Cleanup

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

apps/server/package.json

@@ -44,7 +44,6 @@
     "@nestjs-labs/nestjs-ioredis": "^11.0.4",
     "@nestjs/bullmq": "^11.0.4",
     "@nestjs/common": "^11.1.9",
-    "nestjs-cls": "^4.5.0",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.1.9",
     "@nestjs/event-emitter": "^3.0.1",

apps/server/src/app.module.ts

@@ -1,8 +1,6 @@
 import { Module } from '@nestjs/common';
-import { APP_INTERCEPTOR } from '@nestjs/core';
 import { AppController } from './app.controller';
 import { AppService } from './app.service';
-import { AuditActorInterceptor } from './common/interceptors/audit-actor.interceptor';
 import { CoreModule } from './core/core.module';
 import { EnvironmentModule } from './integrations/environment/environment.module';
 import { CollaborationModule } from './collaboration/collaboration.module';
@@ -20,7 +18,6 @@ import { SecurityModule } from './integrations/security/security.module';
 import { TelemetryModule } from './integrations/telemetry/telemetry.module';
 import { RedisModule } from '@nestjs-labs/nestjs-ioredis';
 import { RedisConfigService } from './integrations/redis/redis-config.service';
-import { ClsModule } from 'nestjs-cls';
 
 const enterpriseModules = [];
 try {
@@ -38,10 +35,6 @@ try {
 
 @Module({
   imports: [
-    ClsModule.forRoot({
-      global: true,
-      middleware: { mount: true },
-    }),
     CoreModule,
     DatabaseModule,
     EnvironmentModule,
@@ -67,12 +60,6 @@ try {
     ...enterpriseModules,
   ],
   controllers: [AppController],
-  providers: [
-    AppService,
-    {
-      provide: APP_INTERCEPTOR,
-      useClass: AuditActorInterceptor,
-    },
-  ],
+  providers: [AppService],
 })
 export class AppModule {}

apps/server/src/common/events/audit-events.ts

@@ -1,101 +0,0 @@
-export const AuditEvent = {
-  // Workspace Invitations
-  WORKSPACE_CREATED: 'workspace.created',
-  WORKSPACE_INVITE_CREATED: 'workspace.invite_created',
-  WORKSPACE_INVITE_REVOKED: 'workspace.invite_revoked',
-
-  WORKSPACE_INVITE_ACCEPTED: 'workspace.invite_accepted',
-
-  WORKSPACE_USER_CREATED: 'workspace.user_created',
-  WORKSPACE_USER_DEACTIVATED: 'workspace.user_deactivated',
-
-  WORKSPACE_ALLOWED_DOMAIN_UPDATED: 'workspace.allowed_domain_updated',
-  WORKSPACE_ICON_CHANGED: 'workspace.icon_changed',
-  WORKSPACE_NAME_CHANGED: 'workspace.name_changed',
-
-  WORKSPACE_AI_TOGGLED: 'workspace.ai_toggled',
-
-  USER_CREATED: 'user.created',
-  USER_DELETED: 'user.deleted',
-  USER_LOGIN: 'user.login',
-  USER_LOGOUT: 'user.logout',
-  USER_ROLE_CHANGED: 'user.user_role_changed',
-  USER_PASSWORD_CHANGED: 'user.password_changed',
-  USER_PASSWORD_RESET: 'user.reset_password',
-  USER_PHOTO_CHANGED: 'user.reset_password',
-  USER_NAME_CHANGED: 'user.name_changed',
-  USER_EMAIL_CHANGED: 'user.email_changed',
-  USER_MFA_SETUP: 'user.mfa_setup',
-  USER_MFA_BACKUP_CODE_GENERATED: 'user.mfa_backup_code_generated',
-
-  // API Keys
-  API_KEY_CREATED: 'api_key.created',
-  API_KEY_UPDATED: 'api_key.updated',
-  API_KEY_DELETED: 'api_key.deleted',
-
-  // Space
-  SPACE_CREATED: 'space.created',
-  SPACE_UPDATED: 'space.updated',
-  SPACE_DELETED: 'space.deleted',
-
-  SPACE_MEMBER_ADDED: 'space.member_added',
-  SPACE_MEMBER_REMOVED: 'space.member_removed',
-  SPACE_MEMBER_ROLE_CHANGED: 'space.member_role_changed',
-
-  // OR SPACE_USER_ADDED: 'space.user_added',
-  // SPACE_GROUP_ADDED: 'space.group_added',
-
-  // GROUP
-  GROUP_CREATED: 'group.created',
-  GROUP_UPDATED: 'group.updated',
-  GROUP_DELETED: 'group.deleted',
-
-  GROUP_MEMBER_ADDED: 'group.member_added',
-  GROUP_MEMBER_REMOVED: 'group.member_removed',
-
-  // Comments
-  COMMENT_CREATED: 'comment.created',
-  COMMENT_UPDATED: 'comment.updated',
-  COMMENT_DELETED: 'comment.deleted',
-  COMMENT_RESOLVED: 'comment.resolved',
-  COMMENT_REOPENED: 'comment.reopened',
-
-  // PAGE
-  PAGE_CREATED: 'page.created',
-  PAGE_UPDATED: 'page.updated',
-  PAGE_TRASHED: 'page.trash',
-  PAGE_DELETED: 'page.deleted',
-  PAGE_SHARED: 'page.shared',
-
-  ATTACHMENT_UPLOADED: 'attachment.uploaded',
-
-  PAGE_IMPORTED: 'page.imported',
-  PAGE_RESTORED: 'page.restored',
-  PAGE_EXPORTED: 'page.exported',
-  SPACE_EXPORTED: 'space.imported',
-
-  // SSO EVENTS
-} as const;
-
-export type AuditEventType = (typeof AuditEvent)[keyof typeof AuditEvent];
-
-export type ActorType = 'user' | 'system' | 'api_key';
-
-export interface AuditLogPayload {
-  event: AuditEventType;
-  resourceType: string;
-  resourceId?: string;
-  changes?: {
-    before?: Record<string, any>;
-    after?: Record<string, any>;
-  };
-  metadata?: Record<string, any>;
-}
-
-export interface AuditLogData extends AuditLogPayload {
-  workspaceId: string;
-  actorId?: string;
-  actorType: ActorType;
-  ipAddress?: string;
-  userAgent?: string;
-}

