feat: Enhance activity tracking with new models for activity logs and document visits, and implement search functionality for user documents.

Author: Jason-chen-coder

.claude/settings.local.json

@@ -14,7 +14,58 @@
       "Read(//Users/jasonchen/.claude/plugins/cache/ui-ux-pro-max-skill/ui-ux-pro-max/2.0.1/**)",
       "Bash(python3 skills/ui-ux-pro-max/scripts/search.py \"productivity documentation SaaS workspace dashboard modern minimal\" --design-system -p \"DocStudio\")",
       "Bash(python3 src/ui-ux-pro-max/scripts/search.py \"productivity documentation SaaS workspace modern\" --design-system -p \"DocStudio\")",
-      "WebFetch(domain:www.reactbits.dev)"
+      "WebFetch(domain:www.reactbits.dev)",
+      "Bash(grep -r \"FloatingMenu\\\\|SlashCommand\\\\|Commands\\\\.create\\\\|suggestion\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/tiptap*)",
+      "Bash(grep -r \"addKeyboardShortcuts\\\\|addCommands\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/tiptap*)",
+      "Bash(grep -r \"toggleBold\\\\|toggleItalic\\\\|Ctrl\\\\|Cmd\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/tiptap*)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio/apps/web/src -name \"use-mark.ts\" -exec cat {})",
+      "Bash(wc -l apps/web/src/app/\\\\\\(main\\\\\\)/spaces/[id]/documents/[documentId]/page.tsx)",
+      "Bash(find . -path */y-prosemirror/dist* -name *.js)",
+      "Bash(find . -path */y-prosemirror* -name *.mjs -o -path */y-prosemirror* -name *.cjs -o -path */y-prosemirror* -name *.js)",
+      "Bash(grep -r export.*yUndoPluginKey node_modules/.pnpm/y-prosemirror*/node_modules/y-prosemirror/)",
+      "Bash(grep -A5 'class PluginKey' node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(grep createKey node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(grep -A3 \"^function createKey\" node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(grep -A6 \"^function createKey\" node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(node -e \":*)",
+      "Bash(grep -A2 'get key' node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(grep -B2 -A5 \"this.key\\\\|get key\\\\|\\\\.key =\" node_modules/.pnpm/prosemirror-state@*/node_modules/prosemirror-state/dist/index.js)",
+      "Bash(grep \"undoCommand\\\\|redoCommand\" node_modules/.pnpm/y-prosemirror@*/node_modules/y-prosemirror/dist/y-prosemirror.cjs)",
+      "Bash(find . -path */node_modules/y-prosemirror -type d)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio -path *PublicModule* -o -path *public*controller*)",
+      "Bash(grep -r \"openGraph\\\\|og:\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/app --include=*.tsx)",
+      "Bash(npx turbo:*)",
+      "Bash(npx nest:*)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio/apps/web/src -name *collaboration* -o -name *hocuspocus*)",
+      "Bash(grep -r \"HocuspocusProvider\\\\|WebsocketProvider\\\\|Collaboration\\\\|CollaborationCursor\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src --include=*.ts --include=*.tsx)",
+      "Bash(grep -r \"onlineUsers\\\\|connectedUsers\\\\|active.*users\\\\|collaborators\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src --include=*.ts --include=*.tsx)",
+      "Bash(grep -r \"sharp\\\\|image.*upload\\\\|uploadImage\\\\|Image\\\\|image-extension\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src --include=*.ts --include=*.tsx)",
