /// [`ObjectType::Workspace`] has to be paired with [`ActionType::Role`],\n /// [`ObjectType::Collab`] has to be paired with [`ActionType::Level`],\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn update_policy(\n &self,\n sub: SubjectType,\n obj: ObjectType,\n act: T,\n ) -> Result<(), AppError>\n where\n T: Acts,\n {\n let policies = act\n .policy_acts()\n .into_iter()\n .map(|act| vec![sub.policy_subject(), obj.policy_object(), act])\n .collect::>>();\n\n trace!(\"[access control]: add policy:{:?}\", policies);\n\n // DEADLOCK PREVENTION:\n // We use retry_write() instead of self.enforcer.write().await to prevent deadlocks.\n //\n // Problem with write().await:\n // 1. write().await can block indefinitely waiting for the lock\n // 2. If the lock is held while calling .await on add_policies(), the task yields to the runtime\n // 3. Other tasks on the same thread may then try to acquire the same write lock\n // 4. If casbin internally uses synchronous locks that depend on this operation completing,\n // we get a circular dependency: Task A holds async lock → waits for sync lock →\n // Task B holds sync lock → waits for async lock → DEADLOCK\n let mut enforcer = self.retry_write().await?;\n\n enforcer\n .add_policies(policies)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"fail to add policy: {e:?}\")))?;\n\n Ok(())\n }\n\n /// Returns policies that match the filter.\n #[allow(dead_code)]\n pub async fn remove_policy(\n &self,\n sub: SubjectType,\n object_type: ObjectType,\n ) -> Result<(), AppError> {\n let policies_for_user_on_object = {\n let enforcer = self.enforcer.read().await;\n policies_for_subject_with_given_object(sub.clone(), object_type.clone(), &enforcer).await\n };\n\n event!(\n tracing::Level::INFO,\n \"[access control]: remove policy:subject={}, object={}, policies={:?}\",\n sub.policy_subject(),\n object_type.policy_object(),\n policies_for_user_on_object\n );\n\n // DEADLOCK PREVENTION:\n // We use retry_write() instead of self.enforcer.write().await to prevent deadlocks.\n //\n // Problem with write().await:\n // 1. write().await can block indefinitely waiting for the lock\n // 2. If the lock is held while calling .await on add_policies(), the task yields to the runtime\n // 3. Other tasks on the same thread may then try to acquire the same write lock\n // 4. If casbin internally uses synchronous locks that depend on this operation completing,\n // we get a circular dependency: Task A holds async lock → waits for sync lock →\n // Task B holds sync lock → waits for async lock → DEADLOCK\n let mut enforcer = self.retry_write().await?;\n enforcer\n .remove_policies(policies_for_user_on_object)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"error enforce: {e:?}\")))?;\n\n Ok(())\n }\n\n /// ## Parameters:\n /// - `uid`: The user ID of the user attempting the action.\n /// - `obj`: The type of object being accessed, encapsulated within an `ObjectType`.\n /// - `act`: The action being attempted, encapsulated within an `ActionVariant`.\n ///\n /// ## Returns:\n /// - `Ok(true)`: If the user is authorized to perform the action based on any of the evaluated policies.\n /// - `Ok(false)`: If none of the policies authorize the user to perform the action.\n /// - `Err(AppError)`: If an error occurs during policy enforcement.\n ///\n #[instrument(level = \"debug\", skip_all)]\n pub async fn enforce_policy(\n &self,\n uid: &i64,\n obj: ObjectType,\n act: T,\n ) -> Result\n where\n T: Acts,\n {\n self\n .metrics_state\n .total_read_enforce_result\n .fetch_add(1, Ordering::Relaxed);\n\n let policy_request = PolicyRequest::new(*uid, obj, act);\n let policy = policy_request.to_policy();\n let result = self\n .enforcer\n .read()\n .await\n .enforce(policy)\n .map_err(|e| AppError::Internal(anyhow!(\"enforce: {e:?}\")))?;\n Ok(result)\n }\n}\n\n#[cfg(test)]\npub(crate) mod tests {\n use crate::{\n act::Action,\n casbin::access::{casbin_model, cmp_role_or_level},\n entity::{ObjectType, SubjectType},\n };\n use casbin::{function_map::OperatorFunction, prelude::*};\n use database_entity::dto::{AFAccessLevel, AFRole};\n use std::collections::HashMap;\n use std::sync::Arc;\n use std::time::{Duration, Instant};\n use tokio::sync::Barrier;\n\n use super::{AFEnforcer, RetryConfig};\n\n pub async fn test_enforcer() -> AFEnforcer {\n let model = casbin_model().await.unwrap();\n let mut enforcer = casbin::CachedEnforcer::new(model, MemoryAdapter::default())\n .await\n .unwrap();\n\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n AFEnforcer::new(enforcer).await.unwrap()\n }\n\n #[tokio::test]\n async fn test_retry_config_defaults() {\n let config = RetryConfig::default();\n assert_eq!(config.base_delay, Duration::from_millis(100));\n assert_eq!(config.max_delay, Duration::from_millis(1000));\n assert_eq!(config.max_retries, 50);\n assert_eq!(config.timeout, Duration::from_secs(5));\n assert_eq!(config.initial_jitter_max, Duration::from_millis(50));\n }\n\n #[tokio::test]\n async fn test_decorrelated_jitter_delay_calculation() {\n let config = RetryConfig::default();\n let mut last_delay = config.base_delay;\n\n // Test multiple delay calculations to ensure they're within expected bounds\n for _ in 0..10 {\n let delay = AFEnforcer::calculate_next_delay(&mut last_delay, &config);\n\n // Delay should be between base_delay and max_delay\n assert!(delay >= config.base_delay);\n assert!(delay <= config.max_delay);\n\n // Delay should be at least base_delay\n assert!(delay.as_millis() >= config.base_delay.as_millis());\n }\n }\n\n #[tokio::test]\n async fn test_decorrelated_jitter_progression() {\n let config = RetryConfig {\n base_delay: Duration::from_millis(10),\n max_delay: Duration::from_millis(500),\n max_retries: 5,\n timeout: Duration::from_secs(10),\n initial_jitter_max: Duration::ZERO, // Disable initial jitter for predictable testing\n };\n\n let mut last_delay = config.base_delay;\n let mut delays = Vec::new();\n\n // Generate a sequence of delays\n for _ in 0..5 {\n let delay = AFEnforcer::calculate_next_delay(&mut last_delay, &config);\n delays.push(delay);\n }\n\n // Verify delays are within bounds and show variation\n for delay in &delays {\n assert!(delay >= &config.base_delay);\n assert!(delay <= &config.max_delay);\n }\n\n // Verify we have some variation (not all delays are the same)\n let all_same = delays.windows(2).all(|w| w[0] == w[1]);\n assert!(!all_same, \"Delays should show variation due to jitter\");\n }\n\n #[tokio::test]\n async fn test_initial_jitter_generation() {\n let max_delay = Duration::from_millis(100);\n\n // Generate multiple initial delays to test variation\n let mut delays = Vec::new();\n for _ in 0..10 {\n let delay = AFEnforcer::generate_initial_delay(max_delay);\n delays.push(delay);\n assert!(delay <= max_delay);\n }\n\n // Test zero max delay\n let zero_delay = AFEnforcer::generate_initial_delay(Duration::ZERO);\n assert_eq!(zero_delay, Duration::ZERO);\n\n // Verify we have some variation\n let all_same = delays.windows(2).all(|w| w[0] == w[1]);\n assert!(!all_same, \"Initial delays should show variation\");\n }\n\n #[tokio::test]\n async fn test_retry_write_success_on_first_attempt() {\n let enforcer = test_enforcer().await;\n let start = Instant::now();\n\n // Should succeed immediately since no contention\n let _guard = enforcer.retry_write().await.unwrap();\n let elapsed = start.elapsed();\n\n // Should complete quickly (within 100ms)\n assert!(elapsed < Duration::from_millis(100));\n }\n\n #[tokio::test]\n async fn test_retry_write_with_custom_config() {\n let enforcer = test_enforcer().await;\n\n let config = RetryConfig {\n base_delay: Duration::from_millis(5),\n max_delay: Duration::from_millis(50),\n max_retries: 3,\n timeout: Duration::from_millis(200),\n initial_jitter_max: Duration::from_millis(10),\n };\n\n let start = Instant::now();\n let _guard = enforcer.retry_write_with_config(config).await.unwrap();\n let elapsed = start.elapsed();\n\n // Should complete quickly since no contention, but may have initial jitter\n assert!(elapsed < Duration::from_millis(100));\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_concurrent_retry_behavior() {\n let enforcer = Arc::new(test_enforcer().await);\n let barrier = Arc::new(Barrier::new(5));\n let mut handles = Vec::new();\n\n // Spawn 5 concurrent tasks that will try to get write locks\n for i in 0..5 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n // Wait for all tasks to be ready\n barrier_clone.wait().await;\n\n let start = Instant::now();\n let result = enforcer_clone.retry_write().await;\n let elapsed = start.elapsed();\n\n (i, result.is_ok(), elapsed)\n });\n\n handles.push(handle);\n }\n\n // Wait for all tasks to complete\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // All should succeed eventually\n let successful_count = results.iter().filter(|(_, success, _)| *success).count();\n assert_eq!(\n successful_count, 5,\n \"All concurrent requests should eventually succeed\"\n );\n\n // Some should take longer than others due to retries and jitter\n let times: Vec = results.iter().map(|(_, _, elapsed)| *elapsed).collect();\n let min_time = times.iter().min().unwrap();\n let max_time = times.iter().max().unwrap();\n\n // There should be some spread in completion times due to jitter\n println!(\n \"Concurrent retry times: min={:?}, max={:?}\",\n min_time, max_time\n );\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_retry_timeout() {\n let enforcer = Arc::new(test_enforcer().await);\n\n // Hold a write lock to force retries\n let _blocking_guard = enforcer.retry_write().await.unwrap();\n\n let config = RetryConfig {\n base_delay: Duration::from_millis(10),\n max_delay: Duration::from_millis(50),\n max_retries: 10,\n timeout: Duration::from_millis(100), // Short timeout\n initial_jitter_max: Duration::ZERO,\n };\n\n let start = Instant::now();\n let result = enforcer.retry_write_with_config(config).await;\n let elapsed = start.elapsed();\n\n // Should timeout and return error\n assert!(result.is_err());\n\n // The retry logic may exit early when it determines the next delay would exceed timeout\n // This is good optimization behavior, so we don't enforce a minimum time\n // Just verify it doesn't take unreasonably long\n assert!(\n elapsed < Duration::from_millis(200),\n \"Should not take too long even when timing out: {:?}\",\n elapsed\n );\n\n // Verify the error message indicates a timeout/retry issue\n if let Err(app_error) = result {\n let error_msg = format!(\"{}\", app_error);\n assert!(\n error_msg.contains(\"timeout\")\n || error_msg.contains(\"retry\")\n || error_msg.contains(\"Timeout\")\n || error_msg.contains(\"RetryLater\"),\n \"Error should indicate timeout or retry issue: {}\",\n error_msg\n );\n }\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_high_concurrency_jitter_effectiveness() {\n let enforcer = Arc::new(test_enforcer().await);\n let barrier = Arc::new(Barrier::new(10));\n let mut handles = Vec::new();\n\n // Spawn 10 concurrent tasks to test jitter effectiveness\n for i in 0..10 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let config = RetryConfig {\n base_delay: Duration::from_millis(5),\n max_delay: Duration::from_millis(100),\n max_retries: 5,\n timeout: Duration::from_secs(2),\n initial_jitter_max: Duration::from_millis(20),\n };\n\n let start = Instant::now();\n let result = enforcer_clone.retry_write_with_config(config).await;\n let elapsed = start.elapsed();\n\n (i, result.is_ok(), elapsed)\n });\n\n handles.push(handle);\n }\n\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // All should succeed\n let successful_count = results.iter().filter(|(_, success, _)| *success).count();\n assert_eq!(\n successful_count, 10,\n \"All high-concurrency requests should succeed\"\n );\n\n // Completion times should be well distributed due to jitter\n let times: Vec = results.iter().map(|(_, _, elapsed)| *elapsed).collect();\n let mut times_ms: Vec = times.iter().map(|d| d.as_millis()).collect();\n times_ms.sort();\n\n println!(\"High concurrency completion times (ms): {:?}\", times_ms);\n\n // Check that times are reasonably spread out (not all clustered)\n let first_quartile = times_ms[2]; // 3rd fastest\n let third_quartile = times_ms[7]; // 8th fastest\n let spread = third_quartile.saturating_sub(first_quartile);\n\n // There should be meaningful spread between completion times\n // Lower threshold since jitter is working so well that contention is minimal\n assert!(\n spread > 2,\n \"Completion times should show good spread due to jitter, got spread: {}ms\",\n spread\n );\n }\n\n #[tokio::test]\n async fn policy_comparison_test() {\n let enforcer = test_enforcer().await;\n let uid = 1;\n let workspace_id = \"w1\";\n\n // add user as a member of the workspace\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Member,\n )\n .await\n .expect(\"update policy failed\");\n\n // test if enforce can compare requested action and the role policy\n for action in [Action::Write, Action::Read] {\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n action.clone(),\n )\n .await\n .unwrap_or_else(|_| panic!(\"enforcing action={:?} failed\", action));\n assert!(result, \"action={:?} should be allowed\", action);\n }\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n Action::Delete,\n )\n .await\n .expect(\"enforcing action=Delete failed\");\n assert!(!result, \"action=Delete should not be allowed\");\n\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Member,\n )\n .await\n .expect(\"enforcing role=Member failed\");\n assert!(result, \"role=Member should be allowed\");\n\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .expect(\"enforcing role=Owner failed\");\n assert!(!result, \"role=Owner should not be allowed\");\n\n for access_level in [\n AFAccessLevel::ReadOnly,\n AFAccessLevel::ReadAndComment,\n AFAccessLevel::ReadAndWrite,\n ] {\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n access_level,\n )\n .await\n .unwrap_or_else(|_| panic!(\"enforcing access_level={:?} failed\", access_level));\n assert!(result, \"access_level={:?} should be allowed\", access_level);\n }\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFAccessLevel::FullAccess,\n )\n .await\n .expect(\"enforcing access_level=FullAccess failed\");\n assert!(!result, \"access_level=FullAccess should not be allowed\")\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_concurrent_update_policy_operations() {\n // Test with 100 concurrent operations to really stress the retry logic\n test_concurrent_update_policy_operations_with_count(100).await;\n }\n\n // Helper function to test concurrent update operations with configurable count\n async fn test_concurrent_update_policy_operations_with_count(concurrent_count: usize) {\n let enforcer = Arc::new(test_enforcer().await);\n let barrier = Arc::new(Barrier::new(concurrent_count));\n let mut handles = Vec::new();\n\n println!(\n \"Testing {} concurrent update_policy operations\",\n concurrent_count\n );\n\n // Spawn concurrent tasks for update_policy operations\n for i in 0..concurrent_count {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let user_id = 1000 + i as i64; // Different users\n let workspace_id = format!(\"workspace_{}\", i % 5); // 5 different workspaces for more contention\n let role = if i % 3 == 0 {\n AFRole::Owner\n } else if i % 3 == 1 {\n AFRole::Member\n } else {\n AFRole::Guest\n };\n\n let start = Instant::now();\n let result = enforcer_clone\n .update_policy(\n SubjectType::User(user_id),\n ObjectType::Workspace(workspace_id),\n role,\n )\n .await;\n let elapsed = start.elapsed();\n\n (i, result.is_ok(), elapsed)\n });\n\n handles.push(handle);\n }\n\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // All policy updates should succeed\n let successful_count = results.iter().filter(|(_, success, _)| *success).count();\n assert_eq!(\n successful_count, concurrent_count,\n \"All {} concurrent update_policy operations should succeed\",\n concurrent_count\n );\n\n // Analyze timing distribution to show jitter effectiveness\n let times: Vec = results.iter().map(|(_, _, elapsed)| *elapsed).collect();\n let mut times_ms: Vec = times.iter().map(|d| d.as_millis()).collect();\n times_ms.sort();\n\n println!(\n \"Concurrent update_policy completion times (first 10): {:?}\",\n ×_ms[..10.min(times_ms.len())]\n );\n\n if times_ms.len() > 10 {\n println!(\n \"Concurrent update_policy completion times (last 10): {:?}\",\n ×_ms[times_ms.len() - 10..]\n );\n }\n\n // Verify reasonable spread in completion times due to jitter\n let min_time = times_ms[0];\n let max_time = times_ms[concurrent_count - 1];\n let spread = max_time.saturating_sub(min_time);\n let median_time = times_ms[concurrent_count / 2];\n let percentile_95 = times_ms[(concurrent_count * 95) / 100];\n\n println!(\n \"Update policy stats: min={}ms, median={}ms, 95th={}ms, max={}ms, spread={}ms\",\n min_time, median_time, percentile_95, max_time, spread\n );\n\n // With higher concurrency, we expect significant timing spread due to jitter\n let expected_min_spread = if concurrent_count >= 50 { 20 } else { 5 };\n assert!(\n spread > expected_min_spread,\n \"Should show timing spread due to concurrent write lock contention: {}ms (expected > {}ms)\",\n spread,\n expected_min_spread\n );\n\n // Verify that operations complete in reasonable time even under high load\n assert!(\n max_time < 5000, // 5 seconds max\n \"Even under high concurrency, operations should complete within 5 seconds: {}ms\",\n max_time\n );\n\n // Check distribution - no more than 20% should complete at the same time\n let timing_distribution = times_ms.iter().fold(HashMap::new(), |mut acc, &time| {\n *acc.entry(time).or_insert(0) += 1;\n acc\n });\n\n let max_same_timing = timing_distribution.values().max().unwrap_or(&0);\n let max_allowed_clustering = (times_ms.len() * 20) / 100; // 20% threshold\n\n assert!(\n *max_same_timing <= max_allowed_clustering,\n \"Too many operations completed at the same time: {} out of {} (jitter should distribute better)\",\n max_same_timing,\n times_ms.len()\n );\n\n println!(\n \"Successfully completed {} concurrent update operations with excellent distribution!\",\n concurrent_count\n );\n }\n\n // Additional test with different concurrency levels\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_scalable_concurrent_update_policy_operations() {\n // Test different scales to verify jitter effectiveness across various loads\n for &count in &[10, 25, 50] {\n println!(\"\\n=== Testing {} concurrent operations ===\", count);\n test_concurrent_update_policy_operations_with_count(count).await;\n }\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_concurrent_enforce_policy_operations() {\n let enforcer = Arc::new(test_enforcer().await);\n\n // First, set up some policies for testing\n for i in 0..3 {\n let user_id = 2000 + i;\n let workspace_id = format!(\"test_workspace_{}\", i);\n\n enforcer\n .update_policy(\n SubjectType::User(user_id),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await\n .expect(\"Failed to set up test policy\");\n }\n\n let barrier = Arc::new(Barrier::new(15));\n let mut handles = Vec::new();\n\n // Simulate 15 concurrent enforce_policy operations\n for i in 0..15 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let user_id = 2000 + (i % 3); // Use the users we set up\n let workspace_id = format!(\"test_workspace_{}\", i % 3);\n let action = if i % 3 == 0 {\n Action::Read\n } else if i % 3 == 1 {\n Action::Write\n } else {\n Action::Delete\n };\n\n let start = Instant::now();\n let result = enforcer_clone\n .enforce_policy(\n &user_id,\n ObjectType::Workspace(workspace_id),\n action.clone(),\n )\n .await;\n let elapsed = start.elapsed();\n\n (i, result.is_ok(), elapsed, result.unwrap_or(false))\n });\n\n handles.push(handle);\n }\n\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // All enforce operations should succeed (though some may be denied by policy)\n let successful_count = results.iter().filter(|(_, success, _, _)| *success).count();\n assert_eq!(\n successful_count, 15,\n \"All concurrent enforce_policy operations should succeed\"\n );\n\n // Count how many were actually allowed by policy\n let allowed_count = results.iter().filter(|(_, _, _, allowed)| *allowed).count();\n println!(\n \"Policy enforcement results: {} out of {} actions were allowed\",\n allowed_count,\n results.len()\n );\n\n // Analyze timing distribution\n let times: Vec = results.iter().map(|(_, _, elapsed, _)| *elapsed).collect();\n let mut times_ms: Vec = times.iter().map(|d| d.as_millis()).collect();\n times_ms.sort();\n\n println!(\n \"Concurrent enforce_policy completion times (ms): {:?}\",\n times_ms\n );\n\n // Even read operations can benefit from jitter if there's write contention\n let max_time = times_ms[14];\n println!(\"Max enforce_policy time: {}ms\", max_time);\n\n // All should complete reasonably quickly since these are mostly read operations\n assert!(\n max_time < 100,\n \"Enforce operations should complete quickly: {}ms\",\n max_time\n );\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_mixed_concurrent_operations_realistic_scenario() {\n let enforcer = Arc::new(test_enforcer().await);\n let barrier = Arc::new(Barrier::new(20));\n let mut handles = Vec::new();\n\n // Simulate realistic mixed workload: 20 operations total\n // 30% update_policy (write operations)\n // 70% enforce_policy (read operations)\n for i in 0..20 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let start = Instant::now();\n\n // 30% are update operations, 70% are enforce operations\n let operation_result = if i < 6 {\n // Update policy operations (write-heavy)\n let user_id = 3000 + i;\n let workspace_id = format!(\"mixed_workspace_{}\", i % 2);\n let role = AFRole::Member;\n\n let result = enforcer_clone\n .update_policy(\n SubjectType::User(user_id),\n ObjectType::Workspace(workspace_id),\n role,\n )\n .await;\n\n (\"update\", result.is_ok(), result.is_ok())\n } else {\n // Enforce policy operations (read-heavy)\n let user_id = 3000 + (i % 6); // Refer to users created by update operations\n let workspace_id = format!(\"mixed_workspace_{}\", i % 2);\n let action = Action::Read;\n\n let result = enforcer_clone\n .enforce_policy(&user_id, ObjectType::Workspace(workspace_id), action)\n .await;\n\n match result {\n Ok(allowed) => (\"enforce\", true, allowed),\n Err(_) => (\"enforce\", false, false),\n }\n };\n\n let elapsed = start.elapsed();\n (\n i,\n operation_result.0,\n operation_result.1,\n operation_result.2,\n elapsed,\n )\n });\n\n handles.push(handle);\n }\n\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // Analyze results by operation type\n let update_results: Vec<_> = results\n .iter()\n .filter(|(_, op_type, _, _, _)| *op_type == \"update\")\n .collect();\n let enforce_results: Vec<_> = results\n .iter()\n .filter(|(_, op_type, _, _, _)| *op_type == \"enforce\")\n .collect();\n\n println!(\"Mixed workload results:\");\n println!(\"- Update operations: {} total\", update_results.len());\n println!(\"- Enforce operations: {} total\", enforce_results.len());\n\n // All operations should succeed\n let all_successful = results.iter().all(|(_, _, success, _, _)| *success);\n assert!(\n all_successful,\n \"All mixed concurrent operations should succeed\"\n );\n\n // Analyze timing patterns\n let update_times: Vec = update_results\n .iter()\n .map(|(_, _, _, _, elapsed)| elapsed.as_millis())\n .collect();\n let enforce_times: Vec = enforce_results\n .iter()\n .map(|(_, _, _, _, elapsed)| elapsed.as_millis())\n .collect();\n\n if !update_times.is_empty() {\n let avg_update_time = update_times.iter().sum::() / update_times.len() as u128;\n println!(\"- Average update_policy time: {}ms\", avg_update_time);\n }\n\n if !enforce_times.is_empty() {\n let avg_enforce_time = enforce_times.iter().sum::() / enforce_times.len() as u128;\n println!(\"- Average enforce_policy time: {}ms\", avg_enforce_time);\n }\n\n // All times collected for overall analysis\n let all_times: Vec = results\n .iter()\n .map(|(_, _, _, _, elapsed)| elapsed.as_millis())\n .collect();\n let mut sorted_times = all_times.clone();\n sorted_times.sort();\n\n println!(\n \"- Mixed operation completion times (ms): {:?}\",\n sorted_times\n );\n\n let min_time = sorted_times[0];\n let max_time = sorted_times[19];\n let spread = max_time.saturating_sub(min_time);\n\n println!(\n \"- Timing spread: {}ms (min: {}ms, max: {}ms)\",\n spread, min_time, max_time\n );\n\n // The jitter should help distribute the load even in mixed scenarios\n assert!(\n spread > 3,\n \"Mixed workload should show timing distribution due to jitter: {}ms\",\n spread\n );\n\n // For mixed workload, fast read operations (0ms) are expected and excellent\n // Only check write operation distribution to avoid penalizing good read performance\n let write_times: Vec = update_results\n .iter()\n .map(|(_, _, _, _, elapsed)| elapsed.as_millis())\n .collect();\n\n if write_times.len() > 1 {\n let write_distribution = write_times.iter().fold(HashMap::new(), |mut acc, &time| {\n *acc.entry(time).or_insert(0) += 1;\n acc\n });\n\n let max_same_write_timing = write_distribution.values().max().unwrap_or(&0);\n let max_allowed_write_clustering = (write_times.len() * 60) / 100; // 60% threshold for write operations\n\n assert!(*max_same_write_timing <= max_allowed_write_clustering,\n \"Too many write operations completed at the same time: {} out of {} (jitter should distribute writes better)\",\n max_same_write_timing, write_times.len());\n }\n\n println!(\n \"Mixed workload distribution is excellent - fast reads (0ms) and well-distributed writes\"\n );\n }\n\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n async fn test_high_contention_write_operations() {\n let enforcer = Arc::new(test_enforcer().await);\n let barrier = Arc::new(Barrier::new(12));\n let mut handles = Vec::new();\n\n // Simulate high write contention: multiple updates to the same workspace\n let shared_workspace = \"high_contention_workspace\".to_string();\n\n for i in 0..12 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n let workspace_id = shared_workspace.clone();\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let user_id = 4000 + i;\n let role = if i % 3 == 0 {\n AFRole::Owner\n } else if i % 3 == 1 {\n AFRole::Member\n } else {\n AFRole::Guest\n };\n\n let start = Instant::now();\n let result = enforcer_clone\n .update_policy(\n SubjectType::User(user_id),\n ObjectType::Workspace(workspace_id),\n role,\n )\n .await;\n let elapsed = start.elapsed();\n\n (i, result.is_ok(), elapsed)\n });\n\n handles.push(handle);\n }\n\n let mut results = Vec::new();\n for handle in handles {\n results.push(handle.await.unwrap());\n }\n\n // All high-contention writes should succeed\n let successful_count = results.iter().filter(|(_, success, _)| *success).count();\n assert_eq!(\n successful_count, 12,\n \"All high-contention write operations should succeed\"\n );\n\n // Analyze the retry effectiveness under high write contention\n let times: Vec = results.iter().map(|(_, _, elapsed)| *elapsed).collect();\n let mut times_ms: Vec = times.iter().map(|d| d.as_millis()).collect();\n times_ms.sort();\n\n println!(\n \"High contention write operations completion times (ms): {:?}\",\n times_ms\n );\n\n let min_time = times_ms[0];\n let max_time = times_ms[11];\n let spread = max_time.saturating_sub(min_time);\n let median_time = times_ms[6];\n\n println!(\n \"High contention stats: min={}ms, median={}ms, max={}ms, spread={}ms\",\n min_time, median_time, max_time, spread\n );\n\n // Under high contention, we expect significant timing spread due to retries and jitter\n assert!(\n spread > 10,\n \"High write contention should show significant timing spread: {}ms\",\n spread\n );\n\n // Some operations should take longer due to retries\n assert!(\n max_time > min_time * 2,\n \"Some operations should take significantly longer due to retries\"\n );\n\n // But all should still complete in reasonable time\n assert!(\n max_time < 1000,\n \"Even under high contention, operations should complete within 1 second: {}ms\",\n max_time\n );\n }\n}\n" }, { "path": "libs/access-control/src/casbin/enforcer_v2.rs", "content": "use super::access::load_group_policies;\nuse crate::act::Acts;\nuse crate::casbin::util::policies_for_subject_with_given_object;\nuse crate::entity::{ObjectType, SubjectType};\nuse crate::metrics::MetricsCalState;\nuse crate::request::PolicyRequest;\nuse anyhow::anyhow;\nuse app_error::AppError;\nuse casbin::{CachedApi, CachedEnforcer, CoreApi, MgmtApi};\nuse std::collections::HashSet;\nuse std::sync::atomic::{AtomicU64, Ordering};\nuse std::sync::Arc;\nuse std::time::Duration;\nuse tokio::sync::{mpsc, Notify, RwLock};\nuse tokio::time::timeout;\nuse tracing::{error, event, info, instrument, trace, warn};\n\n/// Consistency mode for policy enforcement\n#[derive(Debug, Clone, Default, Copy)]\npub enum ConsistencyMode {\n /// Default mode - returns immediately with potentially stale data\n #[default]\n Eventual,\n /// Waits for all pending updates to complete before enforcing\n Strong,\n /// Waits for specific pending updates affecting the requested subject/object\n BoundedStrong { timeout_ms: u64 },\n}\n\n/// Commands for policy updates\n#[derive(Debug)]\nenum PolicyCommand {\n AddPolicies {\n policies: Vec>,\n generation: u64,\n subject_object_keys: Vec<(String, String)>, // (subject, object) pairs\n response: tokio::sync::oneshot::Sender>,\n },\n RemovePolicies {\n policies: Vec>,\n generation: u64,\n subject_object_keys: Vec<(String, String)>, // (subject, object) pairs\n response: tokio::sync::oneshot::Sender>,\n },\n Shutdown,\n}\n\npub struct AFEnforcerV2 {\n enforcer: Arc>,\n pub(crate) metrics_state: MetricsCalState,\n policy_cmd_tx: mpsc::Sender,\n /// Tracks the current generation of policy updates\n generation: Arc,\n /// Tracks the last processed generation\n processed_generation: Arc,\n /// Tracks pending operations by subject-object key\n pending_operations: Arc>>,\n /// Notifies when a generation has been processed\n generation_notify: Arc,\n}\n\nimpl AFEnforcerV2 {\n pub async fn new(enforcer: CachedEnforcer) -> Result {\n Self::new_internal(enforcer).await\n }\n\n pub async fn new_with_redis(\n mut enforcer: CachedEnforcer,\n redis_uri: &str,\n ) -> Result {\n use super::redis_cache::RedisCache;\n match RedisCache::new(redis_uri) {\n Ok(redis_cache) => {\n info!(\"[access control v2]: Using Redis cache at {}\", redis_uri);\n enforcer.set_cache(Box::new(redis_cache));\n Self::new_internal(enforcer).await\n },\n Err(e) => {\n warn!(\n \"[access control v2]: Failed to connect to Redis cache: {}. Using in-memory cache.\",\n e\n );\n Self::new_internal(enforcer).await\n },\n }\n }\n\n async fn new_internal(mut enforcer: CachedEnforcer) -> Result {\n load_group_policies(&mut enforcer).await?;\n\n // Create command channel with bounded capacity\n // Read capacity from environment variable, defaulting to 2000 if not set or invalid\n let channel_capacity = std::env::var(\"ACCESS_CONTROL_POLICY_CHANNEL_CAPACITY\")\n .ok()\n .and_then(|s| s.parse::().ok())\n .unwrap_or(2000);\n\n trace!(\n \"[access control v2]: Policy channel capacity set to {}\",\n channel_capacity\n );\n let (tx, rx) = mpsc::channel::(channel_capacity);\n let enforcer = Arc::new(RwLock::new(enforcer));\n\n // Create consistency tracking\n let generation = Arc::new(AtomicU64::new(0));\n let processed_generation = Arc::new(AtomicU64::new(0));\n let pending_operations = Arc::new(RwLock::new(HashSet::new()));\n let generation_notify = Arc::new(Notify::new());\n\n // Spawn processor with consistency tracking\n tokio::spawn(Self::policy_update_processor(\n rx,\n enforcer.clone(),\n processed_generation.clone(),\n pending_operations.clone(),\n generation_notify.clone(),\n ));\n\n Ok(Self {\n enforcer,\n metrics_state: MetricsCalState::new(),\n policy_cmd_tx: tx,\n generation,\n processed_generation,\n pending_operations,\n generation_notify,\n })\n }\n\n /// Background task that processes policy updates sequentially\n async fn policy_update_processor(\n mut rx: mpsc::Receiver,\n enforcer: Arc>,\n processed_generation: Arc,\n pending_operations: Arc>>,\n generation_notify: Arc,\n ) {\n info!(\"[access control v2]: Policy update processor started\");\n let buffer_size = 2;\n let mut buf = Vec::with_capacity(buffer_size);\n\n loop {\n trace!(\"[access control v2]: Waiting for policy commands...\");\n let n = rx.recv_many(&mut buf, buffer_size).await;\n if n == 0 {\n info!(\"[access control v2]: Channel closed, exiting processor\");\n break;\n }\n\n info!(\"[access control v2]: Received {} policy commands\", n);\n let mut enforcer = enforcer.write().await;\n let mut max_generation = 0u64;\n let mut processed_keys = Vec::new();\n for cmd in buf.drain(..) {\n match cmd {\n PolicyCommand::AddPolicies {\n policies,\n generation,\n subject_object_keys,\n response,\n } => {\n max_generation = max_generation.max(generation);\n processed_keys.extend(subject_object_keys);\n let result = async {\n enforcer\n .add_policies(policies)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"fail to add policy: {e:?}\")))?;\n Ok(())\n }\n .await;\n trace!(\"[access control v2]: AddPolicies result: {:?}\", result);\n let _ = response.send(result);\n },\n PolicyCommand::RemovePolicies {\n policies,\n generation,\n subject_object_keys,\n response,\n } => {\n max_generation = max_generation.max(generation);\n processed_keys.extend(subject_object_keys);\n let result = async {\n enforcer\n .remove_policies(policies)\n .await\n .map_err(|e| AppError::Internal(anyhow!(\"fail to remove policy: {e:?}\")))?;\n Ok(())\n }\n .await;\n trace!(\"[access control v2]: RemovePolicies result: {:?}\", result);\n let _ = response.send(result);\n },\n PolicyCommand::Shutdown => {\n trace!(\"[access control v2]: Policy update processor shutting down\");\n return;\n },\n }\n }\n drop(enforcer);\n trace!(\"[access control v2]: Finished processing {} commands\", n);\n // Update consistency tracking\n if max_generation > 0 {\n trace!(\n \"[access control v2]: Updating processed generation from {} to {}\",\n processed_generation.load(Ordering::SeqCst),\n max_generation\n );\n processed_generation.store(max_generation, Ordering::SeqCst);\n if !processed_keys.is_empty() {\n let mut pending = pending_operations.write().await;\n for key in processed_keys {\n pending.remove(&key);\n }\n }\n\n // Notify waiters\n trace!(\n \"[access control v2]: Notifying waiters after processing generation {}\",\n max_generation\n );\n generation_notify.notify_waiters();\n }\n }\n }\n\n /// Send a command with metrics tracking\n async fn send_command_with_metrics(&self, cmd: PolicyCommand) -> Result<(), AppError> {\n // Increment send attempts\n self\n .metrics_state\n .policy_send_attempts\n .fetch_add(1, Ordering::Relaxed);\n\n // First try to send without blocking to detect if channel is full\n match self.policy_cmd_tx.try_send(cmd) {\n Ok(()) => {\n trace!(\"[access control v2]: Command sent successfully\");\n Ok(())\n },\n Err(mpsc::error::TrySendError::Full(cmd)) => {\n self\n .metrics_state\n .policy_channel_full_events\n .fetch_add(1, Ordering::Relaxed);\n\n warn!(\"[access control v2]: Policy channel is full, waiting to send...\");\n let send_timeout = Duration::from_secs(5);\n match timeout(send_timeout, self.policy_cmd_tx.send(cmd)).await {\n Ok(Ok(())) => {\n trace!(\"[access control v2]: Command sent successfully after waiting\");\n Ok(())\n },\n Ok(Err(_)) => {\n self\n .metrics_state\n .policy_send_failures\n .fetch_add(1, Ordering::Relaxed);\n Err(AppError::Internal(anyhow!(\"Policy update channel closed\")))\n },\n Err(_) => {\n self\n .metrics_state\n .policy_send_failures\n .fetch_add(1, Ordering::Relaxed);\n Err(AppError::Internal(anyhow!(\n \"Policy update timed out after {} seconds - channel may be overloaded\",\n send_timeout.as_secs()\n )))\n },\n }\n },\n Err(mpsc::error::TrySendError::Closed(_)) => {\n self\n .metrics_state\n .policy_send_failures\n .fetch_add(1, Ordering::Relaxed);\n Err(AppError::Internal(anyhow!(\"Policy update channel closed\")))\n },\n }\n }\n\n /// Update policy for a user using queue-based approach.\n /// This method will never cause a deadlock.\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn update_policy(\n &self,\n sub: SubjectType,\n obj: ObjectType,\n act: T,\n ) -> Result<(), AppError>\n where\n T: Acts,\n {\n let policies = act\n .policy_acts()\n .into_iter()\n .map(|act| vec![sub.policy_subject(), obj.policy_object(), act])\n .collect::>>();\n\n info!(\"[access control v2]: queuing add policy:{:?}\", policies);\n // Generate new generation number\n let generation = self.generation.fetch_add(1, Ordering::Relaxed) + 1;\n\n // Extract subject-object keys\n let subject = sub.policy_subject();\n let object = obj.policy_object();\n let subject_object_keys = vec![(subject, object)];\n\n // Add to pending operations\n {\n let mut pending = self.pending_operations.write().await;\n for key in &subject_object_keys {\n pending.insert(key.clone());\n }\n }\n\n let (tx, rx) = tokio::sync::oneshot::channel();\n self\n .send_command_with_metrics(PolicyCommand::AddPolicies {\n policies,\n generation,\n subject_object_keys,\n response: tx,\n })\n .await?;\n\n let result = rx\n .await\n .map_err(|_| AppError::Internal(anyhow!(\"Policy update response dropped\")))?;\n trace!(\n \"[access control v2]: Received policy update response: {:?}\",\n result\n );\n result\n }\n\n /// Remove policies for a subject and object type.\n pub async fn remove_policy(\n &self,\n sub: SubjectType,\n object_type: ObjectType,\n ) -> Result<(), AppError> {\n // First, get the policies to remove by reading\n let policies_for_user_on_object = {\n let enforcer = self.enforcer.read().await;\n policies_for_subject_with_given_object(sub.clone(), object_type.clone(), &enforcer).await\n };\n\n event!(\n tracing::Level::INFO,\n \"[access control v2]: queuing remove policy:subject={}, object={}, policies={:?}\",\n sub.policy_subject(),\n object_type.policy_object(),\n policies_for_user_on_object\n );\n\n if policies_for_user_on_object.is_empty() {\n return Ok(());\n }\n\n // Generate new generation number\n let generation = self.generation.fetch_add(1, Ordering::Relaxed) + 1;\n let subject = sub.policy_subject();\n let object = object_type.policy_object();\n let subject_object_keys = vec![(subject, object)];\n\n // Add to pending operations\n {\n let mut pending = self.pending_operations.write().await;\n for key in &subject_object_keys {\n pending.insert(key.clone());\n }\n }\n\n let (tx, rx) = tokio::sync::oneshot::channel();\n self\n .send_command_with_metrics(PolicyCommand::RemovePolicies {\n policies: policies_for_user_on_object,\n generation,\n subject_object_keys,\n response: tx,\n })\n .await?;\n\n let result = rx\n .await\n .map_err(|_| AppError::Internal(anyhow!(\"Policy update response dropped\")))?;\n trace!(\n \"[access control v2]: Received policy removal response: {:?}\",\n result\n );\n result\n }\n\n /// Enforces an access control policy with eventual consistency.\n /// - `Eventual`: Returns immediately with potentially stale data (fastest)\n #[instrument(level = \"debug\", skip_all)]\n pub async fn enforce_policy(\n &self,\n uid: &i64,\n obj: ObjectType,\n act: T,\n ) -> Result\n where\n T: Acts,\n {\n self\n .enforce_policy_with_consistency(uid, obj, act, ConsistencyMode::Eventual)\n .await\n }\n\n /// Enforces an access control policy with configurable consistency guarantees.\n /// - `Eventual`: Returns immediately with potentially stale data (fastest)\n /// - `Strong`: Waits for all pending updates before checking (most consistent)\n /// - `BoundedStrong`: Waits only for updates affecting this subject/object pair (balanced)\n #[instrument(level = \"debug\", skip_all)]\n pub async fn enforce_policy_with_consistency(\n &self,\n uid: &i64,\n obj: ObjectType,\n act: T,\n consistency: ConsistencyMode,\n ) -> Result\n where\n T: Acts,\n {\n self\n .metrics_state\n .total_read_enforce_result\n .fetch_add(1, Ordering::Relaxed);\n\n match consistency {\n ConsistencyMode::Eventual => {\n // No waiting, proceed immediately\n },\n ConsistencyMode::Strong => {\n // Wait for all pending operations to complete\n let current_gen = self.generation.load(Ordering::Acquire);\n self.wait_for_generation(current_gen, None).await?;\n },\n ConsistencyMode::BoundedStrong { timeout_ms } => {\n // Check if there are pending operations for this subject/object\n let subject = uid.to_string();\n let object = obj.policy_object();\n let key = (subject, object);\n\n let has_pending = {\n let pending = self.pending_operations.read().await;\n pending.contains(&key)\n };\n\n if has_pending {\n // Wait for those specific operations to complete\n let current_gen = self.generation.load(Ordering::Acquire);\n self\n .wait_for_generation(current_gen, Some(Duration::from_millis(timeout_ms)))\n .await?;\n }\n },\n }\n\n let policy_request = PolicyRequest::new(*uid, obj, act);\n let policy = policy_request.to_policy();\n\n let result = self\n .enforcer\n .read()\n .await\n .enforce(policy)\n .map_err(|e| AppError::Internal(anyhow!(\"enforce: {e:?}\")))?;\n\n Ok(result)\n }\n\n /// Wait for a specific generation to be processed\n async fn wait_for_generation(\n &self,\n target_generation: u64,\n timeout_duration: Option,\n ) -> Result<(), AppError> {\n let timeout_duration = timeout_duration.unwrap_or(Duration::from_secs(5));\n let wait_future = async {\n loop {\n let notified = self.generation_notify.notified();\n let processed = self.processed_generation.load(Ordering::Acquire);\n if processed >= target_generation {\n return Ok(());\n }\n\n notified.await;\n }\n };\n\n match timeout(timeout_duration, wait_future).await {\n Ok(result) => result,\n Err(_) => {\n error!(\n \"[access control v2]: target_generation={}, current_generation={}, pending_operation={}\",\n target_generation,\n self.processed_generation.load(Ordering::Acquire),\n self.pending_operations.read().await.len(),\n );\n\n Err(AppError::Internal(anyhow!(\n \"Timed out waiting for policy consistency after {}ms\",\n timeout_duration.as_millis()\n )))\n },\n }\n }\n\n pub async fn shutdown(&self) -> Result<(), AppError> {\n self\n .send_command_with_metrics(PolicyCommand::Shutdown)\n .await?;\n Ok(())\n }\n}\n\n#[cfg(test)]\nmod tests {\n use super::*;\n use crate::{\n act::Action,\n casbin::access::{casbin_model, cmp_role_or_level},\n entity::{ObjectType, SubjectType},\n };\n use casbin::{function_map::OperatorFunction, prelude::*};\n use database_entity::dto::AFRole;\n use std::sync::Arc;\n use tokio::sync::Barrier;\n\n async fn test_enforcer_v2() -> AFEnforcerV2 {\n let model = casbin_model().await.unwrap();\n let mut enforcer = casbin::CachedEnforcer::new(model, MemoryAdapter::default())\n .await\n .unwrap();\n\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n AFEnforcerV2::new(enforcer).await.unwrap()\n }\n\n #[tokio::test]\n async fn test_v2_no_deadlock_scenario() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 1;\n let workspace_id = \"v2_test_workspace\";\n\n // This would deadlock in V1, but works fine in V2\n let enforcer_clone = Arc::clone(&enforcer);\n\n // Update policy and immediately enforce multiple times\n enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Member,\n )\n .await\n .unwrap();\n\n // Can immediately enforce without any deadlock risk\n let can_read = enforcer_clone\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n Action::Read,\n )\n .await\n .unwrap();\n\n assert!(can_read, \"User should be able to read\");\n\n // Clean up\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_concurrent_operations() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let barrier = Arc::new(Barrier::new(20));\n let mut handles = Vec::new();\n\n // Mix of concurrent updates and enforces\n for i in 0..20 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let uid = 1000 + i;\n let workspace_id = format!