apps/server/src/common/interceptors/audit-actor.interceptor.ts

@@ -1,29 +0,0 @@
-import {
-  CallHandler,
-  ExecutionContext,
-  Injectable,
-  NestInterceptor,
-} from '@nestjs/common';
-import { Observable } from 'rxjs';
-import { ClsService } from 'nestjs-cls';
-import { AuditContext, AUDIT_CONTEXT_KEY } from '../middlewares/audit-context.middleware';
-
-@Injectable()
-export class AuditActorInterceptor implements NestInterceptor {
-  constructor(private readonly cls: ClsService) {}
-
-  intercept(context: ExecutionContext, next: CallHandler): Observable<any> {
-    const request = context.switchToHttp().getRequest();
-    const user = request.user?.user;
-
-    if (user?.id) {
-      const auditContext = this.cls.get<AuditContext>(AUDIT_CONTEXT_KEY);
-      if (auditContext) {
-        auditContext.actorId = user.id;
-        this.cls.set(AUDIT_CONTEXT_KEY, auditContext);
-      }
-    }
-
-    return next.handle();
-  }
-}

apps/server/src/common/middlewares/audit-context.middleware.ts

@@ -1,50 +0,0 @@
-import { Injectable, NestMiddleware } from '@nestjs/common';
-import { FastifyRequest, FastifyReply } from 'fastify';
-import { ClsService } from 'nestjs-cls';
-
-export interface AuditContext {
-  workspaceId: string | null;
-  actorId: string | null;
-  actorType: 'user' | 'system' | 'api_key';
-  ipAddress: string | null;
-}
-
-export const AUDIT_CONTEXT_KEY = 'auditContext';
-
-@Injectable()
-export class AuditContextMiddleware implements NestMiddleware {
-  constructor(private readonly cls: ClsService) {}
-
-  use(req: FastifyRequest['raw'], res: FastifyReply['raw'], next: () => void) {
-    const workspaceId = (req as any).workspaceId ?? null;
-    const ipAddress = this.extractIpAddress(req);
-
-    const auditContext: AuditContext = {
-      workspaceId,
-      actorId: null,
-      actorType: 'user',
-      ipAddress,
-    };
-
-    this.cls.set(AUDIT_CONTEXT_KEY, auditContext);
-
-    next();
-  }
-
-  private extractIpAddress(req: FastifyRequest['raw']): string | null {
-    const xForwardedFor = req.headers['x-forwarded-for'];
-    if (xForwardedFor) {
-      const ips = Array.isArray(xForwardedFor)
-        ? xForwardedFor[0]
-        : xForwardedFor.split(',')[0];
-      return ips?.trim() ?? null;
-    }
-
-    const xRealIp = req.headers['x-real-ip'];
-    if (xRealIp) {
-      return Array.isArray(xRealIp) ? xRealIp[0] : xRealIp;
-    }
-
-    return (req as any).socket?.remoteAddress ?? null;
-  }
-}

apps/server/src/core/core.module.ts

@@ -15,13 +15,7 @@ import { SpaceModule } from './space/space.module';
 import { GroupModule } from './group/group.module';
 import { CaslModule } from './casl/casl.module';
 import { DomainMiddleware } from '../common/middlewares/domain.middleware';
-import { AuditContextMiddleware } from '../common/middlewares/audit-context.middleware';
 import { ShareModule } from './share/share.module';
-import {
-  AUDIT_SERVICE,
-  NoopAuditService,
-} from '../integrations/audit/audit.service';
-import { ClsMiddleware } from 'nestjs-cls';
 