+      "Bash(grep -r \"sharp\\\\|processImage\\\\|thumbnail\" /Users/jasonchen/Desktop/self/doc_studio/apps/api/src --include=*.ts)",
+      "Bash(grep -r \"documentService.getDocument\\\\|recordDocumentVisit\\\\|activityService.recordDocumentVisit\" /Users/jasonchen/Desktop/self/doc_studio/apps/api/src --include=*.ts)",
+      "Bash(grep -r \"YjsUpdate\\\\|yjs.*update\\\\|ydocData\" /Users/jasonchen/Desktop/self/doc_studio/apps/api/src --include=*.ts)",
+      "Bash(grep -r \"useSearch\\\\|searchService\\\\|getRecentDocuments\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src --include=*.tsx --include=*.ts)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio -type f -name *.prisma)",
+      "Bash(grep -r \"DELETE\\\\|GET.*shares\\\\|list.*shares\" /Users/jasonchen/Desktop/self/doc_studio/apps/api/src/share --include=*.ts)",
+      "Bash(ls -la /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/app/\\\\\\(main\\\\\\)/spaces/[id\\\\\\)/documents/)",
+      "Bash(grep -l \"Stage 3\\\\|团队协作\\\\|stage-3\" /Users/jasonchen/Desktop/self/doc_studio/plan/*.md)",
+      "Bash(ls /Users/jasonchen/Desktop/self/doc_studio/apps/api/tsconfig*.json)",
+      "Bash(ls /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/ui/badge*)",
+      "Bash(grep -r \"tree\\\\|getTree\" /Users/jasonchen/Desktop/self/doc_studio/apps/api/src/documents --include=*.ts)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio/apps/web/src -name *analytics* -o -name *comment* -o -name *visit*)",
+      "Bash(grep -r \"slash-commands\\\\|SlashCommands\" /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/tiptap-templates --include=*.ts --include=*.tsx)",
+      "Bash(grep -r \"DocumentVisitLog\\\\|DocumentStats\\\\|CommentLike\" /Users/jasonchen/Desktop/self/doc_studio/apps --include=*.ts --include=*.tsx --include=*.prisma)",
+      "Bash(ls /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/ui/tooltip* /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/ui/separator* /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/ui/toggle*)",
+      "WebFetch(domain:tiptap.dev)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "Bash(ls -la /Users/jasonchen/Desktop/self/doc_studio/apps/web/src/components/tiptap-node/*/)",
+      "Bash(curl -s http://localhost:3001/share/cmmynrvjz001diirm8m57h96j/content)",
+      "Bash(python3 -c \"import sys,json; d=json.load\\(sys.stdin\\); c=d[''''content'''']; print\\(type\\(c\\).__name__\\); nodes=[n[''''type''''] for n in c.get\\(''''content'''',[]\\)]; print\\(f''''Nodes: {len\\(nodes\\)}''''\\); print\\(nodes[:20]\\)\")",
+      "WebFetch(domain:www.npmjs.com)",
+      "Bash(find /Users/jasonchen/Desktop/self/doc_studio/node_modules -path */highlight.js/styles -type d)",
+      "Bash(python3 /Users/jasonchen/.claude/plugins/cache/ui-ux-pro-max-skill/ui-ux-pro-max/2.0.1/.claude/skills/ui-ux-pro-max/scripts/search.py \"document viewer shared reading content-first minimal elegant\" --design-system -p \"DocStudio Share Page\")",
+      "Bash(python3 /Users/jasonchen/.claude/plugins/cache/ui-ux-pro-max-skill/ui-ux-pro-max/2.0.1/.claude/skills/ui-ux-pro-max/scripts/search.py \"content reader document elegant minimal\" --domain style -n 3)",
+      "Bash(grep -E \"\\\\.\\(ts|tsx\\)$\")"
     ]
   }
 }