(\"workspace_{}\", i % 5);\n\n if i % 2 == 0 {\n // Update policy\n enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.clone()),\n AFRole::Member,\n )\n .await\n .expect(\"Failed to update policy\");\n }\n\n // Always try to enforce (may succeed or fail based on timing)\n let _ = enforcer_clone\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await;\n\n \"Success\"\n });\n\n handles.push(handle);\n }\n\n // All operations should complete without deadlock\n for handle in handles {\n let result = handle.await.unwrap();\n assert_eq!(result, \"Success\");\n }\n\n // Clean up\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_queue_ordering() {\n let enforcer = test_enforcer_v2().await;\n let uid = 2000;\n let workspace_id = \"order_test\";\n\n // Rapid sequence of operations\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await\n .unwrap();\n\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n\n // Should end up with Guest role\n let has_guest = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n assert!(has_guest);\n\n let has_owner = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n assert!(!has_owner);\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_queue_capacity_limits() {\n // Set a very small channel capacity via environment variable\n std::env::set_var(\"ACCESS_CONTROL_POLICY_CHANNEL_CAPACITY\", \"2\");\n\n let enforcer = Arc::new(test_enforcer_v2().await);\n let barrier = Arc::new(Barrier::new(10));\n let mut handles = Vec::new();\n\n // Try to send many commands at once to fill the queue\n for i in 0..10 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n let uid = 3000 + i;\n let workspace_id = format!(\"capacity_test_{}\", i);\n\n // This might block or timeout if queue is full\n let result = enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await;\n\n result.is_ok()\n });\n\n handles.push(handle);\n }\n\n let mut success_count = 0;\n for handle in handles {\n if handle.await.unwrap() {\n success_count += 1;\n }\n }\n\n // All should eventually succeed since the processor is draining the queue\n assert_eq!(\n success_count, 10,\n \"All operations should eventually succeed\"\n );\n\n // Check metrics for channel full events\n let channel_full_events = enforcer\n .metrics_state\n .policy_channel_full_events\n .load(Ordering::Relaxed);\n\n assert!(\n channel_full_events > 0,\n \"Should have experienced channel full events with small capacity\"\n );\n\n // Clean up\n enforcer.shutdown().await.unwrap();\n std::env::remove_var(\"ACCESS_CONTROL_POLICY_CHANNEL_CAPACITY\");\n }\n\n #[tokio::test]\n async fn test_v2_policy_query_consistency_during_rapid_updates() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 4000;\n let workspace_id = \"consistency_test\";\n\n // This test demonstrates that rapid updates can lead to multiple policies\n // In a real application, you would typically remove the old role before adding a new one\n\n // Start with a clean slate - remove any existing policies\n let _ = enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await;\n\n // Do sequential updates with proper cleanup to ensure consistency\n for i in 0..10 {\n let role = if i % 2 == 0 {\n AFRole::Owner\n } else {\n AFRole::Guest\n };\n\n // Remove existing policy first\n let _ = enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await;\n\n // Then add new policy\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n role,\n )\n .await\n .unwrap();\n }\n\n // Small delay to ensure queue is processed\n tokio::time::sleep(Duration::from_millis(50)).await;\n\n // Final state should be consistent - check which role is actually set\n let has_owner = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n let has_guest = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n\n println!(\n \"After sequential updates with cleanup: has_owner={}, has_guest={}\",\n has_owner, has_guest\n );\n\n // Now we should have exactly one role\n let role_count = if has_owner { 1 } else { 0 } + if has_guest { 1 } else { 0 };\n assert_eq!(\n role_count, 1,\n \"Should have exactly one role active after proper updates, but found {} roles\",\n role_count\n );\n\n // The last update was Guest (i=9, odd number)\n assert!(\n !has_owner && has_guest,\n \"Should have Guest role as the final state\"\n );\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_multiple_policies_accumulation() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 4100;\n let workspace_id = \"accumulation_test\";\n\n // Start clean\n let _ = enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await;\n\n // Add multiple roles without cleanup - demonstrates accumulation\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n // Small delay to ensure policies are applied\n tokio::time::sleep(Duration::from_millis(50)).await;\n\n // Check both roles\n let has_owner = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n let has_guest = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n\n // Both roles should be active due to accumulation\n assert!(\n has_owner && has_guest,\n \"Both roles should be active when added without cleanup\"\n );\n\n // User should have highest permission (can delete)\n let can_delete = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n Action::Delete,\n )\n .await\n .unwrap();\n\n assert!(\n can_delete,\n \"User should be able to delete with Owner role active\"\n );\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_shutdown_with_pending_operations() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n\n // Send many operations\n let mut handles = Vec::new();\n for i in 0..50 {\n let enforcer_clone = Arc::clone(&enforcer);\n let handle = tokio::spawn(async move {\n let uid = 5000 + i;\n let workspace_id = format!(\"shutdown_test_{}\", i);\n\n enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await\n });\n handles.push(handle);\n }\n\n // Immediately shutdown\n tokio::time::sleep(Duration::from_millis(10)).await;\n enforcer.shutdown().await.unwrap();\n\n // Operations might fail after shutdown\n let mut success_count = 0;\n let mut failure_count = 0;\n\n for handle in handles {\n match handle.await.unwrap() {\n Ok(_) => success_count += 1,\n Err(_) => failure_count += 1,\n }\n }\n\n println!(\n \"Shutdown test: {} succeeded, {} failed\",\n success_count, failure_count\n );\n\n // At least some operations should have succeeded before shutdown\n assert!(\n success_count > 0,\n \"Some operations should succeed before shutdown\"\n );\n }\n\n #[tokio::test]\n async fn test_v2_concurrent_read_write_race_conditions() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 6000;\n let workspace_id = \"race_test\";\n\n // Initial setup\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Guest,\n )\n .await\n .unwrap();\n\n let barrier = Arc::new(Barrier::new(40));\n let mut handles = Vec::new();\n\n for i in 0..1000 {\n let enforcer_clone = Arc::clone(&enforcer);\n let barrier_clone = Arc::clone(&barrier);\n let ws_id = workspace_id.to_string();\n\n let handle = tokio::spawn(async move {\n barrier_clone.wait().await;\n\n if i % 2 == 0 {\n // Writer: alternate between Owner and Member\n let role = if (i / 2) % 2 == 0 {\n AFRole::Owner\n } else {\n AFRole::Member\n };\n enforcer_clone\n .update_policy(SubjectType::User(uid), ObjectType::Workspace(ws_id), role)\n .await\n .map(|_| format!(\"Write {}\", i))\n } else {\n // Reader: check current permissions\n let can_delete = enforcer_clone\n .enforce_policy_with_consistency(\n &uid,\n ObjectType::Workspace(ws_id),\n Action::Delete,\n ConsistencyMode::Strong,\n )\n .await?;\n Ok(format!(\"Read {}: can_delete={}\", i, can_delete))\n }\n });\n\n handles.push(handle);\n }\n\n // Collect all results\n let mut results = Vec::new();\n for handle in handles {\n match handle.await.unwrap() {\n Ok(result) => results.push(result),\n Err(e) => panic!(\"Operation failed: {:?}\", e),\n }\n }\n\n // All operations should complete successfully\n assert_eq!(results.len(), 1000, \"All operations should complete\");\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_policy_removal_during_enforcement() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 7000;\n let workspace_id = \"removal_race_test\";\n\n // Setup initial permission\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n let barrier = Arc::new(Barrier::new(3));\n\n // Task 1: Check permission\n let enforcer1 = Arc::clone(&enforcer);\n let barrier1 = Arc::clone(&barrier);\n let ws_id1 = workspace_id.to_string();\n let check_handle = tokio::spawn(async move {\n barrier1.wait().await;\n\n // Check multiple times to increase chance of race\n let mut results = Vec::new();\n for _ in 0..10 {\n let can_delete = enforcer1\n .enforce_policy(&uid, ObjectType::Workspace(ws_id1.clone()), Action::Delete)\n .await\n .unwrap();\n results.push(can_delete);\n tokio::time::sleep(Duration::from_micros(100)).await;\n }\n results\n });\n\n // Task 2: Remove permission\n let enforcer2 = Arc::clone(&enforcer);\n let barrier2 = Arc::clone(&barrier);\n let ws_id2 = workspace_id.to_string();\n let remove_handle = tokio::spawn(async move {\n barrier2.wait().await;\n\n // Small delay to let some checks happen first\n tokio::time::sleep(Duration::from_millis(2)).await;\n\n enforcer2\n .remove_policy(SubjectType::User(uid), ObjectType::Workspace(ws_id2))\n .await\n .unwrap();\n });\n\n // Task 3: Re-add with different permission\n let enforcer3 = Arc::clone(&enforcer);\n let barrier3 = Arc::clone(&barrier);\n let ws_id3 = workspace_id.to_string();\n let readd_handle = tokio::spawn(async move {\n barrier3.wait().await;\n\n // Delay to happen after removal\n tokio::time::sleep(Duration::from_millis(5)).await;\n\n enforcer3\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(ws_id3),\n AFRole::Guest,\n )\n .await\n .unwrap();\n });\n\n // Wait for all tasks\n let check_results = check_handle.await.unwrap();\n remove_handle.await.unwrap();\n readd_handle.await.unwrap();\n\n // Results should transition from true to false\n println!(\n \"Permission check results during removal: {:?}\",\n check_results\n );\n\n // Early checks should be true, later ones false\n assert!(check_results[0], \"Initial checks should show permission\");\n assert!(\n !check_results[check_results.len() - 1],\n \"Final checks should show no delete permission (Guest role)\"\n );\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_high_throughput_mixed_operations() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let operation_count = 1000;\n let user_count = 10;\n let workspace_count = 5;\n\n let start_time = std::time::Instant::now();\n let mut handles = Vec::new();\n\n for i in 0..operation_count {\n let enforcer_clone = Arc::clone(&enforcer);\n\n let handle = tokio::spawn(async move {\n let uid = 8000 + (i % user_count);\n let workspace_id = format!(\"high_throughput_ws_{}\", i % workspace_count);\n\n match i % 4 {\n 0 => {\n // Add policy\n enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await\n .map(|_| \"add\")\n },\n 1 => {\n // Check permission\n enforcer_clone\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .map(|_| \"check\")\n },\n 2 => {\n // Update policy\n enforcer_clone\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Owner,\n )\n .await\n .map(|_| \"update\")\n },\n _ => {\n // Remove policy\n enforcer_clone\n .remove_policy(SubjectType::User(uid), ObjectType::Workspace(workspace_id))\n .await\n .map(|_| \"remove\")\n },\n }\n });\n\n handles.push(handle);\n }\n\n // Wait for all operations\n let mut success_count = 0;\n for handle in handles {\n if handle.await.unwrap().is_ok() {\n success_count += 1;\n }\n }\n\n let elapsed = start_time.elapsed();\n let ops_per_sec = (operation_count as f64) / elapsed.as_secs_f64();\n\n println!(\n \"High throughput test: {} operations in {:?} ({:.0} ops/sec)\",\n operation_count, elapsed, ops_per_sec\n );\n\n assert_eq!(\n success_count, operation_count,\n \"All operations should succeed\"\n );\n assert!(ops_per_sec > 100.0, \"Should handle at least 100 ops/sec\");\n\n // Check metrics\n let total_attempts = enforcer\n .metrics_state\n .policy_send_attempts\n .load(Ordering::Relaxed);\n let total_failures = enforcer\n .metrics_state\n .policy_send_failures\n .load(Ordering::Relaxed);\n\n println!(\n \"Metrics: {} attempts, {} failures\",\n total_attempts, total_failures\n );\n assert_eq!(total_failures, 0, \"Should have no send failures\");\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_empty_policy_removal() {\n let enforcer = test_enforcer_v2().await;\n let uid = 9000;\n let workspace_id = \"empty_removal_test\";\n\n // Try to remove non-existent policy\n let result = enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await;\n\n // Should succeed even with no policies to remove\n assert!(\n result.is_ok(),\n \"Removing non-existent policy should not error\"\n );\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_policy_enforcement_accuracy() {\n let enforcer = test_enforcer_v2().await;\n let uid = 10000;\n let workspace_id = \"accuracy_test\";\n\n // Test different role levels and their permissions\n // Based on load_group_policies in access.rs:\n // - Owner: can Delete, Write, Read\n // - Member: can Write, Read\n // - Guest: can Write, Read\n let test_cases = vec![\n (\n AFRole::Owner,\n vec![Action::Read, Action::Write, Action::Delete],\n vec![true, true, true],\n ),\n (\n AFRole::Member,\n vec![Action::Read, Action::Write, Action::Delete],\n vec![true, true, false],\n ),\n (\n AFRole::Guest,\n vec![Action::Read, Action::Write, Action::Delete],\n vec![true, true, false],\n ), // Guest CAN write!\n ];\n\n for (role, actions, expected_results) in test_cases {\n // Clean slate - remove any existing policies\n let _ = enforcer\n .remove_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await;\n\n // Set role\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n role.clone(),\n )\n .await\n .unwrap();\n\n // Small delay to ensure policy is applied\n tokio::time::sleep(Duration::from_millis(10)).await;\n\n // Check each action\n for (action, expected) in actions.into_iter().zip(expected_results) {\n let result = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n action.clone(),\n )\n .await\n .unwrap();\n\n assert_eq!(\n result, expected,\n \"Role {:?} with action {:?} should be {}\",\n role, action, expected\n );\n }\n }\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_consistency_modes() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 11000;\n let workspace_id = \"consistency_mode_test\";\n\n // Test 1: Eventual consistency (default) - might return stale result\n let enforcer1 = Arc::clone(&enforcer);\n let eventual_result = tokio::spawn(async move {\n // Update and immediately check with eventual consistency\n enforcer1\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n // This might return false if policy hasn't been processed yet\n enforcer1\n .enforce_policy(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n Action::Delete,\n )\n .await\n .unwrap()\n });\n\n // Test 2: Strong consistency - always returns correct result\n let enforcer2 = Arc::clone(&enforcer);\n let strong_result = tokio::spawn(async move {\n // Update and check with strong consistency\n enforcer2\n .update_policy(\n SubjectType::User(uid + 1),\n ObjectType::Workspace(format!(\"{}_2\", workspace_id)),\n AFRole::Owner,\n )\n .await\n .unwrap();\n\n // This will always return true because it waits for the update\n enforcer2\n .enforce_policy_with_consistency(\n &(uid + 1),\n ObjectType::Workspace(format!(\"{}_2\", workspace_id)),\n Action::Delete,\n ConsistencyMode::Strong,\n )\n .await\n .unwrap()\n });\n\n // Test 3: Bounded strong consistency - waits only for relevant updates\n let enforcer3 = Arc::clone(&enforcer);\n let bounded_result = tokio::spawn(async move {\n // Update policy\n enforcer3\n .update_policy(\n SubjectType::User(uid + 2),\n ObjectType::Workspace(format!(\"{}_3\", workspace_id)),\n AFRole::Member,\n )\n .await\n .unwrap();\n\n // Check with bounded consistency (waits up to 1 second)\n enforcer3\n .enforce_policy_with_consistency(\n &(uid + 2),\n ObjectType::Workspace(format!(\"{}_3\", workspace_id)),\n Action::Write,\n ConsistencyMode::BoundedStrong { timeout_ms: 1000 },\n )\n .await\n .unwrap()\n });\n\n let _ = eventual_result.await.unwrap();\n let strong = strong_result.await.unwrap();\n let bounded = bounded_result.await.unwrap();\n\n // Strong consistency should always work\n assert!(strong, \"Strong consistency should guarantee correct result\");\n assert!(bounded, \"Bounded consistency should work within timeout\");\n\n // Note: eventual_result might be true or false depending on timing\n\n enforcer.shutdown().await.unwrap();\n }\n\n #[tokio::test]\n async fn test_v2_consistency_timeout() {\n let enforcer = Arc::new(test_enforcer_v2().await);\n let uid = 12000;\n let workspace_id = \"timeout_test\";\n\n // Create a scenario where processor is slow by filling the channel\n for i in 0..100 {\n let _ = enforcer\n .update_policy(\n SubjectType::User(uid + i),\n ObjectType::Workspace(format!(\"{}_{}\", workspace_id, i)),\n AFRole::Member,\n )\n .await;\n }\n\n // Try to enforce with very short timeout\n let _result = enforcer\n .enforce_policy_with_consistency(\n &uid,\n ObjectType::Workspace(workspace_id.to_string()),\n Action::Read,\n ConsistencyMode::BoundedStrong { timeout_ms: 1 }, // 1ms timeout\n )\n .await;\n\n // Should likely timeout (unless processor is very fast)\n // Note: This is not a guarantee, just likely\n\n enforcer.shutdown().await.unwrap();\n }\n}\n" }, { "path": "libs/access-control/src/casbin/mod.rs", "content": "pub mod access;\nmod adapter;\npub mod collab;\n\n#[cfg(test)]\nmod enforcer;\npub mod enforcer_v2;\n#[cfg(test)]\nmod performance_comparison_tests;\nmod redis_cache;\nmod util;\npub mod workspace;\n" }, { "path": "libs/access-control/src/casbin/performance_comparison_tests.rs", "content": "/// Performance comparison tests between AFEnforcer V1 and V2\n/// === Baseline enforce_policy Performance (No Concurrent Writes) ===\n/// Test configuration: 10,000 enforce_policy calls\n///\n/// | Version | Total Time | Avg per Op | Speed Ratio |\n/// |---------|------------|------------|-------------|\n/// | V1 | 54.644ms | 5.46μs | 1.00x |\n/// | V2 | 46.127ms | 4.61μs | 1.18x |\n/// ok\n/// test casbin::performance_comparison_tests::performance_tests::test_enforce_policy_latency_distribution ...\n/// === enforce_policy Latency Distribution ===\n/// Test configuration: 1000 individual operation latency measurements\n///\n/// | Version | P50 (μs) | P95 (μs) | P99 (μs) | Max (μs) |\n/// |---------|----------|----------|----------|----------|\n/// | V1 | 6 | 201 | 313 | 1103 |\n/// | V2 | 4 | 78 | 221 | 251 |\n/// ok\n/// test casbin::performance_comparison_tests::performance_tests::test_enforce_policy_under_write_load ...\n/// === enforce_policy Performance Under Heavy Write Load ===\n/// Test configuration:\n/// - 4 reader threads × 1000 reads = 4000 total reads\n/// - 2 writer threads × 100 writes = 200 total writes\n///\n/// | Version | Avg Read Time | Speed Ratio |\n/// |---------|---------------|-------------|\n/// | V1 | 8.50ms | 1.00x |\n/// | V2 | 140.00ms | 0.06x |\n/// ok\n/// test casbin::performance_comparison_tests::performance_tests::test_mixed_workload_throughput ...\n/// === Mixed Workload Throughput Test ===\n/// Test configuration:\n/// - Duration: 2 seconds\n/// - Concurrent threads: 8\n/// - Workload mix: 90% reads, 10% writes\n///\n/// | Version | Total Ops | Throughput | Speed Ratio |\n/// |---------|-----------|------------|-------------|\n/// | V1 | 2216 | 1108 ops/s | 1.00x |\n/// | V2 | 11331 | 5666 ops/s | 5.11x |\n///\n/// cargo test -p access-control -- --ignored performance_tests --nocapture\n#[cfg(test)]\nmod performance_tests {\n use crate::{\n act::Action,\n casbin::{\n access::{casbin_model, cmp_role_or_level},\n enforcer::AFEnforcer,\n enforcer_v2::AFEnforcerV2,\n },\n entity::{ObjectType, SubjectType},\n };\n use casbin::{function_map::OperatorFunction, prelude::*};\n use database_entity::dto::AFRole;\n use std::sync::Arc;\n use std::time::{Duration, Instant};\n use tokio::sync::Barrier;\n\n /// Helper to create V1 enforcer\n async fn create_v1_enforcer() -> AFEnforcer {\n let model = casbin_model().await.unwrap();\n let mut enforcer = casbin::CachedEnforcer::new(model, MemoryAdapter::default())\n .await\n .unwrap();\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n AFEnforcer::new(enforcer).await.unwrap()\n }\n\n /// Helper to create V2 enforcer\n async fn create_v2_enforcer() -> AFEnforcerV2 {\n let model = casbin_model().await.unwrap();\n let mut enforcer = casbin::CachedEnforcer::new(model, MemoryAdapter::default())\n .await\n .unwrap();\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n AFEnforcerV2::new(enforcer).await.unwrap()\n }\n\n /// Test 1: Baseline Performance\n ///\n /// This test measures pure enforce_policy performance without any concurrent writes.\n /// It establishes a baseline to show that V2 has minimal overhead even in the simplest case.\n ///\n /// Expected Results:\n /// - V1: ~6-7μs per operation\n /// - V2: ~4-5μs per operation \n /// - V2 should be 1.3-1.5x faster\n ///\n /// Why V2 is faster even without contention:\n /// - No retry logic needed (V1's retry_write adds overhead)\n /// - Simpler code path for reads\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n #[ignore]\n async fn test_enforce_policy_baseline_performance() {\n println!(\"\\n=== Baseline enforce_policy Performance (No Concurrent Writes) ===\");\n println!(\"Test configuration: 10,000 enforce_policy calls\\n\");\n\n // Setup V1\n let v1_enforcer = Arc::new(create_v1_enforcer().await);\n for i in 0..100 {\n v1_enforcer\n .update_policy(\n SubjectType::User(i),\n ObjectType::Workspace(format!(\"workspace_{}\", i)),\n AFRole::Member,\n )\n .await\n .unwrap();\n }\n\n // Setup V2\n let v2_enforcer = Arc::new(create_v2_enforcer().await);\n for i in 0..100 {\n v2_enforcer\n .update_policy(\n SubjectType::User(i),\n ObjectType::Workspace(format!(\"workspace_{}\", i)),\n AFRole::Member,\n )\n .await\n .unwrap();\n }\n\n // Wait for V2 background task to complete\n tokio::time::sleep(Duration::from_millis(100)).await;\n\n // Measure V1 performance\n let iterations = 10000;\n let start = Instant::now();\n for i in 0..iterations {\n let uid = (i % 100) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n let _ = v1_enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n }\n let v1_duration = start.elapsed();\n let v1_avg = v1_duration.as_micros() as f64 / iterations as f64;\n\n // Measure V2 performance\n let start = Instant::now();\n for i in 0..iterations {\n let uid = (i % 100) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n let _ = v2_enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n }\n let v2_duration = start.elapsed();\n let v2_avg = v2_duration.as_micros() as f64 / iterations as f64;\n\n println!(\"| Version | Total Time | Avg per Op | Speed Ratio |\");\n println!(\"|---------|------------|------------|-------------|\");\n println!(\n \"| V1 | {:>10.3?} | {:>8.2}μs | 1.00x |\",\n v1_duration, v1_avg\n );\n println!(\n \"| V2 | {:>10.3?} | {:>8.2}μs | {:.2}x |\",\n v2_duration,\n v2_avg,\n v1_avg / v2_avg\n );\n\n // Cleanup\n v2_enforcer.shutdown().await.unwrap();\n }\n\n /// Test 2: Performance Under Write Load\n ///\n /// This test measures how reads perform when there are concurrent writes happening.\n /// This is where V2's architecture should shine - reads should never be blocked by writes.\n ///\n /// Test setup:\n /// - 4 reader threads doing 1000 reads each\n /// - 2 writer threads doing 100 writes each\n ///\n /// Expected behavior:\n /// - V1: Readers will be blocked when writers hold the lock\n /// - V2: Readers continue unimpeded while writes are queued\n ///\n /// Note: The test showing V2 slower might be due to:\n /// - Test setup issues (too many policies being created)\n /// - Background task falling behind\n /// - Need to tune queue size for heavy write loads\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 6)]\n #[ignore]\n async fn test_enforce_policy_under_write_load() {\n println!(\"\\n=== enforce_policy Performance Under Heavy Write Load ===\");\n println!(\"Test configuration:\");\n println!(\"- 4 reader threads × 1000 reads = 4000 total reads\");\n println!(\"- 2 writer threads × 100 writes = 200 total writes\\n\");\n\n let v1_enforcer = Arc::new(create_v1_enforcer().await);\n let v2_enforcer = Arc::new(create_v2_enforcer().await);\n\n // Test parameters\n let read_threads = 4;\n let write_threads = 2;\n let reads_per_thread = 1000;\n let writes_per_thread = 100;\n\n // V1 Test\n let barrier = Arc::new(Barrier::new(read_threads + write_threads));\n let mut handles = Vec::new();\n\n // Spawn reader threads\n for thread_id in 0..read_threads {\n let enforcer = Arc::clone(&v1_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n\n for i in 0..reads_per_thread {\n let uid = ((thread_id * 1000 + i) % 100) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n let _ = enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n }\n\n start.elapsed()\n }));\n }\n\n // Spawn writer threads\n for thread_id in 0..write_threads {\n let enforcer = Arc::clone(&v1_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n\n for i in 0..writes_per_thread {\n let uid = (thread_id * 1000 + i) as i64;\n let workspace_id = format!(\"workspace_write_{}\", i);\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await\n .unwrap();\n }\n\n start.elapsed()\n }));\n }\n\n // Collect V1 results\n let mut v1_read_times = Vec::new();\n let mut v1_write_times = Vec::new();\n for (idx, handle) in handles.into_iter().enumerate() {\n let duration = handle.await.unwrap();\n if idx < read_threads {\n v1_read_times.push(duration);\n } else {\n v1_write_times.push(duration);\n }\n }\n\n // V2 Test\n let barrier = Arc::new(Barrier::new(read_threads + write_threads));\n let mut handles = Vec::new();\n\n // Spawn reader threads\n for thread_id in 0..read_threads {\n let enforcer = Arc::clone(&v2_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n\n for i in 0..reads_per_thread {\n let uid = ((thread_id * 1000 + i) % 100) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n let _ = enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n }\n\n start.elapsed()\n }));\n }\n\n // Spawn writer threads\n for thread_id in 0..write_threads {\n let enforcer = Arc::clone(&v2_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n\n for i in 0..writes_per_thread {\n let uid = (thread_id * 1000 + i) as i64;\n let workspace_id = format!(\"workspace_write_{}\", i);\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(workspace_id),\n AFRole::Member,\n )\n .await\n .unwrap();\n }\n\n start.elapsed()\n }));\n }\n\n // Collect V2 results\n let mut v2_read_times = Vec::new();\n let mut v2_write_times = Vec::new();\n for (idx, handle) in handles.into_iter().enumerate() {\n let duration = handle.await.unwrap();\n if idx < read_threads {\n v2_read_times.push(duration);\n } else {\n v2_write_times.push(duration);\n }\n }\n\n // Print results\n let v1_avg_read =\n v1_read_times.iter().map(|d| d.as_millis()).sum::() as f64 / v1_read_times.len() as f64;\n let v2_avg_read =\n v2_read_times.iter().map(|d| d.as_millis()).sum::() as f64 / v2_read_times.len() as f64;\n\n println!(\"| Version | Avg Read Time | Speed Ratio |\");\n println!(\"|---------|---------------|-------------|\");\n println!(\"| V1 | {:>11.2}ms | 1.00x |\", v1_avg_read);\n println!(\n \"| V2 | {:>11.2}ms | {:.2}x |\",\n v2_avg_read,\n v1_avg_read / v2_avg_read\n );\n\n // Cleanup\n v2_enforcer.shutdown().await.unwrap();\n }\n\n /// Test 3: Latency Distribution\n ///\n /// This test measures the distribution of latencies to understand consistency.\n /// While average performance is important, tail latencies (P95, P99) are critical\n /// for user experience - users notice the slowest requests.\n ///\n /// Expected Results:\n /// - P50 (median): Should be similar for both\n /// - P95/P99: V2 should be significantly better\n /// - Max: V2 should avoid the multi-millisecond spikes V1 can have\n ///\n /// From actual runs:\n /// - V1 max: 4,343μs (4.3ms!) - clear evidence of lock contention\n /// - V2 max: 202μs - much more predictable\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 4)]\n #[ignore]\n async fn test_enforce_policy_latency_distribution() {\n println!(\"\\n=== enforce_policy Latency Distribution ===\");\n println!(\"Test configuration: 1000 individual operation latency measurements\\n\");\n\n let v1_enforcer = Arc::new(create_v1_enforcer().await);\n let v2_enforcer = Arc::new(create_v2_enforcer().await);\n\n // Pre-populate some policies\n for i in 0..50 {\n v1_enforcer\n .update_policy(\n SubjectType::User(i),\n ObjectType::Workspace(format!(\"workspace_{}\", i)),\n AFRole::Member,\n )\n .await\n .unwrap();\n v2_enforcer\n .update_policy(\n SubjectType::User(i),\n ObjectType::Workspace(format!(\"workspace_{}\", i)),\n AFRole::Member,\n )\n .await\n .unwrap();\n }\n\n // Wait for V2 to process\n tokio::time::sleep(Duration::from_millis(50)).await;\n\n // Measure individual operation latencies\n let samples = 1000;\n let mut v1_latencies = Vec::with_capacity(samples);\n let mut v2_latencies = Vec::with_capacity(samples);\n\n // V1 measurements\n for i in 0..samples {\n let uid = (i % 50) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n\n let start = Instant::now();\n let _ = v1_enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n v1_latencies.push(start.elapsed().as_micros());\n }\n\n // V2 measurements\n for i in 0..samples {\n let uid = (i % 50) as i64;\n let workspace_id = format!(\"workspace_{}\", uid);\n\n let start = Instant::now();\n let _ = v2_enforcer\n .enforce_policy(&uid, ObjectType::Workspace(workspace_id), Action::Read)\n .await\n .unwrap();\n v2_latencies.push(start.elapsed().as_micros());\n }\n\n // Calculate percentiles\n v1_latencies.sort();\n v2_latencies.sort();\n\n let p50_idx = samples / 2;\n let p95_idx = (samples * 95) / 100;\n let p99_idx = (samples * 99) / 100;\n\n println!(\"| Version | P50 (μs) | P95 (μs) | P99 (μs) | Max (μs) |\");\n println!(\"|---------|----------|----------|----------|----------|\");\n println!(\n \"| V1 | {:>8} | {:>8} | {:>8} | {:>8} |\",\n v1_latencies[p50_idx],\n v1_latencies[p95_idx],\n v1_latencies[p99_idx],\n v1_latencies[samples - 1]\n );\n println!(\n \"| V2 | {:>8} | {:>8} | {:>8} | {:>8} |\",\n v2_latencies[p50_idx],\n v2_latencies[p95_idx],\n v2_latencies[p99_idx],\n v2_latencies[samples - 1]\n );\n\n // Cleanup\n v2_enforcer.shutdown().await.unwrap();\n }\n\n /// Test 4: Mixed Workload Throughput (Most Important Test)\n ///\n /// This test simulates a realistic workload with 90% reads and 10% writes,\n /// measuring total system throughput. This is the most representative test\n /// of real-world performance.\n ///\n /// Why 90/10 split?\n /// - Most access control systems are read-heavy\n /// - Users check permissions far more often than permissions change\n ///\n /// Expected Results:\n /// - V2 should show even greater advantage with fewer writes\n ///\n /// This test clearly shows V2's advantage in production workloads.\n #[tokio::test(flavor = \"multi_thread\", worker_threads = 8)]\n #[ignore]\n async fn test_mixed_workload_throughput() {\n println!(\"\\n=== Mixed Workload Throughput Test ===\");\n println!(\"Test configuration:\");\n println!(\"- Duration: 2 seconds\");\n println!(\"- Concurrent threads: 8\");\n println!(\"- Workload mix: 90% reads, 10% writes\\n\");\n\n let v1_enforcer = Arc::new(create_v1_enforcer().await);\n let v2_enforcer = Arc::new(create_v2_enforcer().await);\n\n let duration = Duration::from_secs(2);\n let threads = 8;\n\n // V1 throughput test\n let barrier = Arc::new(Barrier::new(threads));\n let mut handles = Vec::new();\n\n for thread_id in 0..threads {\n let enforcer = Arc::clone(&v1_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n let mut operations = 0u64;\n let mut counter = 0u64;\n\n while start.elapsed() < duration {\n counter += 1;\n\n if counter % 10 == 0 {\n // 10% writes\n let uid = (thread_id * 1000 + counter as usize) as i64;\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(format!(\"workspace_{}\", counter)),\n AFRole::Member,\n )\n .await\n .unwrap();\n } else {\n // 90% reads\n let uid = (counter % 100) as i64;\n let _ = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(format!(\"workspace_{}\", uid)),\n Action::Read,\n )\n .await\n .unwrap();\n }\n\n operations += 1;\n }\n\n operations\n }));\n }\n\n let mut v1_total_ops = 0u64;\n for handle in handles {\n v1_total_ops += handle.await.unwrap();\n }\n\n // V2 throughput test\n let barrier = Arc::new(Barrier::new(threads));\n let mut handles = Vec::new();\n\n for thread_id in 0..threads {\n let enforcer = Arc::clone(&v2_enforcer);\n let barrier_clone = Arc::clone(&barrier);\n\n handles.push(tokio::spawn(async move {\n barrier_clone.wait().await;\n let start = Instant::now();\n let mut operations = 0u64;\n let mut counter = 0u64;\n\n while start.elapsed() < duration {\n counter += 1;\n\n if counter % 10 == 0 {\n // 10% writes\n let uid = (thread_id * 1000 + counter as usize) as i64;\n enforcer\n .update_policy(\n SubjectType::User(uid),\n ObjectType::Workspace(format!(\"workspace_{}\", counter)),\n AFRole::Member,\n )\n .await\n .unwrap();\n } else {\n // 90% reads\n let uid = (counter % 100) as i64;\n let _ = enforcer\n .enforce_policy(\n &uid,\n ObjectType::Workspace(format!(\"workspace_{}\", uid)),\n Action::Read,\n )\n .await\n .unwrap();\n }\n\n operations += 1;\n }\n\n operations\n }));\n }\n\n let mut v2_total_ops = 0u64;\n for handle in handles {\n v2_total_ops += handle.await.unwrap();\n }\n\n let v1_throughput = v1_total_ops as f64 / duration.as_secs_f64();\n let v2_throughput = v2_total_ops as f64 / duration.as_secs_f64();\n\n println!(\"| Version | Total Ops | Throughput | Speed Ratio |\");\n println!(\"|---------|-----------|------------|-------------|\");\n println!(\n \"| V1 | {:>9} | {:>7.0} ops/s | 1.00x |\",\n v1_total_ops, v1_throughput\n );\n println!(\n \"| V2 | {:>9} | {:>7.0} ops/s | {:.2}x |\",\n v2_total_ops,\n v2_throughput,\n v2_throughput / v1_throughput\n );\n\n // Cleanup\n v2_enforcer.shutdown().await.unwrap();\n }\n}\n" }, { "path": "libs/access-control/src/casbin/redis_cache.rs", "content": "use casbin::Cache;\nuse redis::{Client, Connection, IntoConnectionInfo, RedisResult};\nuse serde::{de::DeserializeOwned, Serialize};\nuse std::{hash::Hash, marker::PhantomData, sync::Mutex};\n\nconst CACHE_HKEY: &str = \"ac:cache:v1\";\nconst CACHE_TTL_SECONDS: usize = 600; // 10 minutes\n\npub struct RedisCache {\n conn: Mutex,\n _marker: PhantomData<(K, V)>,\n}\n\nimpl RedisCache\nwhere\n K: Eq + Hash + Clone,\n{\n pub fn new(redis_url: T) -> RedisResult> {\n let client = Client::open(redis_url)?;\n let conn = client.get_connection()?;\n\n Ok(RedisCache {\n conn: Mutex::new(conn),\n _marker: PhantomData,\n })\n }\n}\n\nimpl Cache for RedisCache\nwhere\n K: Eq + Hash + Send + Sync + Serialize + Clone + 'static,\n V: Send + Sync + Clone + Serialize + DeserializeOwned + 'static,\n{\n fn get(&self, k: &K) -> Option {\n // Get from Redis\n if let Ok(field) = serde_json::to_string(&k) {\n if let Ok(mut conn) = self.conn.lock() {\n if let Ok(res) = redis::cmd(\"HGET\")\n .arg(CACHE_HKEY)\n .arg(&field)\n .query::>(&mut *conn)\n {\n if let Some(data) = res.as_ref().and_then(|d| serde_json::from_str::(d).ok()) {\n return Some(data);\n }\n }\n }\n }\n\n None\n }\n\n fn has(&self, k: &K) -> bool {\n if let Ok(field) = serde_json::to_string(&k) {\n if let Ok(mut conn) = self.conn.lock() {\n if let Ok(res) = redis::cmd(\"HEXISTS\")\n .arg(CACHE_HKEY)\n .arg(&field)\n .query::(&mut *conn)\n {\n return res;\n }\n }\n }\n\n false\n }\n\n fn set(&self, k: K, v: V) {\n if let Ok(mut conn) = self.conn.lock() {\n if let (Ok(field), Ok(value)) = (serde_json::to_string(&k), serde_json::to_string(&v)) {\n let script = r#\"\n redis.call('HSET', KEYS[1], ARGV[1], ARGV[2])\n redis.call('EXPIRE', KEYS[1], ARGV[3])\n return 1\n \"#;\n\n let _ = redis::Script::new(script)\n .key(CACHE_HKEY)\n .arg(&field)\n .arg(&value)\n .arg(CACHE_TTL_SECONDS)\n .invoke::<()>(&mut *conn);\n }\n }\n }\n\n fn clear(&self) {\n // Clear Redis\n if let Ok(mut conn) = self.conn.lock() {\n let _ = redis::cmd(\"DEL\").arg(CACHE_HKEY).query::(&mut *conn);\n }\n }\n}\n\n#[cfg(test)]\nmod tests {\n use super::*;\n\n #[test]\n #[ignore]\n fn test_set_has_get_clear() {\n // Skip test if Redis is not available\n let cache = match RedisCache::new(\"redis://localhost:6379\") {\n Ok(cache) => cache,\n Err(_) => {\n println!(\"Redis not available, skipping test\");\n return;\n },\n };\n\n let cache: RedisCache, bool> = cache;\n\n // Clear any existing cache\n cache.clear();\n\n // Test set and has\n cache.set(vec![\"alice\", \"/data1\", \"read\"], false);\n assert!(cache.has(&vec![\"alice\", \"/data1\", \"read\"]));\n\n // Test get\n assert_eq!(cache.get(&vec![\"alice\", \"/data1\", \"read\"]), Some(false));\n\n // Test clear\n cache.clear();\n assert_eq!(cache.get(&vec![\"alice\", \"/data1\", \"read\"]), None);\n }\n\n #[test]\n #[ignore]\n fn test_ttl_expiration() {\n let cache = match RedisCache::new(\"redis://localhost:6379\") {\n Ok(cache) => cache,\n Err(_) => {\n println!(\"Redis not available, skipping test\");\n return;\n },\n };\n\n let cache: RedisCache = cache;\n cache.clear();\n\n // Set a value\n cache.set(\"test_key\".to_string(), \"test_value\".to_string());\n\n // Verify it exists\n assert_eq!(\n cache.get(&\"test_key\".to_string()),\n Some(\"test_value\".to_string())\n );\n }\n}\n" }, { "path": "libs/access-control/src/casbin/util.rs", "content": "use crate::casbin::access::{POLICY_FIELD_INDEX_OBJECT, POLICY_FIELD_INDEX_SUBJECT};\nuse crate::entity::{ObjectType, SubjectType};\nuse casbin::{CachedEnforcer, MgmtApi};\n\n#[inline]\npub(crate) async fn policies_for_subject_with_given_object(\n subject: SubjectType,\n object_type: ObjectType,\n enforcer: &CachedEnforcer,\n) -> Vec> {\n let subject_id = subject.policy_subject();\n let object_type_id = object_type.policy_object();\n let policies_related_to_object =\n enforcer.get_filtered_policy(POLICY_FIELD_INDEX_OBJECT, vec![object_type_id]);\n\n policies_related_to_object\n .into_iter()\n .filter(|p| p[POLICY_FIELD_INDEX_SUBJECT] == subject_id)\n .collect::>()\n}\n\n#[cfg(test)]\npub mod tests {\n use crate::casbin::access::{casbin_model, cmp_role_or_level};\n use crate::casbin::enforcer_v2::AFEnforcerV2;\n use casbin::function_map::OperatorFunction;\n use casbin::{CoreApi, MemoryAdapter};\n pub async fn test_enforcer_v2() -> AFEnforcerV2 {\n let model = casbin_model().await.unwrap();\n let mut enforcer = casbin::CachedEnforcer::new(model, MemoryAdapter::default())\n .await\n .unwrap();\n\n enforcer.add_function(\"cmpRoleOrLevel\", OperatorFunction::Arg2(cmp_role_or_level));\n AFEnforcerV2::new(enforcer).await.unwrap()\n }\n}\n" }, { "path": "libs/access-control/src/casbin/workspace.rs", "content": "use async_trait::async_trait;\nuse tracing::instrument;\nuse uuid::Uuid;\n\nuse super::access::AccessControl;\nuse crate::act::Action;\nuse crate::entity::{ObjectType, SubjectType};\nuse crate::workspace::WorkspaceAccessControl;\nuse app_error::AppError;\nuse database_entity::dto::AFRole;\n\n#[derive(Clone)]\npub struct WorkspaceAccessControlImpl {\n access_control: AccessControl,\n}\n\nimpl WorkspaceAccessControlImpl {\n pub fn new(access_control: AccessControl) -> Self {\n Self { access_control }\n }\n}\n\n#[async_trait]\nimpl WorkspaceAccessControl for WorkspaceAccessControlImpl {\n async fn enforce_role_strong(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n role: AFRole,\n ) -> Result<(), AppError> {\n let result = self\n .access_control\n .enforce_strong(uid, ObjectType::Workspace(workspace_id.to_string()), role)\n .await;\n\n match result {\n Ok(true) => Ok(()),\n Ok(false) => Err(AppError::NotEnoughPermissions),\n Err(e) => Err(e),\n }\n }\n\n async fn enforce_role_weak(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n role: AFRole,\n ) -> Result<(), AppError> {\n let result = self\n .access_control\n .enforce_weak(uid, ObjectType::Workspace(workspace_id.to_string()), role)\n .await;\n\n match result {\n Ok(true) => Ok(()),\n Ok(false) => Err(AppError::NotEnoughPermissions),\n Err(e) => Err(e),\n }\n }\n\n async fn enforce_action(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n action: Action,\n ) -> Result<(), AppError> {\n let result = self\n .access_control\n .enforce_immediately(uid, ObjectType::Workspace(workspace_id.to_string()), action)\n .await;\n match result {\n Ok(true) => Ok(()),\n Ok(false) => Err(AppError::NotEnoughPermissions),\n Err(e) => Err(e),\n }\n }\n\n #[instrument(level = \"info\", skip_all)]\n async fn insert_role(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n role: AFRole,\n ) -> Result<(), AppError> {\n self\n .access_control\n .update_policy(\n SubjectType::User(*uid),\n ObjectType::Workspace(workspace_id.to_string()),\n role,\n )\n .await?;\n Ok(())\n }\n\n #[instrument(level = \"info\", skip_all)]\n async fn remove_user_from_workspace(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n ) -> Result<(), AppError> {\n self\n .access_control\n .remove_policy(\n SubjectType::User(*uid),\n ObjectType::Workspace(workspace_id.to_string()),\n )\n .await?;\n\n self\n .access_control\n .remove_policy(\n SubjectType::User(*uid),\n ObjectType::Collab(workspace_id.to_string()),\n )\n .await?;\n Ok(())\n }\n}\n\n#[cfg(test)]\nmod tests {\n use app_error::ErrorCode;\n use database_entity::dto::AFRole;\n use uuid::Uuid;\n\n use crate::casbin::util::tests::test_enforcer_v2;\n use crate::{\n casbin::access::AccessControl,\n entity::{ObjectType, SubjectType},\n workspace::WorkspaceAccessControl,\n };\n\n #[tokio::test]\n pub async fn test_workspace_access_control() {\n let enforcer = test_enforcer_v2().await;\n let member_uid = 1;\n let owner_uid = 2;\n let workspace_id = Uuid::new_v4();\n enforcer\n .update_policy(\n SubjectType::User(member_uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Member,\n )\n .await\n .unwrap();\n enforcer\n .update_policy(\n SubjectType::User(owner_uid),\n ObjectType::Workspace(workspace_id.to_string()),\n AFRole::Owner,\n )\n .await\n .unwrap();\n let access_control = AccessControl::with_enforcer(enforcer);\n let workspace_access_control = super::WorkspaceAccessControlImpl::new(access_control);\n for uid in [member_uid, owner_uid] {\n workspace_access_control\n .enforce_role_strong(&uid, &workspace_id, AFRole::Member)\n .await\n .unwrap_or_else(|_| panic!(\"Failed to enforce role for {}\", uid));\n workspace_access_control\n .enforce_action(&uid, &workspace_id, crate::act::Action::Read)\n .await\n .unwrap_or_else(|_| panic!(\"Failed to enforce action for {}\", uid));\n }\n let result = workspace_access_control\n .enforce_action(&member_uid, &workspace_id, crate::act::Action::Delete)\n .await;\n let error_code = result.unwrap_err().code();\n assert_eq!(error_code, ErrorCode::NotEnoughPermissions);\n workspace_access_control\n .enforce_action(&owner_uid, &workspace_id, crate::act::Action::Delete)\n .await\n .unwrap();\n }\n}\n" }, { "path": "libs/access-control/src/collab.rs", "content": "use crate::act::Action;\nuse app_error::AppError;\nuse async_trait::async_trait;\nuse database_entity::dto::AFAccessLevel;\nuse uuid::Uuid;\n\n#[async_trait]\npub trait CollabAccessControl: Sync + Send + 'static {\n /// Check if the user can perform the action on the collab.\n /// Returns AppError::NotEnoughPermission if the user does not have the permission.