 @Module({
   imports: [
@@ -37,31 +31,17 @@ import { ClsMiddleware } from 'nestjs-cls';
     CaslModule,
     ShareModule,
   ],
-  providers: [
-    {
-      provide: AUDIT_SERVICE,
-      useClass: NoopAuditService,
-    },
-  ],
-  exports: [AUDIT_SERVICE],
 })
 export class CoreModule implements NestModule {
   configure(consumer: MiddlewareConsumer) {
-    const excludedRoutes = [
-      { path: 'auth/setup', method: RequestMethod.POST },
-      { path: 'health', method: RequestMethod.GET },
-      { path: 'health/live', method: RequestMethod.GET },
-      { path: 'billing/stripe/webhook', method: RequestMethod.POST },
-    ];
-
     consumer
       .apply(DomainMiddleware)
-      .exclude(...excludedRoutes)
-      .forRoutes('*');
-
-    consumer
-      .apply(AuditContextMiddleware)
-      .exclude(...excludedRoutes)
+      .exclude(
+        { path: 'auth/setup', method: RequestMethod.POST },
+        { path: 'health', method: RequestMethod.GET },
+        { path: 'health/live', method: RequestMethod.GET },
+        { path: 'billing/stripe/webhook', method: RequestMethod.POST },
+      )
       .forRoutes('*');
   }
 }

apps/server/src/core/space/services/space-member.service.ts

@@ -1,6 +1,5 @@
 import {
   BadRequestException,
-  Inject,
   Injectable,
   NotFoundException,
 } from '@nestjs/common';
@@ -15,11 +14,6 @@ import { RemoveSpaceMemberDto } from '../dto/remove-space-member.dto';
 import { UpdateSpaceMemberRoleDto } from '../dto/update-space-member-role.dto';
 import { SpaceRole } from '../../../common/helpers/types/permission';
 import { PaginationResult } from '@docmost/db/pagination/pagination';
-import { AuditEvent } from '../../../common/events/audit-events';
-import {
-  AUDIT_SERVICE,
-  IAuditService,
-} from '../../../integrations/audit/audit.service';
 
 @Injectable()
 export class SpaceMemberService {
@@ -27,7 +21,6 @@ export class SpaceMemberService {
     private spaceMemberRepo: SpaceMemberRepo,
     private spaceRepo: SpaceRepo,
     @InjectKysely() private readonly db: KyselyDB,
-    @Inject(AUDIT_SERVICE) private readonly auditService: IAuditService,
   ) {}
 
   async addUserToSpace(
@@ -168,43 +161,8 @@ export class SpaceMemberService {
 
     if (membersToAdd.length > 0) {
       await this.spaceMemberRepo.insertSpaceMember(membersToAdd);
-
-      // Audit log for each member added
-      for (const user of validUsers) {
-        this.auditService.log({
-          event: AuditEvent.SPACE_MEMBER_ADDED,
-          resourceType: 'space_members',
-          resourceId: dto.spaceId,
-          changes: {
-            after: { role: dto.role },
-          },
-          metadata: {
-            spaceId: dto.spaceId,
-            spaceName: space.name,
-            userId: user.id,
-            userName: user.name,
-            memberType: 'user',
-          },
-        });
-      }
-
-      for (const group of validGroups) {
-        this.auditService.log({
-          event: AuditEvent.SPACE_MEMBER_ADDED,
-          resourceType: 'space_members',
-          resourceId: dto.spaceId,
-          changes: {
-            after: { role: dto.role },
-          },
-          metadata: {
-            spaceId: dto.spaceId,
-            spaceName: space.name,
-            groupId: group.id,
-            groupName: group.name,
-            memberType: 'group',
-          },
-        });
-      }
+    } else {
+      // either they are already members or do not exist on the workspace
     }
   }
 
@@ -251,22 +209,6 @@ export class SpaceMemberService {
       spaceMember.id,
       dto.spaceId,
     );
-
-    this.auditService.log({
-      event: AuditEvent.SPACE_MEMBER_REMOVED,
-      resourceType: 'space_member',
-      resourceId: dto.spaceId,
-      changes: {
-        before: { role: spaceMember.role },
-      },
-      metadata: {
-        spaceId: dto.spaceId,
-        spaceName: space.name,
-        userId: spaceMember.userId,
-        groupId: spaceMember.groupId,
-        memberType: spaceMember.userId ? 'user' : 'group',
-      },
-    });
   }
 