apps/api/package.json

@@ -39,6 +39,7 @@
     "@nestjs/platform-fastify": "^11.0.1",
     "@nestjs/serve-static": "^5.0.4",
     "@nestjs/swagger": "^11.2.5",
+    "@nestjs/throttler": "^6.5.0",
     "@prisma/client": "5.22.0",
     "@types/minio": "^7.1.1",
     "bcryptjs": "^3.0.3",
@@ -53,6 +54,7 @@
     "prisma": "5.22.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1",
+    "sharp": "^0.34.5",
     "yjs": "^13.6.29"
   },
   "devDependencies": {
@@ -67,6 +69,7 @@
     "@types/node": "^22.10.7",
     "@types/passport-jwt": "^4.0.1",
     "@types/passport-local": "^1.0.38",
+    "@types/sharp": "^0.32.0",
     "@types/supertest": "^6.0.2",
     "dotenv-cli": "^11.0.0",
     "eslint": "^9.18.0",

apps/api/src/app.module.ts

@@ -1,5 +1,5 @@
 import { Module, ValidationPipe } from '@nestjs/common';
-import { APP_PIPE } from '@nestjs/core';
+import { APP_PIPE, APP_GUARD } from '@nestjs/core';
 import { AppController } from './app.controller';
 import { AppService } from './app.service';
 import { PrismaModule } from './prisma/prisma.module';
@@ -13,6 +13,8 @@ import { AdminModule } from './admin/admin.module';
 import { PublicModule } from './modules/public/public.module';
 import { CollaborationModule } from './collaboration/collaboration.module';
 import { FilesModule } from './files/files.module';
+import { ThrottlerModule } from '@nestjs/throttler';
+import { FastifyThrottlerGuard } from './common/guards/fastify-throttler.guard';
 
 import { SnapshotsModule } from './snapshots/snapshots.module';
 import { SearchModule } from './search/search.module';
@@ -22,6 +24,13 @@ import { TemplatesModule } from './templates/templates.module';
 @Module({
   imports: [
     PrismaModule,
+    // Rate Limiting — 全局默认 60次/分钟，各 endpoint 可通过 @Throttle() 单独覆盖
+    ThrottlerModule.forRoot([
+      {
+        ttl: 60000, // 1 minute
+        limit: 60,  // 60 requests per minute
+      },
+    ]),
     AuthModule,
     UsersModule,
     SpacesModule,
@@ -44,6 +53,10 @@ import { TemplatesModule } from './templates/templates.module';
       provide: APP_PIPE,
       useClass: ValidationPipe,
     },
+    {
+      provide: APP_GUARD,
+      useClass: FastifyThrottlerGuard,
+    },
   ],
 })
 export class AppModule {}

apps/api/src/common/guards/fastify-throttler.guard.ts

@@ -0,0 +1,14 @@
+import { Injectable } from '@nestjs/common';
+import { ThrottlerGuard } from '@nestjs/throttler';
+import { FastifyRequest } from 'fastify';
+
+/**
+ * Fastify 适配的 ThrottlerGuard
+ * 默认 ThrottlerGuard 基于 Express，无法直接获取 Fastify 的 req.ip
+ */
+@Injectable()
+export class FastifyThrottlerGuard extends ThrottlerGuard {
+  getTracker(req: FastifyRequest): Promise<string> {
+    return Promise.resolve(req.ip);
+  }
+}