\n async fn enforce_action(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n action: Action,\n ) -> Result<(), AppError>;\n\n /// Check if the user has the access level in the collab.\n /// Returns AppError::NotEnoughPermission if the user does not have the access level.\n async fn enforce_access_level(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n access_level: AFAccessLevel,\n ) -> Result<(), AppError>;\n\n /// Return the access level of the user in the collab\n async fn update_access_level_policy(\n &self,\n uid: &i64,\n oid: &Uuid,\n level: AFAccessLevel,\n ) -> Result<(), AppError>;\n\n async fn remove_access_level(&self, uid: &i64, oid: &Uuid) -> Result<(), AppError>;\n}\n\n#[async_trait]\npub trait RealtimeAccessControl: Sync + Send + 'static {\n /// Return true if the user is allowed to edit collab.\n /// This function will be called very frequently, so it should be very fast.\n ///\n /// The user can send the message if:\n /// 1. user is the member of the collab object\n /// 2. the permission level of the user is `ReadAndWrite` or `FullAccess`\n /// 3. If the collab object is not found which means the collab object is created by the user.\n async fn can_write_collab(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n ) -> Result;\n\n /// Return true if the user is allowed to observe the changes of given collab.\n /// This function will be called very frequently, so it should be very fast.\n ///\n /// The user can recv the message if the user is the member of the collab object\n async fn can_read_collab(\n &self,\n workspace_id: &Uuid,\n uid: &i64,\n oid: &Uuid,\n ) -> Result;\n}\n" }, { "path": "libs/access-control/src/entity.rs", "content": "#[derive(Debug, Clone)]\npub enum SubjectType {\n User(i64),\n Group(String),\n}\n\nimpl SubjectType {\n pub fn policy_subject(&self) -> String {\n match self {\n SubjectType::User(i) => i.to_string(),\n SubjectType::Group(s) => s.clone(),\n }\n }\n}\n\n/// Represents the object type that is stored in the access control policy.\n#[derive(Debug, Clone)]\npub enum ObjectType {\n /// Stored as `workspace::`\n Workspace(String),\n /// Stored as `collab::`\n Collab(String),\n}\n\nimpl ObjectType {\n pub fn policy_object(&self) -> String {\n match self {\n ObjectType::Collab(s) => format!(\"collab::{}\", s),\n ObjectType::Workspace(s) => format!(\"workspace::{}\", s),\n }\n }\n\n pub fn object_id(&self) -> String {\n match self {\n ObjectType::Collab(s) => s.clone(),\n ObjectType::Workspace(s) => s.clone(),\n }\n }\n}\n" }, { "path": "libs/access-control/src/lib.rs", "content": "pub mod act;\n#[cfg(feature = \"casbin\")]\npub mod casbin;\npub mod collab;\npub mod entity;\npub mod metrics;\npub mod noops;\nmod request;\npub mod workspace;\n" }, { "path": "libs/access-control/src/metrics.rs", "content": "use prometheus_client::metrics::gauge::Gauge;\nuse std::sync::atomic::{AtomicI64, Ordering};\nuse std::sync::Arc;\nuse std::time::Duration;\n\nuse prometheus_client::registry::Registry;\nuse tokio::time::interval;\n\npub const ENFORCER_METRICS_TICK_INTERVAL: Duration = Duration::from_secs(120);\n\n#[derive(Clone)]\npub struct AccessControlMetrics {\n load_all_policies: Gauge,\n total_read_enforce_count: Gauge,\n read_enforce_from_cache_count: Gauge,\n policy_send_attempts: Gauge,\n policy_send_failures: Gauge,\n policy_channel_full_events: Gauge,\n}\n\nimpl AccessControlMetrics {\n pub(crate) fn init() -> Self {\n Self {\n load_all_policies: Gauge::default(),\n total_read_enforce_count: Gauge::default(),\n read_enforce_from_cache_count: Gauge::default(),\n policy_send_attempts: Gauge::default(),\n policy_send_failures: Gauge::default(),\n policy_channel_full_events: Gauge::default(),\n }\n }\n\n pub fn register(registry: &mut Registry) -> Self {\n let metrics = Self::init();\n let realtime_registry = registry.sub_registry_with_prefix(\"ac\");\n realtime_registry.register(\n \"load_all_polices\",\n \"load all polices when server start duration in milliseconds\",\n metrics.load_all_policies.clone(),\n );\n\n realtime_registry.register(\n \"total_read_enforce_count\",\n \"total read enforce count\",\n metrics.total_read_enforce_count.clone(),\n );\n\n realtime_registry.register(\n \"read_enforce_from_cache_count\",\n \"read enforce result from cache\",\n metrics.read_enforce_from_cache_count.clone(),\n );\n\n realtime_registry.register(\n \"policy_send_attempts\",\n \"total policy channel send attempts\",\n metrics.policy_send_attempts.clone(),\n );\n\n realtime_registry.register(\n \"policy_send_failures\",\n \"policy channel send failures (timeout or closed)\",\n metrics.policy_send_failures.clone(),\n );\n\n realtime_registry.register(\n \"policy_channel_full_events\",\n \"times policy channel was full (would block)\",\n metrics.policy_channel_full_events.clone(),\n );\n\n metrics\n }\n\n pub fn record_load_all_policies_in_ms(&self, millis: u64) {\n self.load_all_policies.set(millis as i64);\n }\n\n pub fn record_enforce_count(&self, total: i64, from_cache: i64) {\n self.total_read_enforce_count.set(total);\n self.read_enforce_from_cache_count.set(from_cache);\n }\n\n pub fn record_policy_send_metrics(&self, attempts: i64, failures: i64, channel_full: i64) {\n self.policy_send_attempts.set(attempts);\n self.policy_send_failures.set(failures);\n self.policy_channel_full_events.set(channel_full);\n }\n}\n\n#[derive(Clone)]\npub(crate) struct MetricsCalState {\n pub(crate) total_read_enforce_result: Arc,\n pub(crate) read_enforce_result_from_cache: Arc,\n pub(crate) policy_send_attempts: Arc,\n pub(crate) policy_send_failures: Arc,\n pub(crate) policy_channel_full_events: Arc,\n}\n\nimpl MetricsCalState {\n pub(crate) fn new() -> Self {\n Self {\n total_read_enforce_result: Arc::new(Default::default()),\n read_enforce_result_from_cache: Arc::new(Default::default()),\n policy_send_attempts: Arc::new(Default::default()),\n policy_send_failures: Arc::new(Default::default()),\n policy_channel_full_events: Arc::new(Default::default()),\n }\n }\n}\n\n/// Collect and record metrics for access control\npub(crate) fn tick_metric(state: MetricsCalState, metrics: Arc) {\n tokio::spawn(async move {\n let mut interval = interval(ENFORCER_METRICS_TICK_INTERVAL);\n loop {\n interval.tick().await;\n\n metrics.record_enforce_count(\n state.total_read_enforce_result.load(Ordering::Relaxed),\n state.read_enforce_result_from_cache.load(Ordering::Relaxed),\n );\n\n metrics.record_policy_send_metrics(\n state.policy_send_attempts.load(Ordering::Relaxed),\n state.policy_send_failures.load(Ordering::Relaxed),\n state.policy_channel_full_events.load(Ordering::Relaxed),\n );\n }\n });\n}\n" }, { "path": "libs/access-control/src/noops/collab.rs", "content": "use app_error::AppError;\nuse async_trait::async_trait;\nuse database_entity::dto::AFAccessLevel;\nuse uuid::Uuid;\n\nuse crate::{\n act::Action,\n collab::{CollabAccessControl, RealtimeAccessControl},\n};\n\n#[derive(Clone)]\npub struct CollabAccessControlImpl;\n\nimpl CollabAccessControlImpl {\n pub fn new() -> Self {\n Self {}\n }\n}\n\nimpl Default for CollabAccessControlImpl {\n fn default() -> Self {\n Self::new()\n }\n}\n\n#[async_trait]\nimpl CollabAccessControl for CollabAccessControlImpl {\n async fn enforce_action(\n &self,\n _workspace_id: &Uuid,\n _uid: &i64,\n _oid: &Uuid,\n _action: Action,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn enforce_access_level(\n &self,\n _workspace_id: &Uuid,\n _uid: &i64,\n _oid: &Uuid,\n _access_level: AFAccessLevel,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn update_access_level_policy(\n &self,\n _uid: &i64,\n _oid: &Uuid,\n _level: AFAccessLevel,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn remove_access_level(&self, _uid: &i64, _oid: &Uuid) -> Result<(), AppError> {\n Ok(())\n }\n}\n\n#[derive(Clone)]\npub struct RealtimeCollabAccessControlImpl;\n\nimpl RealtimeCollabAccessControlImpl {\n pub fn new() -> Self {\n Self {}\n }\n}\n\nimpl Default for RealtimeCollabAccessControlImpl {\n fn default() -> Self {\n Self::new()\n }\n}\n\n#[async_trait]\nimpl RealtimeAccessControl for RealtimeCollabAccessControlImpl {\n async fn can_write_collab(\n &self,\n _workspace_id: &Uuid,\n _uid: &i64,\n _oid: &Uuid,\n ) -> Result {\n Ok(true)\n }\n\n async fn can_read_collab(\n &self,\n _workspace_id: &Uuid,\n _uid: &i64,\n _oid: &Uuid,\n ) -> Result {\n Ok(true)\n }\n}\n" }, { "path": "libs/access-control/src/noops/mod.rs", "content": "pub mod collab;\npub mod workspace;\n" }, { "path": "libs/access-control/src/noops/workspace.rs", "content": "use async_trait::async_trait;\nuse uuid::Uuid;\n\nuse crate::act::Action;\nuse crate::workspace::WorkspaceAccessControl;\nuse app_error::AppError;\nuse database_entity::dto::AFRole;\n\n#[derive(Clone)]\npub struct WorkspaceAccessControlImpl;\n\nimpl WorkspaceAccessControlImpl {\n pub fn new() -> Self {\n Self {}\n }\n}\n\nimpl Default for WorkspaceAccessControlImpl {\n fn default() -> Self {\n Self::new()\n }\n}\n\n#[async_trait]\nimpl WorkspaceAccessControl for WorkspaceAccessControlImpl {\n async fn enforce_role_strong(\n &self,\n _uid: &i64,\n _workspace_id: &Uuid,\n _role: AFRole,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn enforce_role_weak(\n &self,\n _uid: &i64,\n _workspace_id: &Uuid,\n _role: AFRole,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn enforce_action(\n &self,\n _uid: &i64,\n _workspace_id: &Uuid,\n _action: Action,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn insert_role(\n &self,\n _uid: &i64,\n _workspace_id: &Uuid,\n _role: AFRole,\n ) -> Result<(), AppError> {\n Ok(())\n }\n\n async fn remove_user_from_workspace(\n &self,\n _uid: &i64,\n _workspace_id: &Uuid,\n ) -> Result<(), AppError> {\n Ok(())\n }\n}\n" }, { "path": "libs/access-control/src/request.rs", "content": "use crate::act::Acts;\nuse crate::entity::ObjectType;\n\npub struct PolicyRequest {\n uid: i64,\n object_type: ObjectType,\n action_policy_string: String,\n}\n\nimpl PolicyRequest {\n pub fn new(uid: i64, object_type: ObjectType, action: T) -> Self\n where\n T: Acts,\n {\n Self {\n uid,\n object_type,\n action_policy_string: action.to_enforce_act().to_string(),\n }\n }\n\n pub fn to_policy(&self) -> Vec {\n vec![\n self.uid.to_string(),\n self.object_type.policy_object(),\n self.action_policy_string.clone(),\n ]\n }\n}\n" }, { "path": "libs/access-control/src/workspace.rs", "content": "use crate::act::Action;\nuse app_error::AppError;\nuse async_trait::async_trait;\nuse database_entity::dto::AFRole;\nuse sqlx::types::Uuid;\n\n#[async_trait]\npub trait WorkspaceAccessControl: Send + Sync + 'static {\n /// Check if the user has the role in the workspace.\n /// Returns AppError::NotEnoughPermission if the user does not have the role.\n async fn enforce_role_strong(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n role: AFRole,\n ) -> Result<(), AppError>;\n\n async fn enforce_role_weak(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n role: AFRole,\n ) -> Result<(), AppError>;\n\n /// Check if the user can perform action on the workspace.\n /// Returns AppError::NotEnoughPermission if the user does not have the role.\n async fn enforce_action(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n action: Action,\n ) -> Result<(), AppError>;\n\n async fn insert_role(&self, uid: &i64, workspace_id: &Uuid, role: AFRole)\n -> Result<(), AppError>;\n\n async fn remove_user_from_workspace(\n &self,\n uid: &i64,\n workspace_id: &Uuid,\n ) -> Result<(), AppError>;\n}\n" }, { "path": "libs/app-error/Cargo.toml", "content": "[package]\nname = \"app-error\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html\n[lib]\ncrate-type = [\"cdylib\", \"rlib\"]\n\n[dependencies]\nthiserror = \"1.0.56\"\nserde_repr = \"0.1.18\"\nserde.workspace = true\nanyhow.workspace = true\nuuid = { workspace = true, features = [\"v4\"] }\nsqlx = { workspace = true, default-features = false, features = [\n \"postgres\",\n \"json\",\n], optional = true }\nvalidator = { workspace = true, optional = true }\nurl = { version = \"2.5.0\" }\nactix-web = { version = \"4.4.1\", optional = true }\nreqwest.workspace = true\nserde_json.workspace = true\ntokio = { workspace = true, optional = true }\nbincode = { version = \"1.3.3\", optional = true }\nappflowy-ai-client = { workspace = true, optional = true, features = [\"dto\"] }\nasync-openai = { workspace = true, optional = true }\ntokio-tungstenite = { workspace = true }\n\n[features]\ndefault = []\nsqlx_error = [\"sqlx\"]\nvalidation_error = [\"validator\"]\nactix_web_error = [\"actix-web\"]\ntokio_error = [\"tokio\"]\ngotrue_error = []\nbincode_error = [\"bincode\"]\nappflowy_ai_error = [\"appflowy-ai-client\", \"async-openai\"]\n\n[target.'cfg(target_arch = \"wasm32\")'.dependencies]\ngetrandom = { version = \"0.2\", features = [\"js\"] }\ntsify = \"0.4.5\"\nwasm-bindgen = \"0.2.84\"\n" }, { "path": "libs/app-error/src/gotrue.rs", "content": "use reqwest::StatusCode;\nuse serde::{Deserialize, Serialize};\nuse std::fmt::{Display, Formatter};\nuse thiserror::Error;\n\n#[derive(Debug, Error)]\npub enum GoTrueError {\n #[error(\"connect error:{0}\")]\n Connect(String),\n\n #[error(\"request timeout:{0}\")]\n RequestTimeout(String),\n\n #[error(\"invalid request:{0}\")]\n InvalidRequest(String),\n\n #[error(transparent)]\n ClientError(#[from] GotrueClientError),\n\n #[error(transparent)]\n Internal(#[from] GoTrueErrorSerde),\n\n #[error(\"{0}\")]\n NotLoggedIn(String),\n\n #[error(\"{0}\")]\n Auth(String),\n\n #[error(transparent)]\n Unhandled(#[from] anyhow::Error),\n}\n\nimpl GoTrueError {\n pub fn is_network_error(&self) -> bool {\n matches!(\n self,\n GoTrueError::Connect(_) | GoTrueError::RequestTimeout(_)\n )\n }\n}\n\nimpl From for GoTrueError {\n fn from(value: reqwest::Error) -> Self {\n #[cfg(not(target_arch = \"wasm32\"))]\n if value.is_connect() {\n return GoTrueError::Connect(value.to_string());\n }\n\n if value.is_timeout() {\n return GoTrueError::RequestTimeout(value.to_string());\n }\n\n if value.is_request() {\n return GoTrueError::InvalidRequest(value.to_string());\n }\n\n if let Some(status) = value.status() {\n if status == StatusCode::UNAUTHORIZED {\n return GoTrueError::Auth(value.to_string());\n }\n }\n\n GoTrueError::Unhandled(value.into())\n }\n}\n\n#[derive(Serialize, Deserialize, Debug, Error)]\npub struct GoTrueErrorSerde {\n pub code: i64,\n pub msg: String,\n pub error_id: Option,\n}\n\nimpl Display for GoTrueErrorSerde {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n f.write_fmt(format_args!(\n \"code: {}, msg:{}, error_id: {:?}\",\n self.code, self.msg, self.error_id\n ))\n }\n}\n\n/// The gotrue error definition:\n/// https://github.com/supabase/auth/blob/cc07b4aa2ace75d9c8e46ae5107dbabadf944e87/internal/models/errors.go#L65\n/// Used to deserialize the response from the gotrue server\n#[derive(Serialize, Deserialize, Debug, Error)]\npub struct GotrueClientError {\n pub error: Option,\n pub error_description: Option,\n pub msg: Option,\n}\n\nimpl Display for GotrueClientError {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n f.write_fmt(format_args!(\n \"error: {:?}, error_description: {:?}, msg: {:?}\",\n self.error, self.error_description, self.msg\n ))\n }\n}\n" }, { "path": "libs/app-error/src/lib.rs", "content": "#[cfg(feature = \"gotrue_error\")]\npub mod gotrue;\n\n#[cfg(feature = \"gotrue_error\")]\nuse crate::gotrue::GoTrueError;\n#[cfg(feature = \"appflowy_ai_error\")]\nuse appflowy_ai_client::error::AIError;\nuse reqwest::StatusCode;\nuse serde::Serialize;\nuse std::error::Error;\nuse std::string::FromUtf8Error;\nuse thiserror::Error;\nuse uuid::Uuid;\n\n#[derive(Debug, Error, Default)]\npub enum AppError {\n #[error(\"Operation completed successfully.\")]\n #[default]\n Ok,\n\n #[error(transparent)]\n Internal(#[from] anyhow::Error),\n\n #[error(\"An unhandled error occurred:{0}\")]\n Unhandled(String),\n\n #[error(\"Record not found:{0}\")]\n RecordNotFound(String),\n\n #[error(\"Record deleted:{0}\")]\n RecordDeleted(String),\n\n #[error(\"Record already exist:{0}\")]\n RecordAlreadyExists(String),\n\n #[error(\"Invalid email format:{0}\")]\n InvalidEmail(String),\n\n #[error(\"Invalid password:{0}\")]\n InvalidPassword(String),\n\n #[error(\"Invalid page data:{0}\")]\n InvalidPageData(String),\n\n #[error(\"{0}\")]\n OAuthError(String),\n\n #[error(\"{0}\")]\n UserUnAuthorized(String),\n\n #[error(\"{0}\")]\n UserAlreadyRegistered(String),\n\n #[error(\"Missing Payload:{0}\")]\n MissingPayload(String),\n\n #[error(\"Database error:{0}\")]\n DBError(String),\n\n #[error(\"Open Error:{0}\")]\n OpenError(String),\n\n #[error(\"Invalid request:{0}\")]\n InvalidRequest(String),\n\n #[error(\"Invalid OAuth Provider:{0}\")]\n InvalidOAuthProvider(String),\n\n #[error(\"Not Logged In:{0}\")]\n NotLoggedIn(String),\n\n #[error(\"User does not have permissions to execute this action\")]\n NotEnoughPermissions,\n\n #[error(\"s3 response error:{0}\")]\n S3ResponseError(String),\n\n #[error(\"Storage space not enough\")]\n StorageSpaceNotEnough,\n\n #[error(\"Payload too large:{0}\")]\n PayloadTooLarge(String),\n\n #[error(transparent)]\n UuidError(#[from] uuid::Error),\n\n #[error(transparent)]\n IOError(#[from] std::io::Error),\n\n #[cfg(feature = \"sqlx_error\")]\n #[error(\"{0}\")]\n SqlxError(String),\n\n #[cfg(feature = \"sqlx_error\")]\n #[error(\"{desc}: {err}\")]\n SqlxArgEncodingError {\n desc: String,\n err: Box,\n },\n\n #[cfg(feature = \"validation_error\")]\n #[error(transparent)]\n ValidatorError(#[from] validator::ValidationErrors),\n\n #[error(transparent)]\n UrlError(#[from] url::ParseError),\n\n #[error(transparent)]\n SerdeError(#[from] serde_json::Error),\n\n #[error(transparent)]\n Utf8Error(#[from] FromUtf8Error),\n\n #[error(\"{0}\")]\n Connect(String),\n\n #[error(\"{0}\")]\n RequestTimeout(String),\n\n #[cfg(feature = \"tokio_error\")]\n #[error(transparent)]\n TokioJoinError(#[from] tokio::task::JoinError),\n\n #[cfg(feature = \"bincode_error\")]\n #[error(transparent)]\n BincodeError(#[from] bincode::Error),\n\n #[error(\"{0}\")]\n NoRequiredData(String),\n\n #[error(\"{0}\")]\n OverrideWithIncorrectData(String),\n\n #[error(\"{0}\")]\n PublishNamespaceAlreadyTaken(String),\n\n #[error(\"{0}\")]\n AIServiceUnavailable(String),\n\n #[error(\"{0}\")]\n StringLengthLimitReached(String),\n\n #[error(\"{0}\")]\n InvalidContentType(String),\n\n #[error(\"{0}\")]\n InvalidPublishedOutline(String),\n\n #[error(\"{0}\")]\n InvalidFolderView(String),\n\n #[error(\"{0}\")]\n NotInviteeOfWorkspaceInvitation(String),\n\n #[error(\"{0}\")]\n MissingView(String),\n\n #[error(\"{0}\")]\n TooManyImportTask(String),\n\n #[error(\"There is existing access request for workspace {workspace_id} and view {view_id}\")]\n AccessRequestAlreadyExists { workspace_id: Uuid, view_id: Uuid },\n\n #[error(\"There is existing published view for workspace {workspace_id} with publish_name {publish_name}\")]\n PublishNameAlreadyExists {\n workspace_id: Uuid,\n publish_name: String,\n },\n\n #[error(\"There is an invalid character in the publish name: {character}\")]\n PublishNameInvalidCharacter { character: char },\n\n #[error(\"The publish name is too long, given length: {given_length}, max length: {max_length}\")]\n PublishNameTooLong {\n given_length: usize,\n max_length: usize,\n },\n\n #[error(\"There is an invalid character in the publish namespace: {character}\")]\n CustomNamespaceInvalidCharacter { character: char },\n\n #[error(\"{0}\")]\n ServiceTemporaryUnavailable(String),\n\n #[error(\"Decode update error: {0}\")]\n DecodeUpdateError(String),\n\n #[error(\"{0}\")]\n ActionTimeout(String),\n\n #[error(\"Apply update error:{0}\")]\n ApplyUpdateError(String),\n\n #[error(\"{0}\")]\n InvalidBlock(String),\n\n #[error(\"{0}\")]\n FeatureNotAvailable(String),\n\n #[error(\"unable to find invitation code\")]\n InvalidInvitationCode,\n\n #[error(\"{0} is already a member of the workspace\")]\n InvalidGuest(String),\n\n #[error(\"free plan workspace guest limit exceeded\")]\n FreePlanGuestLimitExceeded,\n\n #[error(\"paid plan workspace guest limit exceeded\")]\n PaidPlanGuestLimitExceeded,\n\n #[error(\"{0}\")]\n RetryLater(anyhow::Error),\n}\n\nimpl AppError {\n pub fn is_not_enough_permissions(&self) -> bool {\n matches!(self, AppError::NotEnoughPermissions)\n }\n\n pub fn is_record_not_found(&self) -> bool {\n matches!(self, AppError::RecordNotFound(_))\n }\n\n pub fn is_network_error(&self) -> bool {\n matches!(self, AppError::Connect(_) | AppError::RequestTimeout(_))\n }\n\n pub fn is_unauthorized(&self) -> bool {\n matches!(self, AppError::UserUnAuthorized(_))\n }\n\n pub fn code(&self) -> ErrorCode {\n match self {\n AppError::Ok => ErrorCode::Ok,\n AppError::Unhandled(_) => ErrorCode::Unhandled,\n AppError::RecordNotFound(_) => ErrorCode::RecordNotFound,\n AppError::RecordAlreadyExists(_) => ErrorCode::RecordAlreadyExists,\n AppError::InvalidEmail(_) => ErrorCode::InvalidEmail,\n AppError::InvalidPassword(_) => ErrorCode::InvalidPassword,\n AppError::OAuthError(_) => ErrorCode::OAuthError,\n AppError::UserUnAuthorized(_) => ErrorCode::UserUnAuthorized,\n AppError::UserAlreadyRegistered(_) => ErrorCode::RecordAlreadyExists,\n AppError::MissingPayload(_) => ErrorCode::MissingPayload,\n AppError::DBError(_) => ErrorCode::DBError,\n AppError::OpenError(_) => ErrorCode::OpenError,\n AppError::InvalidOAuthProvider(_) => ErrorCode::InvalidOAuthProvider,\n AppError::InvalidRequest(_) => ErrorCode::InvalidRequest,\n AppError::NotLoggedIn(_) => ErrorCode::NotLoggedIn,\n AppError::NotEnoughPermissions => ErrorCode::NotEnoughPermissions,\n AppError::StorageSpaceNotEnough => ErrorCode::StorageSpaceNotEnough,\n AppError::PayloadTooLarge(_) => ErrorCode::PayloadTooLarge,\n AppError::Internal(_) => ErrorCode::Internal,\n AppError::UuidError(_) => ErrorCode::UuidError,\n AppError::IOError(_) => ErrorCode::IOError,\n #[cfg(feature = \"sqlx_error\")]\n AppError::SqlxError(_) => ErrorCode::SqlxError,\n #[cfg(feature = \"sqlx_error\")]\n AppError::SqlxArgEncodingError { .. } => ErrorCode::SqlxArgEncodingError,\n #[cfg(feature = \"validation_error\")]\n AppError::ValidatorError(_) => ErrorCode::InvalidRequest,\n AppError::S3ResponseError(_) => ErrorCode::S3ResponseError,\n AppError::UrlError(_) => ErrorCode::InvalidUrl,\n AppError::SerdeError(_) => ErrorCode::SerdeError,\n AppError::Connect(_) => ErrorCode::NetworkError,\n AppError::RequestTimeout(_) => ErrorCode::RequestTimeout,\n #[cfg(feature = \"tokio_error\")]\n AppError::TokioJoinError(_) => ErrorCode::Internal,\n #[cfg(feature = \"bincode_error\")]\n AppError::BincodeError(_) => ErrorCode::Internal,\n AppError::NoRequiredData(_) => ErrorCode::NoRequiredData,\n AppError::OverrideWithIncorrectData(_) => ErrorCode::OverrideWithIncorrectData,\n AppError::Utf8Error(_) => ErrorCode::Internal,\n AppError::PublishNamespaceAlreadyTaken(_) => ErrorCode::PublishNamespaceAlreadyTaken,\n AppError::AIServiceUnavailable(_) => ErrorCode::AIServiceUnavailable,\n AppError::StringLengthLimitReached(_) => ErrorCode::StringLengthLimitReached,\n AppError::InvalidContentType(_) => ErrorCode::InvalidContentType,\n AppError::InvalidPublishedOutline(_) => ErrorCode::InvalidPublishedOutline,\n AppError::InvalidFolderView(_) => ErrorCode::InvalidFolderView,\n AppError::InvalidPageData(_) => ErrorCode::InvalidPageData,\n AppError::NotInviteeOfWorkspaceInvitation(_) => ErrorCode::NotInviteeOfWorkspaceInvitation,\n AppError::MissingView(_) => ErrorCode::MissingView,\n AppError::AccessRequestAlreadyExists { .. } => ErrorCode::AccessRequestAlreadyExists,\n AppError::TooManyImportTask(_) => ErrorCode::TooManyImportTask,\n AppError::PublishNameAlreadyExists { .. } => ErrorCode::PublishNameAlreadyExists,\n AppError::PublishNameInvalidCharacter { .. } => ErrorCode::PublishNameInvalidCharacter,\n AppError::PublishNameTooLong { .. } => ErrorCode::PublishNameTooLong,\n AppError::CustomNamespaceInvalidCharacter { .. } => {\n ErrorCode::CustomNamespaceInvalidCharacter\n },\n AppError::ServiceTemporaryUnavailable(_) => ErrorCode::ServiceTemporaryUnavailable,\n AppError::DecodeUpdateError(_) => ErrorCode::DecodeUpdateError,\n AppError::ApplyUpdateError(_) => ErrorCode::ApplyUpdateError,\n AppError::ActionTimeout(_) => ErrorCode::ActionTimeout,\n AppError::InvalidBlock(_) => ErrorCode::InvalidBlock,\n AppError::FeatureNotAvailable(_) => ErrorCode::FeatureNotAvailable,\n AppError::InvalidInvitationCode => ErrorCode::InvalidInvitationCode,\n AppError::InvalidGuest(_) => ErrorCode::InvalidGuest,\n AppError::FreePlanGuestLimitExceeded => ErrorCode::FreePlanGuestLimitExceeded,\n AppError::PaidPlanGuestLimitExceeded => ErrorCode::PaidPlanGuestLimitExceeded,\n AppError::RecordDeleted(_) => ErrorCode::RecordDeleted,\n AppError::RetryLater(_) => ErrorCode::RetryLater,\n }\n }\n}\n\nimpl From for AppError {\n fn from(error: reqwest::Error) -> Self {\n #[cfg(not(target_arch = \"wasm32\"))]\n if error.is_connect() {\n return AppError::Connect(error.to_string());\n }\n\n if error.is_timeout() {\n return AppError::RequestTimeout(error.to_string());\n }\n\n if error.is_request() {\n return AppError::ServiceTemporaryUnavailable(error.to_string());\n }\n\n if let Some(cause) = error.source() {\n if cause\n .to_string()\n .contains(\"connection closed before message completed\")\n {\n return AppError::ServiceTemporaryUnavailable(error.to_string());\n }\n }\n\n // Handle request-related errors\n if let Some(status_code) = error.status() {\n if error.is_request() {\n match status_code {\n StatusCode::PAYLOAD_TOO_LARGE => {\n return AppError::PayloadTooLarge(error.to_string());\n },\n status_code if status_code.is_server_error() => {\n return AppError::ServiceTemporaryUnavailable(error.to_string());\n },\n _ => {\n return AppError::InvalidRequest(error.to_string());\n },\n }\n }\n }\n\n AppError::Internal(error.into())\n }\n}\n\n#[cfg(feature = \"sqlx_error\")]\nimpl From for AppError {\n fn from(value: sqlx::Error) -> Self {\n let msg = value.to_string();\n match value {\n sqlx::Error::RowNotFound => {\n AppError::RecordNotFound(format!(\"Record not exist in db. {})\", msg))\n },\n sqlx::Error::PoolTimedOut => AppError::ActionTimeout(value.to_string()),\n _ => AppError::SqlxError(msg),\n }\n }\n}\n\n#[cfg(feature = \"gotrue_error\")]\nimpl From for AppError {\n fn from(err: crate::gotrue::GoTrueError) -> Self {\n match err {\n GoTrueError::Connect(msg) => AppError::Connect(msg),\n GoTrueError::RequestTimeout(msg) => AppError::RequestTimeout(msg),\n GoTrueError::InvalidRequest(msg) => AppError::InvalidRequest(msg),\n GoTrueError::ClientError(err) => AppError::OAuthError(err.to_string()),\n GoTrueError::Auth(err) => AppError::UserUnAuthorized(err),\n GoTrueError::Internal(err) => match (err.code, err.msg.as_str()) {\n (400, m) if m.starts_with(\"oauth error\") => AppError::OAuthError(err.msg),\n (400, m) if m.starts_with(\"User already registered\") => {\n AppError::UserAlreadyRegistered(err.msg)\n },\n (401, _) => AppError::UserUnAuthorized(format!(\"{}:{}\", err.code, err.msg)),\n (422, _) => AppError::InvalidRequest(err.msg),\n _ => AppError::OAuthError(err.msg),\n },\n GoTrueError::Unhandled(err) => AppError::Internal(err),\n GoTrueError::NotLoggedIn(msg) => AppError::NotLoggedIn(msg),\n }\n }\n}\n\nimpl From for AppError {\n fn from(err: String) -> Self {\n AppError::Unhandled(err)\n }\n}\n\n#[cfg_attr(target_arch = \"wasm32\", derive(tsify::Tsify))]\n#[derive(\n Eq,\n PartialEq,\n Copy,\n Debug,\n Clone,\n serde_repr::Serialize_repr,\n serde_repr::Deserialize_repr,\n Default,\n)]\n#[repr(i32)]\npub enum ErrorCode {\n #[default]\n Ok = 0,\n Unhandled = -1,\n RecordNotFound = -2,\n RecordAlreadyExists = -3,\n RecordDeleted = -4,\n RetryLater = -5,\n InvalidEmail = 1001,\n InvalidPassword = 1002,\n OAuthError = 1003,\n MissingPayload = 1004,\n DBError = 1005,\n OpenError = 1006,\n InvalidUrl = 1007,\n InvalidRequest = 1008,\n InvalidOAuthProvider = 1009,\n NotLoggedIn = 1011,\n NotEnoughPermissions = 1012,\n StorageSpaceNotEnough = 1015,\n PayloadTooLarge = 1016,\n Internal = 1017,\n UuidError = 1018,\n IOError = 1019,\n #[cfg(feature = \"sqlx_error\")]\n SqlxError = 1020,\n S3ResponseError = 1021,\n SerdeError = 1022,\n NetworkError = 1023,\n UserUnAuthorized = 1024,\n NoRequiredData = 1025,\n WorkspaceLimitExceeded = 1026,\n WorkspaceMemberLimitExceeded = 1027,\n FileStorageLimitExceeded = 1028,\n OverrideWithIncorrectData = 1029,\n PublishNamespaceNotSet = 1030,\n PublishNamespaceAlreadyTaken = 1031,\n AIServiceUnavailable = 1032,\n AIResponseLimitExceeded = 1033,\n StringLengthLimitReached = 1034,\n #[cfg(feature = \"sqlx_error\")]\n SqlxArgEncodingError = 1035,\n InvalidContentType = 1036,\n SingleUploadLimitExceeded = 1037,\n AppleRevokeTokenError = 1038,\n InvalidPublishedOutline = 1039,\n InvalidFolderView = 1040,\n NotInviteeOfWorkspaceInvitation = 1041,\n MissingView = 1042,\n AccessRequestAlreadyExists = 1043,\n CustomNamespaceDisabled = 1044,\n CustomNamespaceDisallowed = 1045,\n TooManyImportTask = 1046,\n CustomNamespaceTooShort = 1047,\n CustomNamespaceTooLong = 1048,\n CustomNamespaceReserved = 1049,\n PublishNameAlreadyExists = 1050,\n PublishNameInvalidCharacter = 1051,\n PublishNameTooLong = 1052,\n CustomNamespaceInvalidCharacter = 1053,\n ServiceTemporaryUnavailable = 1054,\n DecodeUpdateError = 1055,\n ApplyUpdateError = 1056,\n ActionTimeout = 1057,\n AIImageResponseLimitExceeded = 1058,\n MailerError = 1059,\n LicenseError = 1060,\n AIMaxRequired = 1061,\n InvalidPageData = 1062,\n MemberNotFound = 1063,\n InvalidBlock = 1064,\n RequestTimeout = 1065,\n AIResponseError = 1066,\n FeatureNotAvailable = 1067,\n InvalidInvitationCode = 1068,\n InvalidGuest = 1069,\n FreePlanGuestLimitExceeded = 1070,\n PaidPlanGuestLimitExceeded = 1071,\n}\n\nimpl ErrorCode {\n pub fn value(&self) -> i32 {\n *self as i32\n }\n}\n\n#[derive(Serialize)]\nstruct AppErrorSerde {\n code: ErrorCode,\n message: String,\n}\n\nimpl From<&AppError> for AppErrorSerde {\n fn from(value: &AppError) -> Self {\n Self {\n code: value.code(),\n message: value.to_string(),\n }\n }\n}\n\n#[cfg(feature = \"actix_web_error\")]\nimpl actix_web::error::ResponseError for AppError {\n fn status_code(&self) -> actix_web::http::StatusCode {\n actix_web::http::StatusCode::OK\n }\n\n fn error_response(&self) -> actix_web::HttpResponse {\n actix_web::HttpResponse::Ok().json(AppErrorSerde::from(self))\n }\n}\n\n#[cfg(feature = \"appflowy_ai_error\")]\nimpl From for AppError {\n fn from(err: AIError) -> Self {\n match err {\n AIError::Internal(err) => AppError::Internal(err),\n AIError::RequestTimeout(err) => AppError::RequestTimeout(err),\n AIError::PayloadTooLarge(err) => AppError::PayloadTooLarge(err),\n AIError::InvalidRequest(err) => AppError::InvalidRequest(err),\n AIError::SerdeError(err) => AppError::SerdeError(err),\n AIError::ServiceUnavailable(err) => AppError::AIServiceUnavailable(err),\n }\n }\n}\n\n#[cfg(feature = \"appflowy_ai_error\")]\nimpl From for AppError {\n fn from(err: async_openai::error::OpenAIError) -> Self {\n match &err {\n async_openai::error::OpenAIError::Reqwest(e) => AppError::InvalidRequest(e.to_string()),\n async_openai::error::OpenAIError::ApiError(e) => AppError::InvalidRequest(e.to_string()),\n async_openai::error::OpenAIError::InvalidArgument(e) => {\n AppError::InvalidRequest(e.to_string())\n },\n _ => AppError::Internal(err.into()),\n }\n }\n}\n\nuse tokio_tungstenite::tungstenite::Error as TungsteniteError;\n\nimpl From for AppError {\n fn from(err: TungsteniteError) -> Self {\n match &err {\n TungsteniteError::Http(resp) => {\n let status = resp.status();\n if status == StatusCode::UNAUTHORIZED.as_u16() || status == StatusCode::NOT_FOUND.as_u16() {\n AppError::UserUnAuthorized(\"Unauthorized websocket connection\".to_string())\n } else {\n AppError::Internal(err.into())\n }\n },\n _ => AppError::Internal(err.into()),\n }\n }\n}\n\nimpl From for AppError {\n fn from(err: tokio_tungstenite::tungstenite::http::header::InvalidHeaderValue) -> Self {\n AppError::InvalidRequest(err.to_string())\n }\n}\n" }, { "path": "libs/appflowy-ai-client/Cargo.toml", "content": "[package]\nname = \"appflowy-ai-client\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html\n\n[dependencies]\nreqwest = { workspace = true, features = [\n \"json\",\n \"rustls-tls\",\n \"cookies\",\n \"stream\",\n], optional = true }\nserde = { version = \"1.0.199\", features = [\"derive\"], optional = true }\nserde_json = { version = \"1.0\", optional = true }\nthiserror = \"1.0.58\"\nanyhow.workspace = true\ntracing = { version = \"0.1\", optional = true }\nserde_repr = { version = \"0.1\", optional = true }\nfutures = \"0.3.30\"\nbytes.workspace = true\nureq = { version = \"2.12.1\", optional = true, features = [\"json\"] }\nuuid = { workspace = true, features = [\"serde\"] }\n\n[dev-dependencies]\nappflowy-ai-client = { path = \".\", features = [\"dto\", \"client-api\"] }\ntokio = { version = \"1.37.0\", features = [\"macros\", \"test-util\"] }\ntracing-subscriber = { version = \"0.3.18\", features = [\n \"registry\",\n \"env-filter\",\n \"ansi\",\n \"json\",\n] }\nuuid = { workspace = true, features = [\"v4\"] }\ninfra.workspace = true\n\n[features]\ndefault = [\"client-api\"]\nclient-api = [\n \"dto\",\n \"reqwest\",\n \"serde\",\n \"serde_json\",\n \"tracing\",\n \"serde_repr\",\n \"infra/request_util\", \"ureq\"\n]\ndto = [\"serde\", \"serde_json\", \"serde_repr\"]\n" }, { "path": "libs/appflowy-ai-client/src/client.rs", "content": "use crate::dto::{\n CalculateSimilarityParams, ChatAnswer, ChatQuestion, CompleteTextParams, CreateChatContext,\n Document, LocalAIConfig, MessageData, ModelList, QuestionMetadata, RepeatedLocalAIPackage,\n RepeatedRelatedQuestion, ResponseFormat, SearchDocumentsRequest, SimilarityResponse,\n SummarizeRowResponse, TranslateRowData, TranslateRowResponse,\n};\nuse crate::error::AIError;\n\nuse bytes::Bytes;\nuse futures::{Stream, StreamExt};\nuse reqwest;\nuse reqwest::{Method, RequestBuilder, StatusCode};\nuse serde::de::DeserializeOwned;\nuse serde::{Deserialize, Serialize};\nuse serde_json::{Map, Value};\nuse std::borrow::Cow;\nuse std::time::Duration;\nuse tracing::{info, trace};\n\nconst AI_MODEL_HEADER_KEY: &str = \"ai-model\";\n\n#[derive(Clone, Debug)]\npub struct AppFlowyAIClient {\n async_client: reqwest::Client,\n url: String,\n}\n\nimpl AppFlowyAIClient {\n pub fn new(url: &str) -> Self {\n info!(\"Creating AppFlowyAIClient with url: {}\", url);\n let url = url.to_string();\n let async_client = reqwest::Client::new();\n Self { async_client, url }\n }\n\n pub async fn health_check(&self) -> Result<(), AIError> {\n let url = format!(\"{}/health\", self.url);\n let resp = self.async_http_client(Method::GET, &url)?.send().await?;\n let text = resp.text().await?;\n info!(\"health response: {:?}\", text);\n Ok(())\n }\n\n pub async fn stream_completion_text(\n &self,\n params: CompleteTextParams,\n model: &str,\n ) -> Result>, AIError> {\n if params.text.is_empty() {\n return Err(AIError::InvalidRequest(\"Empty text\".to_string()));\n }\n\n let url = format!(\"{}/completion/stream\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(¶ms)\n .send()\n .await?;\n AIResponse::<()>::stream_response(resp).await\n }\n\n pub async fn stream_completion_v2(\n &self,\n params: CompleteTextParams,\n model: &str,\n ) -> Result>, AIError> {\n if params.text.is_empty() {\n return Err(AIError::InvalidRequest(\"Empty text\".to_string()));\n }\n\n let url = format!(\"{}/v2/completion/stream\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(¶ms)\n .send()\n .await?;\n AIResponse::<()>::stream_response(resp).await\n }\n\n pub async fn summarize_row(\n &self,\n params: &Map,\n model: &str,\n ) -> Result {\n if params.is_empty() {\n return Err(AIError::InvalidRequest(\"Empty content\".to_string()));\n }\n\n let url = format!(\"{}/summarize_row\", self.url);\n trace!(\"summarize_row url: {}\", url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(params)\n .send()\n .await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn translate_row(\n &self,\n data: TranslateRowData,\n model: &str,\n ) -> Result {\n let url = format!(\"{}/translate_row\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(&data)\n .send()\n .await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn search_documents(\n &self,\n request: &SearchDocumentsRequest,\n ) -> Result, AIError> {\n let url = format!(\"{}/search\", self.url);\n let resp = self\n .async_http_client(Method::GET, &url)?\n .query(&request)\n .send()\n .await?;\n AIResponse::>::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn create_chat_text_context(&self, context: CreateChatContext) -> Result<(), AIError> {\n let url = format!(\"{}/chat/context/text\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .json(&context)\n .send()\n .await?;\n let _ = AIResponse::<()>::from_reqwest_response(resp).await?;\n Ok(())\n }\n\n pub async fn send_question(\n &self,\n workspace_id: &str,\n chat_id: &str,\n question_id: i64,\n content: &str,\n model: &str,\n metadata: Option,\n ) -> Result {\n let json = ChatQuestion {\n chat_id: chat_id.to_string(),\n data: MessageData {\n content: content.to_string(),\n metadata,\n message_id: Some(question_id.to_string()),\n },\n format: Default::default(),\n metadata: QuestionMetadata {\n workspace_id: workspace_id.to_string(),\n rag_ids: vec![],\n },\n };\n let url = format!(\"{}/chat/message\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(&json)\n .send()\n .await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn stream_question(\n &self,\n workspace_id: String,\n chat_id: &str,\n content: &str,\n metadata: Option,\n rag_ids: Vec,\n model: &str,\n ) -> Result>, AIError> {\n let json = ChatQuestion {\n chat_id: chat_id.to_string(),\n data: MessageData {\n content: content.to_string(),\n metadata,\n message_id: None,\n },\n format: Default::default(),\n metadata: QuestionMetadata {\n workspace_id,\n rag_ids,\n },\n };\n let url = format!(\"{}/chat/message/stream\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .timeout(Duration::from_secs(30))\n .json(&json)\n .send()\n .await?;\n AIResponse::<()>::stream_response(resp).await\n }\n\n #[allow(clippy::too_many_arguments)]\n pub async fn stream_question_v2(\n &self,\n workspace_id: String,\n chat_id: &str,\n question_id: i64,\n content: &str,\n metadata: Option,\n rag_ids: Vec,\n model: &str,\n ) -> Result>, AIError> {\n let json = ChatQuestion {\n chat_id: chat_id.to_string(),\n data: MessageData {\n content: content.to_string(),\n metadata,\n message_id: Some(question_id.to_string()),\n },\n format: ResponseFormat::default(),\n metadata: QuestionMetadata {\n workspace_id,\n rag_ids,\n },\n };\n self.stream_question_v3(model, json, Some(30)).await\n }\n\n pub async fn stream_question_v3(\n &self,\n model: &str,\n question: ChatQuestion,\n timeout_secs: Option,\n ) -> Result>, AIError> {\n let url = format!(\"{}/v2/chat/message/stream\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .json(&question)\n .timeout(Duration::from_secs(timeout_secs.unwrap_or(30)))\n .send()\n .await?;\n AIResponse::<()>::stream_response(resp).await\n }\n\n pub async fn get_related_question(\n &self,\n chat_id: &str,\n message_id: &i64,\n model: &str,\n ) -> Result {\n let url = format!(\"{}/chat/{chat_id}/{message_id}/related_question\", self.url);\n let resp = self\n .async_http_client(Method::GET, &url)?\n .header(AI_MODEL_HEADER_KEY, model)\n .timeout(Duration::from_secs(30))\n .send()\n .await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn regenerate_image(&self, source_metadata: Value) -> Result<(), AIError> {\n let url = format!(\"{}/chat/image/regenerate\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .json(&source_metadata)\n .timeout(Duration::from_secs(30))\n .send()\n .await?;\n AIResponse::<()>::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn get_local_ai_package(\n &self,\n platform: &str,\n ) -> Result {\n let url = format!(\"{}/local_ai/plugin?platform={platform}\", self.url);\n let resp = self.async_http_client(Method::GET, &url)?.send().await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn get_local_ai_config(\n &self,\n platform: &str,\n app_version: Option,\n ) -> Result {\n // Start with the base URL including the platform parameter\n let mut url = format!(\"{}/local_ai/config?platform={}\", self.url, platform);\n\n // If app_version is provided, append it as a query parameter\n if let Some(version) = app_version {\n url = format!(\"{}&app_version={}\", url, version);\n }\n\n let resp = self.async_http_client(Method::GET, &url)?.send().await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn get_model_list(&self) -> Result {\n let url = format!(\"{}/model/list\", self.url);\n\n let resp = self.async_http_client(Method::GET, &url)?.send().await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n pub async fn calculate_similarity(\n &self,\n params: CalculateSimilarityParams,\n ) -> Result {\n let url = format!(\"{}/similarity\", self.url);\n let resp = self\n .async_http_client(Method::POST, &url)?\n .json(¶ms)\n .send()\n .await?;\n AIResponse::::from_reqwest_response(resp)\n .await?\n .into_data()\n }\n\n fn async_http_client(&self, method: Method, url: &str) -> Result {\n let request_builder = self.async_client.request(method, url);\n Ok(request_builder)\n }\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct AIResponse {\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub data: Option,\n\n #[serde(default)]\n pub message: Cow<'static, str>,\n}\n\nimpl AIResponse\nwhere\n T: DeserializeOwned + 'static,\n{\n pub async fn from_reqwest_response(resp: reqwest::Response) -> Result {\n let status_code = resp.status();\n if !status_code.is_success() {\n let body = resp.text().await?;\n anyhow::bail!(\"error code: {}, {}\", status_code, body)\n }\n\n let bytes = resp.bytes().await?;\n let resp = serde_json::from_slice(&bytes)?;\n Ok(resp)\n }\n\n pub fn from_ur_response(resp: ureq::Response) -> Result {\n let status_code = resp.status();\n if status_code != 200 {\n let body = resp.into_string()?;\n anyhow::bail!(\"error code: {}, {}\", status_code, body)\n }\n\n let resp = resp.into_json()?;\n Ok(resp)\n }\n\n pub fn into_data(self) -> Result {\n match self.data {\n None => Err(AIError::InvalidRequest(\"Empty payload\".to_string())),\n Some(data) => Ok(data),\n }\n }\n\n pub async fn stream_response(\n resp: reqwest::Response,\n ) -> Result>, AIError> {\n let status_code = resp.status();\n if status_code.is_server_error() {\n let body = resp.text().await?;\n return Err(AIError::ServiceUnavailable(body));\n }\n\n if !status_code.is_success() {\n let body = resp.text().await?;\n return Err(AIError::InvalidRequest(body));\n }\n let stream = resp\n .bytes_stream()\n .map(|item| item.map_err(|err| AIError::Internal(err.into())));\n Ok(stream)\n }\n}\nimpl From for AIError {\n fn from(error: reqwest::Error) -> Self {\n if error.is_connect() {\n return AIError::ServiceUnavailable(error.to_string());\n }\n\n if error.is_timeout() {\n return AIError::RequestTimeout(error.to_string());\n }\n\n // Handle request-related errors\n if let Some(status_code) = error.status() {\n if error.is_request() {\n match status_code {\n StatusCode::PAYLOAD_TOO_LARGE => {\n return AIError::PayloadTooLarge(error.to_string());\n },\n status_code if status_code.is_server_error() => {\n return AIError::ServiceUnavailable(error.to_string());\n },\n _ => {\n return AIError::InvalidRequest(format!(\"{:?