   async updateSpaceMemberRole(
@@ -317,23 +259,6 @@ export class SpaceMemberService {
       spaceMember.id,
       dto.spaceId,
     );
-
-    this.auditService.log({
-      event: AuditEvent.SPACE_MEMBER_ROLE_CHANGED,
-      resourceType: 'space_members',
-      resourceId: dto.spaceId,
-      changes: {
-        before: { role: spaceMember.role },
-        after: { role: dto.role },
-      },
-      metadata: {
-        spaceId: dto.spaceId,
-        spaceName: space.name,
-        userId: spaceMember.userId,
-        groupId: spaceMember.groupId,
-        memberType: spaceMember.userId ? 'user' : 'group',
-      },
-    });
   }
 
   async validateLastAdmin(spaceId: string): Promise<void> {

apps/server/src/core/workspace/services/workspace-invitation.service.ts

@@ -1,6 +1,5 @@
 import {
   BadRequestException,
-  Inject,
   Injectable,
   Logger,
   NotFoundException,
@@ -34,11 +33,6 @@ import {
   validateAllowedEmail,
   validateSsoEnforcement,
 } from '../../auth/auth.util';
-import { AuditEvent } from '../../../common/events/audit-events';
-import {
-  AUDIT_SERVICE,
-  IAuditService,
-} from '../../../integrations/audit/audit.service';
 
 @Injectable()
 export class WorkspaceInvitationService {
@@ -52,7 +46,6 @@ export class WorkspaceInvitationService {
     @InjectKysely() private readonly db: KyselyDB,
     @InjectQueue(QueueName.BILLING_QUEUE) private billingQueue: Queue,
     private readonly environmentService: EnvironmentService,
-    @Inject(AUDIT_SERVICE) private readonly auditService: IAuditService,
   ) {}
 
   async getInvitations(workspaceId: string, pagination: PaginationOptions) {
@@ -186,24 +179,6 @@ export class WorkspaceInvitationService {
           workspace.hostname,
         );
       });
-
-      // Audit log for each invitation created
-      for (const invitation of invites) {
-        this.auditService.log({
-          event: AuditEvent.WORKSPACE_INVITE_CREATED,
-          resourceType: 'workspace_invitation',
-          resourceId: invitation.id,
-          changes: {
-            after: {
-              email: invitation.email,
-              role: invitation.role,
-            },
-          },
-          metadata: {
-            groupIds: invitation.groupIds,
-          },
-        });
-      }
     }
   }
 
@@ -369,32 +344,11 @@ export class WorkspaceInvitationService {
     invitationId: string,
     workspaceId: string,
   ): Promise<void> {
-    const invitation = await this.db
-      .selectFrom('workspaceInvitations')
-      .select(['id', 'email', 'role'])
-      .where('id', '=', invitationId)
-      .where('workspaceId', '=', workspaceId)
-      .executeTakeFirst();
-
     await this.db
       .deleteFrom('workspaceInvitations')
       .where('id', '=', invitationId)
       .where('workspaceId', '=', workspaceId)
       .execute();
-
-    if (invitation) {
-      this.auditService.log({
-        event: AuditEvent.WORKSPACE_INVITE_REVOKED,
-        resourceType: 'workspace_invitation',
-        resourceId: invitation.id,
-        changes: {
-          before: {
-            email: invitation.email,
-            role: invitation.role,
-          },
-        },
-      });
-    }
   }
 
   async getInvitationLinkById(

apps/server/src/core/workspace/services/workspace.service.ts

@@ -1,7 +1,6 @@
 import {
   BadRequestException,
   ForbiddenException,
-  Inject,
   Injectable,
   Logger,
   NotFoundException,
@@ -35,11 +34,6 @@ import { QueueJob, QueueName } from '../../../integrations/queue/constants';
 import { Queue } from 'bullmq';
 import { generateRandomSuffixNumbers } from '../../../common/helpers';
 import { isPageEmbeddingsTableExists } from '@docmost/db/helpers/helpers';
-import { AuditEvent } from '../../../common/events/audit-events';
-import {
-  AUDIT_SERVICE,
-  IAuditService,
-} from '../../../integrations/audit/audit.service';
 
 @Injectable()
 export class WorkspaceService {
@@ -58,7 +52,6 @@ export class WorkspaceService {
     @InjectQueue(QueueName.ATTACHMENT_QUEUE) private attachmentQueue: Queue,
     @InjectQueue(QueueName.BILLING_QUEUE) private billingQueue: Queue,
     @InjectQueue(QueueName.AI_QUEUE) private aiQueue: Queue,
-    @Inject(AUDIT_SERVICE) private readonly auditService: IAuditService,
   ) {}
 
   async findById(workspaceId: string) {
@@ -435,20 +428,6 @@ export class WorkspaceService {
       user.id,
       workspaceId,
     );
-
-    this.auditService.log({
-      event: AuditEvent.USER_ROLE_CHANGED,
-      resourceType: 'users',
-      resourceId: user.id,
-      changes: {
-        before: { role: user.role },
-        after: { role: newRole },
-      },
-      metadata: {
-        userName: user.name,
-        userEmail: user.email,
-      },
-    });
   }
 
   async generateHostname(
@@ -552,19 +531,6 @@ export class WorkspaceService {
         .execute();
     });
 