}\", error));\n },\n }\n }\n }\n AIError::Internal(error.into())\n }\n}\n\npub async fn collect_stream_text(stream: impl Stream>) -> String {\n let stream = stream.map(|item| {\n item.map(|bytes| {\n String::from_utf8(bytes.to_vec())\n .map(|s| s.replace('\\n', \"\"))\n .unwrap()\n })\n });\n\n let lines: Vec = stream.map(|message| message.unwrap()).collect().await;\n lines.join(\"\")\n}\n" }, { "path": "libs/appflowy-ai-client/src/dto.rs", "content": "use serde::{Deserialize, Serialize, Serializer};\nuse serde_json::json;\nuse serde_repr::{Deserialize_repr, Serialize_repr};\nuse std::collections::HashMap;\nuse std::fmt::{Display, Formatter};\nuse uuid::Uuid;\n\npub const STREAM_METADATA_KEY: &str = \"0\";\npub const STREAM_ANSWER_KEY: &str = \"1\";\npub const STREAM_IMAGE_KEY: &str = \"2\";\npub const STREAM_KEEP_ALIVE_KEY: &str = \"3\";\npub const STREAM_COMMENT_KEY: &str = \"4\";\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct SummarizeRowResponse {\n pub text: String,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct ChatQuestionQuery {\n pub chat_id: String,\n pub question_id: i64,\n pub format: ResponseFormat,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct ChatQuestion {\n pub chat_id: String,\n pub data: MessageData,\n #[serde(default)]\n pub format: ResponseFormat,\n pub metadata: QuestionMetadata,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct QuestionMetadata {\n pub workspace_id: String,\n pub rag_ids: Vec,\n}\n\n#[derive(Clone, Default, Debug, Serialize, Deserialize)]\npub struct ResponseFormat {\n pub output_layout: OutputLayout,\n pub output_content: OutputContent,\n pub output_content_metadata: Option,\n}\n\nimpl ResponseFormat {\n pub fn new() -> Self {\n Self::default()\n }\n}\n\n#[derive(Clone, Debug, Default, Serialize_repr, Deserialize_repr, Eq, PartialEq)]\n#[repr(u8)]\npub enum OutputLayout {\n Paragraph = 0,\n BulletList = 1,\n NumberedList = 2,\n SimpleTable = 3,\n #[default]\n Flex = 4,\n}\n\n#[derive(Clone, Debug, Default, Serialize_repr, Deserialize_repr, Eq, PartialEq)]\n#[repr(u8)]\npub enum OutputContent {\n #[default]\n TEXT = 0,\n IMAGE = 1,\n RichTextImage = 2,\n}\n\nimpl OutputContent {\n pub fn is_image(&self) -> bool {\n *self == OutputContent::IMAGE || *self == OutputContent::RichTextImage\n }\n}\n\n#[derive(Clone, Default, Debug, Serialize, Deserialize)]\npub struct OutputContentMetadata {\n /// Custom prompt for image generation.\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub custom_image_prompt: Option,\n\n /// The image model to use for generation (default: \"dall-e-3\").\n #[serde(default = \"default_image_model\")]\n pub image_model: String,\n\n /// Size of the image (default: \"256x256\").\n #[serde(\n default = \"default_image_size\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub size: Option,\n\n /// Quality of the image (default: \"standard\").\n #[serde(\n default = \"default_image_quality\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub quality: Option,\n}\n\n// Default values for the fields\nfn default_image_model() -> String {\n \"dall-e-3\".to_string()\n}\n\nfn default_image_size() -> Option {\n Some(\"256x256\".to_string())\n}\n\nfn default_image_quality() -> Option {\n Some(\"standard\".to_string())\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct MessageData {\n pub content: String,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub metadata: Option,\n #[serde(default)]\n pub message_id: Option,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct ChatAnswer {\n pub content: String,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub metadata: Option,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct RepeatedRelatedQuestion {\n pub message_id: i64,\n pub items: Vec,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct RelatedQuestion {\n pub content: String,\n\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub metadata: Option,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CompleteTextResponse {\n pub text: String,\n}\n\n#[derive(Clone, Debug, Serialize_repr, Deserialize_repr, Eq, PartialEq, Hash)]\n#[repr(u8)]\npub enum CompletionType {\n ImproveWriting = 1,\n SpellingAndGrammar = 2,\n MakeShorter = 3,\n MakeLonger = 4,\n ContinueWriting = 5,\n Explain = 6,\n AskAI = 7,\n CustomPrompt = 8,\n}\n\n#[derive(Debug, Clone, Serialize)]\npub struct SearchDocumentsRequest {\n #[serde(serialize_with = \"serialize_workspaces\")]\n pub workspaces: Vec,\n pub query: String,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub result_count: Option,\n}\n\n#[allow(clippy::ptr_arg)]\nfn serialize_workspaces(workspaces: &Vec, serializer: S) -> Result\nwhere\n S: Serializer,\n{\n let workspaces = workspaces.join(\",\");\n serializer.serialize_str(&workspaces)\n}\n\n#[derive(Debug, Clone, Eq, PartialEq, Serialize, Deserialize)]\npub struct Document {\n pub id: String,\n #[serde(rename = \"type\")]\n pub doc_type: CollabType,\n pub workspace_id: String,\n pub content: String,\n}\n\n#[repr(u8)]\n#[derive(Debug, Copy, Clone, Eq, PartialEq, Serialize_repr, Deserialize_repr)]\npub enum CollabType {\n Document = 0,\n Database = 1,\n WorkspaceDatabase = 2,\n Folder = 3,\n DatabaseRow = 4,\n UserAwareness = 5,\n Unknown = 6,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct TranslateRowParams {\n pub workspace_id: String,\n pub data: TranslateRowData,\n}\n\n/// Represents different types of content that can be used to summarize a database row.\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct TranslateRowData {\n pub cells: Vec,\n pub language: String,\n pub include_header: bool,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct TranslateItem {\n pub title: String,\n pub content: String,\n}\n#[derive(Clone, Debug, Default, Serialize, Deserialize)]\npub struct TranslateRowResponse {\n pub items: Vec>,\n}\n\n#[derive(Serialize, Deserialize, Debug, Copy, Clone, PartialEq, Eq, Hash)]\npub enum EmbeddingModel {\n #[serde(rename = \"text-embedding-3-small\")]\n TextEmbedding3Small,\n #[serde(rename = \"text-embedding-3-large\")]\n TextEmbedding3Large,\n #[serde(rename = \"text-embedding-ada-002\")]\n TextEmbeddingAda002,\n}\n\nimpl EmbeddingModel {\n /// Returns the default embedding model used in this system.\n ///\n /// This model is hardcoded and used to generate embeddings whose dimensions are\n /// reflected in the PostgreSQL database schema. Changing the default model may\n /// require a migration to create a new table with the appropriate dimensions.\n pub fn default_model() -> Self {\n EmbeddingModel::TextEmbedding3Small\n }\n\n pub fn supported_models() -> &'static [&'static str] {\n &[\n \"text-embedding-ada-002\",\n \"text-embedding-3-small\",\n \"text-embedding-3-large\",\n ]\n }\n\n pub fn max_token(&self) -> usize {\n match self {\n EmbeddingModel::TextEmbeddingAda002 => 8191,\n EmbeddingModel::TextEmbedding3Large => 8191,\n EmbeddingModel::TextEmbedding3Small => 8191,\n }\n }\n\n pub fn default_dimensions(&self) -> u32 {\n match self {\n EmbeddingModel::TextEmbeddingAda002 => 1536,\n EmbeddingModel::TextEmbedding3Large => 3072,\n EmbeddingModel::TextEmbedding3Small => 1536,\n }\n }\n\n pub fn name(&self) -> &'static str {\n match self {\n EmbeddingModel::TextEmbeddingAda002 => \"text-embedding-ada-002\",\n EmbeddingModel::TextEmbedding3Large => \"text-embedding-3-large\",\n EmbeddingModel::TextEmbedding3Small => \"text-embedding-3-small\",\n }\n }\n\n pub fn from_name(name: &str) -> Option {\n match name {\n \"text-embedding-ada-002\" => Some(EmbeddingModel::TextEmbeddingAda002),\n \"text-embedding-3-large\" => Some(EmbeddingModel::TextEmbedding3Large),\n \"text-embedding-3-small\" => Some(EmbeddingModel::TextEmbedding3Small),\n _ => None,\n }\n }\n}\n\nimpl Display for EmbeddingModel {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n match self {\n EmbeddingModel::TextEmbedding3Small => write!(f, \"text-embedding-3-small\"),\n EmbeddingModel::TextEmbedding3Large => write!(f, \"text-embedding-3-large\"),\n EmbeddingModel::TextEmbeddingAda002 => write!(f, \"text-embedding-ada-002\"),\n }\n }\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct RepeatedLocalAIPackage(pub Vec);\n\n#[derive(Clone, Debug, Serialize, Deserialize, Eq, PartialEq)]\npub struct AppFlowyOfflineAI {\n pub app_name: String,\n pub ai_plugin_name: String,\n pub version: String,\n pub url: String,\n pub etag: String,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize, Eq, PartialEq)]\npub struct LLMModel {\n pub llm_id: i64,\n pub provider: String,\n pub embedding_model: ModelInfo,\n pub chat_model: ModelInfo,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize, Eq, PartialEq)]\npub struct ModelInfo {\n pub name: String,\n pub file_name: String,\n pub file_size: i64,\n pub requirements: String,\n pub download_url: String,\n pub desc: String,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct LocalAIConfig {\n pub models: Vec,\n pub plugin: AppFlowyOfflineAI,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct AvailableModel {\n pub name: String,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub metadata: Option,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct ModelList {\n pub models: Vec,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CreateChatContext {\n pub chat_id: String,\n pub context_loader: String,\n pub content: String,\n pub chunk_size: i32,\n pub chunk_overlap: i32,\n pub metadata: serde_json::Value,\n}\n\nimpl CreateChatContext {\n pub fn new(chat_id: String, context_loader: String, text: String) -> Self {\n CreateChatContext {\n chat_id,\n context_loader,\n content: text,\n chunk_size: 2000,\n chunk_overlap: 20,\n metadata: json!({}),\n }\n }\n\n pub fn with_metadata(mut self, metadata: T) -> Self {\n self.metadata = json!(metadata);\n self\n }\n}\n\nimpl Display for CreateChatContext {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n f.write_fmt(format_args!(\n \"Create Chat context: {{ chat_id: {}, content_type: {}, content size: {}, metadata: {:?} }}\",\n self.chat_id,\n self.context_loader,\n self.content.len(),\n self.metadata\n ))\n }\n}\n\n#[derive(Serialize, Deserialize, Debug, Clone)]\npub struct CustomPrompt {\n pub system: String,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CalculateSimilarityParams {\n pub workspace_id: Uuid,\n pub input: String,\n pub expected: String,\n pub use_embedding: bool,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct SimilarityResponse {\n pub score: f64,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CompletionMessage {\n pub role: String, // human, ai, or system\n pub content: String,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CompletionMetadata {\n /// A unique identifier for the object. Object could be a document id.\n pub object_id: Uuid,\n /// The workspace identifier.\n ///\n /// This field must be provided when generating images. We use workspace ID to track image usage.\n pub workspace_id: Option,\n /// A list of relevant document IDs.\n ///\n /// When using completions for document-related tasks, this should include the document ID.\n /// In some cases, `object_id` may be the same as the document ID.\n pub rag_ids: Option>,\n /// For the AI completion feature (the AI writer), pass the conversation history as input.\n /// This history helps the AI understand the context of the conversation.\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub completion_history: Option>,\n /// When completion type is 'CustomPrompt', this field should be provided.\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub custom_prompt: Option,\n /// The id of the prompt used for the completion\n #[serde(default)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub prompt_id: Option,\n}\n\n#[derive(Clone, Debug, Serialize, Deserialize)]\npub struct CompleteTextParams {\n pub text: String,\n pub completion_type: Option,\n #[serde(default)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub metadata: Option,\n #[serde(default)]\n pub format: ResponseFormat,\n}\n\nimpl CompleteTextParams {\n pub fn new_with_completion_type(\n text: String,\n completion_type: CompletionType,\n metadata: Option,\n ) -> Self {\n Self {\n text,\n completion_type: Some(completion_type),\n metadata,\n format: Default::default(),\n }\n }\n}\n" }, { "path": "libs/appflowy-ai-client/src/error.rs", "content": "#[derive(Debug, thiserror::Error)]\npub enum AIError {\n #[error(transparent)]\n Internal(#[from] anyhow::Error),\n\n #[error(\"Request timeout:{0}\")]\n RequestTimeout(String),\n\n #[error(\"Payload too large:{0}\")]\n PayloadTooLarge(String),\n\n #[error(\"Invalid request:{0}\")]\n InvalidRequest(String),\n\n #[error(transparent)]\n SerdeError(#[from] serde_json::Error),\n\n #[error(\"Service unavailable:{0}\")]\n ServiceUnavailable(String),\n}\n" }, { "path": "libs/appflowy-ai-client/src/lib.rs", "content": "#[cfg(feature = \"client-api\")]\npub mod client;\n\n#[cfg(feature = \"dto\")]\npub mod dto;\n\npub mod error;\n" }, { "path": "libs/appflowy-ai-client/tests/chat_test/completion_test.rs", "content": "use crate::appflowy_ai_client;\nuse appflowy_ai_client::client::collect_stream_text;\nuse appflowy_ai_client::dto::{\n CompleteTextParams, CompletionMetadata, CompletionType, CustomPrompt, OutputContent,\n OutputLayout, ResponseFormat,\n};\n\n#[tokio::test]\nasync fn completion_explain_test() {\n let client = appflowy_ai_client();\n let params = CompleteTextParams {\n text: \"Snowboarding\".to_string(),\n completion_type: Some(CompletionType::Explain),\n metadata: Some(CompletionMetadata {\n object_id: uuid::Uuid::new_v4(),\n workspace_id: Some(uuid::Uuid::new_v4()),\n rag_ids: None,\n completion_history: None,\n custom_prompt: None,\n prompt_id: None,\n }),\n format: ResponseFormat::default(),\n };\n let stream = client\n .stream_completion_text(params, \"gpt-4o-mini\")\n .await\n .unwrap();\n let text = collect_stream_text(stream).await;\n assert!(!text.is_empty());\n}\n\n#[tokio::test]\nasync fn completion_image_test() {\n let client = appflowy_ai_client();\n let params = CompleteTextParams {\n text: \"A yellow cat\".to_string(),\n completion_type: Some(CompletionType::ImproveWriting),\n metadata: Some(CompletionMetadata {\n object_id: uuid::Uuid::new_v4(),\n workspace_id: Some(uuid::Uuid::new_v4()),\n rag_ids: None,\n completion_history: None,\n custom_prompt: None,\n prompt_id: None,\n }),\n format: ResponseFormat {\n output_content: OutputContent::IMAGE,\n ..Default::default()\n },\n };\n let stream = client\n .stream_completion_text(params, \"gpt-4o-mini\")\n .await\n .unwrap();\n let text = collect_stream_text(stream).await;\n println!(\"{}\", text);\n assert!(text.contains(\"http://localhost\"));\n}\n\n#[tokio::test]\nasync fn continue_writing_test() {\n let client = appflowy_ai_client();\n let params = CompleteTextParams {\n text: \"I feel hungry\".to_string(),\n completion_type: Some(CompletionType::ImproveWriting),\n metadata: None,\n format: ResponseFormat {\n output_layout: OutputLayout::SimpleTable,\n ..Default::default()\n },\n };\n let stream = client\n .stream_completion_text(params, \"gpt-4o-mini\")\n .await\n .unwrap();\n let text = collect_stream_text(stream).await;\n assert!(!text.is_empty());\n println!(\"{}\", text);\n}\n\n#[tokio::test]\nasync fn make_text_shorter_text() {\n let client = appflowy_ai_client();\n let params = CompleteTextParams {\n text: \"I have an immense passion and deep-seated affection for Rust, a modern, multi-paradigm, high-performance programming language that I find incredibly satisfying to use due to its focus on safety, speed, and concurrency\".to_string(),\n completion_type: Some(CompletionType::MakeShorter),\n metadata: None,\n format: ResponseFormat::default(),\n };\n let stream = client\n .stream_completion_text(params, \"gpt-4o-mini\")\n .await\n .unwrap();\n\n let text = collect_stream_text(stream).await;\n\n // the response would be something like:\n // I'm deeply passionate about Rust, a modern, high-performance programming language, due to its emphasis on safety, speed, and concurrency\n assert!(!text.is_empty());\n println!(\"{}\", text);\n}\n\n#[tokio::test]\nasync fn custom_prompt_test() {\n let client = appflowy_ai_client();\n let params = CompleteTextParams {\n text: \"A yellow cat\".to_string(),\n completion_type: Some(CompletionType::CustomPrompt),\n metadata: Some(CompletionMetadata {\n object_id: uuid::Uuid::new_v4(),\n workspace_id: Some(uuid::Uuid::new_v4()),\n rag_ids: None,\n completion_history: None,\n custom_prompt: Some(CustomPrompt {\n system: \"You are a talented artist who excels at providing detailed, creative instructions on how to draw a picture\".to_string(),\n }),\n prompt_id: None,\n }),\n format: Default::default(),\n };\n let stream = client\n .stream_completion_text(params, \"gpt-4o-mini\")\n .await\n .unwrap();\n let text = collect_stream_text(stream).await;\n println!(\"{}\", text);\n}\n" }, { "path": "libs/appflowy-ai-client/tests/chat_test/context_test.rs", "content": "use crate::appflowy_ai_client;\nuse appflowy_ai_client::dto::CreateChatContext;\n#[tokio::test]\nasync fn create_chat_context_test() {\n let client = appflowy_ai_client();\n let chat_id = uuid::Uuid::new_v4().to_string();\n let context = CreateChatContext {\n chat_id: chat_id.clone(),\n context_loader: \"text\".to_string(),\n content: \"I have lived in the US for five years\".to_string(),\n chunk_size: 1000,\n chunk_overlap: 20,\n metadata: Default::default(),\n };\n client.create_chat_text_context(context).await.unwrap();\n let resp = client\n .send_question(\n &uuid::Uuid::new_v4().to_string(),\n &chat_id,\n 1,\n \"Where I live?\",\n \"gpt-4o-mini\",\n None,\n )\n .await\n .unwrap();\n // response will be something like:\n // Based on the context you provided, you have lived in the US for five years. Therefore, it is likely that you currently live in the US\n assert!(!resp.content.is_empty());\n}\n" }, { "path": "libs/appflowy-ai-client/tests/chat_test/mod.rs", "content": "mod completion_test;\nmod context_test;\nmod model_config_test;\nmod qa_test;\n" }, { "path": "libs/appflowy-ai-client/tests/chat_test/model_config_test.rs", "content": "use crate::appflowy_ai_client;\n\n#[tokio::test]\nasync fn get_model_list_test() {\n let client = appflowy_ai_client();\n let models = client.get_model_list().await.unwrap().models;\n assert!(models.len() >= 5, \"models.len() = {}\", models.len());\n}\n" }, { "path": "libs/appflowy-ai-client/tests/chat_test/qa_test.rs", "content": "use crate::appflowy_ai_client;\n\n#[tokio::test]\nasync fn qa_test() {\n let client = appflowy_ai_client();\n client.health_check().await.unwrap();\n let chat_id = uuid::Uuid::new_v4().to_string();\n let resp = client\n .send_question(\n &uuid::Uuid::new_v4().to_string(),\n &chat_id,\n 1,\n \"I feel hungry\",\n \"gpt-4o\",\n None,\n )\n .await\n .unwrap();\n assert!(!resp.content.is_empty());\n\n let questions = client\n .get_related_question(&chat_id, &1, \"gpt-4o-mini\")\n .await\n .unwrap()\n .items;\n println!(\"questions: {:?}\", questions);\n assert_eq!(questions.len(), 3)\n}\n\n#[tokio::test]\nasync fn download_package_test() {\n let client = appflowy_ai_client();\n let packages = client.get_local_ai_package(\"macos\").await.unwrap();\n assert!(!packages.0.is_empty());\n println!(\"packages: {:?}\", packages);\n}\n\n#[tokio::test]\nasync fn get_local_ai_config_test() {\n let client = appflowy_ai_client();\n let config = client\n .get_local_ai_config(\"macos\", Some(\"0.6.10\".to_string()))\n .await\n .unwrap();\n assert!(!config.models.is_empty());\n\n assert!(!config.models[0].embedding_model.download_url.is_empty());\n assert!(!config.models[0].chat_model.download_url.is_empty());\n\n assert!(!config.plugin.version.is_empty());\n assert!(!config.plugin.url.is_empty());\n println!(\"packages: {:?}\", config);\n}\n" }, { "path": "libs/appflowy-ai-client/tests/index_test/index_search_test.rs", "content": "use appflowy_ai_client::client::AppFlowyAIClient;\nuse appflowy_ai_client::dto::{CollabType, Document, SearchDocumentsRequest};\n\n#[tokio::test]\nasync fn index_search() {\n let client = appflowy_ai_client();\n\n client\n .index_documents(&[\n Document {\n id: \"test-doc1\".to_string(),\n doc_type: CollabType::Document,\n workspace_id: \"test-workspace1\".to_string(),\n content: \"Relevant. This is an important test document. It should appear in results.\"\n .to_string(),\n },\n Document {\n id: \"test-doc2\".to_string(),\n doc_type: CollabType::Document,\n workspace_id: \"test-workspace1\".to_string(),\n content:\n \"Irrelevant. This is an unimportant test document. It shouldn't appear in results.\"\n .to_string(),\n },\n Document {\n id: \"test-doc3\".to_string(),\n doc_type: CollabType::Document,\n workspace_id: \"test-workspace2\".to_string(),\n content:\n \"Irrelevant. This is an unimportant test document. It shouldn't appear in results.\"\n .to_string(),\n },\n ])\n .await\n .unwrap();\n\n let docs = client\n .search_documents(&SearchDocumentsRequest {\n workspaces: vec![\"test-workspace1\".to_string()],\n query: \"relevant\".to_string(),\n result_count: Some(1),\n })\n .await\n .unwrap();\n\n assert_eq!(docs.len(), 1);\n assert_eq!(docs[0].id, \"test-doc1\".to_string());\n}\n" }, { "path": "libs/appflowy-ai-client/tests/index_test/mod.rs", "content": "mod index_search_test;\n" }, { "path": "libs/appflowy-ai-client/tests/main.rs", "content": "use appflowy_ai_client::client::AppFlowyAIClient;\nuse std::sync::Once;\nuse tracing_subscriber::fmt::Subscriber;\nuse tracing_subscriber::util::SubscriberInitExt;\nuse tracing_subscriber::EnvFilter;\n\nmod chat_test;\nmod row_test;\n\n// mod index_test;\n\npub fn appflowy_ai_client() -> AppFlowyAIClient {\n setup_log();\n AppFlowyAIClient::new(\"http://localhost:5001\")\n}\n\npub fn setup_log() {\n static START: Once = Once::new();\n START.call_once(|| {\n let level = std::env::var(\"RUST_LOG\").unwrap_or(\"trace\".to_string());\n let mut filters = vec![];\n filters.push(format!(\"appflowy_ai_client={}\", level));\n std::env::set_var(\"RUST_LOG\", filters.join(\",\"));\n\n let subscriber = Subscriber::builder()\n .with_ansi(true)\n .with_env_filter(EnvFilter::from_default_env())\n .finish();\n subscriber.try_init().unwrap();\n });\n}\n" }, { "path": "libs/appflowy-ai-client/tests/row_test/mod.rs", "content": "mod summarize_test;\nmod translate_test;\n" }, { "path": "libs/appflowy-ai-client/tests/row_test/summarize_test.rs", "content": "use crate::appflowy_ai_client;\nuse serde_json::json;\n\n#[tokio::test]\nasync fn summarize_row_test() {\n let client = appflowy_ai_client();\n let json = json!({\"name\": \"Jack\", \"age\": 25, \"city\": \"New York\"});\n\n let result = client\n .summarize_row(json.as_object().unwrap(), \"gpt-4o-mini\")\n .await\n .unwrap();\n result.text.contains(\"Jack\");\n result.text.contains(\"New York\");\n println!(\"{:?}\", result);\n}\n" }, { "path": "libs/appflowy-ai-client/tests/row_test/translate_test.rs", "content": "use crate::appflowy_ai_client;\n\nuse appflowy_ai_client::dto::{TranslateItem, TranslateRowData};\n\n#[tokio::test]\nasync fn translate_row_test() {\n let client = appflowy_ai_client();\n\n let mut cells = Vec::new();\n for (key, value) in [(\"book name\", \"Atomic Habits\"), (\"author\", \"James Clear\")].iter() {\n cells.push(TranslateItem {\n title: key.to_string(),\n content: value.to_string(),\n });\n }\n\n let data = TranslateRowData {\n cells,\n language: \"Chinese\".to_string(),\n include_header: false,\n };\n\n let result = client.translate_row(data, \"gpt-4o-mini\").await.unwrap();\n assert_eq!(result.items.len(), 2);\n}\n" }, { "path": "libs/appflowy-proto/Cargo.toml", "content": "[package]\nname = \"appflowy-proto\"\nversion = \"0.1.0\"\nedition = \"2021\"\n\n[dependencies]\nuuid = { workspace = true, features = [\"serde\"] }\nbytes.workspace = true\nthiserror.workspace = true\ncollab-entity.workspace = true\ncollab.workspace = true\nprost = { version = \"0.13.4\", features = [\"derive\"] }\nserde = { workspace = true, features = [\"derive\"] }\nserde_repr.workspace = true\n\n[build-dependencies]\nprost-build = \"0.13.4\"\nprotoc-bin-vendored = { version = \"3.0\" }\n" }, { "path": "libs/appflowy-proto/build.rs", "content": "use std::process::Command;\n\nfn main() -> Result<(), Box> {\n // If the `PROTOC` environment variable is set, don't use vendored `protoc`\n std::env::var(\"PROTOC\").map(|_| ()).unwrap_or_else(|_| {\n let protoc_path = protoc_bin_vendored::protoc_bin_path().expect(\"protoc bin path\");\n let protoc_path_str = protoc_path.to_str().expect(\"protoc path to str\");\n\n // Set the `PROTOC` environment variable to the path of the `protoc` binary.\n std::env::set_var(\"PROTOC\", protoc_path_str);\n });\n\n let proto_files = vec![\n \"proto/messages.proto\",\n \"proto/collab.proto\",\n \"proto/notification.proto\",\n ];\n for proto_file in &proto_files {\n println!(\"cargo:rerun-if-changed={}\", proto_file);\n }\n\n prost_build::Config::new()\n .out_dir(\"src/pb/\")\n .compile_protos(&proto_files, &[\"proto/\"])?;\n\n // Run rustfmt on the generated files.\n let files = std::fs::read_dir(\"src/\")?\n .filter_map(Result::ok)\n .filter(|entry| {\n entry\n .path()\n .extension()\n .map(|ext| ext == \"rs\")\n .unwrap_or(false)\n })\n .map(|entry| entry.path().display().to_string());\n\n for file in files {\n Command::new(\"rustfmt\").arg(file).status()?;\n }\n Ok(())\n}\n" }, { "path": "libs/appflowy-proto/proto/collab.proto", "content": "syntax = \"proto3\";\n\npackage collab;\n\n/**\n * Rid represents Redis stream message Id, which is a unique identifier\n * in scope of individual Redis stream - here workspace scope - assigned\n * to each update stored in Redis.\n *\n * Default: \"0-0\"\n */\nmessage Rid {\n // UNIX epoch timestamp in milliseconds.\n fixed64 timestamp = 1;\n\n // In case when timestamps duplicate, this monotonically increasing\n // sequence number is incremented and assigned.\n uint32 counter = 2;\n}\n\n/**\n * SyncRequest message is send by either a server or a client, which informs about the\n * last collab state known to either party.\n *\n * If other side has more recent data, it should send `Update` message in the response.\n * If other side has missing data, it should send its own `SyncRequest` in the response.\n */\nmessage SyncRequest {\n // Last Redis stream ID of the update received from the server, concerning corresponding\n // collab, this message refers to.It\n //\n // The `Rid.timestamp` field can be used to notify clients when was the last time,\n // collab has been synchronised.\n Rid last_message_id = 1;\n\n // Yjs Doc state vector encoded using lib0 v1 encoding.\n bytes state_vector = 2;\n}\n\n/**\n * Update message is send either in response to `SyncRequest` or independently by\n * the client/server. It contains the Yjs doc update that can represent incremental\n * changes made over corresponding collab, or full document state.\n */\nmessage Update {\n // Redis stream message ID assigned to this update, after it has been stored by\n // server in Redis.\n //\n // For updates send by client, this field is not set.\n Rid message_id = 1;\n\n // Flags used to inform about encoding details:\n // - 0x00 - `payload` encoded using lib0 v1 encoding.\n // - 0x01 - `payload` encoded using lib0 v2 encoding.\n //\n // NOTE: in the future we could also include `payload` compression.\n uint32 flags = 2;\n\n // Binary update representing incremental changes over the collab,\n // or entire collab state delta.\n bytes payload = 3;\n}\n\n/**\n * AwarenessUpdate message is send to inform about the latest changes in the\n * Yjs doc awareness state.\n */\nmessage AwarenessUpdate {\n // Yjs awareness update encoded using lib0 v1 encoding.\n bytes payload = 1;\n}\n\n/**\n * AccessChanged message is sent only by the server when we recognise, that\n * connected client has lost the access to a corresponding collab.\n */\nmessage AccessChanged {\n // Flag indicating if user has read access to corresponding collab.\n bool can_read = 1;\n // Flag indicating if user has write access to corresponding collab.\n bool can_write = 2;\n // (Optional) human readable comment about the reason for access change.\n int32 reason = 3;\n}\n\nmessage CollabMessage {\n // Unique collab identifier (UUID), which this message is related to.\n // We're using string here, since it's easier to represent in web browser client.\n string object_id = 1;\n // Collab type - required by some of the collab read operations on the server.\n // NOTE: hopefully we'll be able to get rid of it in the future.\n int32 collab_type = 2;\n oneof data {\n SyncRequest sync_request = 3;\n Update update = 4;\n AwarenessUpdate awareness_update = 5;\n AccessChanged access_changed = 6;\n }\n}\n" }, { "path": "libs/appflowy-proto/proto/messages.proto", "content": "syntax = \"proto3\";\n\nimport \"collab.proto\";\nimport \"notification.proto\";\n\npackage messages;\n\n/**\n * All messages send between client/server are wrapped into a `Message`.\n */\nmessage Message {\n oneof payload {\n collab.CollabMessage collab_message = 1;\n notification.WorkspaceNotification notification = 2;\n }\n}\n" }, { "path": "libs/appflowy-proto/proto/notification.proto", "content": "syntax = \"proto3\";\n\npackage notification;\n\nmessage WorkspaceNotification {\n oneof payload {\n UserProfileChange profile_change = 1;\n PermissionChanged permission_changed = 2;\n }\n}\n\nmessage UserProfileChange {\n int64 uid = 1;\n optional string name = 2;\n optional string email = 3;\n}\n\nmessage PermissionChanged {\n string object_id = 1;\n uint32 reason = 2;\n}" }, { "path": "libs/appflowy-proto/src/client_message.rs", "content": "use crate::pb;\nuse crate::pb::collab_message::Data;\nuse crate::pb::message::Payload;\n#[rustfmt::skip]\nuse crate::pb::{message, SyncRequest};\nuse crate::shared::{Error, ObjectId, Rid, UpdateFlags};\nuse collab::preclude::sync::AwarenessUpdate;\nuse collab::preclude::updates::decoder::Decode;\nuse collab::preclude::{StateVector, Update};\nuse collab_entity::CollabType;\nuse prost::Message;\nuse std::fmt::{Debug, Formatter};\nuse uuid::Uuid;\n\n/// Represents messages sent from the client to the server through the WebSocket connection.\n/// ClientMessage is used to synchronize collaborative data between clients.\n#[derive(Clone)]\npub enum ClientMessage {\n /// Requests synchronization by providing the client's state vector.\n /// The server responds with updates the client is missing.\n ///\n /// # Fields\n /// * `object_id` - The unique identifier of the collaborative object\n /// * `collab_type` - The type of collaborative object (document, folder, etc.)\n /// * `last_message_id` - The ID of the last message received by this client\n /// * `state_vector` - A compressed representation of the client's document state\n Manifest {\n object_id: ObjectId,\n collab_type: CollabType,\n last_message_id: Rid,\n state_vector: Vec,\n },\n\n /// Sends local changes to be synchronized with other clients.\n ///\n /// # Fields\n /// * `object_id` - The unique identifier of the collaborative object\n /// * `collab_type` - The type of collaborative object\n /// * `flags` - Encoding version flag (Lib0v1 or Lib0v2)\n /// * `update` - The encoded changes to be applied\n Update {\n object_id: ObjectId,\n collab_type: CollabType,\n flags: UpdateFlags,\n update: Vec,\n },\n\n /// Shares user presence and status information with other clients.\n ///\n /// # Fields\n /// * `object_id` - The unique identifier of the collaborative object\n /// * `collab_type` - The type of collaborative object\n /// * `awareness` - Encoded user presence data\n AwarenessUpdate {\n object_id: ObjectId,\n collab_type: CollabType,\n awareness: Vec,\n },\n}\n\nimpl Debug for ClientMessage {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n match self {\n ClientMessage::Manifest {\n object_id,\n collab_type,\n last_message_id,\n state_vector,\n } => {\n let state_vector = StateVector::decode_v1(state_vector).map_err(|_| std::fmt::Error)?;\n f.debug_struct(\"Manifest\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"last_message_id\", &last_message_id)\n .field(\"state_vector\", &state_vector)\n .finish()\n },\n ClientMessage::Update {\n object_id,\n collab_type,\n flags,\n update,\n } => {\n let update = match flags {\n UpdateFlags::Lib0v1 => Update::decode_v1(update),\n UpdateFlags::Lib0v2 => Update::decode_v2(update),\n }\n .map_err(|_| std::fmt::Error)?;\n\n f.debug_struct(\"Update\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"flags\", &flags)\n .field(\"update\", &update)\n .finish()\n },\n ClientMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness,\n } => {\n let awareness = AwarenessUpdate::decode_v1(awareness).map_err(|_| std::fmt::Error)?;\n f.debug_struct(\"AwarenessUpdate\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"awareness\", &awareness)\n .finish()\n },\n }\n }\n}\n\nimpl ClientMessage {\n /// Returns a reference to the object ID contained in this message.\n pub fn object_id(&self) -> &ObjectId {\n match self {\n ClientMessage::Manifest { object_id, .. } => object_id,\n ClientMessage::Update { object_id, .. } => object_id,\n ClientMessage::AwarenessUpdate { object_id, .. } => object_id,\n }\n }\n\n /// Converts this ClientMessage into a serialized byte array.\n ///\n /// This is typically used before sending the message over the network.\n pub fn into_bytes(self) -> Result, Error> {\n Ok(pb::Message::from(self).encode_to_vec())\n }\n\n /// Creates a ClientMessage from a serialized byte array.\n ///\n /// This is typically used after receiving a message from the network.\n pub fn from_bytes(bytes: &[u8]) -> Result {\n let proto = pb::Message::decode(bytes)?;\n Self::try_from(proto)\n }\n}\n\n/// Converts a ClientMessage into the protocol buffer message format.\n/// This is used for serialization before network transmission.\nimpl From for pb::Message {\n fn from(value: ClientMessage) -> Self {\n match value {\n ClientMessage::Manifest {\n object_id,\n collab_type,\n last_message_id,\n state_vector,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::SyncRequest(SyncRequest {\n last_message_id: Some(pb::Rid {\n timestamp: last_message_id.timestamp,\n counter: last_message_id.seq_no as u32,\n }),\n state_vector,\n })),\n })),\n },\n ClientMessage::Update {\n object_id,\n collab_type,\n flags,\n update,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::Update(pb::Update {\n message_id: None,\n flags: flags as u8 as u32,\n payload: update,\n })),\n })),\n },\n ClientMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness,\n } => {\n //\n pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::AwarenessUpdate(pb::AwarenessUpdate {\n payload: awareness,\n })),\n })),\n }\n },\n }\n }\n}\n\n/// Attempts to convert a protocol buffer message into a ClientMessage.\n/// This is used for deserialization after receiving a message from the network.\nimpl TryFrom for ClientMessage {\n type Error = Error;\n\n fn try_from(value: pb::Message) -> Result {\n match value.payload {\n None => Err(Error::MissingFields),\n Some(payload) => match payload {\n Payload::CollabMessage(value) => {\n let object_id = Uuid::parse_str(&value.object_id)?;\n let collab_type = CollabType::from(value.collab_type);\n\n match value.data {\n Some(Data::SyncRequest(proto)) => Ok(ClientMessage::Manifest {\n object_id,\n collab_type,\n last_message_id: Rid {\n timestamp: proto\n .last_message_id\n .as_ref()\n .ok_or(Error::MissingFields)?\n .timestamp,\n seq_no: proto\n .last_message_id\n .as_ref()\n .ok_or(Error::MissingFields)?\n .counter as u16,\n },\n state_vector: proto.state_vector,\n }),\n Some(Data::Update(proto)) => Ok(ClientMessage::Update {\n object_id,\n collab_type,\n flags: UpdateFlags::try_from(proto.flags as u8)?,\n update: proto.payload,\n }),\n Some(Data::AwarenessUpdate(proto)) => Ok(ClientMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness: proto.payload,\n }),\n _ => Err(Error::MissingFields),\n }\n },\n Payload::Notification(_) => Err(Error::UnsupportedClientMessage),\n },\n }\n }\n}\n" }, { "path": "libs/appflowy-proto/src/lib.rs", "content": "mod client_message;\nmod pb;\nmod server_message;\nmod shared;\n\npub use client_message::*;\npub use server_message::*;\npub use shared::*;\n" }, { "path": "libs/appflowy-proto/src/pb/collab.rs", "content": "// This file is @generated by prost-build.\n/// *\n/// Rid represents Redis stream message Id, which is a unique identifier\n/// in scope of individual Redis stream - here workspace scope - assigned\n/// to each update stored in Redis.\n///\n/// Default: \"0-0\"\n#[derive(Clone, Copy, PartialEq, ::prost::Message)]\npub struct Rid {\n /// UNIX epoch timestamp in milliseconds.\n #[prost(fixed64, tag = \"1\")]\n pub timestamp: u64,\n /// In case when timestamps duplicate, this monotonically increasing\n /// sequence number is incremented and assigned.\n #[prost(uint32, tag = \"2\")]\n pub counter: u32,\n}\n/// *\n/// SyncRequest message is send by either a server or a client, which informs about the\n/// last collab state known to either party.\n///\n/// If other side has more recent data, it should send `Update` message in the response.\n/// If other side has missing data, it should send its own `SyncRequest` in the response.\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct SyncRequest {\n /// Last Redis stream ID of the update received from the server, concerning corresponding\n /// collab, this message refers to.It\n ///\n /// The `Rid.timestamp` field can be used to notify clients when was the last time,\n /// collab has been synchronised.\n #[prost(message, optional, tag = \"1\")]\n pub last_message_id: ::core::option::Option,\n /// Yjs Doc state vector encoded using lib0 v1 encoding.\n #[prost(bytes = \"vec\", tag = \"2\")]\n pub state_vector: ::prost::alloc::vec::Vec,\n}\n/// *\n/// Update message is send either in response to `SyncRequest` or independently by\n/// the client/server. It contains the Yjs doc update that can represent incremental\n/// changes made over corresponding collab, or full document state.\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct Update {\n /// Redis stream message ID assigned to this update, after it has been stored by\n /// server in Redis.\n ///\n /// For updates send by client, this field is not set.\n #[prost(message, optional, tag = \"1\")]\n pub message_id: ::core::option::Option,\n /// Flags used to inform about encoding details:\n /// - 0x00 - `payload` encoded using lib0 v1 encoding.\n /// - 0x01 - `payload` encoded using lib0 v2 encoding.\n ///\n /// NOTE: in the future we could also include `payload` compression.\n #[prost(uint32, tag = \"2\")]\n pub flags: u32,\n /// Binary update representing incremental changes over the collab,\n /// or entire collab state delta.\n #[prost(bytes = \"vec\", tag = \"3\")]\n pub payload: ::prost::alloc::vec::Vec,\n}\n/// *\n/// AwarenessUpdate message is send to inform about the latest changes in the\n/// Yjs doc awareness state.\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct AwarenessUpdate {\n /// Yjs awareness update encoded using lib0 v1 encoding.\n #[prost(bytes = \"vec\", tag = \"1\")]\n pub payload: ::prost::alloc::vec::Vec,\n}\n/// *\n/// AccessChanged message is sent only by the server when we recognise, that\n/// connected client has lost the access to a corresponding collab.\n#[derive(Clone, Copy, PartialEq, ::prost::Message)]\npub struct AccessChanged {\n /// Flag indicating if user has read access to corresponding collab.\n #[prost(bool, tag = \"1\")]\n pub can_read: bool,\n /// Flag indicating if user has write access to corresponding collab.\n #[prost(bool, tag = \"2\")]\n pub can_write: bool,\n /// (Optional) human readable comment about the reason for access change.\n #[prost(int32, tag = \"3\")]\n pub reason: i32,\n}\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct CollabMessage {\n /// Unique collab identifier (UUID), which this message is related to.\n /// We're using string here, since it's easier to represent in web browser client.\n #[prost(string, tag = \"1\")]\n pub object_id: ::prost::alloc::string::String,\n /// Collab type - required by some of the collab read operations on the server.\n /// NOTE: hopefully we'll be able to get rid of it in the future.\n #[prost(int32, tag = \"2\")]\n pub collab_type: i32,\n #[prost(oneof = \"collab_message::Data\", tags = \"3, 4, 5, 6\")]\n pub data: ::core::option::Option,\n}\n/// Nested message and enum types in `CollabMessage`.\npub mod collab_message {\n #[derive(Clone, PartialEq, ::prost::Oneof)]\n pub enum Data {\n #[prost(message, tag = \"3\")]\n SyncRequest(super::SyncRequest),\n #[prost(message, tag = \"4\")]\n Update(super::Update),\n #[prost(message, tag = \"5\")]\n AwarenessUpdate(super::AwarenessUpdate),\n #[prost(message, tag = \"6\")]\n AccessChanged(super::AccessChanged),\n }\n}\n" }, { "path": "libs/appflowy-proto/src/pb/messages.rs", "content": "// This file is @generated by prost-build.\n/// *\n/// All messages send between client/server are wrapped into a `Message`.\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct Message {\n #[prost(oneof = \"message::Payload\", tags = \"1, 2\")]\n pub payload: ::core::option::Option,\n}\n/// Nested message and enum types in `Message`.\npub mod message {\n #[derive(Clone, PartialEq, ::prost::Oneof)]\n pub enum Payload {\n #[prost(message, tag = \"1\")]\n CollabMessage(super::super::collab::CollabMessage),\n #[prost(message, tag = \"2\")]\n Notification(super::super::notification::WorkspaceNotification),\n }\n}\n" }, { "path": "libs/appflowy-proto/src/pb/mod.rs", "content": "mod collab;\nmod messages;\npub mod notification;\n\npub use collab::*;\npub use messages::*;\n" }, { "path": "libs/appflowy-proto/src/pb/notification.rs", "content": "// This file is @generated by prost-build.\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct WorkspaceNotification {\n #[prost(oneof = \"workspace_notification::Payload\", tags = \"1, 2\")]\n pub payload: ::core::option::Option,\n}\n/// Nested message and enum types in `WorkspaceNotification`.\npub mod workspace_notification {\n #[derive(Clone, PartialEq, ::prost::Oneof)]\n pub enum Payload {\n #[prost(message, tag = \"1\")]\n ProfileChange(super::UserProfileChange),\n #[prost(message, tag = \"2\")]\n PermissionChanged(super::PermissionChanged),\n }\n}\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct UserProfileChange {\n #[prost(int64, tag = \"1\")]\n pub uid: i64,\n #[prost(string, optional, tag = \"2\")]\n pub name: ::core::option::Option<::prost::alloc::string::String>,\n #[prost(string, optional, tag = \"3\")]\n pub email: ::core::option::Option<::prost::alloc::string::String>,\n}\n#[derive(Clone, PartialEq, ::prost::Message)]\npub struct PermissionChanged {\n #[prost(string, tag = \"1\")]\n pub object_id: ::prost::alloc::string::String,\n #[prost(uint32, tag = \"2\")]\n pub reason: u32,\n}\n" }, { "path": "libs/appflowy-proto/src/server_message.rs", "content": "use crate::pb;\nuse crate::pb::collab_message::Data;\nuse crate::pb::message::Payload;\nuse crate::pb::notification::{PermissionChanged, UserProfileChange};\n#[rustfmt::skip]\nuse crate::pb::{SyncRequest, message};\nuse crate::shared::{Error, ObjectId, Rid, UpdateFlags};\nuse bytes::Bytes;\nuse collab::preclude::sync::AwarenessUpdate;\nuse collab::preclude::updates::decoder::Decode;\nuse collab::preclude::{StateVector, Update};\nuse collab_entity::CollabType;\nuse pb::notification::workspace_notification::Payload as NotificationPayload;\nuse prost::Message;\nuse serde::{Deserialize, Serialize};\nuse std::fmt::{Debug, Display, Formatter};\nuse uuid::Uuid;\n\n#[derive(Clone, Debug, serde_repr::Serialize_repr, serde_repr::Deserialize_repr)]\n#[repr(u8)]\npub enum AccessChangedReason {\n PermissionDenied = 0,\n ObjectDeleted = 1,\n}\n\nimpl Display for AccessChangedReason {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n match self {\n AccessChangedReason::PermissionDenied => write!(f, \"PermissionDenied\"),\n AccessChangedReason::ObjectDeleted => write!