-    this.auditService.log({
-      event: AuditEvent.USER_DELETED,
-      resourceType: 'users',
-      resourceId: user.id,
-      changes: {
-        before: {
-          name: user.name,
-          email: user.email,
-          role: user.role,
-        },
-      },
-    });
-
     try {
       await this.attachmentQueue.add(QueueJob.DELETE_USER_AVATARS, user);
     } catch (err) {

apps/server/src/database/migrations/20260109T120000-audit-logs.ts

@@ -1,32 +0,0 @@
-import { Kysely, sql } from 'kysely';
-
-export async function up(db: Kysely<any>): Promise<void> {
-  await db.schema
-    .createTable('audit_logs')
-    .addColumn('id', 'uuid', (col) =>
-      col.primaryKey().defaultTo(sql`gen_uuid_v7()`),
-    )
-    .addColumn('workspace_id', 'uuid', (col) =>
-      col.notNull().references('workspaces.id').onDelete('cascade'),
-    )
-    .addColumn('actor_id', 'uuid', (col) =>
-      col.references('users.id').onDelete('set null'),
-    )
-    .addColumn('actor_type', 'varchar', (col) =>
-      col.notNull().defaultTo('user'),
-    )
-    .addColumn('event', 'varchar', (col) => col.notNull())
-    .addColumn('resource_type', 'varchar', (col) => col.notNull())
-    .addColumn('resource_id', 'uuid')
-    .addColumn('changes', 'jsonb')
-    .addColumn('metadata', 'jsonb')
-    .addColumn('ip_address', sql `inet`)
-    .addColumn('created_at', 'timestamptz', (col) =>
-      col.notNull().defaultTo(sql`now()`),
-    )
-    .execute();
-}
-
-export async function down(db: Kysely<any>): Promise<void> {
-  await db.schema.dropTable('audit_logs').execute();
-}

apps/server/src/database/migrations/20260111T163516-add-new-indexes.ts

@@ -0,0 +1,196 @@
+import { type Kysely, sql } from 'kysely';
+
+export async function up(db: Kysely<any>): Promise<void> {
+  await db.schema
+    .createIndex('idx_group_users_user_id')
+    .ifNotExists()
+    .on('group_users')
+    .column('user_id')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_space_members_user_id')
+    .ifNotExists()
+    .on('space_members')
+    .column('user_id')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_space_members_group_id')
+    .ifNotExists()
+    .on('space_members')
+    .column('group_id')
+    .execute();
+
+  // Page tree
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_pages_space_parent_position
+    ON pages (space_id, parent_page_id, position COLLATE "C")
+    WHERE deleted_at IS NULL
+  `.execute(db);
+
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_pages_parent_page_id
+    ON pages (parent_page_id)
+    WHERE deleted_at IS NULL
+  `.execute(db);
+
+  // Recent pages query
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_pages_space_updated
+    ON pages (space_id, updated_at DESC)
+    WHERE deleted_at IS NULL
+  `.execute(db);
+
+  // Trash view
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_pages_space_deleted
+    ON pages (space_id, deleted_at DESC)
+    WHERE deleted_at IS NOT NULL
+  `.execute(db);
+
+  await sql`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_workspaces_hostname_lower
+    ON workspaces (LOWER(hostname))
+  `.execute(db);
+
+  await db.schema
+    .createIndex('idx_workspaces_created_at')
+    .ifNotExists()
+    .on('workspaces')
+    .column('created_at')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_users_workspace_deleted_created')
+    .ifNotExists()
+    .on('users')
+    .columns(['workspace_id', 'deleted_at', 'created_at'])
+    .execute();
+
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_users_workspace_email_lower
+    ON users (workspace_id, LOWER(email))
+  `.execute(db);
+
+  await sql`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_spaces_workspace_slug_lower
+    ON spaces (workspace_id, LOWER(slug))
+  `.execute(db);
+
+  await db.schema
+    .createIndex('idx_spaces_workspace_created')
+    .ifNotExists()
+    .on('spaces')
+    .columns(['workspace_id', 'created_at'])
+    .execute();
+
+  await sql`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_groups_workspace_name_lower
+    ON groups (workspace_id, LOWER(name))
+  `.execute(db);
+
+  await db.schema
+    .createIndex('idx_groups_workspace_id')
+    .ifNotExists()
+    .on('groups')
+    .column('workspace_id')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_shares_page_id')
+    .ifNotExists()
+    .on('shares')
+    .column('page_id')
+    .execute();
+
+  await sql`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_shares_key_lower
+    ON shares (LOWER(key))
+  `.execute(db);
+
+  await db.schema
+    .createIndex('idx_attachments_page_id')
+    .ifNotExists()
+    .on('attachments')
+    .column('page_id')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_attachments_space_id')
+    .ifNotExists()
+    .on('attachments')
+    .column('space_id')
+    .execute();
+
+  await db.schema
+    .createIndex('idx_comments_page_id')
+    .ifNotExists()
+    .on('comments')
+    .columns(['page_id', 'created_at'])
+    .execute();
+
+  await db.schema
+    .createIndex('idx_comments_parent_comment_id')
+    .ifNotExists()
+    .on('comments')
+    .column('parent_comment_id')
+    .execute();
+
+  await sql`
+    CREATE INDEX IF NOT EXISTS idx_page_history_page_created
+    ON page_history (page_id, created_at DESC)
+  `.execute(db);
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await db.schema.dropIndex('idx_group_users_user_id').ifExists().execute();
+  await db.schema.dropIndex('idx_space_members_user_id').ifExists().execute();
+  await db.schema.dropIndex('idx_space_members_group_id').ifExists().execute();
+  await db.schema
+    .dropIndex('idx_pages_space_parent_position')
+    .ifExists()
+    .execute();
+  await db.schema.dropIndex('idx_pages_parent_page_id').ifExists().execute();
+  await db.schema.dropIndex('idx_pages_space_updated').ifExists().execute();
+  await db.schema.dropIndex('idx_pages_space_deleted').ifExists().execute();
+  await db.schema
+    .dropIndex('idx_workspaces_hostname_lower')
+    .ifExists()
+    .execute();
+  await db.schema.dropIndex('idx_workspaces_created_at').ifExists().execute();
+  await db.schema
+    .dropIndex('idx_users_workspace_deleted_created')
+    .ifExists()
+    .execute();
+  await db.schema
+    .dropIndex('idx_users_workspace_email_lower')
+    .ifExists()
+    .execute();
+  await db.schema
+    .dropIndex('idx_spaces_workspace_slug_lower')
+    .ifExists()
+    .execute();
+  await db.schema
+    .dropIndex('idx_spaces_workspace_created')
+    .ifExists()
+    .execute();
+  await db.schema
+    .dropIndex('idx_groups_workspace_name_lower')
+    .ifExists()
+    .execute();
+  await db.schema.dropIndex('idx_groups_workspace_id').ifExists().execute();
+  await db.schema.dropIndex('idx_shares_page_id').ifExists().execute();
+  await db.schema.dropIndex('idx_shares_key_lower').ifExists().execute();
+  await db.schema.dropIndex('idx_attachments_page_id').ifExists().execute();
+  await db.schema.dropIndex('idx_attachments_space_id').ifExists().execute();
+  await db.schema.dropIndex('idx_comments_page_id').ifExists().execute();
+  await db.schema
+    .dropIndex('idx_comments_parent_comment_id')
+    .ifExists()
+    .execute();
+  await db.schema
+    .dropIndex('idx_page_history_page_created')
+    .ifExists()
+    .execute();
+}