(f, \"ObjectDeleted\"),\n }\n }\n}\n\n#[derive(Clone)]\npub enum ServerMessage {\n Manifest {\n object_id: ObjectId,\n collab_type: CollabType,\n last_message_id: Rid,\n state_vector: Vec,\n },\n Update {\n object_id: ObjectId,\n collab_type: CollabType,\n flags: UpdateFlags,\n last_message_id: Rid,\n update: Bytes,\n },\n AwarenessUpdate {\n object_id: ObjectId,\n collab_type: CollabType,\n awareness: Bytes,\n },\n AccessChanges {\n object_id: ObjectId,\n collab_type: CollabType,\n can_read: bool,\n can_write: bool,\n reason: AccessChangedReason,\n },\n Notification {\n notification: WorkspaceNotification,\n },\n}\n\nimpl ServerMessage {\n pub fn into_bytes(self) -> Result, Error> {\n Ok(pb::Message::from(self).encode_to_vec())\n }\n\n pub fn from_bytes(bytes: &[u8]) -> Result {\n let proto = pb::Message::decode(bytes)?;\n Self::try_from(proto)\n }\n}\n\nimpl Debug for ServerMessage {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n match self {\n ServerMessage::Manifest {\n object_id,\n collab_type,\n last_message_id,\n state_vector,\n } => {\n let state_vector = StateVector::decode_v1(state_vector).map_err(|_| std::fmt::Error)?;\n f.debug_struct(\"Manifest\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"last_message_id\", &last_message_id)\n .field(\"state_vector\", &state_vector)\n .finish()\n },\n ServerMessage::Update {\n object_id,\n collab_type,\n flags,\n last_message_id,\n update,\n } => {\n let update = match flags {\n UpdateFlags::Lib0v1 => Update::decode_v1(update),\n UpdateFlags::Lib0v2 => Update::decode_v2(update),\n }\n .map_err(|_| std::fmt::Error)?;\n\n f.debug_struct(\"Update\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"flags\", &flags)\n .field(\"last_message_id\", &last_message_id)\n .field(\"update\", &update)\n .finish()\n },\n ServerMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness,\n } => {\n let awareness = AwarenessUpdate::decode_v1(awareness).map_err(|_| std::fmt::Error)?;\n f.debug_struct(\"AwarenessUpdate\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"awareness\", &awareness)\n .finish()\n },\n ServerMessage::AccessChanges {\n object_id,\n collab_type,\n can_read,\n can_write,\n reason,\n } => f\n .debug_struct(\"PermissionDenied\")\n .field(\"object_id\", &object_id)\n .field(\"collab_type\", &collab_type)\n .field(\"can_read\", &can_read)\n .field(\"can_write\", &can_write)\n .field(\"reason\", &reason)\n .finish(),\n ServerMessage::Notification { notification } => f\n .debug_struct(\"WorkspaceNotification\")\n .field(\"notification\", ¬ification)\n .finish(),\n }\n }\n}\n\nimpl From for pb::Message {\n fn from(value: ServerMessage) -> Self {\n match value {\n ServerMessage::Manifest {\n object_id,\n collab_type,\n last_message_id,\n state_vector,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::SyncRequest(SyncRequest {\n last_message_id: Some(pb::Rid {\n timestamp: last_message_id.timestamp,\n counter: last_message_id.seq_no as u32,\n }),\n state_vector,\n })),\n })),\n },\n ServerMessage::Update {\n object_id,\n collab_type,\n flags,\n last_message_id,\n update,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::Update(pb::Update {\n flags: flags as u8 as u32,\n message_id: Some(pb::Rid {\n timestamp: last_message_id.timestamp,\n counter: last_message_id.seq_no as u32,\n }),\n payload: update.into(),\n })),\n })),\n },\n ServerMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::AwarenessUpdate(pb::AwarenessUpdate {\n payload: awareness.into(),\n })),\n })),\n },\n ServerMessage::AccessChanges {\n object_id,\n collab_type,\n can_read,\n can_write,\n reason,\n } => pb::Message {\n payload: Some(message::Payload::CollabMessage(pb::CollabMessage {\n object_id: object_id.to_string(),\n collab_type: collab_type as i32,\n data: Some(Data::AccessChanged(pb::AccessChanged {\n can_read,\n can_write,\n reason: reason as i32,\n })),\n })),\n },\n ServerMessage::Notification { notification } => match notification {\n WorkspaceNotification::UserProfileChange { uid, email, name } => pb::Message {\n payload: Some(message::Payload::Notification(\n pb::notification::WorkspaceNotification {\n payload: Some(NotificationPayload::ProfileChange(UserProfileChange {\n uid,\n name,\n email,\n })),\n },\n )),\n },\n WorkspaceNotification::ObjectAccessChanged { object_id, reason } => pb::Message {\n payload: Some(message::Payload::Notification(\n pb::notification::WorkspaceNotification {\n payload: Some(NotificationPayload::PermissionChanged(PermissionChanged {\n object_id: object_id.to_string(),\n reason: reason as u32,\n })),\n },\n )),\n },\n },\n }\n }\n}\n\nimpl TryFrom for ServerMessage {\n type Error = Error;\n\n fn try_from(value: pb::Message) -> Result {\n match value.payload {\n None => Err(Error::MissingFields),\n Some(payload) => match payload {\n Payload::CollabMessage(value) => {\n let object_id = Uuid::parse_str(&value.object_id)?;\n let collab_type = CollabType::from(value.collab_type);\n match value.data {\n Some(Data::SyncRequest(proto)) => {\n let rid = proto.last_message_id.ok_or(Error::MissingFields)?;\n Ok(ServerMessage::Manifest {\n object_id,\n collab_type,\n last_message_id: Rid {\n timestamp: rid.timestamp,\n seq_no: rid.counter as u16,\n },\n state_vector: proto.state_vector,\n })\n },\n Some(Data::Update(proto)) => {\n let rid = proto.message_id.ok_or(Error::MissingFields)?;\n Ok(ServerMessage::Update {\n object_id,\n collab_type,\n flags: UpdateFlags::try_from(proto.flags as u8)\n .map_err(|_| Error::MissingFields)?,\n last_message_id: Rid {\n timestamp: rid.timestamp,\n seq_no: rid.counter as u16,\n },\n update: proto.payload.into(),\n })\n },\n Some(Data::AwarenessUpdate(proto)) => Ok(ServerMessage::AwarenessUpdate {\n object_id,\n collab_type,\n awareness: proto.payload.into(),\n }),\n Some(Data::AccessChanged(proto)) => Ok(ServerMessage::AccessChanges {\n object_id,\n collab_type,\n can_read: proto.can_read,\n can_write: proto.can_write,\n reason: AccessChangedReason::from(proto.reason),\n }),\n _ => Err(Error::MissingFields),\n }\n },\n Payload::Notification(notification) => match notification.payload {\n None => Err(Error::MissingFields),\n Some(payload) => match payload {\n NotificationPayload::ProfileChange(value) => Ok(ServerMessage::Notification {\n notification: WorkspaceNotification::UserProfileChange {\n uid: value.uid,\n email: value.email,\n name: value.name,\n },\n }),\n NotificationPayload::PermissionChanged(value) => {\n let object_id = Uuid::parse_str(&value.object_id)?;\n Ok(ServerMessage::Notification {\n notification: WorkspaceNotification::ObjectAccessChanged {\n object_id,\n reason: value.reason.into(),\n },\n })\n },\n },\n },\n },\n }\n }\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub enum WorkspaceNotification {\n UserProfileChange {\n uid: i64,\n email: Option,\n name: Option,\n },\n ObjectAccessChanged {\n object_id: Uuid,\n reason: AccessChangedReason,\n },\n}\n\nimpl From for i32 {\n fn from(value: AccessChangedReason) -> Self {\n value as i32\n }\n}\n\nimpl From for AccessChangedReason {\n fn from(value: i32) -> Self {\n match value {\n 0 => AccessChangedReason::PermissionDenied,\n 1 => AccessChangedReason::ObjectDeleted,\n _ => AccessChangedReason::PermissionDenied,\n }\n }\n}\n\nimpl From for AccessChangedReason {\n fn from(value: u32) -> Self {\n match value {\n 0 => AccessChangedReason::PermissionDenied,\n 1 => AccessChangedReason::ObjectDeleted,\n _ => AccessChangedReason::PermissionDenied,\n }\n }\n}\n" }, { "path": "libs/appflowy-proto/src/shared.rs", "content": "use collab::entity::EncodedCollab;\nuse std::fmt::{Debug, Display, Formatter};\nuse std::str::FromStr;\nuse uuid::Uuid;\n\npub type WorkspaceId = Uuid;\npub type ObjectId = Uuid;\n\n/// Redis stream message ID, parsed.\n#[derive(Debug, Clone, Copy, Eq, PartialEq, Ord, PartialOrd, Default, Hash)]\npub struct Rid {\n pub timestamp: u64,\n pub seq_no: u16,\n}\n\nimpl Rid {\n pub fn new(timestamp: u64, seq_no: u16) -> Self {\n Rid { timestamp, seq_no }\n }\n\n pub fn from_bytes(bytes: &[u8]) -> Result {\n if bytes.len() != 10 {\n return Err(Error::InvalidRid);\n }\n let timestamp = u64::from_be_bytes([\n bytes[0], bytes[1], bytes[2], bytes[3], bytes[4], bytes[5], bytes[6], bytes[7],\n ]);\n let seq_no = u16::from_be_bytes([bytes[8], bytes[9]]);\n Ok(Rid { timestamp, seq_no })\n }\n\n pub fn into_bytes(&self) -> [u8; 10] {\n let mut bytes = [0; 10];\n bytes[0..8].copy_from_slice(&self.timestamp.to_be_bytes());\n bytes[8..10].copy_from_slice(&self.seq_no.to_be_bytes());\n bytes\n }\n}\n\nimpl Display for Rid {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n write!(f, \"{}-{}\", self.timestamp, self.seq_no)\n }\n}\n\nimpl FromStr for Rid {\n type Err = String;\n\n fn from_str(s: &str) -> Result {\n let mut parts = s.split('-');\n let timestamp = parts\n .next()\n .ok_or(\"missing timestamp\")?\n .parse()\n .map_err(|e| format!(\"{}\", e))?;\n let seq_no = parts\n .next()\n .ok_or(\"missing sequence number\")?\n .parse()\n .map_err(|e| format!(\"{}\", e))?;\n Ok(Rid { timestamp, seq_no })\n }\n}\n\n#[repr(u8)]\n#[derive(Debug, Clone, Copy, Default, Eq, PartialEq)]\npub enum UpdateFlags {\n #[default]\n Lib0v1 = 0,\n Lib0v2 = 1,\n}\n\nimpl TryFrom for UpdateFlags {\n type Error = Error;\n\n fn try_from(value: u8) -> Result {\n match value {\n 0 => Ok(UpdateFlags::Lib0v1),\n 1 => Ok(UpdateFlags::Lib0v2),\n tag => Err(Error::UnsupportedFlag(tag)),\n }\n }\n}\n\n#[derive(Debug, Clone, thiserror::Error)]\npub enum Error {\n #[error(\"failed to decode message: {0}\")]\n ProtobufDecode(#[from] prost::DecodeError),\n #[error(\"failed to encode message: {0}\")]\n ProtobufEncode(#[from] prost::EncodeError),\n #[error(\"failed to decode object id: {0}\")]\n InvalidObjectId(#[from] uuid::Error),\n #[error(\"failed to decode Redis stream message ID\")]\n InvalidRid,\n #[error(\"failed to decode message: missing fields\")]\n MissingFields,\n #[error(\"failed to decode message: unsupported flag for update: {0}\")]\n UnsupportedFlag(u8),\n #[error(\"failed to decode message: unknown collab type: {0}\")]\n UnknownCollabType(u8),\n #[error(\"Message does not match expected client message\")]\n UnsupportedClientMessage,\n}\n\npub struct TimestampedEncodedCollab {\n pub encoded_collab: EncodedCollab,\n pub rid: Rid,\n}\n" }, { "path": "libs/client-api/Cargo.toml", "content": "[package]\nname = \"client-api\"\nversion = \"0.2.0\"\nedition = \"2021\"\n\n# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html\n[lib]\ncrate-type = [\"cdylib\", \"rlib\"]\n\n[dependencies]\nreqwest = { workspace = true, features = [\"multipart\"] }\nanyhow.workspace = true\ngotrue = { path = \"../gotrue\" }\ntracing = { version = \"0.1\" }\nthiserror = \"1.0.56\"\nbytes = \"1.9.0\"\nuuid.workspace = true\nfutures-util = \"0.3.30\"\nfutures-core = \"0.3.30\"\nparking_lot = \"0.12.1\"\nbrotli = { version = \"3.4.0\", optional = true }\nasync-trait.workspace = true\nprost = \"0.13.3\"\nurl = \"2.5.0\"\nmime = \"0.3.17\"\ntokio = { workspace = true, features = [\"sync\", \"macros\"] }\ntokio-stream = { version = \"0.1.14\" }\nchrono = \"0.4\"\nclient-websocket = { workspace = true, features = [\"native-tls\"] }\nsemver = \"1.0.22\"\nzstd = { version = \"0.13.2\" }\n\ncollab = { workspace = true }\nyrs = { workspace = true }\ncollab-rt-protocol = { workspace = true }\nworkspace-template = { workspace = true, optional = true }\nserde_json.workspace = true\nserde.workspace = true\napp-error = { workspace = true, features = [\"tokio_error\", \"bincode_error\"] }\nscraper = { version = \"0.17.1\", optional = true }\narc-swap.workspace = true\n\nshared-entity = { workspace = true }\ncollab-rt-entity = { workspace = true }\nclient-api-entity.workspace = true\nserde_urlencoded = \"0.7.1\"\nfutures.workspace = true\npin-project.workspace = true\npercent-encoding = \"2.3.1\"\nlazy_static = { workspace = true }\nmime_guess = \"2.0.5\"\nappflowy-proto = { path = \"../appflowy-proto\" }\ndashmap.workspace = true\ntokio-tungstenite = { workspace = true, features = [\"stream\"] }\nrand = \"0.8.5\"\nsmallvec = { workspace = true, features = [\n \"serde\",\n \"const_generics\",\n \"const_new\",\n \"write\",\n] }\ncollab-plugins = { workspace = true, features = [] }\n\n[dev-dependencies]\ntokio = { version = \"1\", features = [\"macros\", \"time\", \"rt\"] }\n\n[target.'cfg(not(target_arch = \"wasm32\"))'.dependencies]\ntokio-retry = \"0.3\"\ntokio-util = \"0.7\"\nrayon = \"1.10.0\"\ninfra = { workspace = true, features = [\"file_util\"] }\nbase64 = \"0.22\"\nmd5 = \"0.7\"\n\n[target.'cfg(not(target_arch = \"wasm32\"))'.dependencies.tokio]\nworkspace = true\nfeatures = [\"sync\", \"net\"]\n\n[target.'cfg(not(target_arch = \"wasm32\"))'.dependencies.collab-rt-entity]\nworkspace = true\nfeatures = [\"tungstenite\"]\n\n[target.'cfg(target_arch = \"wasm32\")'.dependencies]\nwasm-bindgen-futures = \"0.4.40\"\ngetrandom = { version = \"0.2\", features = [\"js\"] }\ntokio = { workspace = true, features = [\"sync\"] }\nagain = { version = \"0.1.2\" }\n\n[features]\ndefault = [\"verbose_log\"]\ntest_util = [\"scraper\"]\ntemplate = [\"workspace-template\"]\nsync_verbose_log = [\"collab-rt-protocol/verbose_log\"]\ntest_fast_sync = []\nenable_brotli = [\"brotli\"]\nverbose_log = []\n" }, { "path": "libs/client-api/src/collab_sync/collab_sink.rs", "content": "use std::collections::BinaryHeap;\nuse std::collections::{HashMap, HashSet};\nuse std::ops::{Deref, DerefMut};\nuse std::sync::atomic::{AtomicBool, AtomicU64, Ordering};\nuse std::sync::{Arc, Weak};\nuse std::time::{Duration, Instant};\n\nuse anyhow::Error;\nuse collab::core::origin::{CollabClient, CollabOrigin};\nuse collab::lock::Mutex;\nuse futures_util::SinkExt;\nuse tokio::sync::{broadcast, watch};\nuse tokio::time::{interval, sleep};\nuse tracing::{error, trace, warn};\n\nuse crate::collab_sync::collab_stream::SeqNumCounter;\nuse crate::collab_sync::{SinkConfig, SyncError, SyncObject};\nuse collab_rt_entity::{ClientCollabMessage, MsgId, ServerCollabMessage, SinkMessage};\n\npub(crate) const SEND_INTERVAL: Duration = Duration::from_secs(8);\npub const COLLAB_SINK_DELAY_MILLIS: u64 = 500;\n\npub struct CollabSink {\n uid: i64,\n config: SinkConfig,\n object: SyncObject,\n /// The [Sink] is used to send the messages to the remote. It might be a websocket sink or\n /// other sink that implements the [SinkExt] trait.\n sender: Arc>,\n /// The [SinkQueue] is used to queue the messages that are waiting to be sent to the\n /// remote. It will merge the messages if possible.\n message_queue: Arc>>,\n sending_messages: Arc>>,\n /// The [watch::Sender] is used to notify the [CollabSinkRunner] to process the pending messages.\n /// Sending `false` will stop the [CollabSinkRunner].\n notifier: Arc>,\n sync_state_tx: broadcast::Sender,\n state: Arc,\n}\n\nimpl Drop for CollabSink {\n fn drop(&mut self) {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"Drop CollabSink {}\", self.object.object_id);\n }\n\n //\n let _ = self.notifier.send(SinkSignal::Stop);\n }\n}\n\nimpl CollabSink\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n{\n pub fn new(\n uid: i64,\n object: SyncObject,\n sink: Sink,\n notifier: watch::Sender,\n sync_state_tx: broadcast::Sender,\n config: SinkConfig,\n ) -> Self {\n let notifier = Arc::new(notifier);\n let sender = Arc::new(Mutex::from(sink));\n let message_queue = Arc::new(parking_lot::Mutex::new(SinkQueue::new()));\n let sending_messages = Arc::new(parking_lot::Mutex::new(HashSet::new()));\n let state = Arc::new(CollabSinkState::new());\n let mut interval = interval(SEND_INTERVAL);\n let weak_sending_messages = Arc::downgrade(&sending_messages);\n\n let _weak_notifier = Arc::downgrade(¬ifier);\n let _origin = CollabOrigin::Client(CollabClient {\n uid,\n device_id: object.device_id.clone(),\n });\n\n let cloned_state = state.clone();\n let weak_notifier = Arc::downgrade(¬ifier);\n tokio::spawn(async move {\n // Initial delay to make sure the first tick waits for SEND_INTERVAL\n sleep(SEND_INTERVAL).await;\n loop {\n interval.tick().await;\n match weak_notifier.upgrade() {\n Some(notifier) => {\n // Removing the flying messages allows for the re-sending of the top k messages in the message queue.\n if let Some(sending_messages) = weak_sending_messages.upgrade() {\n // remove all the flying messages if the last sync is expired within the SEND_INTERVAL.\n if cloned_state\n .latest_sync\n .is_time_for_next_sync(SEND_INTERVAL)\n .await\n {\n sending_messages.lock().clear();\n }\n }\n\n if notifier.send(SinkSignal::Proceed).is_err() {\n break;\n }\n },\n None => break,\n }\n }\n });\n\n Self {\n uid,\n object,\n sender,\n message_queue,\n notifier,\n sync_state_tx,\n config,\n sending_messages,\n state,\n }\n }\n\n /// Put the message into the queue and notify the sink to process the next message.\n /// After the [Msg] was pushed into the [SinkQueue]. The queue will pop the next msg base on\n /// its priority. And the message priority is determined by the [Msg] that implement the [Ord] and\n /// [PartialOrd] trait. Check out the [CollabMessage] for more details.\n ///\n pub fn queue_msg(&self, f: impl FnOnce(MsgId) -> ClientCollabMessage) {\n let _ = self.sync_state_tx.send(CollabSyncState::Syncing);\n let mut msg_queue = self.message_queue.lock();\n let msg_id = self.state.id_counter.next();\n let new_msg = f(msg_id);\n msg_queue.push_msg(msg_id, new_msg);\n drop(msg_queue);\n self.merge();\n\n // Notify the sink to process the next message after 500ms.\n let _ = self\n .notifier\n .send(SinkSignal::ProcessAfterMillis(COLLAB_SINK_DELAY_MILLIS));\n }\n\n /// When queue the init message, the sink will clear all the pending messages and send the init\n /// message immediately.\n pub fn queue_init_sync(&self, f: impl FnOnce(MsgId) -> ClientCollabMessage) {\n let _ = self.sync_state_tx.send(CollabSyncState::Syncing);\n self.clear();\n\n // When the client is connected, remove all pending messages and send the init message.\n let mut msg_queue = self.message_queue.lock();\n let msg_id = self.state.id_counter.next();\n let init_sync = f(msg_id);\n msg_queue.push_msg(msg_id, init_sync);\n self.state.did_queue_int_sync.store(true, Ordering::SeqCst);\n let _ = self.notifier.send(SinkSignal::Proceed);\n }\n\n pub fn did_queue_init_sync(&self) -> bool {\n self.state.did_queue_int_sync.load(Ordering::SeqCst)\n }\n\n /// Returns bool value to indicate whether the init sync message should be queued.\n /// The init sync message should be queued if the message queue is empty or the first message\n /// is not the init sync message.\n pub fn should_queue_init_sync(&self) -> bool {\n let msg_queue = self.message_queue.lock();\n if let Some(msg) = msg_queue.peek() {\n if msg.message().is_client_init_sync() {\n return false;\n }\n }\n true\n }\n\n pub fn clear(&self) {\n self.message_queue.lock().clear();\n self.sending_messages.lock().clear();\n }\n\n pub fn pause(&self) {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"{}:{} pause\", self.uid, self.object.object_id);\n }\n\n self.state.pause_ping.store(true, Ordering::SeqCst);\n }\n\n pub fn resume(&self) {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"{}:{} resume\", self.uid, self.object.object_id);\n }\n\n self.state.pause_ping.store(false, Ordering::SeqCst);\n }\n\n /// Notify the sink to process the next message and mark the current message as done.\n /// Returns bool value to indicate whether the message is valid.\n pub async fn validate_response(\n &self,\n msg_id: MsgId,\n server_message: &ServerCollabMessage,\n seq_num_counter: &Arc,\n ) -> Result {\n // safety: msg_id is not None\n let income_message_id = msg_id;\n let mut sending_messages = self.sending_messages.lock();\n\n // if the message id is not in the sending messages, it means the message is invalid.\n if !sending_messages.contains(&income_message_id) {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\n \"{}: sending messages:{:?} not contains {}\",\n self.object.object_id,\n sending_messages,\n income_message_id\n );\n }\n return Ok(false);\n }\n\n let mut message_queue = self.message_queue.lock();\n let mut is_valid = false;\n // if sending_messages.contains(&income_message_id) {\n if let Some(current_item) = message_queue.pop() {\n if current_item.msg_id() != income_message_id {\n error!(\n \"{} expect message id:{}, but receive:{}\",\n self.object.object_id,\n current_item.msg_id(),\n income_message_id,\n );\n message_queue.push(current_item);\n } else {\n is_valid = true;\n sending_messages.remove(&income_message_id);\n }\n }\n\n if is_valid {\n if let ServerCollabMessage::ClientAck(ack) = server_message {\n if let Some(seq_num) = ack.get_seq_num() {\n seq_num_counter.store_ack_seq_num(seq_num);\n seq_num_counter.check_ack_broadcast_contiguous(&self.object.object_id)?;\n }\n }\n }\n // Check if all non-ping messages have been sent\n let all_non_ping_messages_sent = !message_queue\n .iter()\n .any(|item| !item.message().is_ping_sync());\n\n // If there are no non-ping messages left in the queue, it indicates all messages have been sent\n if all_non_ping_messages_sent {\n if let Err(err) = self.sync_state_tx.send(CollabSyncState::Finished) {\n error!(\n \"Failed to send SinkState::Finished for object_id '{}': {}\",\n self.object.object_id, err\n );\n }\n } else if cfg!(feature = \"sync_verbose_log\") {\n trace!(\n \"{}: pending count:{} ids:{}\",\n self.object.object_id,\n message_queue.len(),\n message_queue\n .iter()\n .map(|item| item.msg_id().to_string())\n .collect::>()\n .join(\",\")\n );\n }\n\n Ok(is_valid)\n }\n\n async fn process_next_msg(&self) {\n let is_empty_queue = self\n .message_queue\n .try_lock()\n .map(|q| q.is_empty())\n .unwrap_or(true);\n if is_empty_queue {\n return;\n }\n\n let items = {\n let (mut msg_queue, mut sending_messages) = match (\n self.message_queue.try_lock(),\n self.sending_messages.try_lock(),\n ) {\n (Some(msg_queue), Some(sending_messages)) => (msg_queue, sending_messages),\n _ => {\n warn!(\n \"{}: failed to acquire the lock of the sink, retry later\",\n self.object.object_id\n );\n retry_later(Arc::downgrade(&self.notifier));\n return;\n },\n };\n get_next_batch_item(&self.state, &mut sending_messages, &mut msg_queue)\n };\n self.send_immediately(items).await;\n }\n\n async fn send_immediately(&self, items: Vec>) {\n if items.is_empty() {\n return;\n }\n\n let message_ids = items.iter().map(|item| item.msg_id()).collect::>();\n let messages = items\n .into_iter()\n .map(|item| item.into_message())\n .collect::>();\n match self.sender.try_lock() {\n Ok(mut sender) => {\n self.state.latest_sync.update_timestamp().await;\n match sender.send(messages).await {\n Ok(_) => {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\n \"🔥client sending {} messages {:?}\",\n self.object.object_id,\n message_ids\n );\n }\n },\n Err(err) => {\n error!(\"Failed to send error: {:?}\", err.into());\n self\n .sending_messages\n .lock()\n .retain(|id| !message_ids.contains(id));\n },\n }\n },\n Err(_) => {\n warn!(\"failed to acquire the lock of the sink, retry later\");\n self\n .sending_messages\n .lock()\n .retain(|id| !message_ids.contains(id));\n retry_later(Arc::downgrade(&self.notifier));\n },\n }\n }\n\n fn merge(&self) {\n if let (Some(sending_messages), Some(mut msg_queue)) = (\n self.sending_messages.try_lock(),\n self.message_queue.try_lock(),\n ) {\n let mut items: Vec> = Vec::with_capacity(msg_queue.len());\n let mut merged_ids = HashMap::new();\n while let Some(next) = msg_queue.pop() {\n // If the message is in the flying messages, it means the message is sending to the remote.\n // So don't merge the message.\n if sending_messages.contains(&next.msg_id()) {\n items.push(next);\n continue;\n }\n\n // Try to merge the next message with the last message. Only merge when:\n // 1. The last message is not in the flying messages.\n // 2. The last message can be merged and the next message can be merged.\n // 3. The last message's payload size is less than the maximum payload size.\n if let Some(last) = items.last_mut() {\n let can_merge = !sending_messages.contains(&last.msg_id())\n && last.message().payload_size() < self.config.maximum_payload_size\n && last.mergeable()\n && next.mergeable()\n && last.merge(&next, &self.config.maximum_payload_size).is_ok();\n if can_merge {\n merged_ids\n .entry(last.msg_id())\n .or_insert(vec![])\n .push(next.msg_id());\n\n // If the last message is merged with the next message, don't push the next message\n continue;\n }\n }\n items.push(next);\n }\n\n if cfg!(feature = \"sync_verbose_log\") {\n for (msg_id, merged_ids) in merged_ids {\n trace!(\n \"{}: merged {:?} messages into: {:?}\",\n self.object.object_id,\n merged_ids,\n msg_id\n );\n }\n }\n msg_queue.extend(items);\n }\n }\n\n /// Notify the sink to process the next message.\n pub(crate) fn notify_next(&self) {\n let _ = self.notifier.send(SinkSignal::Proceed);\n }\n}\n\nfn get_next_batch_item(\n state: &Arc,\n sending_messages: &mut HashSet,\n msg_queue: &mut SinkQueue,\n) -> Vec> {\n let mut next_sending_items = vec![];\n let mut requeue_items = vec![];\n\n while let Some(item) = msg_queue.pop() {\n // If we've already selected 20 items for sending, or if the current message\n // is already being sent (exists in sending_messages), we requeue the current item\n // and break out of the loop to prevent sending too many messages at once or\n // sending the same message twice.\n if next_sending_items.len() >= 20 || sending_messages.contains(&item.msg_id()) {\n requeue_items.push(item);\n break;\n }\n\n // Check if the current item is an initial synchronization message.\n let is_init_sync = item.message().is_client_init_sync();\n\n // Determine if the message should be sent. Messages are sent if the initial sync\n // has already been queued (did_queue_int_sync is true) or if it's an initial sync message.\n // This ensures that initial sync messages are prioritized and that other messages\n // are only sent after the initial sync has been queued.\n if state.did_queue_int_sync.load(Ordering::SeqCst) || is_init_sync {\n next_sending_items.push(item.clone());\n requeue_items.push(item);\n // If the current item is an initial sync message, we've prioritized it for sending,\n // so break the loop to handle its sending immediately.\n if is_init_sync {\n break;\n }\n } else {\n // If the current message does not meet the conditions for immediate sending\n // (e.g., initial sync hasn't been queued yet and this isn't an initial sync message),\n // we requeue it to attempt sending later.\n requeue_items.push(item);\n }\n }\n\n msg_queue.extend(requeue_items);\n let message_ids = next_sending_items\n .iter()\n .map(|item| item.msg_id())\n .collect::>();\n sending_messages.extend(message_ids);\n next_sending_items\n}\n\nfn retry_later(weak_notifier: Weak>) {\n if let Some(notifier) = weak_notifier.upgrade() {\n let _ = notifier.send(SinkSignal::ProcessAfterMillis(200));\n }\n}\n\npub struct CollabSinkRunner;\n\nimpl CollabSinkRunner {\n /// The runner will stop if the [CollabSink] was dropped or the notifier was closed.\n pub async fn run(\n weak_sink: Weak>,\n mut notifier: watch::Receiver,\n ) where\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n {\n loop {\n // stops the runner if the notifier was closed.\n if notifier.changed().await.is_err() {\n break;\n }\n if let Some(sync_sink) = weak_sink.upgrade() {\n let value = notifier.borrow().clone();\n match value {\n SinkSignal::Stop => break,\n SinkSignal::Proceed => {\n sync_sink.process_next_msg().await;\n },\n SinkSignal::ProcessAfterMillis(millis) => {\n sleep(Duration::from_millis(millis)).await;\n sync_sink.process_next_msg().await;\n },\n }\n } else {\n break;\n }\n }\n }\n}\n\npub trait MsgIdCounter: Send + Sync + 'static {\n /// Get the next message id. The message id should be unique.\n fn next(&self) -> MsgId;\n}\n\n#[derive(Debug, Default)]\npub struct DefaultMsgIdCounter(Arc);\n\nimpl DefaultMsgIdCounter {\n pub fn new() -> Self {\n Self::default()\n }\n pub(crate) fn next(&self) -> MsgId {\n self.0.fetch_add(1, Ordering::SeqCst)\n }\n}\n\npub(crate) struct SyncTimestamp {\n last_sync: Mutex,\n}\n\nimpl SyncTimestamp {\n fn new() -> Self {\n let now = Instant::now();\n SyncTimestamp {\n last_sync: Mutex::from(now.checked_sub(Duration::from_secs(60)).unwrap_or(now)),\n }\n }\n\n /// Indicate the duration is passed since the last sync. The last sync timestamp will be updated\n /// after sending a new message\n pub async fn is_time_for_next_sync(&self, duration: Duration) -> bool {\n Instant::now().duration_since(*self.last_sync.lock().await) > duration\n }\n\n async fn update_timestamp(&self) {\n let mut last_sync_locked = self.last_sync.lock().await;\n *last_sync_locked = Instant::now();\n }\n}\n\npub(crate) struct CollabSinkState {\n pub(crate) latest_sync: SyncTimestamp,\n pub(crate) pause_ping: AtomicBool,\n pub(crate) id_counter: DefaultMsgIdCounter,\n pub(crate) did_queue_int_sync: AtomicBool,\n}\n\nimpl CollabSinkState {\n fn new() -> Self {\n let msg_id_counter = DefaultMsgIdCounter::new();\n CollabSinkState {\n latest_sync: SyncTimestamp::new(),\n pause_ping: AtomicBool::new(false),\n id_counter: msg_id_counter,\n did_queue_int_sync: Default::default(),\n }\n }\n}\n\n#[derive(Clone, Debug)]\npub enum CollabSyncState {\n /// The sink is syncing the messages to the remote.\n Syncing,\n /// All the messages are synced to the remote.\n Finished,\n}\n\nimpl CollabSyncState {\n pub fn is_syncing(&self) -> bool {\n matches!(self, CollabSyncState::Syncing)\n }\n}\n\n#[derive(Clone)]\npub enum SinkSignal {\n Stop,\n Proceed,\n ProcessAfterMillis(u64),\n}\n\npub(crate) struct SinkQueue {\n queue: BinaryHeap>,\n}\n\nimpl SinkQueue\nwhere\n Msg: SinkMessage,\n{\n pub(crate) fn new() -> Self {\n Self {\n queue: Default::default(),\n }\n }\n\n pub(crate) fn push_msg(&mut self, msg_id: MsgId, msg: Msg) {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"📩 queue: {}\", msg);\n }\n\n self.queue.push(QueueItem::new(msg, msg_id));\n }\n}\n\nimpl Deref for SinkQueue\nwhere\n Msg: SinkMessage,\n{\n type Target = BinaryHeap>;\n\n fn deref(&self) -> &Self::Target {\n &self.queue\n }\n}\n\nimpl DerefMut for SinkQueue\nwhere\n Msg: SinkMessage,\n{\n fn deref_mut(&mut self) -> &mut Self::Target {\n &mut self.queue\n }\n}\n\n#[derive(Debug, Clone)]\npub(crate) struct QueueItem {\n inner: Msg,\n msg_id: MsgId,\n}\n\nimpl QueueItem\nwhere\n Msg: SinkMessage,\n{\n pub fn new(msg: Msg, msg_id: MsgId) -> Self {\n Self { inner: msg, msg_id }\n }\n\n pub fn message(&self) -> &Msg {\n &self.inner\n }\n\n pub fn into_message(self) -> Msg {\n self.inner\n }\n\n pub fn msg_id(&self) -> MsgId {\n self.msg_id\n }\n}\n\nimpl QueueItem\nwhere\n Msg: SinkMessage,\n{\n pub fn mergeable(&self) -> bool {\n self.inner.mergeable()\n }\n\n pub fn merge(&mut self, other: &Self, max_size: &usize) -> Result {\n self.inner.merge(other.message(), max_size)\n }\n}\n\nimpl Eq for QueueItem where Msg: Eq {}\n\nimpl PartialEq for QueueItem\nwhere\n Msg: PartialEq,\n{\n fn eq(&self, other: &Self) -> bool {\n self.inner == other.inner\n }\n}\n\nimpl PartialOrd for QueueItem\nwhere\n Msg: PartialOrd + Ord,\n{\n fn partial_cmp(&self, other: &Self) -> Option {\n Some(self.cmp(other))\n }\n}\n\nimpl Ord for QueueItem\nwhere\n Msg: Ord,\n{\n fn cmp(&self, other: &Self) -> std::cmp::Ordering {\n self.inner.cmp(&other.inner)\n }\n}\n" }, { "path": "libs/client-api/src/collab_sync/collab_stream.rs", "content": "use std::borrow::BorrowMut;\nuse std::marker::PhantomData;\nuse std::sync::atomic::{AtomicU32, Ordering};\nuse std::sync::{Arc, Weak};\nuse std::time::Duration;\n\nuse arc_swap::ArcSwap;\nuse collab::core::origin::CollabOrigin;\nuse collab::lock::RwLock;\nuse collab::preclude::Collab;\nuse futures_util::{SinkExt, StreamExt};\nuse tokio::select;\nuse tokio_util::sync::CancellationToken;\nuse tracing::{error, instrument, trace, warn};\nuse uuid::Uuid;\nuse yrs::encoding::read::Cursor;\nuse yrs::updates::decoder::DecoderV1;\nuse yrs::updates::encoder::Encode;\nuse yrs::ReadTxn;\n\nuse client_api_entity::{validate_data_for_folder, CollabType};\nuse collab_rt_entity::{AckCode, ClientCollabMessage, ServerCollabMessage, ServerInit, UpdateSync};\nuse collab_rt_protocol::{\n ClientSyncProtocol, CollabSyncProtocol, Message, MessageReader, SyncMessage,\n};\n\nuse crate::collab_sync::{\n start_sync, CollabSink, MissUpdateReason, SyncError, SyncObject, SyncReason,\n};\n\npub type CollabRef = Weak + Send + Sync + 'static>>;\n\n/// Use to continuously receive updates from remote.\npub struct ObserveCollab {\n #[allow(dead_code)]\n object_id: Uuid,\n #[allow(dead_code)]\n weak_collab: CollabRef,\n phantom_sink: PhantomData,\n phantom_stream: PhantomData,\n // Use sequence number to check if the received updates/broadcasts are continuous.\n #[allow(dead_code)]\n seq_num_counter: Arc,\n}\n\nimpl Drop for ObserveCollab {\n fn drop(&mut self) {\n #[cfg(feature = \"sync_verbose_log\")]\n trace!(\"Drop SyncStream {}\", self.object_id);\n }\n}\n\nimpl ObserveCollab\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n Stream: StreamExt> + Send + Sync + Unpin + 'static,\n{\n pub fn new(\n origin: CollabOrigin,\n object: SyncObject,\n stream: Stream,\n weak_collab: CollabRef,\n sink: Weak>,\n periodic_sync_interval: Option,\n ) -> Self {\n let object_id = object.object_id;\n let cloned_weak_collab = weak_collab.clone() as CollabRef;\n let seq_num_counter = Arc::new(SeqNumCounter::default());\n let cloned_seq_num_counter = seq_num_counter.clone();\n let init_sync_cancel_token = ArcSwap::new(Arc::new(CancellationToken::new()));\n let arc_object = Arc::new(object);\n\n if let Some(interval) = periodic_sync_interval {\n tracing::trace!(\"setting periodic sync step 1 for {}\", object_id);\n tokio::spawn(ObserveCollab::::periodic_sync_step_1(\n origin.clone(),\n sink.clone(),\n cloned_weak_collab.clone(),\n interval,\n object_id.to_string(),\n ));\n }\n tokio::spawn(ObserveCollab::::observer_collab_message(\n origin,\n arc_object,\n stream,\n cloned_weak_collab,\n sink,\n cloned_seq_num_counter,\n init_sync_cancel_token,\n ));\n Self {\n object_id,\n weak_collab,\n phantom_sink: Default::default(),\n phantom_stream: Default::default(),\n seq_num_counter,\n }\n }\n\n /// Periodically run sync step 1 to make sure that there are no missing updates from other clients.\n async fn periodic_sync_step_1(\n origin: CollabOrigin,\n weak_sink: Weak>,\n weak_collab: CollabRef,\n interval: Duration,\n object_id: String,\n ) {\n loop {\n tokio::time::sleep(interval).await;\n let sink = match weak_sink.upgrade() {\n Some(sink) => sink,\n None => break,\n };\n\n let collab = match weak_collab.upgrade() {\n Some(collab) => collab,\n None => break,\n };\n\n let sv = {\n let lock = collab.read().await;\n let sv = (*lock).borrow().transact().state_vector();\n sv\n };\n let msg = Message::Sync(SyncMessage::SyncStep1(sv)).encode_v1();\n trace!(\"Periodic sync step 1 for {}\", object_id);\n sink.queue_msg(|msg_id| {\n ClientCollabMessage::new_update_sync(UpdateSync::new(\n origin.clone(),\n object_id.clone(),\n msg,\n msg_id,\n ))\n });\n }\n }\n\n // Spawn the stream that continuously reads the doc's updates from remote.\n async fn observer_collab_message(\n origin: CollabOrigin,\n object: Arc,\n mut stream: Stream,\n weak_collab: CollabRef,\n weak_sink: Weak>,\n seq_num_counter: Arc,\n cancel_token: ArcSwap,\n ) {\n while let Some(collab_message_result) = stream.next().await {\n let collab = match weak_collab.upgrade() {\n Some(collab) => collab,\n None => break, // Collab dropped, stop the stream.\n };\n\n let sink = match weak_sink.upgrade() {\n Some(sink) => sink,\n None => break, // Sink dropped, stop the stream.\n };\n\n let msg = match collab_message_result {\n Ok(msg) => msg,\n Err(err) => {\n warn!(\n \"{} stream error:{}, stop receive incoming changes\",\n object.object_id,\n err.into()\n );\n break;\n },\n };\n\n if let Err(error) = ObserveCollab::::process_remote_message(\n &object,\n &collab,\n &sink,\n msg,\n &seq_num_counter,\n )\n .await\n {\n match error {\n SyncError::MissUpdates {\n state_vector_v1,\n reason,\n } => {\n let new_cancel_token = Arc::new(CancellationToken::new());\n let old_cancel_token = cancel_token.swap(new_cancel_token.clone());\n old_cancel_token.cancel();\n\n let cloned_origin = origin.clone();\n let cloned_object = object.clone();\n let collab = collab.clone();\n let sink = sink.clone();\n let sync_reason = match state_vector_v1 {\n None => SyncReason::ClientMissUpdates { reason },\n Some(sv) => SyncReason::ServerMissUpdates {\n state_vector_v1: sv,\n reason,\n },\n };\n tokio::spawn(async move {\n select! {\n _ = new_cancel_token.cancelled() => {\n trace!(\"{} cancel pull missing updates\", cloned_object.object_id);\n },\n _ = tokio::time::sleep(tokio::time::Duration::from_secs(1)) => {\n Self::pull_missing_updates(&cloned_origin, &cloned_object, &collab, &sink, sync_reason)\n .await;\n }\n }\n });\n },\n SyncError::CannotApplyUpdate => {\n let lock = collab.read().await;\n if let Err(err) = start_sync(\n origin.clone(),\n &object,\n (*lock).borrow(),\n &sink,\n SyncReason::ServerCannotApplyUpdate,\n ) {\n error!(\"Error while start sync: {}\", err);\n }\n },\n SyncError::OverrideWithIncorrectData(_) => {\n error!(\"Error while processing message: {}\", error);\n break;\n },\n _ => {\n error!(\"Error while processing message: {}\", error);\n },\n }\n }\n }\n }\n\n /// Continuously handle messages from the remote doc\n async fn process_remote_message(\n object: &SyncObject,\n collab: &Arc + Send + Sync + 'static>>,\n sink: &Arc>,\n msg: ServerCollabMessage,\n seq_num_counter: &Arc,\n ) -> Result<(), SyncError> {\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"handle server: {:?}\", msg);\n }\n\n if let ServerCollabMessage::ClientAck(ack) = &msg {\n let ack_code = ack.get_code();\n // if the server can not apply the update, we start the init sync.\n if ack_code == AckCode::CannotApplyUpdate {\n return Err(SyncError::CannotApplyUpdate);\n }\n\n if ack_code == AckCode::MissUpdate {\n // if the ack code is MissUpdate, it means the server has missed some updates. Client need to\n // use the payload of the current message to calculate missing update. So any existing pending\n // updates are no long needed.\n sink.clear();\n\n return Err(SyncError::MissUpdates {\n state_vector_v1: Some(ack.payload.to_vec()),\n reason: MissUpdateReason::ServerMissUpdates,\n });\n }\n }\n\n // msg_id will be None for [ServerBroadcast] or [ServerAwareness].\n match msg.msg_id() {\n None => {\n // apply the broadcast data and then check the continuity of the broadcast sequence number.\n Self::process_message_follow_protocol(object, &msg, collab, sink).await?;\n sink.notify_next();\n\n if let ServerCollabMessage::ServerBroadcast(ref data) = msg {\n seq_num_counter.check_broadcast_contiguous(&object.object_id, data.seq_num)?;\n seq_num_counter.store_broadcast_seq_num(data.seq_num);\n }\n Ok(())\n },\n Some(msg_id) => {\n let is_valid = sink\n .validate_response(msg_id, &msg, seq_num_counter)\n .await?;\n\n if is_valid {\n Self::process_message_follow_protocol(object, &msg, collab, sink).await?;\n }\n sink.notify_next();\n Ok(())\n },\n }\n }\n\n #[instrument(level = \"trace\", skip_all)]\n async fn pull_missing_updates(\n origin: &CollabOrigin,\n object: &SyncObject,\n collab: &Arc + Send + Sync + 'static>>,\n sink: &Arc>,\n reason: SyncReason,\n ) {\n let lock = collab.read().await;\n if let Err(err) = start_sync(origin.clone(), object, (*lock).borrow(), sink, reason) {\n error!(\"Error while start sync: {}\", err);\n }\n }\n\n async fn process_message_follow_protocol(\n sync_object: &SyncObject,\n msg: &ServerCollabMessage,\n collab: &Arc + Send + Sync + 'static>>,\n sink: &Arc>,\n ) -> Result<(), SyncError> {\n if msg.payload().is_empty() {\n return Ok(());\n }\n\n let payload = msg.payload().clone();\n let message_origin = msg.origin().clone();\n let sink = sink.clone();\n let sync_object = sync_object.clone();\n let collab = collab.clone();\n\n // workaround for panic when applying updates. It can be removed in the future\n let result = tokio::spawn(async move {\n let mut decoder = DecoderV1::new(Cursor::new(&payload));\n let reader = MessageReader::new(&mut decoder);\n for yrs_message in reader {\n let msg = yrs_message?;\n\n // When the client receives a SyncStep1 message, it indicates that the server is requesting\n // the client to send updates that the server is missing. This typically occurs when the client\n // has been editing offline, resulting in the client's version of the collaboration object\n // being ahead of the server's version. In response, the client prepares to send the missing updates.\n let is_server_sync_step_1 = matches!(msg, Message::Sync(SyncMessage::SyncStep1(_)));\n\n // If the collaboration object is of type [CollabType::Folder], data validation is required\n // before sending the SyncStep1 to the server.\n if is_server_sync_step_1 && sync_object.collab_type == CollabType::Folder {\n let lock = collab.read().await;\n validate_data_for_folder((*lock).borrow(), &sync_object.workspace_id.to_string())\n .map_err(|err| SyncError::OverrideWithIncorrectData(err.to_string()))?;\n }\n\n if let Some(return_payload) = ClientSyncProtocol\n .handle_message(&message_origin, &collab, msg)\n .await?\n {\n let object_id = sync_object.object_id;\n sink.queue_msg(|msg_id| {\n if is_server_sync_step_1 {\n ClientCollabMessage::new_server_init_sync(ServerInit::new(\n message_origin.clone(),\n object_id.to_string(),\n return_payload,\n msg_id,\n ))\n } else {\n ClientCollabMessage::new_update_sync(UpdateSync::new(\n message_origin.clone(),\n object_id.to_string(),\n return_payload,\n msg_id,\n ))\n }\n });\n }\n }\n Ok::<_, SyncError>(())\n })\n .await;\n\n result.unwrap_or_else(|err| {\n error!(\"Panic while processing message: {:?}\", err);\n Err(SyncError::Internal(anyhow::anyhow!(\n \"Panic while processing message\"\n )))\n })\n }\n}\n\n#[derive(Default)]\npub struct SeqNumCounter {\n /// The sequence number of the last update broadcast by the server.\n /// This counter is incremented by 1 each time the server applies an update.\n pub broadcast_seq_counter: AtomicU32,\n /// The sequence number of the last update acknowledged by a client.\n /// This is set to the sequence number contained in the `CollabMessage::ClientAck` received from a client.\n /// If this number is greater than `broadcast_seq_counter`, it indicates that some updates are missing on the client side,\n /// prompting an initialization sync to rectify missing updates.\n pub ack_seq_counter: AtomicU32,\n pub miss_update_counter: AtomicU32,\n}\n\nimpl SeqNumCounter {\n pub fn store_ack_seq_num(&self, seq_num: u32) -> u32 {\n // If the broadcast sequence counter is 0, set it to the current sequence number.\n if self.broadcast_seq_counter.load(Ordering::SeqCst) == 0 {\n self.broadcast_seq_counter.store(seq_num, Ordering::SeqCst);\n }\n\n match self\n .ack_seq_counter\n .fetch_update(Ordering::SeqCst, Ordering::SeqCst, |current| {\n // Check if the sequence number is less than the current one. A lower sequence number can indicate\n // that the server has been restarted, or the collaboration group has been reinitialized.\n if seq_num >= current {\n Some(seq_num)\n } else {\n None\n }\n }) {\n Ok(prev) => prev,\n Err(prev) => {\n self.ack_seq_counter.store(seq_num, Ordering::SeqCst);\n prev\n },\n }\n }\n\n pub fn store_broadcast_seq_num(&self, broadcast_seq_num: u32) -> u32 {\n match self\n .broadcast_seq_counter\n .fetch_update(Ordering::SeqCst, Ordering::SeqCst, |current| {\n // Check if the sequence number is less than the current one. A lower sequence number can indicate\n // that the server has been restarted, or the collaboration group has been reinitialized.\n if broadcast_seq_num >= current {\n Some(broadcast_seq_num)\n } else {\n None\n }\n }) {\n Ok(prev) => prev,\n Err(prev) => {\n self\n .broadcast_seq_counter\n .store(broadcast_seq_num, Ordering::SeqCst);\n prev\n },\n }\n }\n\n /// Checks if the given broadcast sequence number is contiguous with the current sequence.