apps/server/src/database/types/db.d.ts

@@ -3,13 +3,18 @@
  * Please do not edit it manually.
  */
 
-import type { ColumnType } from "kysely";
+import type { ColumnType } from 'kysely';
 
-export type Generated<T> = T extends ColumnType<infer S, infer I, infer U>
-  ? ColumnType<S, I | undefined, U>
-  : ColumnType<T, T | undefined, T>;
+export type Generated<T> =
+  T extends ColumnType<infer S, infer I, infer U>
+    ? ColumnType<S, I | undefined, U>
+    : ColumnType<T, T | undefined, T>;
 
-export type Int8 = ColumnType<string, bigint | number | string, bigint | number | string>;
+export type Int8 = ColumnType<
+  string,
+  bigint | number | string,
+  bigint | number | string
+>;
 
 export type Json = JsonValue;
 
@@ -27,13 +32,13 @@ export type Timestamp = ColumnType<Date, Date | string, Date | string>;
 
 export interface ApiKeys {
   createdAt: Generated<Timestamp>;
-  creatorId: string;
   deletedAt: Timestamp | null;
   expiresAt: Timestamp | null;
   id: Generated<string>;
   lastUsedAt: Timestamp | null;
   name: string | null;
   updatedAt: Generated<Timestamp>;
+  creatorId: string;
   workspaceId: string;
 }
 
@@ -56,20 +61,6 @@ export interface Attachments {
   workspaceId: string;
 }
 
-export interface AuditLogs {
-  actorId: string | null;
-  actorType: Generated<string>;
-  changes: Json | null;
-  createdAt: Generated<Timestamp>;
-  event: string;
-  id: Generated<string>;
-  ipAddress: string | null;
-  metadata: Json | null;
-  resourceId: string | null;
-  resourceType: string;
-  workspaceId: string;
-}
-
 export interface AuthAccounts {
   authProviderId: string | null;
   createdAt: Generated<Timestamp>;
@@ -86,25 +77,25 @@ export interface AuthProviders {
   createdAt: Generated<Timestamp>;
   creatorId: string | null;
   deletedAt: Timestamp | null;
-  groupSync: Generated<boolean>;
   id: Generated<string>;
   isEnabled: Generated<boolean>;
+  groupSync: Generated<boolean>;
   ldapBaseDn: string | null;
   ldapBindDn: string | null;
   ldapBindPassword: string | null;
-  ldapConfig: Json | null;
   ldapTlsCaCert: string | null;
   ldapTlsEnabled: Generated<boolean | null>;
   ldapUrl: string | null;
   ldapUserAttributes: Json | null;
   ldapUserSearchFilter: string | null;
+  ldapConfig: Json | null;
+  settings: Json | null;
   name: string;
   oidcClientId: string | null;
   oidcClientSecret: string | null;
   oidcIssuer: string | null;
   samlCertificate: string | null;
   samlUrl: string | null;
-  settings: Json | null;
   type: string;
   updatedAt: Generated<Timestamp>;
   workspaceId: string;
@@ -234,11 +225,9 @@ export interface Pages {
   icon: string | null;
   id: Generated<string>;
   isLocked: Generated<boolean>;
-  isRestricted: Generated<boolean>;
   lastUpdatedById: string | null;
   parentPageId: string | null;
   position: string | null;
-  restrictedById: string | null;
   slugId: string;
   spaceId: string;
   textContent: string | null;
@@ -309,12 +298,12 @@ export interface Users {
   deletedAt: Timestamp | null;
   email: string;
   emailVerifiedAt: Timestamp | null;
-  hasGeneratedPassword: Generated<boolean | null>;
   id: Generated<string>;
   invitedById: string | null;
   lastActiveAt: Timestamp | null;
   lastLoginAt: Timestamp | null;
   locale: string | null;
+  hasGeneratedPassword: Generated<boolean | null>;
   name: string | null;
   password: string | null;
   role: string | null;
@@ -374,7 +363,6 @@ export interface Workspaces {
 export interface DB {
   apiKeys: ApiKeys;
   attachments: Attachments;
-  auditLogs: AuditLogs;
   authAccounts: AuthAccounts;
   authProviders: AuthProviders;
   backlinks: Backlinks;
@@ -384,7 +372,6 @@ export interface DB {
   groups: Groups;
   groupUsers: GroupUsers;
   pageHistory: PageHistory;
-  AuditLog: PagePermissions;
   pages: Pages;
   shares: Shares;
   spaceMembers: SpaceMembers;

apps/server/src/database/types/db.interface.ts

@@ -1,6 +1,47 @@
-import { DB } from '@docmost/db/types/db';
+import {
+  ApiKeys,
+  Attachments,
+  AuthAccounts,
+  AuthProviders,
+  Backlinks,
+  Billing,
+  Comments,
+  FileTasks,
+  Groups,
+  GroupUsers,
+  PageHistory,
+  Pages,
+  Shares,
+  SpaceMembers,
+  Spaces,
+  UserMfa,
+  Users,
+  UserTokens,
+  WorkspaceInvitations,
+  Workspaces,
+} from '@docmost/db/types/db';
 import { PageEmbeddings } from '@docmost/db/types/embeddings.types';
 
-export interface DbInterface extends DB {
+export interface DbInterface {
+  attachments: Attachments;
+  authAccounts: AuthAccounts;
+  authProviders: AuthProviders;
+  backlinks: Backlinks;
+  billing: Billing;
+  comments: Comments;
+  fileTasks: FileTasks;
+  groups: Groups;
+  groupUsers: GroupUsers;
   pageEmbeddings: PageEmbeddings;
+  pageHistory: PageHistory;
+  pages: Pages;
+  shares: Shares;
+  spaceMembers: SpaceMembers;
+  spaces: Spaces;
+  userMfa: UserMfa;
+  users: Users;
+  userTokens: UserTokens;
+  workspaceInvitations: WorkspaceInvitations;
+  workspaces: Workspaces;
+  apiKeys: ApiKeys;
 }

apps/server/src/database/types/entity.types.ts

@@ -20,7 +20,6 @@ import {
   FileTasks,
   UserMfa as _UserMFA,
   ApiKeys,
-  AuditLogs,
 } from './db';
 import { PageEmbeddings } from '@docmost/db/types/embeddings.types';
 