\n ///\n /// Verifies that the broadcast sequence number provided (`broadcast_seq_num`) follows directly after\n /// the last known sequence number stored in the system (`current`).\n ///\n /// If there is a gap between the `broadcast_seq_num` and `current`, it indicates that some\n /// messages may have been missed, and an error is returned.\n pub fn check_broadcast_contiguous(\n &self,\n _object_id: &Uuid,\n broadcast_seq_num: u32,\n ) -> Result<(), SyncError> {\n let current = self.broadcast_seq_counter.load(Ordering::SeqCst);\n if current > 0 && broadcast_seq_num > current + 1 {\n return Err(SyncError::MissUpdates {\n state_vector_v1: None,\n reason: MissUpdateReason::BroadcastSeqNotContinuous {\n current,\n expected: broadcast_seq_num,\n },\n });\n }\n\n Ok(())\n }\n\n pub fn check_ack_broadcast_contiguous(&self, object_id: &Uuid) -> Result<(), SyncError> {\n let ack_seq_num = self.ack_seq_counter.load(Ordering::SeqCst);\n let broadcast_seq_num = self.broadcast_seq_counter.load(Ordering::SeqCst);\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\n \"receive {} seq_num, ack:{}, broadcast:{}\",\n object_id,\n ack_seq_num,\n broadcast_seq_num,\n );\n }\n\n if ack_seq_num > broadcast_seq_num {\n // calculate the number of times the ack is greater than the broadcast. We don't do return MissingUpdates\n // immediately, because the ack may be greater than the broadcast for a short time.\n let old = self.miss_update_counter.fetch_add(1, Ordering::SeqCst);\n\n if old + 1 >= 2 {\n self.miss_update_counter.store(0, Ordering::SeqCst);\n // Mark the broadcast sequence number as ack seq_num because a MissUpdates error triggers\n // an initialization synchronization. After this initial sync, the ack and broadcast sequence\n // numbers are expected to align, ensuring that all updates are synchronized.\n self\n .broadcast_seq_counter\n .store(ack_seq_num, Ordering::SeqCst);\n\n return Err(SyncError::MissUpdates {\n state_vector_v1: None,\n reason: MissUpdateReason::AckSeqAdvanceBroadcastSeq {\n ack_seq: ack_seq_num,\n broadcast_seq: broadcast_seq_num,\n },\n });\n }\n }\n\n Ok(())\n }\n}\n" }, { "path": "libs/client-api/src/collab_sync/error.rs", "content": "use collab_rt_protocol::RTProtocolError;\nuse std::fmt::Display;\n\n#[derive(Debug, thiserror::Error)]\npub enum SyncError {\n #[error(transparent)]\n YSync(RTProtocolError),\n\n #[error(transparent)]\n YAwareness(#[from] collab::core::awareness::Error),\n\n #[error(\"failed to deserialize message: {0}\")]\n DecodingError(#[from] yrs::encoding::read::Error),\n\n #[error(\"Can not apply update for object:{0}\")]\n YrsApplyUpdate(String),\n\n #[error(transparent)]\n SerdeError(#[from] serde_json::Error),\n\n #[error(transparent)]\n TokioTask(#[from] tokio::task::JoinError),\n\n #[error(transparent)]\n IO(#[from] std::io::Error),\n\n #[error(\"Workspace id is not found\")]\n NoWorkspaceId,\n\n #[error(\"Missing updates\")]\n MissUpdates {\n state_vector_v1: Option>,\n reason: MissUpdateReason,\n },\n\n #[error(\"Can not apply update\")]\n CannotApplyUpdate,\n\n #[error(\"{0}\")]\n OverrideWithIncorrectData(String),\n\n #[error(transparent)]\n Internal(#[from] anyhow::Error),\n}\n\n#[derive(Debug)]\npub enum MissUpdateReason {\n BroadcastSeqNotContinuous { current: u32, expected: u32 },\n AckSeqAdvanceBroadcastSeq { ack_seq: u32, broadcast_seq: u32 },\n ServerMissUpdates,\n Other(String),\n}\n\nimpl Display for MissUpdateReason {\n fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {\n match self {\n MissUpdateReason::BroadcastSeqNotContinuous { current, expected } => {\n write!(\n f,\n \"Broadcast sequence not continuous: current={}, expected={}\",\n current, expected\n )\n },\n MissUpdateReason::AckSeqAdvanceBroadcastSeq {\n ack_seq,\n broadcast_seq,\n } => {\n write!(\n f,\n \"Ack sequence advance broadcast sequence: ack_seq={}, broadcast_seq={}\",\n ack_seq, broadcast_seq\n )\n },\n MissUpdateReason::ServerMissUpdates => write!(f, \"Server miss updates\"),\n MissUpdateReason::Other(reason) => write!(f, \"{}\", reason),\n }\n }\n}\n\nimpl From for SyncError {\n fn from(value: RTProtocolError) -> Self {\n match value {\n RTProtocolError::MissUpdates {\n state_vector_v1,\n reason,\n } => Self::MissUpdates {\n state_vector_v1,\n reason: MissUpdateReason::Other(reason),\n },\n RTProtocolError::DecodingError(e) => Self::DecodingError(e),\n RTProtocolError::YAwareness(e) => Self::YAwareness(e),\n RTProtocolError::YrsApplyUpdate(e) => Self::YrsApplyUpdate(e),\n RTProtocolError::Internal(e) => Self::Internal(e),\n _ => Self::YSync(value),\n }\n }\n}\n\nimpl SyncError {\n pub fn is_cannot_apply_update(&self) -> bool {\n matches!(self, Self::YrsApplyUpdate(_))\n }\n}\n" }, { "path": "libs/client-api/src/collab_sync/mod.rs", "content": "mod collab_sink;\nmod collab_stream;\nmod error;\nmod plugin;\nmod sync_control;\n\npub use collab_rt_entity::{MsgId, ServerCollabMessage};\npub use collab_sink::*;\npub use error::*;\npub use plugin::*;\npub use sync_control::*;\n" }, { "path": "libs/client-api/src/collab_sync/plugin.rs", "content": "use std::future::Future;\nuse std::pin::Pin;\nuse std::sync::atomic::AtomicBool;\nuse std::sync::{Arc, Weak};\nuse std::time::Duration;\n\nuse anyhow::anyhow;\nuse collab::core::awareness::{AwarenessUpdate, Event};\nuse collab::core::collab_plugin::CollabPluginType;\nuse collab::core::collab_state::SyncState;\nuse collab::core::origin::CollabOrigin;\nuse collab::preclude::{Collab, CollabPlugin};\nuse futures_util::SinkExt;\nuse tokio_retry::strategy::FixedInterval;\nuse tokio_retry::{Action, Condition, RetryIf};\nuse tokio_stream::StreamExt;\nuse tracing::{error, trace};\nuse uuid::Uuid;\nuse yrs::updates::encoder::Encode;\n\nuse client_api_entity::{CollabObject, CollabType};\nuse collab_rt_entity::{ClientCollabMessage, ServerCollabMessage, UpdateSync};\nuse collab_rt_protocol::{Message, SyncMessage};\n\nuse crate::collab_sync::collab_stream::CollabRef;\nuse crate::collab_sync::{CollabSyncState, SinkConfig, SyncControl, SyncReason};\nuse crate::ws::{ConnectState, WSConnectStateReceiver};\n\npub struct SyncPlugin {\n object: SyncObject,\n sync_queue: Arc>,\n // Used to keep the lifetime of the channel\n #[allow(dead_code)]\n channel: Option>,\n collab: CollabRef,\n is_destroyed: Arc,\n}\n\nimpl Drop for SyncPlugin {\n fn drop(&mut self) {\n #[cfg(feature = \"sync_verbose_log\")]\n trace!(\"Drop sync plugin: {}\", self.object.object_id);\n\n // when the plugin is dropped, set the is_destroyed flag to true\n self\n .is_destroyed\n .store(true, std::sync::atomic::Ordering::SeqCst);\n }\n}\n\nimpl SyncPlugin\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n Stream: StreamExt> + Send + Sync + Unpin + 'static,\n Channel: Send + Sync + 'static,\n{\n #[allow(clippy::too_many_arguments)]\n pub fn new(\n origin: CollabOrigin,\n object: SyncObject,\n collab: CollabRef,\n sink: Sink,\n sink_config: SinkConfig,\n stream: Stream,\n channel: Option>,\n mut ws_connect_state: WSConnectStateReceiver,\n periodic_sync: Option,\n ) -> Self {\n let sync_queue = SyncControl::new(\n object.clone(),\n origin,\n sink,\n sink_config,\n stream,\n collab.clone(),\n periodic_sync,\n );\n\n let mut sync_state_stream = sync_queue.subscribe_sync_state();\n let sync_state_collab = collab.clone();\n tokio::spawn(async move {\n while let Ok(sink_state) = sync_state_stream.recv().await {\n if let Some(collab) = sync_state_collab.upgrade() {\n let sync_state = match sink_state {\n CollabSyncState::Syncing => SyncState::Syncing,\n _ => SyncState::SyncFinished,\n };\n let lock = collab.read().await;\n lock.borrow().get_state().set_sync_state(sync_state);\n } else {\n break;\n }\n }\n });\n\n let sync_queue = Arc::new(sync_queue);\n let weak_local_collab = collab.clone();\n let weak_sync_queue = Arc::downgrade(&sync_queue);\n tokio::spawn(async move {\n while let Ok(connect_state) = ws_connect_state.recv().await {\n match connect_state {\n ConnectState::Connected => {\n // If the websocket is connected, initialize a new init sync\n if let (Some(local_collab), Some(sync_queue)) =\n (weak_local_collab.upgrade(), weak_sync_queue.upgrade())\n {\n sync_queue.resume();\n let lock = local_collab.read().await;\n let _ = sync_queue.init_sync(lock.borrow(), SyncReason::NetworkResume);\n } else {\n break;\n }\n },\n ConnectState::Unauthorized | ConnectState::Lost => {\n if let Some(sync_queue) = weak_sync_queue.upgrade() {\n // Stop sync if the websocket is unauthorized or disconnected\n sync_queue.pause();\n } else {\n break;\n }\n },\n _ => {},\n }\n }\n });\n\n Self {\n sync_queue,\n object,\n channel,\n collab,\n is_destroyed: Arc::new(Default::default()),\n }\n }\n}\n\nimpl CollabPlugin for SyncPlugin\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n Stream: StreamExt> + Send + Sync + Unpin + 'static,\n Channel: Send + Sync + 'static,\n{\n fn plugin_type(&self) -> CollabPluginType {\n CollabPluginType::CloudStorage\n }\n\n fn did_init(&self, _collab: &Collab, _object_id: &str) {\n // Most of the time, it should be successful to queue init sync by 1st time.\n let retry_strategy = FixedInterval::new(Duration::from_secs(1)).take(10);\n let action = InitSyncAction {\n sync_queue: Arc::downgrade(&self.sync_queue),\n collab: self.collab.clone(),\n };\n\n let condition = InitSyncRetryCondition {\n is_plugin_destroyed: self.is_destroyed.clone(),\n };\n\n tokio::spawn(async move {\n if let Err(err) = RetryIf::spawn(retry_strategy, action, condition).await {\n error!(\"Failed to start init sync: {}\", err);\n }\n });\n }\n\n fn receive_local_update(&self, origin: &CollabOrigin, _object_id: &str, update: &[u8]) {\n let update = update.to_vec();\n let payload = Message::Sync(SyncMessage::Update(update)).encode_v1();\n self.sync_queue.queue_msg(|msg_id| {\n let update_sync = UpdateSync::new(\n origin.clone(),\n self.object.object_id.to_string(),\n payload,\n msg_id,\n );\n ClientCollabMessage::new_update_sync(update_sync)\n });\n }\n\n fn receive_local_state(\n &self,\n origin: &CollabOrigin,\n object_id: &str,\n _event: &Event,\n update: &AwarenessUpdate,\n ) {\n let payload = Message::Awareness(update.encode_v1()).encode_v1();\n self.sync_queue.queue_msg(|msg_id| {\n let update_sync = UpdateSync::new(origin.clone(), object_id.to_string(), payload, msg_id);\n if cfg!(feature = \"sync_verbose_log\") {\n trace!(\"queue awareness: {:?}\", update);\n }\n\n ClientCollabMessage::new_awareness_sync(update_sync)\n });\n }\n\n fn start_init_sync(&self) {\n let collab = self.collab.clone();\n let sync_queue = self.sync_queue.clone();\n\n tokio::spawn(async move {\n if let Some(collab) = collab.upgrade() {\n let lock = collab.read().await;\n if let Err(err) = sync_queue.init_sync(lock.borrow(), SyncReason::CollabInitialize) {\n error!(\"Failed to start init sync: {}\", err);\n }\n }\n });\n }\n\n fn destroy(&self) {\n self\n .is_destroyed\n .store(true, std::sync::atomic::Ordering::SeqCst);\n }\n}\n\n#[derive(Clone, Debug)]\npub struct SyncObject {\n pub object_id: Uuid,\n pub workspace_id: Uuid,\n pub collab_type: CollabType,\n pub device_id: String,\n}\n\nimpl SyncObject {\n pub fn new(\n object_id: Uuid,\n workspace_id: Uuid,\n collab_type: CollabType,\n device_id: &str,\n ) -> Self {\n Self {\n object_id,\n workspace_id,\n collab_type,\n device_id: device_id.to_string(),\n }\n }\n}\n\nimpl TryFrom for SyncObject {\n type Error = anyhow::Error;\n fn try_from(collab_object: CollabObject) -> Result {\n Ok(Self {\n object_id: Uuid::parse_str(&collab_object.object_id)?,\n workspace_id: Uuid::parse_str(&collab_object.workspace_id)?,\n collab_type: collab_object.collab_type,\n device_id: collab_object.device_id,\n })\n }\n}\n\npub(crate) struct InitSyncAction {\n sync_queue: Weak>,\n collab: CollabRef,\n}\n\nimpl Action for InitSyncAction\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n Stream: StreamExt> + Send + Sync + Unpin + 'static,\n{\n type Future = Pin> + Send + Sync>>;\n type Item = ();\n type Error = anyhow::Error;\n\n fn run(&mut self) -> Self::Future {\n let weak_queue = self.sync_queue.clone();\n let weak_collab = self.collab.clone();\n Box::pin(async move {\n if let (Some(queue), Some(collab)) = (weak_queue.upgrade(), weak_collab.upgrade()) {\n if queue.did_queue_init_sync() {\n return Ok(());\n }\n let lock = collab.read().await;\n let collab = (*lock).borrow();\n let is_queue = queue.init_sync(collab, SyncReason::CollabInitialize)?;\n if is_queue {\n return Ok(());\n } else {\n return Err(anyhow!(\"Failed to queue init sync\"));\n }\n }\n\n // If the queue or collab is dropped, return Ok to stop retrying.\n Ok(())\n })\n }\n}\n\npub(crate) struct InitSyncRetryCondition {\n is_plugin_destroyed: Arc,\n}\nimpl Condition for InitSyncRetryCondition {\n fn should_retry(&mut self, _error: &anyhow::Error) -> bool {\n // Only retry if the plugin is not destroyed\n !self\n .is_plugin_destroyed\n .load(std::sync::atomic::Ordering::SeqCst)\n }\n}\n" }, { "path": "libs/client-api/src/collab_sync/sync_control.rs", "content": "use std::fmt::Display;\nuse std::ops::Deref;\nuse std::sync::Arc;\nuse std::time::Duration;\n\nuse collab::core::awareness::Awareness;\nuse collab::core::origin::CollabOrigin;\nuse collab::preclude::Collab;\nuse futures_util::{SinkExt, StreamExt};\nuse tokio::sync::{broadcast, watch};\nuse tracing::{error, info, instrument, trace};\nuse yrs::updates::decoder::Decode;\nuse yrs::updates::encoder::{Encode, Encoder, EncoderV1};\nuse yrs::{ReadTxn, StateVector};\n\nuse collab_rt_entity::{ClientCollabMessage, InitSync, ServerCollabMessage, UpdateSync};\nuse collab_rt_protocol::{ClientSyncProtocol, CollabSyncProtocol, Message, SyncMessage};\n\nuse crate::collab_sync::collab_stream::{CollabRef, ObserveCollab};\nuse crate::collab_sync::{\n CollabSink, CollabSinkRunner, CollabSyncState, MissUpdateReason, SinkSignal, SyncError,\n SyncObject,\n};\n\npub const DEFAULT_SYNC_TIMEOUT: u64 = 10;\n\npub struct SyncControl {\n object: SyncObject,\n pub(crate) origin: CollabOrigin,\n /// The [CollabSink] is used to send the updates to the remote. It will send the current\n /// update periodically if the timeout is reached or it will send the next update if\n /// it receive previous ack from the remote.\n sink: Arc>,\n /// The [ObserveCollab] will be spawned in a separate task It continuously receive\n /// the updates from the remote.\n #[allow(dead_code)]\n observe_collab: ObserveCollab,\n sync_state_tx: broadcast::Sender,\n}\n\nimpl Drop for SyncControl {\n fn drop(&mut self) {\n #[cfg(feature = \"sync_verbose_log\")]\n trace!(\"Drop SyncQueue {}\", self.object.object_id);\n }\n}\n\nimpl SyncControl\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n Stream: StreamExt> + Send + Sync + Unpin + 'static,\n{\n #[allow(clippy::too_many_arguments)]\n pub fn new(\n object: SyncObject,\n origin: CollabOrigin,\n sink: Sink,\n sink_config: SinkConfig,\n stream: Stream,\n collab: CollabRef,\n periodic_sync: Option,\n ) -> Self {\n let (notifier, notifier_rx) = watch::channel(SinkSignal::Proceed);\n let (sync_state_tx, _) = broadcast::channel(10);\n debug_assert!(origin.client_user_id().is_some());\n\n // Create the sink and start the sink runner.\n let sink = Arc::new(CollabSink::new(\n origin.client_user_id().unwrap_or(0),\n object.clone(),\n sink,\n notifier,\n sync_state_tx.clone(),\n sink_config,\n ));\n tokio::spawn(CollabSinkRunner::run(Arc::downgrade(&sink), notifier_rx));\n\n // Create the observe collab stream.\n let stream = ObserveCollab::new(\n origin.clone(),\n object.clone(),\n stream,\n collab.clone(),\n Arc::downgrade(&sink),\n periodic_sync,\n );\n\n Self {\n object,\n origin,\n sink,\n observe_collab: stream,\n sync_state_tx,\n }\n }\n\n pub fn pause(&self) {\n info!(\"pause {} sync\", self.object.object_id);\n self.sink.pause();\n }\n\n pub fn resume(&self) {\n info!(\"resume {} sync\", self.object.object_id);\n self.sink.resume();\n }\n\n pub fn subscribe_sync_state(&self) -> broadcast::Receiver {\n self.sync_state_tx.subscribe()\n }\n\n /// Returns bool indicating whether the init sync is queued.\n pub fn init_sync(\n &self,\n collab: &collab::preclude::Collab,\n reason: SyncReason,\n ) -> Result {\n start_sync(\n self.origin.clone(),\n &self.object,\n collab,\n &self.sink,\n reason,\n )\n }\n}\n\npub enum SyncReason {\n CollabInitialize,\n ServerMissUpdates {\n state_vector_v1: Vec,\n reason: MissUpdateReason,\n },\n ClientMissUpdates {\n reason: MissUpdateReason,\n },\n ServerCannotApplyUpdate,\n NetworkResume,\n}\n\nimpl Display for SyncReason {\n fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {\n match self {\n SyncReason::CollabInitialize => write!(f, \"CollabInitialize\"),\n SyncReason::ServerMissUpdates { reason, .. } => write!(f, \"ServerMissUpdates: {}\", reason),\n SyncReason::ClientMissUpdates { reason } => write!(f, \"ClientMissUpdates: {}\", reason),\n SyncReason::ServerCannotApplyUpdate => write!(f, \"ServerCannotApplyUpdate\"),\n SyncReason::NetworkResume => write!(f, \"NetworkResume\"),\n }\n }\n}\n\nfn gen_sync_state(\n awareness: &Awareness,\n protocol: &P,\n) -> Result, SyncError> {\n let mut encoder = EncoderV1::new();\n protocol.start(awareness, &mut encoder)?;\n Ok(encoder.to_vec())\n}\n\nfn gen_missing_updates(collab: &Collab, sv: StateVector) -> Result, SyncError> {\n let update = {\n let txn = collab.transact();\n txn.encode_state_as_update_v1(&sv)\n };\n\n let mut encoder = EncoderV1::new();\n Message::Sync(SyncMessage::Update(update)).encode(&mut encoder);\n Ok(encoder.to_vec())\n}\n\n#[instrument(level = \"trace\", skip_all)]\npub fn start_sync(\n origin: CollabOrigin,\n sync_object: &SyncObject,\n collab: &Collab,\n sink: &Arc>,\n reason: SyncReason,\n) -> Result\nwhere\n E: Into + Send + Sync + 'static,\n Sink: SinkExt, Error = E> + Send + Sync + Unpin + 'static,\n{\n if let Err(err) = sync_object.collab_type.validate_require_data(collab) {\n return Err(SyncError::Internal(err.into()));\n }\n\n match reason {\n SyncReason::ClientMissUpdates { reason } => {\n if !sink.should_queue_init_sync() {\n return Ok(false);\n }\n\n tracing::debug!(\n \"🔥{} restart sync due to missing update, reason:{}\",\n &sync_object.object_id,\n reason\n );\n let awareness = collab.get_awareness();\n let payload = gen_sync_state(awareness, &ClientSyncProtocol)?;\n sink.queue_init_sync(|msg_id| {\n let init_sync = InitSync::new(\n origin,\n sync_object.object_id.to_string(),\n sync_object.collab_type,\n sync_object.workspace_id.to_string(),\n msg_id,\n payload,\n );\n ClientCollabMessage::new_init_sync(init_sync)\n });\n },\n SyncReason::ServerMissUpdates {\n state_vector_v1,\n reason,\n } => match StateVector::decode_v1(&state_vector_v1) {\n Ok(sv) => {\n trace!(\"🔥{} start sync, reason:{}\", &sync_object.object_id, reason);\n let update = gen_missing_updates(collab, sv)?;\n sink.queue_msg(|msg_id| {\n let update_sync = UpdateSync::new(\n origin.clone(),\n sync_object.object_id.to_string(),\n update,\n msg_id,\n );\n ClientCollabMessage::new_update_sync(update_sync)\n });\n },\n Err(err) => error!(\"fail to decode server state vector: {}\", err),\n },\n SyncReason::CollabInitialize\n | SyncReason::ServerCannotApplyUpdate\n | SyncReason::NetworkResume => {\n tracing::debug!(\n \"🔥{} resume network, reason: {}\",\n &sync_object.object_id,\n reason\n );\n let awareness = collab.get_awareness();\n let payload = gen_sync_state(awareness, &ClientSyncProtocol)?;\n sink.queue_init_sync(|msg_id| {\n let init_sync = InitSync::new(\n origin,\n sync_object.object_id.to_string(),\n sync_object.collab_type,\n sync_object.workspace_id.to_string(),\n msg_id,\n payload,\n );\n ClientCollabMessage::new_init_sync(init_sync)\n });\n },\n };\n\n Ok(true)\n}\n\nimpl Deref for SyncControl {\n type Target = Arc>;\n\n fn deref(&self) -> &Self::Target {\n &self.sink\n }\n}\n\npub struct SinkConfig {\n /// `timeout` is the time to wait for the remote to ack the message. If the remote\n /// does not ack the message in time, the message will be sent again.\n pub send_timeout: Duration,\n /// `maximum_payload_size` is the maximum size of the messages to be merged.\n pub maximum_payload_size: usize,\n}\n\nimpl SinkConfig {\n pub fn new() -> Self {\n Self::default()\n }\n pub fn send_timeout(mut self, secs: u64) -> Self {\n self.send_timeout = Duration::from_secs(secs);\n self\n }\n}\n\nimpl Default for SinkConfig {\n fn default() -> Self {\n Self {\n send_timeout: Duration::from_secs(DEFAULT_SYNC_TIMEOUT),\n maximum_payload_size: 1024 * 10,\n }\n }\n}\n" }, { "path": "libs/client-api/src/http.rs", "content": "use crate::notify::{ClientToken, TokenStateReceiver};\nuse app_error::AppError;\nuse app_error::ErrorCode;\nuse client_api_entity::auth_dto::DeleteUserQuery;\nuse client_api_entity::server_info_dto::ServerInfoResponseItem;\nuse client_api_entity::workspace_dto::FavoriteSectionItems;\nuse client_api_entity::workspace_dto::RecentSectionItems;\nuse client_api_entity::workspace_dto::TrashSectionItems;\nuse client_api_entity::workspace_dto::{FolderView, QueryWorkspaceFolder, QueryWorkspaceParam};\nuse client_api_entity::AuthProvider;\nuse client_api_entity::GetInvitationCodeInfoQuery;\nuse client_api_entity::InvitationCodeInfo;\nuse client_api_entity::InvitedWorkspace;\nuse client_api_entity::JoinWorkspaceByInviteCodeParams;\nuse client_api_entity::WorkspaceInviteCodeParams;\nuse client_api_entity::WorkspaceInviteToken as WorkspaceInviteCode;\nuse gotrue::grant::PasswordGrant;\nuse gotrue::grant::{Grant, RefreshTokenGrant};\nuse gotrue::params::{AdminUserParams, GenerateLinkParams};\nuse gotrue::params::{MagicLinkParams, VerifyParams, VerifyType};\nuse reqwest::StatusCode;\nuse shared_entity::dto::workspace_dto::{CreateWorkspaceParam, PatchWorkspaceParam};\nuse std::borrow::Cow;\nuse std::fmt::{Display, Formatter};\n#[cfg(feature = \"enable_brotli\")]\nuse std::io::Read;\n\nuse parking_lot::RwLock;\nuse reqwest::Method;\nuse reqwest::RequestBuilder;\n\nuse crate::retry::{RefreshTokenAction, RefreshTokenRetryCondition};\nuse crate::ws::ConnectInfo;\nuse anyhow::anyhow;\nuse client_api_entity::SignUpResponse::{Authenticated, NotAuthenticated};\nuse client_api_entity::{AFUserProfile, AFUserWorkspaceInfo, AFWorkspace};\nuse client_api_entity::{GotrueTokenResponse, UpdateGotrueUserParams, User};\nuse semver::Version;\nuse shared_entity::dto::auth_dto::UpdateUserParams;\nuse shared_entity::dto::auth_dto::{SignInPasswordResponse, SignInTokenResponse};\nuse shared_entity::dto::workspace_dto::WorkspaceSpaceUsage;\nuse shared_entity::response::{AppResponse, AppResponseError};\nuse std::sync::atomic::{AtomicBool, Ordering};\nuse std::sync::Arc;\nuse std::time::Duration;\nuse tokio_retry::strategy::FixedInterval;\nuse tokio_retry::RetryIf;\nuse tracing::{debug, error, event, info, instrument, trace, warn};\nuse url::Url;\nuse uuid::Uuid;\n\npub const X_COMPRESSION_TYPE: &str = \"X-Compression-Type\";\npub const X_COMPRESSION_BUFFER_SIZE: &str = \"X-Compression-Buffer-Size\";\npub const X_COMPRESSION_TYPE_BROTLI: &str = \"brotli\";\n\n#[derive(Clone)]\npub struct ClientConfiguration {\n /// Lower Levels (0-4): Faster compression and decompression speeds but lower compression ratios. Suitable for scenarios where speed is more critical than reducing data size.\n /// Medium Levels (5-9): A balance between compression ratio and speed. These levels are generally good for a mix of performance and efficiency.\n /// Higher Levels (10-11): The highest compression ratios, but significantly slower and more resource-intensive. These are typically used in scenarios where reducing data size is paramount and resource usage is a secondary concern, such as for static content compression in web servers.\n pub(crate) compression_quality: u32,\n /// A larger buffer size means more data is compressed in a single operation, which can lead to better compression ratios\n /// since Brotli has more data to analyze for patterns and repetitions.\n pub(crate) compression_buffer_size: usize,\n}\n\nimpl ClientConfiguration {\n pub fn with_compression_buffer_size(mut self, compression_buffer_size: usize) -> Self {\n self.compression_buffer_size = compression_buffer_size;\n self\n }\n\n pub fn with_compression_quality(mut self, compression_quality: u32) -> Self {\n self.compression_quality = if compression_quality > 11 {\n warn!(\"compression_quality is larger than 11, set it to 11\");\n 11\n } else {\n compression_quality\n };\n self\n }\n}\n\nimpl Default for ClientConfiguration {\n fn default() -> Self {\n Self {\n compression_quality: 8,\n compression_buffer_size: 10240,\n }\n }\n}\n\n/// `Client` is responsible for managing communication with the GoTrue API and cloud storage.\n///\n/// It provides methods to perform actions like signing in, signing out, refreshing tokens,\n/// and interacting with file storage and collaboration objects.\n///\n/// # Fields\n/// - `cloud_client`: A `reqwest::Client` used for HTTP requests to the cloud.\n/// - `gotrue_client`: A `gotrue::api::Client` used for interacting with the GoTrue API.\n/// - `base_url`: The base URL for API requests.\n/// - `ws_addr`: The WebSocket address for real-time communication.\n/// - `token`: An `Arc>` managing the client's authentication token.\n///\n#[derive(Clone)]\npub struct Client {\n pub cloud_client: reqwest::Client,\n pub(crate) gotrue_client: gotrue::api::Client,\n pub base_url: String,\n pub ws_addr: String,\n pub device_id: String,\n pub client_version: Version,\n pub(crate) token: Arc>,\n pub(crate) is_refreshing_token: Arc,\n pub(crate) refresh_ret_txs: Arc>>,\n pub(crate) config: ClientConfiguration,\n pub(crate) ai_model: Arc>,\n}\n\npub(crate) type RefreshTokenSender = tokio::sync::oneshot::Sender>;\n\n/// Hardcoded schema in the frontend application. Do not change this value.\nconst DESKTOP_CALLBACK_URL: &str = \"appflowy-flutter://login-callback\";\n\nimpl Client {\n /// Constructs a new `Client` instance.\n ///\n /// # Parameters\n /// - `base_url`: The base URL for API requests.\n /// - `ws_addr`: The WebSocket address for real-time communication.\n /// - `gotrue_url`: The URL for the GoTrue API.\n pub fn new(\n base_url: &str,\n ws_addr: &str,\n gotrue_url: &str,\n device_id: &str,\n config: ClientConfiguration,\n client_id: &str,\n ) -> Self {\n let reqwest_client = reqwest::Client::new();\n let client_version = Version::parse(client_id).unwrap_or_else(|_| Version::new(0, 6, 7));\n\n let min_version = Version::new(0, 6, 7);\n let max_version = Version::new(1, 0, 0);\n // Log warnings in debug mode if the version is out of the valid range\n if cfg!(debug_assertions) {\n if client_version < min_version {\n error!(\n \"Client version is less than {}, setting it to {}\",\n min_version, min_version\n );\n } else if client_version >= max_version {\n error!(\n \"Client version is greater than or equal to {}, setting it to {}\",\n max_version, min_version\n );\n }\n }\n\n let client_version = client_version.clamp(min_version, max_version);\n #[cfg(debug_assertions)]\n {\n let feature_flags = [\n (\"sync_verbose_log\", cfg!(feature = \"sync_verbose_log\")),\n (\"enable_brotli\", cfg!(feature = \"enable_brotli\")),\n // Add more features here as needed.\n ];\n\n let enabled_features: Vec<&str> = feature_flags\n .iter()\n .filter_map(|&(name, enabled)| if enabled { Some(name) } else { None })\n .collect();\n\n trace!(\n \"Client version: {}, features: {:?}\",\n client_version,\n enabled_features\n );\n }\n\n let ai_model = Arc::new(RwLock::new(\"Auto\".to_string()));\n\n Self {\n base_url: base_url.to_string(),\n ws_addr: ws_addr.to_string(),\n cloud_client: reqwest_client.clone(),\n gotrue_client: gotrue::api::Client::new(reqwest_client, gotrue_url),\n token: Arc::new(RwLock::new(ClientToken::new())),\n is_refreshing_token: Default::default(),\n refresh_ret_txs: Default::default(),\n config,\n device_id: device_id.to_string(),\n client_version,\n ai_model,\n }\n }\n\n pub fn base_url(&self) -> &str {\n &self.base_url\n }\n\n pub fn ws_addr(&self) -> &str {\n &self.ws_addr\n }\n\n pub fn gotrue_url(&self) -> &str {\n &self.gotrue_client.base_url\n }\n\n pub fn set_ai_model(&self, model: String) {\n info!(\"using ai model: {:?}\", model);\n *self.ai_model.write() = model;\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub fn restore_token(&self, token: &str) -> Result<(), AppResponseError> {\n match serde_json::from_str::(token) {\n Ok(token) => {\n self.token.write().set(token);\n Ok(())\n },\n Err(err) => {\n error!(\"fail to deserialize token:{}, error:{}\", token, err);\n Err(err.into())\n },\n }\n }\n\n /// Retrieves the string representation of the [GotrueTokenResponse]. The returned value can be\n /// saved to the client application's local storage and used to restore the client's authentication\n ///\n /// This function attempts to acquire a read lock on `self.token` and retrieves the\n /// string representation of the access token. If the lock cannot be acquired or\n /// the token is not present, an error is returned.\n #[instrument(level = \"debug\", skip_all, err)]\n pub fn get_token_str(&self) -> Result {\n let token_str = self\n .token\n .read()\n .try_get()\n .map_err(|err| AppResponseError::from(AppError::OAuthError(err.to_string())))?;\n Ok(token_str)\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub fn get_token(&self) -> Result {\n let guard = self.token.read();\n let resp = guard\n .as_ref()\n .ok_or_else(|| AppResponseError::new(ErrorCode::UserUnAuthorized, \"user is not logged in\"))?;\n Ok(resp.clone())\n }\n\n pub fn get_access_token(&self) -> Result {\n self\n .token\n .read()\n .as_ref()\n .map(|v| v.access_token.clone())\n .ok_or_else(|| AppResponseError::new(ErrorCode::UserUnAuthorized, \"user is not logged in\"))\n }\n\n pub fn subscribe_token_state(&self) -> TokenStateReceiver {\n self.token.read().subscribe()\n }\n\n #[instrument(skip_all, err)]\n pub async fn sign_in_password(\n &self,\n email: &str,\n password: &str,\n ) -> Result {\n let response = self\n .gotrue_client\n .token(&Grant::Password(PasswordGrant {\n email: email.to_owned(),\n password: password.to_owned(),\n }))\n .await?;\n let is_new = self.verify_token_cloud(&response.access_token).await?;\n self.token.write().set(response.clone());\n Ok(SignInPasswordResponse {\n gotrue_response: response,\n is_new,\n })\n }\n\n /// Sign in with magic link\n ///\n /// User will receive an email with a magic link to sign in.\n /// The redirect_to parameter is optional. If provided, the user will be redirected to the specified URL after signing in.\n /// If not, the user will be redirected to the appflowy-flutter:// by default\n ///\n /// The redirect_to should be the scheme of the app, e.g., appflowy-flutter://\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn sign_in_with_magic_link(\n &self,\n email: &str,\n redirect_to: Option,\n ) -> Result<(), AppResponseError> {\n self\n .gotrue_client\n .magic_link(\n &MagicLinkParams {\n email: email.to_owned(),\n ..Default::default()\n },\n redirect_to,\n )\n .await?;\n Ok(())\n }\n\n /// Sign in with recovery token\n ///\n /// User will receive an email with a recovery code to sign in after clicking Forget Password.\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn sign_in_with_recovery_code(\n &self,\n email: &str,\n passcode: &str,\n ) -> Result {\n let response = self\n .gotrue_client\n .verify(&VerifyParams {\n email: email.to_owned(),\n token: passcode.to_owned(),\n type_: VerifyType::Recovery,\n })\n .await?;\n let _ = self.verify_token_cloud(&response.access_token).await?;\n self.token.write().set(response.clone());\n Ok(response)\n }\n\n /// Sign in with passcode (OTP)\n ///\n /// User will receive an email with a passcode to sign in.\n ///\n /// For more information, please refer to the sign_in_with_magic_link function.\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn sign_in_with_passcode(\n &self,\n email: &str,\n passcode: &str,\n ) -> Result {\n let response = self\n .gotrue_client\n .verify(&VerifyParams {\n email: email.to_owned(),\n token: passcode.to_owned(),\n type_: VerifyType::MagicLink,\n })\n .await?;\n let _ = self.verify_token_cloud(&response.access_token).await?;\n self.token.write().set(response.clone());\n Ok(response)\n }\n\n /// Attempts to sign in using a URL, extracting refresh_token from the URL.\n /// It looks like, e.g., `appflowy-flutter://#access_token=...&expires_in=3600&provider_token=...&refresh_token=...&token_type=bearer`.\n ///\n /// return a bool indicating if the user is new\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn sign_in_with_url(&self, url: &str) -> Result {\n let parsed = Url::parse(url)?;\n let key_value_pairs = parsed\n .fragment()\n .ok_or(url_missing_param(\"fragment\"))?\n .split('&');\n\n let mut refresh_token: Option<&str> = None;\n let mut provider_token: Option = None;\n let mut provider_refresh_token: Option = None;\n for param in key_value_pairs {\n match param.split_once('=') {\n Some(pair) => {\n let (k, v) = pair;\n if k == \"refresh_token\" {\n refresh_token = Some(v);\n } else if k == \"provider_token\" {\n provider_token = Some(v.to_string());\n } else if k == \"provider_refresh_token\" {\n provider_refresh_token = Some(v.to_string());\n }\n },\n None => warn!(\"param is not in key=value format: {}\", param),\n }\n }\n let refresh_token = refresh_token.ok_or(url_missing_param(\"refresh_token\"))?;\n\n let mut new_token = self\n .gotrue_client\n .token(&Grant::RefreshToken(RefreshTokenGrant {\n refresh_token: refresh_token.to_owned(),\n }))\n .await?;\n\n // refresh endpoint does not return provider token\n // so we need to set it manually to preserve this information\n new_token.provider_access_token = provider_token;\n new_token.provider_refresh_token = provider_refresh_token;\n\n let (_user, new) = self.verify_token(&new_token.access_token).await?;\n self.token.write().set(new_token);\n Ok(new)\n }\n\n /// Returns an OAuth URL by constructing the authorization URL for the specified provider.\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn generate_oauth_url_with_provider(\n &self,\n provider: &AuthProvider,\n ) -> Result {\n self\n .generate_url_with_provider_and_redirect_to(provider, None)\n .await\n }\n\n /// Returns an OAuth URL by constructing the authorization URL for the specified provider and redirecting to the specified URL.\n ///\n /// This asynchronous function communicates with the GoTrue client to retrieve settings and\n /// validate the availability of the specified OAuth provider. If the provider is available,\n /// it constructs and returns the OAuth URL. When the user opens the OAuth URL, it redirects to\n /// the corresponding provider's OAuth web page. After the user is authenticated, the browser will open\n /// a deep link to the AppFlowy app (iOS, macOS, etc.), which will call [Client::sign_in_with_url] to sign in.\n ///\n /// For example, the OAuth URL on Google looks like `https://appflowy.io/authorize?provider=google`.\n /// The deep link looks like `appflowy-flutter://#access_token=...&expires_in=3600&provider_token=...&refresh_token=...&token_type=bearer`.\n ///\n ///\n /// # Parameters\n /// - `provider`: A reference to an `OAuthProvider` indicating which OAuth provider to use for login.\n /// - `redirect_to`: An optional `String` containing the URL to redirect to after the user is authenticated.\n ///\n /// # Returns\n /// - `Ok(String)`: A `String` containing the constructed authorization URL if the specified provider is available.\n /// - `Err(AppResponseError)`: An `AppResponseError` indicating either the OAuth provider is invalid or other issues occurred while fetching settings.\n ///\n pub async fn generate_url_with_provider_and_redirect_to(\n &self,\n provider: &AuthProvider,\n redirect_to: Option,\n ) -> Result {\n let settings = self.gotrue_client.settings().await?;\n if !settings.external.has_provider(provider) {\n return Err(AppError::InvalidOAuthProvider(provider.as_str().to_owned()).into());\n }\n\n let url = format!(\"{}/authorize\", self.gotrue_client.base_url,);\n\n let mut url = Url::parse(&url)?;\n url\n .query_pairs_mut()\n .append_pair(\"provider\", provider.as_str())\n .append_pair(\n \"redirect_to\",\n redirect_to\n .unwrap_or_else(|| DESKTOP_CALLBACK_URL.to_string())\n .as_str(),\n );\n\n if let AuthProvider::Google = provider {\n url\n .query_pairs_mut()\n // In many cases, especially for server-side applications or mobile apps that might need to\n // interact with Google services on behalf of the user without the user being actively\n // engaged, access_type=offline is preferred to ensure long-term access.\n .append_pair(\"access_type\", \"offline\")\n // In Google OAuth2.0, the prompt parameter is used to control the OAuth2.0 flow's behavior.\n // It determines if the user is re-prompted for authentication and/or consent.\n // 1. none: The authorization server does not display any authentication or consent user interface pages.\n // 2. consent: The authorization server prompts the user for consent before returning information to the client\n // 3. select_account: The authorization server prompts the user to select a user account.\n .append_pair(\"prompt\", \"consent\");\n }\n\n Ok(url.to_string())\n }\n\n /// Generates a sign action link for the specified email address.\n /// This is only applicable if user token is with admin privilege.\n /// This action link is used on web browser to sign in. When user then click the action link in the browser,\n /// which calls gotrue authentication server, which then redirects to the appflowy-flutter:// with the authentication token.\n ///\n /// [Self::extract_sign_in_url] simulates the browser behavior to extract the sign in url.\n ///\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn generate_sign_in_action_link(\n &self,\n email: &str,\n ) -> Result {\n let admin_user_params: GenerateLinkParams = GenerateLinkParams {\n email: email.to_string(),\n ..Default::default()\n };\n\n let link_resp = self\n .gotrue_client\n .admin_generate_link(&self.access_token()?, &admin_user_params)\n .await?;\n assert_eq!(link_resp.email, email);\n\n Ok(link_resp.action_link)\n }\n\n #[cfg(feature = \"test_util\")]\n /// Used to extract the sign in url from the action link\n /// Only expose this method for testing\n pub async fn extract_sign_in_url(&self, action_link: &str) -> Result {\n let resp = reqwest::Client::new().get(action_link).send().await?;\n let html = resp.text().await.unwrap();\n\n trace!(\"action_link:{}, html: {}\", action_link, html);\n let fragment = scraper::Html::parse_fragment(&html);\n let selector = scraper::Selector::parse(\"a\").unwrap();\n let sign_in_url = fragment\n .select(&selector)\n .next()\n .unwrap()\n .value()\n .attr(\"href\")\n .unwrap()\n .to_string();\n\n Ok(sign_in_url)\n }\n\n #[inline]\n #[instrument(level = \"info\", skip_all, err)]\n async fn verify_token(&self, access_token: &str) -> Result<(User, bool), AppResponseError> {\n let user = self.gotrue_client.user_info(access_token).await?;\n let is_new = self.verify_token_cloud(access_token).await?;\n Ok((user, is_new))\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n #[inline]\n async fn verify_token_cloud(&self, access_token: &str) -> Result {\n let url = format!(\"{}/api/user/verify/{}\", self.base_url, access_token);\n let resp = self.cloud_client.get(&url).send().await?;\n let sign_in_resp: SignInTokenResponse =\n process_response_data::(resp).await?;\n Ok(sign_in_resp.is_new)\n }\n\n // Invites another user by sending a magic link to the user's email address.\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn invite(&self, email: &str) -> Result<(), AppResponseError> {\n self\n .gotrue_client\n .magic_link(\n &MagicLinkParams {\n email: email.to_owned(),\n ..Default::default()\n },\n None,\n )\n .await?;\n Ok(())\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn create_user(&self, email: &str, password: &str) -> Result {\n Ok(\n self\n .gotrue_client\n .admin_add_user(\n &self.access_token()?,\n &AdminUserParams {\n email: email.to_owned(),\n password: Some(password.to_owned()),\n email_confirm: true,\n ..Default::default()\n },\n )\n .await?,\n )\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn create_email_verified_user(\n &self,\n email: &str,\n password: &str,\n ) -> Result {\n Ok(\n self\n .gotrue_client\n .admin_add_user(\n &self.access_token()?,\n &AdminUserParams {\n email: email.to_owned(),\n password: Some(password.to_owned()),\n email_confirm: true,\n ..Default::default()\n },\n )\n .await?,\n )\n }\n\n // filter is postgre sql like filter\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn admin_list_users(\n &self,\n filter: Option<&str>,\n ) -> Result, AppResponseError> {\n let user = self\n .gotrue_client\n .admin_list_user(&self.access_token()?, filter)\n .await?;\n Ok(user.users)\n }\n\n /// Only expose this method for testing\n pub fn token(&self) -> Arc> {\n self.token.clone()\n }\n\n /// Retrieves the expiration timestamp of the current token.\n ///\n /// This function attempts to read the current token and, if successful, returns the expiration timestamp.\n ///\n /// # Returns\n /// - `Ok(i64)`: An `i64` representing the expiration timestamp of the token in seconds.\n /// - `Err(AppError)`: An `AppError` indicating either an inability to read the token or that the user is not logged in.\n ///\n #[inline]\n pub fn token_expires_at(&self) -> Result {\n match &self.token.try_read() {\n None => Err(AppError::Unhandled(\"Failed to read token\".to_string()).into()),\n Some(token) => Ok(\n token\n .as_ref()\n .ok_or(AppResponseError::from(AppError::NotLoggedIn(\n \"token is empty\".to_string(),\n )))?\n .expires_at,\n ),\n }\n }\n\n /// Retrieves the access token string.\n ///\n /// This function attempts to read the current token and, if successful, returns the access token string.\n ///\n /// # Returns\n /// - `Ok(String)`: A `String` containing the access token.\n /// - `Err(AppResponseError)`: An `AppResponseError` indicating either an inability to read the token or that the user is not logged in.\n ///\n pub fn access_token(&self) -> Result {\n match &self.token.try_read_for(Duration::from_secs(2)) {\n None => Err(AppError::Unhandled(\"Failed to read token\".to_string()).into()),\n Some(token) => {\n let access_token = token\n .as_ref()\n .ok_or(AppResponseError::from(AppError::NotLoggedIn(\n \"fail to get access token. Token is empty\".to_string(),\n )))?\n .access_token\n .clone();\n\n if access_token.is_empty() {\n error!(\"Unexpected empty access token\");\n }\n Ok(access_token)\n },\n }\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_profile(&self) -> Result {\n let url = format!(\"{}/api/user/profile\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_user_workspace_info(&self) -> Result {\n let url = format!(\"{}/api/user/workspace\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn delete_workspace(&self, workspace_id: &Uuid) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn create_workspace(\n &self,\n params: CreateWorkspaceParam,\n ) -> Result {\n let url = format!(\"{}/api/workspace\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn patch_workspace(&self, params: PatchWorkspaceParam) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::PATCH, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn get_workspaces(&self) -> Result, AppResponseError> {\n self\n .get_workspaces_opt(QueryWorkspaceParam::default())\n .await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspaces_opt(\n &self,\n param: QueryWorkspaceParam,\n ) -> Result, AppResponseError> {\n let url = format!(\"{}/api/workspace\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(¶m)\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n /// List out the views in the workspace recursively.\n /// The depth parameter specifies the depth of the folder view tree to return(default: 1).\n /// e.g., depth=1 will return only up to `Shared` and `PrivateSpace`\n /// depth=2 will return up to `mydoc1`, `mydoc2`, `mydoc3`, `mydoc4`\n ///\n /// . MyWorkspace\n /// ├── Shared\n /// │ ├── mydoc1\n /// │ └── mydoc2\n /// └── PrivateSpace\n /// ├── mydoc3\n /// └── mydoc4\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_folder(\n &self,\n workspace_id: &Uuid,\n depth: Option,\n root_view_id: Option,\n ) -> Result {\n let url = format!(\"{}/api/workspace/{}/folder\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&QueryWorkspaceFolder {\n depth,\n root_view_id,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn open_workspace(&self, workspace_id: &Uuid) -> Result {\n let url = format!(\"{}/api/workspace/{}/open\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_favorite(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\"{}/api/workspace/{}/favorite\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_recent(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\"{}/api/workspace/{}/recent\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_trash(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\"{}/api/workspace/{}/trash\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn join_workspace_by_invitation_code(\n &self,\n invitation_code: &str,\n ) -> Result {\n let url = format!(\"{}/api/workspace/join-by-invite-code\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&JoinWorkspaceByInviteCodeParams {\n code: invitation_code.to_string(),\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_invitation_code_info(\n &self,\n invitation_code: &str,\n ) -> Result {\n let url = format!(\"{}/api/invite-code-info\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&GetInvitationCodeInfoQuery {\n code: invitation_code.to_string(),\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn create_workspace_invitation_code(\n &self,\n workspace_id: &Uuid,\n params: &WorkspaceInviteCodeParams,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/invite-code\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(params)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_workspace_invitation_code(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/invite-code\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn delete_workspace_invitation_code(\n &self,\n workspace_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/invite-code\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn sign_up(&self, email: &str, password: &str) -> Result<(), AppResponseError> {\n match self.gotrue_client.sign_up(email, password, None).await? {\n Authenticated(access_token_resp) => {\n self.token.write().set(access_token_resp.clone());\n Ok(())\n },\n NotAuthenticated(user) => {\n tracing::info!(\"sign_up but not authenticated: {}\", user.email);\n Ok(())\n },\n }\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn sign_out(&self) -> Result<(), AppResponseError> {\n self.gotrue_client.logout(&self.access_token()?).await?;\n self.token.write().unset();\n Ok(())\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn update_user(&self, params: UpdateUserParams) -> Result<(), AppResponseError> {\n let gotrue_params = UpdateGotrueUserParams::new()\n .with_opt_email(params.email.clone())\n .with_opt_password(params.password.clone());\n\n let updated_user = self\n .gotrue_client\n .update_user(&self.access_token()?, &gotrue_params)\n .await?;\n\n if let Some(token) = self.token.write().as_mut() {\n token.user = updated_user;\n }\n\n let url = format!(\"{}/api/user/update\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn delete_user(&self) -> Result<(), AppResponseError> {\n let (provider_access_token, provider_refresh_token) = {\n let token = &self.token;\n let token_read = token.read();\n let token_resp = token_read\n .as_ref()\n .ok_or(AppResponseError::from(AppError::NotLoggedIn(\n \"token is empty\".to_string(),\n )))?;\n (\n token_resp.provider_access_token.clone(),\n token_resp.provider_refresh_token.clone(),\n )\n };\n\n let url = format!(\"{}/api/user\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .query(&DeleteUserQuery {\n provider_access_token,\n provider_refresh_token,\n })\n .send()\n .await?;\n\n process_response_error(resp).await\n }\n\n pub async fn ws_connect_info(&self, auto_refresh: bool) -> Result {\n if auto_refresh {\n self\n .refresh_if_expired(\n chrono::Local::now().timestamp(),\n \"get websocket connect info\",\n )\n .await?;\n }\n\n Ok(ConnectInfo {\n access_token: self.access_token()?,\n client_version: self.client_version.clone(),\n device_id: self.device_id.clone(),\n })\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_workspace_usage(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\"{}/api/file_storage/{}/usage\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_server_info(&self) -> Result {\n let url = format!(\"{}/api/server\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n if resp.status() == StatusCode::NOT_FOUND {\n Err(AppResponseError::new(\n ErrorCode::Unhandled,\n \"server info not implemented\",\n ))\n } else {\n process_response_data::(resp).await\n }\n }\n\n /// Refreshes the access token using the stored refresh token.\n ///\n /// attempts to refresh the access token by sending a request to the authentication server\n /// using the stored refresh token. If successful, it updates the stored access token with the new one\n /// received from the server.\n /// Refreshes the access token using the stored refresh token.\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn refresh_token(&self, reason: &str) -> Result<(), AppResponseError> {\n let (tx, rx) = tokio::sync::oneshot::channel();\n self.refresh_ret_txs.write().push(tx);\n\n // Atomically check and set the refreshing flag to prevent race conditions\n if self\n .is_refreshing_token\n .compare_exchange(false, true, Ordering::SeqCst, Ordering::SeqCst)\n .is_ok()\n {\n info!(\"refresh token reason:{}\", reason);\n let result = self.inner_refresh_token().await;\n\n // Process all pending requests and reset state atomically\n let mut txs_guard = self.refresh_ret_txs.write();\n let txs = std::mem::take(&mut *txs_guard);\n self.is_refreshing_token.store(false, Ordering::SeqCst);\n drop(txs_guard);\n\n // Send results to all waiting requests\n for tx in txs {\n let _ = tx.send(result.clone());\n }\n } else {\n debug!(\"refresh token is already in progress\");\n }\n\n // Wait for the result of the refresh token request.\n match tokio::time::timeout(Duration::from_secs(60), rx).await {\n Ok(Ok(result)) => result,\n Ok(Err(err)) => {\n Err(AppError::Internal(anyhow!(\"refresh token channel error: {}\", err)).into())\n },\n Err(_) => Err(AppError::RequestTimeout(\"refresh token timeout\".to_string()).into()),\n }\n }\n\n async fn inner_refresh_token(&self) -> Result<(), AppResponseError> {\n let retry_strategy = FixedInterval::new(Duration::from_secs(2)).take(4);\n let action = RefreshTokenAction::new(self.token.clone(), self.gotrue_client.clone());\n match RetryIf::spawn(retry_strategy, action, RefreshTokenRetryCondition).await {\n Ok(_) => {\n event!(tracing::Level::INFO, \"refresh token success\");\n Ok(())\n },\n Err(err) => {\n let err = AppError::from(err);\n event!(tracing::Level::ERROR, \"refresh token failed: {}\", err);\n // If the error is an OAuth error, unset the token.\n if err.is_unauthorized() {\n self.token.write().unset();\n }\n Err(err.into())\n },\n }\n }\n\n // Refresh token if given timestamp is close to the token expiration time\n pub async fn refresh_if_expired(&self, ts: i64, reason: &str) -> Result<(), AppResponseError> {\n let expires_at = self.token_expires_at()?;\n\n if ts + 30 > expires_at {\n info!(\"token is about to expire, refreshing token\");\n // Add 30 seconds buffer\n self.refresh_token(reason).await?;\n }\n Ok(())\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn http_client_without_auth(\n &self,\n method: Method,\n url: &str,\n ) -> Result {\n trace!(\"start request: {}, method: {}\", url, method,);\n Ok(self.cloud_client.request(method, url))\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn http_client_with_auth(\n &self,\n method: Method,\n url: &str,\n ) -> Result {\n let ts_now = chrono::Local::now().timestamp();\n self\n .refresh_if_expired(ts_now, \"make http client request\")\n .await?;\n\n let access_token = self.access_token()?;\n let headers = [\n (\"client-version\", self.client_version.to_string()),\n (\"client-timestamp\", ts_now.to_string()),\n (\"device-id\", self.device_id.clone()),\n ];\n trace!(\n \"start request: {}, method: {}, headers: {:?}\",\n url,\n method,\n headers\n );\n\n let mut request_builder = self\n .cloud_client\n .request(method, url)\n .bearer_auth(access_token);\n\n for header in headers {\n request_builder = request_builder.header(header.0, header.1);\n }\n Ok(request_builder)\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn http_client_with_model(\n &self,\n method: Method,\n url: &str,\n ai_model: Option,\n ) -> Result {\n let mut builder = self.http_client_with_auth(method, url).await?;\n let effective_ai_model = match ai_model {\n Some(model) => model,\n None => self.ai_model.read().clone(),\n };\n\n builder = builder.header(\"ai-model\", effective_ai_model);\n Ok(builder)\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub(crate) async fn http_client_with_auth_compress(\n &self,\n method: Method,\n url: &str,\n ) -> Result {\n #[cfg(feature = \"enable_brotli\")]\n {\n self\n .http_client_with_auth(method, url)\n .await\n .map(|builder| {\n builder\n .header(\n crate::http::X_COMPRESSION_TYPE,\n reqwest::header::HeaderValue::from_static(crate::http::X_COMPRESSION_TYPE_BROTLI),\n )\n .header(\n crate::http::X_COMPRESSION_BUFFER_SIZE,\n reqwest::header::HeaderValue::from(self.config.compression_buffer_size),\n )\n })\n }\n\n #[cfg(not(feature = \"enable_brotli\"))]\n self.http_client_with_auth(method, url).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub(crate) fn batch_create_collab_url(&self, workspace_id: &Uuid) -> String {\n format!(\n \"{}/api/workspace/{}/batch/collab\",\n self.base_url, workspace_id\n )\n }\n}\n\nimpl Display for Client {\n fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {\n f.write_fmt(format_args!(\n \"Client {{ base_url: {}, ws_addr: {}, gotrue_url: {} }}\",\n self.base_url, self.ws_addr, self.gotrue_client.base_url\n ))\n }\n}\n\nfn url_missing_param(param: &str) -> AppResponseError {\n AppError::InvalidRequest(format!(\"Url Missing Parameter:{}\", param)).into()\n}\n\n#[cfg(feature = \"enable_brotli\")]\npub fn brotli_compress(\n data: Vec,\n quality: u32,\n buffer_size: usize,\n) -> Result, AppError> {\n let mut compressor = brotli::CompressorReader::new(&*data, buffer_size, quality, 22);\n let mut compressed_data = Vec::new();\n compressor\n .read_to_end(&mut compressed_data)\n .map_err(|err| AppError::InvalidRequest(format!(\"Failed to compress data: {}\", err)))?;\n Ok(compressed_data)\n}\n\n#[cfg(feature = \"enable_brotli\")]\npub async fn blocking_brotli_compress(\n data: Vec,\n quality: u32,\n buffer_size: usize,\n) -> Result, AppError> {\n tokio::task::spawn_blocking(move || brotli_compress(data, quality, buffer_size))\n .await\n .map_err(AppError::from)?\n}\n\n#[cfg(not(feature = \"enable_brotli\"))]\npub async fn blocking_brotli_compress(\n data: Vec,\n _quality: u32,\n _buffer_size: usize,\n) -> Result, AppError> {\n Ok(data)\n}\n\n#[cfg(not(feature = \"enable_brotli\"))]\npub fn brotli_compress(\n data: Vec,\n _quality: u32,\n _buffer_size: usize,\n) -> Result, AppError> {\n Ok(data)\n}\nfn attach_request_id(\n mut err: AppResponseError,\n request_id: impl std::fmt::Debug,\n) -> AppResponseError {\n err.message = Cow::Owned(format!(\"{}. request_id: {:?}\", err.message, request_id));\n err\n}\n\npub async fn process_response_data(resp: reqwest::Response) -> Result\nwhere\n T: serde::de::DeserializeOwned + 'static,\n{\n let request_id = extract_request_id(&resp);\n\n AppResponse::::from_response(resp)\n .await\n .map_err(|err| {\n error!(\n \"Error parsing response, request_id: {:?}, error: {}\",\n request_id, err\n );\n AppResponseError::from(err)\n })\n .and_then(|app_response| {\n app_response\n .into_data()\n .map_err(|err| attach_request_id(err, &request_id))\n })\n}\n\npub async fn process_response_error(resp: reqwest::Response) -> Result<(), AppResponseError> {\n let request_id = extract_request_id(&resp);\n\n AppResponse::<()>::from_response(resp)\n .await?\n .into_error()\n .map_err(|err| attach_request_id(err, &request_id))\n}\nfn extract_request_id(resp: &reqwest::Response) -> Option {\n resp\n .headers()\n .get(\"x-request-id\")\n .map(|v| v.to_str().unwrap_or(\"invalid\").to_string())\n}\n" }, { "path": "libs/client-api/src/http_access_request.rs", "content": "use client_api_entity::{\n access_request_dto::AccessRequest, AccessRequestMinimal, ApproveAccessRequestParams,\n CreateAccessRequestParams,\n};\nuse reqwest::Method;\nuse shared_entity::response::AppResponseError;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, process_response_error, Client};\n\nimpl Client {\n pub async fn get_access_request(\n &self,\n access_request_id: Uuid,\n ) -> Result {\n let url = format!(\"{}/api/access-request/{}\", self.base_url, access_request_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn create_access_request(\n &self,\n data: CreateAccessRequestParams,\n ) -> Result {\n let url = format!(\"{}/api/access-request\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&data)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn approve_access_request(\n &self,\n access_request_id: Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/access-request/{}/approve\",\n self.base_url, access_request_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&ApproveAccessRequestParams { is_approved: true })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn reject_access_request(\n &self,\n access_request_id: Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/access-request/{}/approve\",\n self.base_url, access_request_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&ApproveAccessRequestParams { is_approved: false })\n .send()\n .await?;\n process_response_error(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_ai.rs", "content": "use crate::http_chat::CompletionStream;\nuse crate::{process_response_data, Client};\nuse bytes::Bytes;\nuse futures_core::Stream;\nuse reqwest::Method;\nuse shared_entity::dto::ai_dto::{\n CompleteTextParams, LocalAIConfig, ModelList, SummarizeRowParams, SummarizeRowResponse,\n TranslateRowParams, TranslateRowResponse,\n};\nuse shared_entity::response::{AppResponse, AppResponseError};\nuse std::time::Duration;\nuse tracing::instrument;\nuse uuid::Uuid;\n\nimpl Client {\n pub async fn stream_completion_text(\n &self,\n workspace_id: &str,\n params: CompleteTextParams,\n ) -> Result>, AppResponseError> {\n let url = format!(\"{}/api/ai/{}/complete/stream\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_model(Method::POST, &url, None)\n .await?\n .json(¶ms)\n .send()\n .await?;\n AppResponse::<()>::answer_response_stream(resp).await\n }\n\n pub async fn stream_completion_v2(\n &self,\n workspace_id: &Uuid,\n params: CompleteTextParams,\n ai_model: Option,\n ) -> Result {\n let url = format!(\n \"{}/api/ai/{}/v2/complete/stream\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_model(Method::POST, &url, ai_model)\n .await?\n .json(¶ms)\n .send()\n .await?;\n let stream = AppResponse::::json_response_stream(resp).await?;\n Ok(CompletionStream::new(stream))\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn summarize_row(\n &self,\n params: SummarizeRowParams,\n ) -> Result {\n let url = format!(\n \"{}/api/ai/{}/summarize_row\",\n self.base_url, params.workspace_id\n );\n\n let resp = self\n .http_client_with_model(Method::POST, &url, None)\n .await?\n .json(¶ms)\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn translate_row(\n &self,\n params: TranslateRowParams,\n ) -> Result {\n let url = format!(\n \"{}/api/ai/{}/translate_row\",\n self.base_url, params.workspace_id\n );\n\n let resp = self\n .http_client_with_model(Method::POST, &url, None)\n .await?\n .json(¶ms)\n .timeout(Duration::from_secs(30))\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_local_ai_config(\n &self,\n workspace_id: &str,\n platform: &str,\n ) -> Result {\n let client_version = self.client_version.to_string();\n let url = format!(\n \"{}/api/ai/{}/local/config?platform={platform}&app_version={client_version}\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn get_model_list(&self, workspace_id: &Uuid) -> Result {\n let url = format!(\"{}/api/ai/{workspace_id}/model/list\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_billing.rs", "content": "use crate::{process_response_data, process_response_error, Client};\nuse client_api_entity::billing_dto::{\n SetSubscriptionRecurringInterval, SubscriptionCancelRequest, SubscriptionLinkRequest,\n SubscriptionPlanDetail, WorkspaceUsageAndLimit,\n};\nuse reqwest::Method;\nuse shared_entity::{\n dto::billing_dto::{RecurringInterval, SubscriptionPlan, WorkspaceSubscriptionStatus},\n response::{AppResponse, AppResponseError},\n};\n\nlazy_static::lazy_static! {\n static ref BASE_BILLING_URL: Option = match std::env::var(\"APPFLOWY_CLOUD_BASE_BILLING_URL\") {\n Ok(url) => Some(url),\n Err(err) => {\n tracing::warn!(\"std::env::var(APPFLOWY_CLOUD_BASE_BILLING_URL): {}\", err);\n None\n },\n };\n}\n\nimpl Client {\n pub fn base_billing_url(&self) -> &str {\n BASE_BILLING_URL.as_deref().unwrap_or(&self.base_url)\n }\n\n pub async fn customer_id(&self) -> Result {\n let url = format!(\"{}/billing/api/v1/customer-id\", self.base_billing_url());\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn create_subscription(\n &self,\n workspace_id: &str,\n recurring_interval: RecurringInterval,\n workspace_subscription_plan: SubscriptionPlan,\n success_url: &str,\n ) -> Result {\n let sub_link_req = SubscriptionLinkRequest {\n workspace_subscription_plan,\n recurring_interval,\n workspace_id: workspace_id.to_string(),\n success_url: success_url.to_string(),\n with_test_clock: None,\n };\n\n self.create_subscription_v2(&sub_link_req).await\n }\n\n pub async fn create_subscription_v2(\n &self,\n sub_link_req: &SubscriptionLinkRequest,\n ) -> Result {\n let url = format!(\n \"{}/billing/api/v1/subscription-link\",\n self.base_billing_url()\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(sub_link_req)\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n pub async fn cancel_subscription(\n &self,\n req: &SubscriptionCancelRequest,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/billing/api/v1/cancel-subscription\",\n self.base_billing_url()\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(req)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn list_subscription(\n &self,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/billing/api/v1/subscription-status\",\n self.base_billing_url(),\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::>(resp).await\n }\n\n pub async fn get_portal_session_link(&self) -> Result {\n let url = format!(\n \"{}/billing/api/v1/portal-session-link\",\n self.base_billing_url()\n );\n let portal_url = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?\n .error_for_status()?\n .json::>()\n .await?\n .into_data()?;\n Ok(portal_url)\n }\n\n pub async fn get_workspace_usage_and_limit(\n &self,\n workspace_id: &str,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/usage-and-limit\",\n self.base_url, workspace_id\n );\n self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?\n .error_for_status()?\n .json::>()\n .await?\n .into_data()\n }\n\n /// Query all subscription status for a workspace\n pub async fn get_workspace_subscriptions(\n &self,\n workspace_id: &str,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/billing/api/v1/subscription-status/{}\",\n self.base_billing_url(),\n workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::>(resp).await\n }\n\n /// Query all active subscription, minimal information but faster\n pub async fn get_active_workspace_subscriptions(\n &self,\n workspace_id: &str,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/billing/api/v1/active-subscription/{}\",\n self.base_billing_url(),\n workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::>(resp).await\n }\n\n /// Set subscription recurring interval\n pub async fn set_subscription_recurring_interval(\n &self,\n set_sub_recur: &SetSubscriptionRecurringInterval,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/billing/api/v1/subscription-recurring-interval\",\n self.base_billing_url(),\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(set_sub_recur)\n .send()\n .await?;\n\n process_response_error(resp).await\n }\n\n /// get all subscription plan details\n pub async fn get_subscription_plan_details(\n &self,\n ) -> Result, AppResponseError> {\n let url = format!(\"{}/billing/api/v1/subscriptions\", self.base_billing_url(),);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::>(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_blob.rs", "content": "use crate::{process_response_data, process_response_error, Client};\n\nuse app_error::AppError;\nuse bytes::Bytes;\nuse futures_util::TryStreamExt;\nuse mime::Mime;\nuse percent_encoding::{percent_decode_str, utf8_percent_encode, NON_ALPHANUMERIC};\nuse reqwest::{header, Method, StatusCode};\nuse shared_entity::dto::workspace_dto::{BlobMetadata, RepeatedBlobMetaData};\nuse shared_entity::response::AppResponseError;\n\nuse shared_entity::dto::file_dto::PutFileResponse;\nuse tracing::instrument;\nuse url::Url;\nuse uuid::Uuid;\n\nimpl Client {\n pub fn get_blob_url(&self, workspace_id: &Uuid, file_id: &str) -> String {\n format!(\n \"{}/api/file_storage/{}/blob/{}\",\n self.base_url, workspace_id, file_id\n )\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn put_blob>(\n &self,\n url: &str,\n data: T,\n mime: &Mime,\n ) -> Result<(), AppResponseError> {\n let data = data.into();\n let resp = self\n .http_client_with_auth(Method::PUT, url)\n .await?\n .header(header::CONTENT_TYPE, mime.to_string())\n .body(data)\n .send()\n .await?;\n if resp.status() == StatusCode::PAYLOAD_TOO_LARGE {\n return Err(AppResponseError::from(AppError::PayloadTooLarge(\n StatusCode::PAYLOAD_TOO_LARGE.to_string(),\n )));\n }\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn put_blob_v1>(\n &self,\n workspace_id: &Uuid,\n parent_dir: &str,\n data: T,\n mime: &Mime,\n ) -> Result {\n let url = format!(\n \"{}/api/file_storage/{}/v1/blob/{}\",\n self.base_url, workspace_id, parent_dir\n );\n let data = data.into();\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .header(header::CONTENT_TYPE, mime.to_string())\n .body(data)\n .send()\n .await?;\n\n if resp.status() == StatusCode::PAYLOAD_TOO_LARGE {\n return Err(AppResponseError::from(AppError::PayloadTooLarge(\n StatusCode::PAYLOAD_TOO_LARGE.to_string(),\n )));\n }\n process_response_data::(resp).await\n }\n\n /// Only expose this method for testing\n #[instrument(level = \"info\", skip_all)]\n #[cfg(debug_assertions)]\n pub async fn put_blob_with_content_length>(\n &self,\n url: &str,\n data: T,\n mime: &Mime,\n content_length: usize,\n ) -> Result {\n let resp = self\n .http_client_with_auth(Method::PUT, url)\n .await?\n .header(header::CONTENT_TYPE, mime.to_string())\n .header(header::CONTENT_LENGTH, content_length)\n .body(data.into())\n .send()\n .await?;\n process_response_data::(resp).await\n }\n pub fn get_blob_url_v1(&self, workspace_id: &Uuid, parent_dir: &str, file_id: &str) -> String {\n let parent_dir = utf8_percent_encode(parent_dir, NON_ALPHANUMERIC).to_string();\n format!(\n \"{}/api/file_storage/{workspace_id}/v1/blob/{parent_dir}/{file_id}\",\n self.base_url\n )\n }\n\n /// Returns the workspace_id, parent_dir, and file_id from the given blob url.\n pub fn parse_blob_url_v1(&self, url: &str) -> Option<(Uuid, String, String)> {\n let parsed_url = Url::parse(url).ok()?;\n let segments: Vec<&str> = parsed_url.path_segments()?.collect();\n // Check if the path has the expected number of segments\n if segments.len() < 6 {\n return None;\n }\n\n // Extract the workspace_id, parent_dir, and file_id from the segments\n let workspace_id: Uuid = segments[2].parse().ok()?;\n let encoded_parent_dir = segments[5].to_string();\n let file_id = segments[6].to_string();\n\n // Decode the percent-encoded parent_dir\n let parent_dir = percent_decode_str(&encoded_parent_dir)\n .decode_utf8()\n .ok()?\n .to_string();\n\n Some((workspace_id, parent_dir, file_id))\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_blob_v1(\n &self,\n workspace_id: &Uuid,\n parent_dir: &str,\n file_id: &str,\n ) -> Result<(Mime, Vec), AppResponseError> {\n // Encode the parent directory to ensure it's URL-safe.\n let url = self.get_blob_url_v1(workspace_id, parent_dir, file_id);\n self.get_blob(&url).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn delete_blob_v1(\n &self,\n workspace_id: &str,\n parent_dir: &str,\n file_id: &str,\n ) -> Result<(), AppResponseError> {\n let parent_dir = utf8_percent_encode(parent_dir, NON_ALPHANUMERIC).to_string();\n let url = format!(\n \"{}/api/file_storage/{workspace_id}/v1/blob/{parent_dir}/{file_id}\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_blob_v1_metadata(\n &self,\n workspace_id: &str,\n parent_dir: &str,\n file_id: &str,\n ) -> Result {\n let parent_dir = utf8_percent_encode(parent_dir, NON_ALPHANUMERIC).to_string();\n let url = format!(\n \"{}/api/file_storage/{workspace_id}/v1/metadata/{parent_dir}/{file_id}\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n /// Get the file with the given url. The url should be in the format of\n /// `https://appflowy.io/api/file_storage//`.\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_blob(&self, url: &str) -> Result<(Mime, Vec), AppResponseError> {\n let resp = self\n .http_client_with_auth(Method::GET, url)\n .await?\n .send()\n .await?;\n\n match resp.status() {\n StatusCode::OK => {\n let mime = resp\n .headers()\n .get(header::CONTENT_TYPE)\n .and_then(|v| v.to_str().ok())\n .and_then(|v| v.parse::().ok())\n .unwrap_or(mime::TEXT_PLAIN);\n\n let bytes = resp\n .bytes_stream()\n .try_fold(Vec::new(), |mut acc, chunk| async move {\n acc.extend_from_slice(&chunk);\n Ok(acc)\n })\n .await?;\n\n Ok((mime, bytes))\n },\n StatusCode::NOT_FOUND => Err(AppResponseError::from(AppError::RecordNotFound(\n url.to_owned(),\n ))),\n status => {\n let message = resp\n .text()\n .await\n .unwrap_or_else(|_| \"Unknown error\".to_string());\n Err(AppResponseError::from(AppError::Unhandled(format!(\n \"status code: {}, message: {}\",\n status, message\n ))))\n },\n }\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn get_blob_metadata(&self, url: &str) -> Result {\n let resp = self\n .http_client_with_auth(Method::GET, url)\n .await?\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all)]\n pub async fn delete_blob(&self, url: &str) -> Result<(), AppResponseError> {\n let resp = self\n .http_client_with_auth(Method::DELETE, url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn get_workspace_all_blob_metadata(\n &self,\n workspace_id: &str,\n ) -> Result {\n let url = format!(\"{}/api/file_storage/{}/blobs\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_chat.rs", "content": "use crate::{process_response_data, process_response_error, Client};\n\nuse app_error::AppError;\nuse client_api_entity::chat_dto::{\n ChatMessage, CreateAnswerMessageParams, CreateChatMessageParams, CreateChatParams, MessageCursor,\n RepeatedChatMessage, RepeatedChatMessageWithAuthorUuid, UpdateChatMessageContentParams,\n};\nuse futures_core::{ready, Stream};\nuse pin_project::pin_project;\nuse reqwest::Method;\nuse serde::{Deserialize, Serialize};\nuse serde_json::Value;\nuse shared_entity::dto::ai_dto::{\n CalculateSimilarityParams, ChatQuestionQuery, RepeatedRelatedQuestion, SimilarityResponse,\n STREAM_ANSWER_KEY, STREAM_COMMENT_KEY, STREAM_IMAGE_KEY, STREAM_METADATA_KEY,\n};\nuse shared_entity::dto::chat_dto::{ChatSettings, UpdateChatParams};\nuse shared_entity::response::{AppResponse, AppResponseError};\nuse std::pin::Pin;\nuse std::task::{Context, Poll};\nuse std::time::Duration;\nuse tracing::error;\nuse uuid::Uuid;\n\nimpl Client {\n /// Create a new chat\n pub async fn create_chat(\n &self,\n workspace_id: &Uuid,\n params: CreateChatParams,\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/chat/{workspace_id}\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn update_chat_settings(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n params: UpdateChatParams,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/settings\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n pub async fn get_chat_settings(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/settings\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Delete a chat for given chat_id\n pub async fn delete_chat(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/chat/{workspace_id}/{chat_id}\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n /// Save a question message to a chat\n pub async fn create_question(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n params: CreateChatMessageParams,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message/question\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// save an answer message to a chat\n pub async fn save_answer(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n params: CreateAnswerMessageParams,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message/answer\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn stream_answer_v2(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n question_id: i64,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/{question_id}/v2/answer/stream\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .timeout(Duration::from_secs(30))\n .send()\n .await\n .map_err(|err| {\n let app_err = AppError::from(err);\n if matches!(app_err, AppError::ServiceTemporaryUnavailable(_)) {\n AppError::AIServiceUnavailable(\n \"AI service temporarily unavailable, please try again later\".to_string(),\n )\n } else {\n app_err\n }\n })?;\n let stream = AppResponse::::json_response_stream(resp).await?;\n Ok(QuestionStream::new(stream))\n }\n\n pub async fn stream_answer_v3(\n &self,\n workspace_id: &Uuid,\n query: ChatQuestionQuery,\n chat_model: Option,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{}/answer/stream\",\n self.base_url, query.chat_id\n );\n let resp = self\n .http_client_with_model(Method::POST, &url, chat_model)\n .await?\n .timeout(Duration::from_secs(60))\n .json(&query)\n .send()\n .await?;\n let stream = AppResponse::::json_response_stream(resp).await?;\n Ok(QuestionStream::new(stream))\n }\n\n pub async fn get_answer(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n question_message_id: i64,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/{question_message_id}/answer\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Update chat message content. It will override the content of the message.\n /// A message can be a question or an answer\n pub async fn update_chat_message(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n params: UpdateChatMessageContentParams,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n /// Get related question for a chat message. The message_d should be the question's id\n pub async fn get_chat_related_question(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n message_id: i64,\n ) -> Result {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/{message_id}/related_question\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Deprecated since v0.9.24. Return list of chat messages for a chat\n pub async fn get_chat_messages(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n offset: MessageCursor,\n limit: u64,\n ) -> Result {\n let mut url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message\",\n self.base_url\n );\n let mut query_params = vec![(\"limit\", limit.to_string())];\n match offset {\n MessageCursor::Offset(offset_value) => {\n query_params.push((\"offset\", offset_value.to_string()));\n },\n MessageCursor::AfterMessageId(message_id) => {\n query_params.push((\"after\", message_id.to_string()));\n },\n MessageCursor::BeforeMessageId(message_id) => {\n query_params.push((\"before\", message_id.to_string()));\n },\n MessageCursor::NextBack => {},\n }\n let query = serde_urlencoded::to_string(&query_params).unwrap();\n url = format!(\"{}?{}\", url, query);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Return list of chat messages for a chat. Each message will have author_uuid as\n /// as the author's uid, as author_uid will face precision issue in the browser environment.\n pub async fn get_chat_messages_with_author_uuid(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n offset: MessageCursor,\n limit: u64,\n ) -> Result {\n let mut url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message\",\n self.base_url\n );\n let mut query_params = vec![(\"limit\", limit.to_string())];\n match offset {\n MessageCursor::Offset(offset_value) => {\n query_params.push((\"offset\", offset_value.to_string()));\n },\n MessageCursor::AfterMessageId(message_id) => {\n query_params.push((\"after\", message_id.to_string()));\n },\n MessageCursor::BeforeMessageId(message_id) => {\n query_params.push((\"before\", message_id.to_string()));\n },\n MessageCursor::NextBack => {},\n }\n let query = serde_urlencoded::to_string(&query_params).unwrap();\n url = format!(\"{}?{}\", url, query);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_question_message_from_answer_id(\n &self,\n workspace_id: &Uuid,\n chat_id: &str,\n answer_message_id: i64,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/chat/{workspace_id}/{chat_id}/message/find_question\",\n self.base_url\n );\n\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&[(\"answer_message_id\", answer_message_id)])\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n pub async fn calculate_similarity(\n &self,\n params: CalculateSimilarityParams,\n ) -> Result {\n let url = format!(\n \"{}/api/ai/{}/calculate_similarity\",\n self.base_url, ¶ms.workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n\n#[pin_project]\npub struct QuestionStream {\n stream: Pin> + Send>>,\n buffer: Vec,\n}\n\nimpl QuestionStream {\n pub fn new(stream: S) -> Self\n where\n S: Stream> + Send + 'static,\n {\n QuestionStream {\n stream: Box::pin(stream),\n buffer: Vec::new(),\n }\n }\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub enum QuestionStreamValue {\n Answer {\n value: String,\n },\n /// Metadata is a JSON array object. its structure as below:\n /// ```json\n /// [\n /// {\"id\": \"xx\", \"source\": \"\", \"name\": \"\" }\n /// ]\n Metadata {\n value: Value,\n },\n SuggestedQuestion {\n context_suggested_questions: Vec,\n },\n FollowUp {\n should_generate_related_question: bool,\n },\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct ContextSuggestedQuestion {\n pub content: String,\n pub object_id: String,\n}\n\nimpl Stream for QuestionStream {\n type Item = Result;\n\n fn poll_next(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll> {\n let this = self.project();\n\n match ready!(this.stream.as_mut().poll_next(cx)) {\n Some(Ok(value)) => match value {\n Value::Object(mut value) => {\n if let Some(metadata) = value.remove(STREAM_METADATA_KEY) {\n return Poll::Ready(Some(Ok(QuestionStreamValue::Metadata { value: metadata })));\n }\n\n if let Some(answer) = value\n .remove(STREAM_ANSWER_KEY)\n .and_then(|s| s.as_str().map(ToString::to_string))\n {\n return Poll::Ready(Some(Ok(QuestionStreamValue::Answer { value: answer })));\n }\n\n if let Some(image) = value\n .remove(STREAM_IMAGE_KEY)\n .and_then(|s| s.as_str().map(ToString::to_string))\n {\n return Poll::Ready(Some(Ok(QuestionStreamValue::Answer { value: image })));\n }\n\n error!(\"Invalid streaming value: {:?}\", value);\n Poll::Ready(None)\n },\n _ => {\n error!(\"Unexpected JSON value type: {:?}\", value);\n Poll::Ready(None)\n },\n },\n Some(Err(err)) => {\n error!(\"Error while streaming answer: {:?}\", err);\n Poll::Ready(Some(Err(err)))\n },\n None => Poll::Ready(None),\n }\n }\n}\n\n#[pin_project]\npub struct CompletionStream {\n stream: Pin> + Send>>,\n buffer: Vec,\n}\n\nimpl CompletionStream {\n pub fn new(stream: S) -> Self\n where\n S: Stream> + Send + 'static,\n {\n CompletionStream {\n stream: Box::pin(stream),\n buffer: Vec::new(),\n }\n }\n}\n\n#[derive(Debug, Clone)]\npub enum CompletionStreamValue {\n Answer { value: String },\n Comment { value: String },\n}\nimpl Stream for CompletionStream {\n type Item = Result;\n\n fn poll_next(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll> {\n let this = self.project();\n match ready!(this.stream.as_mut().poll_next(cx)) {\n Some(Ok(value)) => match value {\n Value::Object(mut value) => {\n if let Some(answer) = value\n .remove(STREAM_ANSWER_KEY)\n .and_then(|s| s.as_str().map(ToString::to_string))\n {\n return Poll::Ready(Some(Ok(CompletionStreamValue::Answer { value: answer })));\n }\n\n if let Some(comment) = value\n .remove(STREAM_COMMENT_KEY)\n .and_then(|s| s.as_str().map(ToString::to_string))\n {\n return Poll::Ready(Some(Ok(CompletionStreamValue::Comment { value: comment })));\n }\n\n error!(\"Invalid streaming value: {:?}\", value);\n Poll::Ready(None)\n },\n _ => {\n error!(\"Unexpected JSON value type: {:?}\", value);\n Poll::Ready(None)\n },\n },\n Some(Err(err)) => {\n error!(\"Error while streaming answer: {:?}\", err);\n Poll::Ready(Some(Err(err)))\n },\n None => Poll::Ready(None),\n }\n }\n}\n" }, { "path": "libs/client-api/src/http_collab.rs", "content": "use crate::entity::CollabType;\nuse crate::{\n blocking_brotli_compress, brotli_compress, process_response_data, process_response_error, Client,\n};\nuse anyhow::anyhow;\nuse app_error::AppError;\nuse bytes::Bytes;\nuse chrono::{DateTime, Utc};\nuse client_api_entity::workspace_dto::{\n AFDatabase, AFDatabaseField, AFDatabaseRow, AFDatabaseRowDetail, AFInsertDatabaseField,\n AddDatatabaseRow, DatabaseRowUpdatedItem, ListDatabaseRowDetailParam,\n ListDatabaseRowUpdatedParam, UpsertDatatabaseRow,\n};\nuse client_api_entity::{\n AFCollabEmbedInfo, AFDatabaseRowDocumentCollabExistenceInfo, BatchQueryCollabParams,\n BatchQueryCollabResult, CollabParams, CreateCollabData, CreateCollabParams, DeleteCollabParams,\n PublishCollabItem, QueryCollab, QueryCollabParams, RepeatedAFCollabEmbedInfo,\n UpdateCollabWebParams,\n};\nuse collab_rt_entity::collab_proto::{CollabDocStateParams, PayloadCompressionType};\nuse collab_rt_entity::HttpRealtimeMessage;\nuse futures::Stream;\nuse futures_util::stream;\nuse prost::Message;\nuse rayon::prelude::*;\nuse reqwest::{Body, Method};\nuse serde::Serialize;\nuse shared_entity::dto::workspace_dto::{CollabResponse, CollabTypeParam, EmbeddedCollabQuery};\nuse shared_entity::response::AppResponseError;\nuse std::collections::HashMap;\nuse std::future::Future;\nuse std::io::Cursor;\nuse std::pin::Pin;\nuse std::task::{Context, Poll};\nuse std::time::Duration;\nuse tokio_retry::strategy::ExponentialBackoff;\nuse tokio_retry::{Action, Condition, RetryIf};\nuse tracing::{event, instrument};\nuse uuid::Uuid;\n\nimpl Client {\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn create_collab(&self, params: CreateCollabParams) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/collab/{}\",\n self.base_url, params.workspace_id, ¶ms.object_id\n );\n let bytes = params\n .to_bytes()\n .map_err(|err| AppError::Internal(err.into()))?;\n\n let compress_bytes = blocking_brotli_compress(\n bytes,\n self.config.compression_quality,\n self.config.compression_buffer_size,\n )\n .await?;\n\n #[allow(unused_mut)]\n let mut builder = self\n .http_client_with_auth_compress(Method::POST, &url)\n .await?;\n\n #[cfg(not(target_arch = \"wasm32\"))]\n {\n builder = builder.timeout(std::time::Duration::from_secs(60));\n }\n\n let resp = builder.body(compress_bytes).send().await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn update_collab(&self, params: CreateCollabParams) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/collab/{}\",\n self.base_url, ¶ms.workspace_id, ¶ms.object_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn update_web_collab(\n &self,\n workspace_id: &Uuid,\n object_id: &Uuid,\n params: UpdateCollabWebParams,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/v1/{}/collab/{}/web-update\",\n self.base_url, workspace_id, object_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n // The browser will call this API to get the collab list, because the URL length limit and browser can't send the body in GET request\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn batch_post_collab(\n &self,\n workspace_id: &Uuid,\n params: Vec,\n ) -> Result {\n self\n .send_batch_collab_request(Method::POST, workspace_id, params)\n .await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn batch_get_collab(\n &self,\n workspace_id: &Uuid,\n params: Vec,\n ) -> Result {\n self\n .send_batch_collab_request(Method::GET, workspace_id, params)\n .await\n }\n\n async fn send_batch_collab_request(\n &self,\n method: Method,\n workspace_id: &Uuid,\n params: Vec,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/collab_list\",\n self.base_url, workspace_id\n );\n let params = BatchQueryCollabParams(params);\n let resp = self\n .http_client_with_auth(method, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn delete_collab(&self, params: DeleteCollabParams) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/collab/{}\",\n self.base_url, ¶ms.workspace_id, ¶ms.object_id\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn list_databases(\n &self,\n workspace_id: &Uuid,\n ) -> Result, AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/database\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n pub async fn list_database_row_ids(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/row\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n pub async fn get_database_fields(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/fields\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n // Adds a database field to the specified database.\n // Returns the field id of the newly created field.\n pub async fn add_database_field(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n insert_field: &AFInsertDatabaseField,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/fields\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(insert_field)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn list_database_row_ids_updated(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n after: Option>,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/row/updated\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&ListDatabaseRowUpdatedParam { after })\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n pub async fn list_database_row_details(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n row_ids: &[&str],\n with_doc: bool,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/row/detail\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&ListDatabaseRowDetailParam::new(row_ids, with_doc))\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n /// Example payload:\n /// {\n /// \"Name\": \"some_data\", # using column name\n /// \"_pIkG\": \"some other data\" # using field_id (can be obtained from [get_database_fields])\n /// }\n /// Upon success, returns the row id for the newly created row.