@@ -132,8 +131,3 @@ export type UpdatableApiKey = Updateable<Omit<ApiKeys, 'id'>>;
 export type PageEmbedding = Selectable<PageEmbeddings>;
 export type InsertablePageEmbedding = Insertable<PageEmbeddings>;
 export type UpdatablePageEmbedding = Updateable<Omit<PageEmbeddings, 'id'>>;
-
-// Audit Log
-export type AuditLog = Selectable<AuditLogs>;
-export type InsertableAuditLog = Insertable<AuditLogs>;
-export type UpdatableAuditLog = Updateable<Omit<AuditLogs, 'id'>>;

apps/server/src/integrations/audit/audit.service.ts

@@ -1,48 +0,0 @@
-import { Injectable } from '@nestjs/common';
-import { AuditLogPayload, ActorType } from '../../common/events/audit-events';
-
-export type IAuditService = {
-  log(payload: AuditLogPayload): void | Promise<void>;
-  logWithContext(
-    payload: AuditLogPayload,
-    context: {
-      workspaceId: string;
-      actorId?: string;
-      actorType?: ActorType;
-      ipAddress?: string;
-      userAgent?: string;
-    },
-  ): void | Promise<void>;
-  setActorId(actorId: string): void;
-  setActorType(actorType: ActorType): void;
-};
-
-export const AUDIT_SERVICE = Symbol('AUDIT_SERVICE');
-
-@Injectable()
-export class NoopAuditService implements IAuditService {
-  log(_payload: AuditLogPayload): void {
-    // No-op: swallow the log when EE module is not available
-  }
-
-  logWithContext(
-    _payload: AuditLogPayload,
-    _context: {
-      workspaceId: string;
-      actorId?: string;
-      actorType?: ActorType;
-      ipAddress?: string;
-      userAgent?: string;
-    },
-  ): void {
-    // No-op: swallow the log when EE module is not available
-  }
-
-  setActorId(_actorId: string): void {
-    // No-op
-  }
-
-  setActorType(_actorType: ActorType): void {
-    // No-op
-  }
-}

apps/server/src/integrations/queue/constants/queue.constants.ts

@@ -6,7 +6,6 @@ export enum QueueName {
   FILE_TASK_QUEUE = '{file-task-queue}',
   SEARCH_QUEUE = '{search-queue}',
   AI_QUEUE = '{ai-queue}',
-  AUDIT_QUEUE = '{audit-queue}',
 }
 
 export enum QueueJob {
@@ -59,7 +58,4 @@ export enum QueueJob {
 
   GENERATE_PAGE_EMBEDDINGS = 'generate-page-embeddings',
   DELETE_PAGE_EMBEDDINGS = 'delete-page-embeddings',
-
-  AUDIT_LOG = 'audit-log',
-  AUDIT_CLEANUP = 'audit-cleanup',
 }

apps/server/src/integrations/queue/queue.module.ts

@@ -73,14 +73,6 @@ import { BacklinksProcessor } from './processors/backlinks.processor';
         attempts: 1,
       },
     }),
-    BullModule.registerQueue({
-      name: QueueName.AUDIT_QUEUE,
-      defaultJobOptions: {
-        removeOnComplete: true,
-        removeOnFail: true,
-        attempts: 3,
-      },
-    }),
   ],
   exports: [BullModule],
   providers: [BacklinksProcessor],

pnpm-lock.yaml

@@ -578,9 +578,6 @@ importers:
       nanoid:
         specifier: 3.3.11
         version: 3.3.11
-      nestjs-cls:
-        specifier: ^4.5.0
-        version: 4.5.0(@nestjs/common@11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.9)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       nestjs-kysely:
         specifier: ^1.2.0
         version: 1.2.0(@nestjs/common@11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.9)(kysely@0.28.2)(reflect-metadata@0.2.2)
@@ -7985,15 +7982,6 @@ packages:
   neo-async@2.6.2:
     resolution: {integrity: sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==}
 
-  nestjs-cls@4.5.0:
-    resolution: {integrity: sha512-oi3GNCc5pnsnVI5WJKMDwmg4NP+JyEw+edlwgepyUba5+RGGtJzpbVaaxXGW1iPbDuQde3/fA8Jdjq9j88BVcQ==}
-    engines: {node: '>=16'}
-    peerDependencies:
-      '@nestjs/common': '> 7.0.0 < 11'
-      '@nestjs/core': '> 7.0.0 < 11'
-      reflect-metadata: '*'
-      rxjs: '>= 7'
-
   nestjs-kysely@1.2.0:
     resolution: {integrity: sha512-KseCGb0SXCzIYC+Hx3Z3d+kPAfSZCSK6j9UoqUV/gcBCPad9utC7itmoUw0/w5sV+Jf9pc1DKpgClP1IkflA4w==}
     peerDependencies:
@@ -19143,13 +19131,6 @@ snapshots:
 
   neo-async@2.6.2: {}
 
-  nestjs-cls@4.5.0(@nestjs/common@11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.9)(reflect-metadata@0.2.2)(rxjs@7.8.2):
-    dependencies:
-      '@nestjs/common': 11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      '@nestjs/core': 11.1.9(@nestjs/common@11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/websockets@11.1.9)(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      reflect-metadata: 0.2.2
-      rxjs: 7.8.2
-
   nestjs-kysely@1.2.0(@nestjs/common@11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.9)(kysely@0.28.2)(reflect-metadata@0.2.2):
     dependencies:
       '@nestjs/common': 11.1.9(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2)