\n pub async fn add_database_item(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n cells_by_id: HashMap,\n row_doc_content: Option,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/row\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&AddDatatabaseRow {\n cells: cells_by_id,\n document: row_doc_content,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Like [add_database_item], but use a [pre_hash] as identifier of the row\n /// Given the same `pre_hash` value will result in the same row\n /// Creates the row if now exists, else row will be modified\n pub async fn upsert_database_item(\n &self,\n workspace_id: &Uuid,\n database_id: &str,\n pre_hash: String,\n cells_by_id: HashMap,\n row_doc_content: Option,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/database/{}/row\",\n self.base_url, workspace_id, database_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&UpsertDatatabaseRow {\n pre_hash,\n cells: cells_by_id,\n document: row_doc_content,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn post_realtime_msg(\n &self,\n device_id: &str,\n msg: client_websocket::Message,\n ) -> Result<(), AppResponseError> {\n let device_id = device_id.to_string();\n let payload =\n blocking_brotli_compress(msg.into_data(), 6, self.config.compression_buffer_size).await?;\n\n let msg = HttpRealtimeMessage { device_id, payload }.encode_to_vec();\n let body = Body::wrap_stream(stream::iter(vec![Ok::<_, reqwest::Error>(msg)]));\n let url = format!(\"{}/api/realtime/post/stream\", self.base_url);\n let resp = self\n .http_client_with_auth_compress(Method::POST, &url)\n .await?\n .body(body)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all, err)]\n pub async fn create_collab_list(\n &self,\n workspace_id: &Uuid,\n params_list: Vec,\n ) -> Result<(), AppResponseError> {\n let url = self.batch_create_collab_url(workspace_id);\n\n let compression_tasks = params_list\n .into_par_iter()\n .filter_map(|params| {\n let data = CreateCollabData::from(params).to_bytes().ok()?;\n brotli_compress(\n data,\n self.config.compression_quality,\n self.config.compression_buffer_size,\n )\n .ok()\n })\n .collect::>();\n\n let mut framed_data = Vec::new();\n let mut size_count = 0;\n for compressed in compression_tasks {\n // The length of a u32 in bytes is 4. The server uses a u32 to read the size of each data frame,\n // hence the frame size header is always 4 bytes. It's crucial not to alter this size value,\n // as the server's logic for frame size reading is based on this fixed 4-byte length.\n // note:\n // the size of a u32 is a constant 4 bytes across all platforms that Rust supports.\n let size = compressed.len() as u32;\n framed_data.extend_from_slice(&size.to_be_bytes());\n framed_data.extend_from_slice(&compressed);\n size_count += size;\n }\n event!(\n tracing::Level::INFO,\n \"create batch collab with size: {}\",\n size_count\n );\n let body = Body::wrap_stream(stream::once(async { Ok::<_, AppError>(framed_data) }));\n let resp = self\n .http_client_with_auth_compress(Method::POST, &url)\n .await?\n .timeout(Duration::from_secs(60))\n .body(body)\n .send()\n .await?;\n\n process_response_error(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_collab(\n &self,\n params: QueryCollabParams,\n ) -> Result {\n // 2 seconds, 4 seconds, 8 seconds\n let retry_strategy = ExponentialBackoff::from_millis(2).factor(1000).take(3);\n let action = GetCollabAction::new(self.clone(), params);\n RetryIf::spawn(retry_strategy, action, RetryGetCollabCondition).await\n }\n\n pub async fn publish_collabs(\n &self,\n workspace_id: &Uuid,\n items: Vec>,\n ) -> Result<(), AppResponseError>\n where\n Metadata: serde::Serialize + Send + 'static + Unpin,\n Data: AsRef<[u8]> + Send + 'static + Unpin,\n {\n let publish_collab_stream = PublishCollabItemStream::new(items);\n let url = format!(\"{}/api/workspace/{}/publish\", self.base_url, workspace_id,);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .body(Body::wrap_stream(publish_collab_stream))\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn check_if_row_document_collab_exists(\n &self,\n workspace_id: &Uuid,\n object_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{workspace_id}/collab/{object_id}/row-document-collab-exists\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n let info = process_response_data::(resp).await?;\n Ok(info.exists)\n }\n\n pub async fn get_collab_embed_info(\n &self,\n workspace_id: &Uuid,\n object_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{workspace_id}/collab/{object_id}/embed-info\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .header(\"Content-Type\", \"application/json\")\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn batch_get_collab_embed_info(\n &self,\n workspace_id: &Uuid,\n params: Vec,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{workspace_id}/collab/embed-info/list\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(¶ms)\n .send()\n .await?;\n process_response_data::(resp)\n .await\n .map(|data| data.0)\n }\n\n pub async fn force_generate_collab_embeddings(\n &self,\n workspace_id: &Uuid,\n object_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{workspace_id}/collab/{object_id}/generate-embedding\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn collab_full_sync(\n &self,\n workspace_id: &Uuid,\n object_id: &Uuid,\n collab_type: CollabType,\n doc_state: Vec,\n state_vector: Vec,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/v1/{workspace_id}/collab/{object_id}/full-sync\",\n self.base_url\n );\n\n // 3 is default level\n let doc_state = zstd::encode_all(Cursor::new(doc_state), 3)\n .map_err(|err| AppError::InvalidRequest(format!(\"Failed to compress text: {}\", err)))?;\n\n let sv = zstd::encode_all(Cursor::new(state_vector), 3)\n .map_err(|err| AppError::InvalidRequest(format!(\"Failed to compress text: {}\", err)))?;\n\n let params = CollabDocStateParams {\n object_id: object_id.to_string(),\n collab_type: collab_type.value(),\n compression: PayloadCompressionType::Zstd as i32,\n sv,\n doc_state,\n };\n\n let mut encoded_payload = Vec::new();\n params.encode(&mut encoded_payload).map_err(|err| {\n AppError::Internal(anyhow!(\"Failed to encode CollabDocStateParams: {}\", err))\n })?;\n\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .body(Bytes::from(encoded_payload))\n .send()\n .await?;\n if resp.status().is_success() {\n let body = resp.bytes().await?;\n let decompressed_body = zstd::decode_all(Cursor::new(body))?;\n Ok(decompressed_body)\n } else {\n process_response_data::>(resp).await\n }\n }\n}\n\nstruct RetryGetCollabCondition;\nimpl Condition for RetryGetCollabCondition {\n fn should_retry(&mut self, error: &AppResponseError) -> bool {\n !error.is_record_not_found()\n }\n}\n\npub struct PublishCollabItemStream {\n items: Vec>,\n idx: usize,\n done: bool,\n}\n\nimpl PublishCollabItemStream {\n pub fn new(publish_collab_items: Vec>) -> Self {\n PublishCollabItemStream {\n items: publish_collab_items,\n idx: 0,\n done: false,\n }\n }\n}\n\nimpl Stream for PublishCollabItemStream\nwhere\n Metadata: Serialize + Send + 'static + Unpin,\n Data: AsRef<[u8]> + Send + 'static + Unpin,\n{\n type Item = Result;\n\n fn poll_next(mut self: Pin<&mut Self>, _cx: &mut Context<'_>) -> Poll> {\n let mut self_mut = self.as_mut();\n\n if self_mut.idx >= self_mut.items.len() {\n if !self_mut.done {\n self_mut.done = true;\n return Poll::Ready(Some(Ok((0_u32).to_le_bytes().to_vec().into())));\n }\n return Poll::Ready(None);\n }\n\n let item = &self_mut.items[self_mut.idx];\n match serialize_metadata_data(&item.meta, item.data.as_ref()) {\n Err(e) => Poll::Ready(Some(Err(e))),\n Ok(chunk) => {\n self_mut.idx += 1;\n Poll::Ready(Some(Ok::(chunk)))\n },\n }\n }\n}\n\nfn serialize_metadata_data(m: Metadata, d: &[u8]) -> Result\nwhere\n Metadata: Serialize,\n{\n let meta = serde_json::to_vec(&m)?;\n\n let mut chunk = Vec::with_capacity(8 + meta.len() + d.len());\n chunk.extend_from_slice(&(meta.len() as u32).to_le_bytes()); // Encode metadata length\n chunk.extend_from_slice(&meta);\n chunk.extend_from_slice(&(d.len() as u32).to_le_bytes()); // Encode data length\n chunk.extend_from_slice(d);\n\n Ok(Bytes::from(chunk))\n}\n\npub(crate) struct GetCollabAction {\n client: Client,\n params: QueryCollabParams,\n}\n\nimpl GetCollabAction {\n pub fn new(client: Client, params: QueryCollabParams) -> Self {\n Self { client, params }\n }\n}\n\nimpl Action for GetCollabAction {\n type Future = Pin> + Send + Sync>>;\n type Item = CollabResponse;\n type Error = AppResponseError;\n\n fn run(&mut self) -> Self::Future {\n let client = self.client.clone();\n let params = self.params.clone();\n let collab_type = self.params.collab_type;\n\n Box::pin(async move {\n let url = format!(\n \"{}/api/workspace/v1/{}/collab/{}\",\n client.base_url, ¶ms.workspace_id, ¶ms.object_id\n );\n let resp = client\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&CollabTypeParam { collab_type })\n .send()\n .await?;\n process_response_data::(resp).await\n })\n }\n}\n" }, { "path": "libs/client-api/src/http_file.rs", "content": "use crate::ws::{ConnectInfo, WSClientConnectURLProvider, WSClientHttpSender, WSError};\nuse crate::{process_response_data, process_response_error, Client};\n\nuse app_error::AppError;\nuse async_trait::async_trait;\nuse std::fs::metadata;\n\nuse client_api_entity::{\n CompleteUploadRequest, CreateUploadRequest, CreateUploadResponse, UploadPartResponse,\n};\nuse client_api_entity::{CreateImportTask, CreateImportTaskResponse};\n\nuse percent_encoding::{utf8_percent_encode, NON_ALPHANUMERIC};\nuse reqwest::{multipart, Body, Method};\nuse shared_entity::response::AppResponseError;\nuse std::path::Path;\n\nuse base64::engine::general_purpose::STANDARD;\nuse base64::Engine;\nuse shared_entity::dto::import_dto::UserImportTask;\nuse tokio::fs::File;\nuse tokio::io::{AsyncBufReadExt, BufReader};\nuse tokio_util::codec::{BytesCodec, FramedRead};\nuse tracing::{error, trace};\nuse uuid::Uuid;\n\nimpl Client {\n pub async fn create_upload(\n &self,\n workspace_id: &Uuid,\n req: CreateUploadRequest,\n ) -> Result {\n trace!(\"create_upload: {}\", req);\n let url = format!(\n \"{}/api/file_storage/{workspace_id}/create_upload\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&req)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n /// Upload a part of a file. The part number should be 1-based.\n ///\n /// In Amazon S3, the minimum chunk size for multipart uploads is 5 MB,except for the last part,\n /// which can be smaller.(https://docs.aws.amazon.com/AmazonS3/latest/userguide/qfacts.html)\n pub async fn upload_part(\n &self,\n workspace_id: &Uuid,\n parent_dir: &str,\n file_id: &str,\n upload_id: &str,\n part_number: i32,\n body: Vec,\n ) -> Result {\n if body.is_empty() {\n return Err(AppResponseError::from(AppError::InvalidRequest(\n \"Empty body\".to_string(),\n )));\n }\n\n // Encode the parent directory to ensure it's URL-safe.\n let parent_dir = utf8_percent_encode(parent_dir, NON_ALPHANUMERIC).to_string();\n let url = format!(\n \"{}/api/file_storage/{workspace_id}/upload_part/{parent_dir}/{file_id}/{upload_id}/{part_number}\",\n self.base_url\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .body(body)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn complete_upload(\n &self,\n workspace_id: &Uuid,\n req: CompleteUploadRequest,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/file_storage/{}/complete_upload\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&req)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n /// Sends a POST request to import a file to the server.\n ///\n /// This function streams the contents of a file located at the provided `file_path`\n /// as part of a multipart form data request to the server's `/api/import` endpoint.\n ///\n /// ### HTTP Request Details:\n ///\n /// - **Method:** POST\n /// - **URL:** `{base_url}/api/import`\n /// - The `base_url` is dynamically provided and appended with `/api/import`.\n ///\n /// - **Headers:**\n /// - `X-Host`: The value of the `base_url` is sent as the host header.\n /// - `X-Content-Length`: The size of the file, in bytes, is provided from the file's metadata.\n ///\n /// - **Multipart Form:**\n /// - The file is sent as a multipart form part:\n /// - **Field Name:** The file name derived from the file path or a UUID if unavailable.\n /// - **File Content:** The file's content is streamed using `reqwest::Body::wrap_stream`.\n /// - **MIME Type:** Guessed from the file's extension using the `mime_guess` crate,\n /// defaulting to `application/octet-stream` if undetermined.\n ///\n /// ### Parameters:\n /// - `file_path`: The path to the file to be uploaded.\n /// - The file is opened asynchronously and its metadata (like size) is extracted.\n /// - The MIME type is automatically determined based on the file extension using `mime_guess`.\n ///\n pub async fn import_file(&self, file_path: &Path) -> Result<(), AppResponseError> {\n let md5_base64 = calculate_md5(file_path).await?;\n let file = File::open(&file_path).await?;\n let metadata = file.metadata().await?;\n let file_name = file_path\n .file_stem()\n .map(|s| s.to_string_lossy().to_string())\n .unwrap_or_else(|| uuid::Uuid::new_v4().to_string());\n\n let stream = FramedRead::new(file, BytesCodec::new());\n let mime = mime_guess::from_path(file_path)\n .first_or_octet_stream()\n .to_string();\n\n let file_part = multipart::Part::stream(reqwest::Body::wrap_stream(stream))\n .file_name(file_name.clone())\n .mime_str(&mime)?;\n\n let form = multipart::Form::new().part(file_name, file_part);\n let url = format!(\"{}/api/import\", self.base_url);\n let mut builder = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .multipart(form);\n\n // set the host header\n builder = builder\n .header(\"X-Host\", self.base_url.clone())\n .header(\"X-Content-MD5\", md5_base64)\n .header(\"X-Content-Length\", metadata.len());\n let resp = builder.send().await?;\n\n process_response_error(resp).await\n }\n\n /// Creates an import task for a file and returns the import task response.\n ///\n /// This function initiates an import task by sending a POST request to the\n /// `/api/import/create` endpoint. The request includes the `workspace_name` derived\n /// from the provided file's name (or a generated UUID if the file name cannot be determined).\n ///\n /// After creating the import task, you should use [Self::upload_import_file] to upload\n /// the actual file to the presigned URL obtained from the [CreateImportTaskResponse].\n ///\n pub async fn create_import(\n &self,\n file_path: &Path,\n ) -> Result {\n let url = format!(\"{}/api/import/create\", self.base_url);\n let file_name = file_path\n .file_stem()\n .map(|s| s.to_string_lossy().to_string())\n .unwrap_or_else(|| uuid::Uuid::new_v4().to_string());\n\n let content_length = tokio::fs::metadata(file_path).await?.len();\n let params = CreateImportTask {\n workspace_name: file_name.clone(),\n content_length,\n };\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .header(\"X-Host\", self.base_url.clone())\n .json(¶ms)\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n /// Uploads a file to a specified presigned URL obtained from the import task response.\n ///\n /// This function uploads a file to the given presigned URL using an HTTP PUT request.\n /// The file's metadata is read to determine its size, and the upload stream is created\n /// and sent to the provided URL. It is recommended to call this function after successfully\n /// creating an import task using [Self::create_import].\n ///\n pub async fn upload_import_file(\n &self,\n file_path: &Path,\n url: &str,\n ) -> Result<(), AppResponseError> {\n let file_metadata = metadata(file_path)?;\n let file_size = file_metadata.len();\n // Open the file\n let file = File::open(file_path).await?;\n let file_stream = FramedRead::new(file, BytesCodec::new());\n let stream_body = Body::wrap_stream(file_stream);\n trace!(\"start upload file to s3: {}\", url);\n\n let client = reqwest::Client::new();\n let upload_resp = client\n .put(url)\n .header(\"Content-Length\", file_size)\n .header(\"Content-Type\", \"application/zip\")\n .body(stream_body)\n .send()\n .await?;\n\n if !upload_resp.status().is_success() {\n error!(\"File upload failed: {:?}\", upload_resp);\n return Err(AppError::S3ResponseError(\"Cannot upload file to S3\".to_string()).into());\n }\n\n Ok(())\n }\n\n pub async fn get_import_list(&self) -> Result {\n let url = format!(\"{}/api/import\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n}\n\n#[async_trait]\nimpl WSClientHttpSender for Client {\n async fn send_ws_msg(\n &self,\n device_id: &str,\n message: client_websocket::Message,\n ) -> Result<(), WSError> {\n self\n .post_realtime_msg(device_id, message)\n .await\n .map_err(|err| WSError::Http(err.to_string()))\n }\n}\n\n#[async_trait]\nimpl WSClientConnectURLProvider for Client {\n fn connect_ws_url(&self) -> String {\n self.ws_addr.clone()\n }\n\n async fn connect_info(&self) -> Result {\n let conn_info = self\n .ws_connect_info(true)\n .await\n .map_err(|err| WSError::Http(err.to_string()))?;\n Ok(conn_info)\n }\n}\n\n/// Calculates the MD5 hash of a file and returns the base64-encoded MD5 digest.\n///\n/// # Arguments\n/// * `file_path` - The path of the file for which the MD5 hash is to be calculated.\n///\n/// # Returns\n/// A `Result` containing the base64-encoded MD5 hash on success, or an error if the file cannot be read.\n///\n/// Asynchronously calculates the MD5 hash of a file using efficient buffer handling and returns it as a base64-encoded string.\n///\n/// # Arguments\n/// * `file_path` - The path to the file to be hashed.\n///\n/// # Returns\n/// Returns a `Result` containing the base64-encoded MD5 hash on success, or an error if the file cannot be read.\npub async fn calculate_md5(file_path: &Path) -> Result {\n let file = File::open(file_path).await?;\n let mut reader = BufReader::with_capacity(1_000_000, file);\n let mut context = md5::Context::new();\n loop {\n let part = reader.fill_buf().await?;\n if part.is_empty() {\n break;\n }\n\n context.consume(part);\n let part_len = part.len();\n reader.consume(part_len);\n }\n\n let md5_hash = context.compute();\n let md5_base64 = STANDARD.encode(md5_hash.as_ref());\n Ok(md5_base64)\n}\n" }, { "path": "libs/client-api/src/http_guest.rs", "content": "use client_api_entity::guest_dto::{\n RevokeSharedViewAccessRequest, ShareViewWithGuestRequest, SharedViewDetails,\n SharedViewDetailsRequest, SharedViews,\n};\nuse reqwest::Method;\nuse shared_entity::response::AppResponseError;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, process_response_error, Client};\n\nimpl Client {\n pub async fn share_view_with_guest(\n &self,\n workspace_id: &Uuid,\n params: &ShareViewWithGuestRequest,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/sharing/workspace/{}/view\",\n self.base_url, workspace_id,\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(params)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn revoke_shared_view_access(\n &self,\n workspace_id: &Uuid,\n view_id: &Uuid,\n params: &RevokeSharedViewAccessRequest,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/sharing/workspace/{}/view/{}/revoke-access\",\n self.base_url, workspace_id, view_id,\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(params)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn get_shared_views(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/sharing/workspace/{}/view\",\n self.base_url, workspace_id,\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data(resp).await\n }\n\n pub async fn get_shared_view_details(\n &self,\n workspace_id: &Uuid,\n view_id: &Uuid,\n ancestor_view_ids: &[Uuid],\n ) -> Result {\n let url = format!(\n \"{}/api/sharing/workspace/{}/view/{}/access-details\",\n self.base_url, workspace_id, view_id,\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&SharedViewDetailsRequest {\n ancestor_view_ids: ancestor_view_ids.to_vec(),\n })\n .send()\n .await?;\n process_response_data(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_member.rs", "content": "use crate::{process_response_data, process_response_error, Client};\nuse client_api_entity::{\n AFWorkspaceInvitation, AFWorkspaceInvitationStatus, AFWorkspaceMember, QueryWorkspaceMember,\n};\nuse reqwest::Method;\nuse shared_entity::dto::workspace_dto::{\n CreateWorkspaceMembers, WorkspaceMemberChangeset, WorkspaceMemberInvitation, WorkspaceMembers,\n};\nuse shared_entity::response::AppResponseError;\nuse tracing::instrument;\nuse uuid::Uuid;\n\nimpl Client {\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn leave_workspace(&self, workspace_id: &Uuid) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/leave\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&())\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_members(\n &self,\n workspace_id: &Uuid,\n ) -> Result, AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/member\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn invite_workspace_members(\n &self,\n workspace_id: &Uuid,\n invitations: Vec,\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/invite\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&invitations)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn list_workspace_invitations(\n &self,\n status: Option,\n ) -> Result, AppResponseError> {\n let url = format!(\"{}/api/workspace/invite\", self.base_url);\n let mut builder = self.http_client_with_auth(Method::GET, &url).await?;\n if let Some(status) = status {\n builder = builder.query(&[(\"status\", status)])\n }\n let resp = builder.send().await?;\n process_response_data::>(resp).await\n }\n\n pub async fn get_workspace_invitation(\n &self,\n invite_uuid: &str,\n ) -> Result {\n let url = format!(\"{}/api/workspace/invite/{}\", self.base_url, invite_uuid);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn accept_workspace_invitation(\n &self,\n invitation_id: &str,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/accept-invite/{}\",\n self.base_url, invitation_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&())\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[deprecated(note = \"use invite_workspace_members instead\")]\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn add_workspace_members, W: AsRef>(\n &self,\n workspace_id: W,\n members: T,\n ) -> Result<(), AppResponseError> {\n let members = members.into();\n let url = format!(\n \"{}/api/workspace/{}/member\",\n self.base_url,\n workspace_id.as_ref()\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&members)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn update_workspace_member(\n &self,\n workspace_id: &Uuid,\n changeset: WorkspaceMemberChangeset,\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/member\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&changeset)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn remove_workspace_members(\n &self,\n workspace_id: &Uuid,\n member_emails: Vec,\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/member\", self.base_url, workspace_id);\n let payload = WorkspaceMembers::from(member_emails);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .json(&payload)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_member(\n &self,\n params: QueryWorkspaceMember,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/member/user/{}\",\n self.base_url, params.workspace_id, params.uid,\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_person.rs", "content": "use app_error::AppError;\nuse client_api_entity::{\n MentionablePerson, MentionablePersons, MentionablePersonsWithAccess, PageMentionUpdate,\n UserImageAssetSource, WorkspaceMemberProfile,\n};\nuse reqwest::{multipart, Method, StatusCode};\nuse shared_entity::response::AppResponseError;\nuse tracing::instrument;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, process_response_error, Client};\n\nimpl Client {\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn list_workspace_mentionable_persons(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/mentionable-person\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_mentionable_person(\n &self,\n workspace_id: &Uuid,\n person_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/mentionable-person/{}\",\n self.base_url, workspace_id, person_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn update_workspace_member_profile(\n &self,\n workspace_id: &Uuid,\n updated_profile: &WorkspaceMemberProfile,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/update-member-profile\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(updated_profile)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn list_page_mentionable_persons(\n &self,\n workspace_id: &Uuid,\n view_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/page-view/{}/mentionable-person-with-access\",\n self.base_url, workspace_id, view_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn update_page_mention(\n &self,\n workspace_id: &Uuid,\n view_id: &Uuid,\n page_mention: &PageMentionUpdate,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/page-view/{}/page-mention\",\n self.base_url, workspace_id, view_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(page_mention)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn upload_user_image_asset(\n &self,\n local_file_path: &str,\n ) -> Result {\n let form = multipart::Form::new()\n .file(\"asset\", local_file_path)\n .await?;\n let url = format!(\"{}/api/user/asset/image\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .multipart(form)\n .send()\n .await?;\n process_response_data(resp).await\n }\n\n pub async fn get_user_image_asset(\n &self,\n person_id: &Uuid,\n file_id: &str,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/user/asset/image/person/{}/file/{}\",\n self.base_url, person_id, file_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n match resp.status() {\n StatusCode::OK => Ok(resp.bytes().await?.to_vec()),\n StatusCode::NOT_FOUND => Err(AppResponseError::from(AppError::RecordNotFound(\n url.to_owned(),\n ))),\n status => {\n let message = resp\n .text()\n .await\n .unwrap_or_else(|_| \"Unknown error\".to_string());\n Err(AppResponseError::from(AppError::Unhandled(format!(\n \"status code: {}, message: {}\",\n status, message\n ))))\n },\n }\n }\n}\n" }, { "path": "libs/client-api/src/http_publish.rs", "content": "use crate::{process_response_data, process_response_error, Client};\nuse bytes::Bytes;\nuse client_api_entity::publish_dto::DuplicatePublishedPageResponse;\nuse client_api_entity::workspace_dto::{PublishInfoView, PublishedView};\nuse client_api_entity::{workspace_dto::PublishedDuplicate, PublishInfo, UpdatePublishNamespace};\nuse client_api_entity::{\n CreateGlobalCommentParams, CreateReactionParams, DeleteGlobalCommentParams, DeleteReactionParams,\n GetReactionQueryParams, GlobalComments, PatchPublishedCollab, PublishInfoMeta, Reactions,\n UpdateDefaultPublishView,\n};\nuse reqwest::Method;\nuse shared_entity::response::AppResponseError;\nuse tracing::instrument;\nuse uuid::Uuid;\n\n// Publisher API\nimpl Client {\n #[instrument(level = \"debug\", skip_all)]\n pub async fn list_published_views(\n &self,\n workspace_id: &Uuid,\n ) -> Result, AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/published-info\",\n self.base_url, workspace_id,\n );\n\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n /// Changes the namespace for the first non-original publish namespace\n /// or the original publish namespace if not exists.\n pub async fn set_workspace_publish_namespace(\n &self,\n workspace_id: &Uuid,\n new_namespace: String,\n ) -> Result<(), AppResponseError> {\n let old_namespace = self.get_workspace_publish_namespace(workspace_id).await?;\n\n let url = format!(\n \"{}/api/workspace/{}/publish-namespace\",\n self.base_url, workspace_id\n );\n\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&UpdatePublishNamespace {\n old_namespace,\n new_namespace,\n })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn get_workspace_publish_namespace(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/publish-namespace\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn patch_published_collabs(\n &self,\n workspace_id: &Uuid,\n patches: &[PatchPublishedCollab],\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/publish\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::PATCH, &url)\n .await?\n .json(patches)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn unpublish_collabs(\n &self,\n workspace_id: &Uuid,\n view_ids: &[Uuid],\n ) -> Result<(), AppResponseError> {\n let url = format!(\"{}/api/workspace/{}/publish\", self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .json(view_ids)\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn create_comment_on_published_view(\n &self,\n view_id: &Uuid,\n comment_content: &str,\n reply_comment_id: &Option,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/published-info/{}/comment\",\n self.base_url, view_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&CreateGlobalCommentParams {\n content: comment_content.to_string(),\n reply_comment_id: *reply_comment_id,\n })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn delete_comment_on_published_view(\n &self,\n view_id: &Uuid,\n comment_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/published-info/{}/comment\",\n self.base_url, view_id\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .json(&DeleteGlobalCommentParams {\n comment_id: *comment_id,\n })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn create_reaction_on_comment(\n &self,\n reaction_type: &str,\n view_id: &Uuid,\n comment_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/published-info/{}/reaction\",\n self.base_url, view_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&CreateReactionParams {\n reaction_type: reaction_type.to_string(),\n comment_id: *comment_id,\n })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn delete_reaction_on_comment(\n &self,\n reaction_type: &str,\n view_id: &Uuid,\n comment_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/published-info/{}/reaction\",\n self.base_url, view_id\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .json(&DeleteReactionParams {\n reaction_type: reaction_type.to_string(),\n comment_id: *comment_id,\n })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn set_default_publish_view(\n &self,\n workspace_id: &Uuid,\n view_id: Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/publish-default\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&UpdateDefaultPublishView { view_id })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn delete_default_publish_view(\n &self,\n workspace_id: &Uuid,\n ) -> Result<(), AppResponseError> {\n let url = format!(\n \"{}/api/workspace/{}/publish-default\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn get_default_publish_view_info(\n &self,\n workspace_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/publish-default\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n\n// Optional login\nimpl Client {\n pub async fn get_published_view_comments(\n &self,\n view_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/published-info/{}/comment\",\n self.base_url, view_id\n );\n let client = if let Ok(client) = self.http_client_with_auth(Method::GET, &url).await {\n client\n } else {\n self.http_client_without_auth(Method::GET, &url).await?\n };\n\n let resp = client.send().await?;\n process_response_data::(resp).await\n }\n}\n\n// Guest API (no login required)\nimpl Client {\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_published_collab_info(\n &self,\n view_id: &Uuid,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/v1/published-info/{}\",\n self.base_url, view_id\n );\n\n let resp = self.cloud_client.get(&url).send().await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_published_outline(\n &self,\n publish_namespace: &str,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/published-outline/{}\",\n self.base_url, publish_namespace,\n );\n\n let resp = self\n .cloud_client\n .get(&url)\n .send()\n .await?\n .error_for_status()?;\n\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_default_published_collab(\n &self,\n publish_namespace: &str,\n ) -> Result, AppResponseError>\n where\n T: serde::de::DeserializeOwned + 'static,\n {\n let url = format!(\n \"{}/api/workspace/published/{}\",\n self.base_url, publish_namespace,\n );\n\n let resp = self\n .cloud_client\n .get(&url)\n .send()\n .await?\n .error_for_status()?;\n\n process_response_data::>(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_published_collab(\n &self,\n publish_namespace: &str,\n publish_name: &str,\n ) -> Result\n where\n T: serde::de::DeserializeOwned + 'static,\n {\n tracing::debug!(\n \"get_published_collab: {} {}\",\n publish_namespace,\n publish_name\n );\n let url = format!(\n \"{}/api/workspace/v1/published/{}/{}\",\n self.base_url, publish_namespace, publish_name\n );\n\n let resp = self\n .cloud_client\n .get(&url)\n .send()\n .await?\n .error_for_status()?;\n\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"debug\", skip_all)]\n pub async fn get_published_collab_blob(\n &self,\n publish_namespace: &str,\n publish_name: &str,\n ) -> Result {\n tracing::debug!(\n \"get_published_collab_blob: {} {}\",\n publish_namespace,\n publish_name\n );\n let url = format!(\n \"{}/api/workspace/published/{}/{}/blob\",\n self.base_url, publish_namespace, publish_name\n );\n let resp = self.cloud_client.get(&url).send().await?;\n let bytes = resp.error_for_status()?.bytes().await?;\n\n if let Ok(app_err) = serde_json::from_slice::(&bytes) {\n return Err(app_err);\n }\n\n Ok(bytes)\n }\n\n pub async fn duplicate_published_to_workspace(\n &self,\n workspace_id: Uuid,\n publish_duplicate: &PublishedDuplicate,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/published-duplicate\",\n self.base_url, workspace_id\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(publish_duplicate)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_published_view_reactions(\n &self,\n view_id: &Uuid,\n comment_id: &Option,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/published-info/{}/reaction\",\n self.base_url, view_id\n );\n let resp = self\n .cloud_client\n .get(url)\n .query(&GetReactionQueryParams {\n comment_id: *comment_id,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_quick_note.rs", "content": "use client_api_entity::{\n CreateQuickNoteParams, ListQuickNotesQueryParams, QuickNote, QuickNotes, UpdateQuickNoteParams,\n};\nuse reqwest::Method;\nuse shared_entity::response::AppResponseError;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, process_response_error, Client};\n\nfn quick_note_resources_url(base_url: &str, workspace_id: Uuid) -> String {\n format!(\"{base_url}/api/workspace/{workspace_id}/quick-note\")\n}\n\nfn quick_note_resource_url(base_url: &str, workspace_id: Uuid, quick_note_id: Uuid) -> String {\n let quick_note_resources_prefix = quick_note_resources_url(base_url, workspace_id);\n format!(\"{quick_note_resources_prefix}/{quick_note_id}\")\n}\n\n// Quick Note API\nimpl Client {\n pub async fn create_quick_note(\n &self,\n workspace_id: Uuid,\n data: Option,\n ) -> Result {\n let url = quick_note_resources_url(&self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&CreateQuickNoteParams { data })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn list_quick_notes(\n &self,\n workspace_id: Uuid,\n search_term: Option,\n offset: Option,\n limit: Option,\n ) -> Result {\n let url = quick_note_resources_url(&self.base_url, workspace_id);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .query(&ListQuickNotesQueryParams {\n search_term,\n offset,\n limit,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn update_quick_note(\n &self,\n workspace_id: Uuid,\n quick_note_id: Uuid,\n data: serde_json::Value,\n ) -> Result<(), AppResponseError> {\n let url = quick_note_resource_url(&self.base_url, workspace_id, quick_note_id);\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&UpdateQuickNoteParams { data })\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn delete_quick_note(\n &self,\n workspace_id: Uuid,\n quick_note_id: Uuid,\n ) -> Result<(), AppResponseError> {\n let url = quick_note_resource_url(&self.base_url, workspace_id, quick_note_id);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_search.rs", "content": "use app_error::ErrorCode;\nuse reqwest::Method;\nuse shared_entity::dto::search_dto::{\n SearchDocumentResponseItem, SearchResult, SearchSummaryResult, SummarySearchResultRequest,\n};\nuse shared_entity::response::AppResponseError;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, Client};\n\nimpl Client {\n /// If `score` is `None`, it will use the score from the server. High score means more relevant.\n /// score range is 0.0 to 1.0\n pub async fn search_documents>>(\n &self,\n workspace_id: &Uuid,\n query: &str,\n limit: u32,\n preview_size: u32,\n score: T,\n ) -> Result, AppResponseError> {\n let mut raw_query = Vec::with_capacity(4);\n raw_query.push((\"query\", query.to_string()));\n raw_query.push((\"limit\", limit.to_string()));\n raw_query.push((\"preview_size\", preview_size.to_string()));\n\n if let Some(score_limit) = score.into() {\n raw_query.push((\"score\", score_limit.to_string()));\n }\n\n let query = serde_urlencoded::to_string(raw_query)\n .map_err(|err| AppResponseError::new(ErrorCode::InvalidRequest, err.to_string()))?;\n\n let url = format!(\"{}/api/search/{workspace_id}?{query}\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::>(resp).await\n }\n\n /// High score means more relevant\n pub async fn generate_search_summary(\n &self,\n workspace_id: &Uuid,\n query: &str,\n search_results: Vec,\n ) -> Result {\n let payload = SummarySearchResultRequest {\n query: query.to_string(),\n search_results,\n only_context: true,\n };\n\n let url = format!(\"{}/api/search/{workspace_id}/summary\", self.base_url);\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .json(&payload)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_settings.rs", "content": "use reqwest::Method;\nuse tracing::{instrument, trace};\n\nuse client_api_entity::AFWorkspaceSettings;\nuse shared_entity::response::AppResponseError;\n\nuse crate::entity::AFWorkspaceSettingsChange;\nuse crate::{process_response_data, Client};\n\nimpl Client {\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn get_workspace_settings>(\n &self,\n workspace_id: T,\n ) -> Result {\n let url = format!(\n \"{}/api/workspace/{}/settings\",\n self.base_url,\n workspace_id.as_ref()\n );\n let resp = self\n .http_client_with_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n #[instrument(level = \"info\", skip_all, err)]\n pub async fn update_workspace_settings>(\n &self,\n workspace_id: T,\n changes: &AFWorkspaceSettingsChange,\n ) -> Result {\n trace!(\"workspace settings: {:?}\", changes);\n let url = format!(\n \"{}/api/workspace/{}/settings\",\n self.base_url,\n workspace_id.as_ref()\n );\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&changes)\n .send()\n .await?;\n process_response_data::(resp).await\n }\n}\n" }, { "path": "libs/client-api/src/http_template.rs", "content": "use client_api_entity::{\n AccountLink, CreateTemplateCategoryParams, CreateTemplateCreatorParams, CreateTemplateParams,\n GetTemplateCategoriesQueryParams, GetTemplateCreatorsQueryParams, GetTemplatesQueryParams,\n Template, TemplateCategories, TemplateCategory, TemplateCategoryType, TemplateCreator,\n TemplateCreators, TemplateWithPublishInfo, Templates, UpdateTemplateCategoryParams,\n UpdateTemplateCreatorParams, UpdateTemplateParams,\n};\nuse reqwest::Method;\nuse shared_entity::response::AppResponseError;\nuse uuid::Uuid;\n\nuse crate::{process_response_data, process_response_error, Client};\n\nfn template_api_prefix(base_url: &str) -> String {\n format!(\"{}/api/template-center\", base_url)\n}\n\nfn category_resources_url(base_url: &str) -> String {\n format!(\"{}/category\", template_api_prefix(base_url))\n}\n\nfn category_resource_url(base_url: &str, category_id: Uuid) -> String {\n format!(\"{}/{}\", category_resources_url(base_url), category_id)\n}\n\nfn template_creator_resources_url(base_url: &str) -> String {\n format!(\"{}/creator\", template_api_prefix(base_url))\n}\n\nfn template_creator_resource_url(base_url: &str, creator_id: Uuid) -> String {\n format!(\n \"{}/{}\",\n template_creator_resources_url(base_url),\n creator_id\n )\n}\n\nfn template_resources_url(base_url: &str) -> String {\n format!(\"{}/template\", template_api_prefix(base_url))\n}\n\nfn template_resource_url(base_url: &str, view_id: Uuid) -> String {\n format!(\"{}/{}\", template_resources_url(base_url), view_id)\n}\n\nimpl Client {\n pub async fn create_template_category(\n &self,\n params: &CreateTemplateCategoryParams,\n ) -> Result {\n let url = category_resources_url(&self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(params)\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n pub async fn get_template_categories(\n &self,\n name_contains: Option<&str>,\n category_type: Option,\n ) -> Result {\n let url = category_resources_url(&self.base_url);\n let resp = self\n .http_client_without_auth(Method::GET, &url)\n .await?\n .query(&GetTemplateCategoriesQueryParams {\n name_contains: name_contains.map(|s| s.to_string()),\n category_type,\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_template_category(\n &self,\n category_id: Uuid,\n ) -> Result {\n let url = category_resource_url(&self.base_url, category_id);\n let resp = self\n .http_client_without_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn delete_template_category(&self, category_id: Uuid) -> Result<(), AppResponseError> {\n let url = category_resource_url(&self.base_url, category_id);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn update_template_category(\n &self,\n category_id: Uuid,\n params: &UpdateTemplateCategoryParams,\n ) -> Result {\n let url = category_resource_url(&self.base_url, category_id);\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(params)\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n pub async fn create_template_creator(\n &self,\n name: &str,\n avatar_url: &str,\n account_links: Vec,\n ) -> Result {\n let url = template_creator_resources_url(&self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(&CreateTemplateCreatorParams {\n name: name.to_string(),\n avatar_url: avatar_url.to_string(),\n account_links,\n })\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n pub async fn get_template_creators(\n &self,\n name_contains: Option<&str>,\n ) -> Result {\n let url = template_creator_resources_url(&self.base_url);\n let resp = self\n .http_client_without_auth(Method::GET, &url)\n .await?\n .query(&GetTemplateCreatorsQueryParams {\n name_contains: name_contains.map(|s| s.to_string()),\n })\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn get_template_creator(\n &self,\n creator_id: Uuid,\n ) -> Result {\n let url = template_creator_resource_url(&self.base_url, creator_id);\n let resp = self\n .http_client_without_auth(Method::GET, &url)\n .await?\n .send()\n .await?;\n process_response_data::(resp).await\n }\n\n pub async fn delete_template_creator(&self, creator_id: Uuid) -> Result<(), AppResponseError> {\n let url = template_creator_resource_url(&self.base_url, creator_id);\n let resp = self\n .http_client_with_auth(Method::DELETE, &url)\n .await?\n .send()\n .await?;\n process_response_error(resp).await\n }\n\n pub async fn update_template_creator(\n &self,\n creator_id: Uuid,\n name: &str,\n avatar_url: &str,\n account_links: Vec,\n ) -> Result {\n let url = template_creator_resource_url(&self.base_url, creator_id);\n let resp = self\n .http_client_with_auth(Method::PUT, &url)\n .await?\n .json(&UpdateTemplateCreatorParams {\n name: name.to_string(),\n avatar_url: avatar_url.to_string(),\n account_links,\n })\n .send()\n .await?;\n\n process_response_data::(resp).await\n }\n\n pub async fn create_template(\n &self,\n params: &CreateTemplateParams,\n ) -> Result {\n let url = template_resources_url(&self.base_url);\n let resp = self\n .http_client_with_auth(Method::POST, &url)\n .await?\n .json(params)\n .send()\n .await?;\n\n process_response_data::