apps/api/src/common/ydoc-utils.ts

@@ -0,0 +1,158 @@
+import * as Y from 'yjs';
+
+/**
+ * Convert a Y.XmlFragment to a Tiptap/ProseMirror JSON document.
+ * This mirrors what @tiptap/extension-collaboration does internally.
+ */
+export function xmlFragmentToTiptapJson(fragment: Y.XmlFragment): object {
+  const content: object[] = [];
+  fragment.forEach((child) => {
+    const node = xmlElementToNode(child);
+    if (node) content.push(node);
+  });
+  return { type: 'doc', content };
+}
+
+/**
+ * Convert a Yjs XML node to a ProseMirror/Tiptap JSON node.
+ * Returns null for invalid nodes (e.g. empty text nodes) which ProseMirror rejects.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function xmlElementToNode(node: any): object | null {
+  if (node instanceof Y.XmlText) {
+    const delta = node.toDelta() as Array<{
+      insert?: string;
+      attributes?: Record<string, unknown>;
+    }>;
+
+    // Multi-segment delta: produce separate text nodes for each segment
+    // But since we return a single node here, join text and handle single-segment marks
+    if (delta.length === 1 && delta[0].insert) {
+      const text = delta[0].insert as string;
+      // ProseMirror does not allow empty text nodes
+      if (!text) return null;
+
+      const result: Record<string, unknown> = { type: 'text', text };
+      if (delta[0].attributes && Object.keys(delta[0].attributes).length > 0) {
+        result.marks = Object.entries(delta[0].attributes).map(
+          ([type, attrs]) => {
+            if (typeof attrs === 'object' && attrs !== null) {
+              return { type, attrs };
+            }
+            return { type };
+          },
+        );
+      }
+      return result;
+    }
+
+    // Multi-segment or empty delta
+    const text = delta.map((d) => d.insert ?? '').join('');
+    // ProseMirror does not allow empty text nodes
+    if (!text) return null;
+    return { type: 'text', text };
+  }
+
+  if (node instanceof Y.XmlElement) {
+    const tag = node.nodeName as string;
+    const { type, attrs: typeAttrs } = tagToTiptapType(tag);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const elementAttrs = node.getAttributes() as Record<string, unknown>;
+    const mergedAttrs = { ...elementAttrs, ...typeAttrs };
+
+    // Recursively convert children, filtering out invalid (null) nodes
+    const childContent: object[] = [];
+    (node as unknown as Y.XmlFragment).forEach((child) => {
+      const childNode = xmlElementToNode(child);
+      if (childNode) childContent.push(childNode);
+    });
+
+    return {
+      type,
+      ...(Object.keys(mergedAttrs).length > 0 ? { attrs: mergedAttrs } : {}),
+      ...(childContent.length > 0 ? { content: childContent } : {}),
+    };
+  }
+
+  // Unknown node type — skip rather than producing invalid empty text
+  return null;
+}
+
+/**
+ * Convert a Yjs XmlElement nodeName to a Tiptap node type.
+ *
+ * Tiptap collaboration stores nodes in Yjs using their original camelCase
+ * Tiptap names (e.g. "bulletList", "taskItem", "horizontalRule").
+ * Only a few nodes use HTML tag names (p, ul, ol, li, h1-h6, etc.).
+ * We map the HTML tags to Tiptap names, and pass everything else through as-is.
+ */
+function tagToTiptapType(tag: string): {
+  type: string;
+  attrs?: Record<string, unknown>;
+} {
+  // Heading tags: h1-h6
+  const headingMatch = /^h([1-6])$/i.exec(tag);
+  if (headingMatch) {
+    return { type: 'heading', attrs: { level: Number(headingMatch[1]) } };
+  }
+
+  // HTML tag → Tiptap type mapping (only for actual HTML tags)
+  const htmlTagMap: Record<string, string> = {
+    p: 'paragraph',
+    ul: 'bulletList',
+    ol: 'orderedList',
+    li: 'listItem',
+    blockquote: 'blockquote',
+    pre: 'codeBlock',
+    code: 'code',
+    hr: 'horizontalRule',
+    br: 'hardBreak',
+    img: 'image',
+    table: 'table',
+    tr: 'tableRow',
+    th: 'tableHeader',
+    td: 'tableCell',
+    strong: 'bold',
+    em: 'italic',
+    s: 'strike',
+    u: 'underline',
+    a: 'link',
+  };
+
+  const lower = tag.toLowerCase();
+  if (htmlTagMap[lower]) {
+    return { type: htmlTagMap[lower] };
+  }
+
+  // Already a Tiptap camelCase name (bulletList, taskItem, drawing, etc.) — pass through as-is
+  return { type: tag };
+}
+
+/**
+ * Extract Tiptap JSON from a full Yjs state update binary.
+ * Returns a ProseMirror-compatible JSON doc, or null on failure.
+ */
+export function ydocUpdateToTiptapJson(
+  updateBytes: Uint8Array,
+): object | null {
+  try {
+    const doc = new Y.Doc();
+    Y.applyUpdate(doc, updateBytes);
+
+    const fragmentNames = ['content', 'default'];
+    let tiptapJson: object | null = null;
+
+    for (const name of fragmentNames) {
+      const fragment = doc.getXmlFragment(name);
+      if (fragment.length > 0) {
+        tiptapJson = xmlFragmentToTiptapJson(fragment);
+        break;
+      }
+    }
+
+    doc.destroy();
+    return tiptapJson;
+  } catch {
+    return null;
+  }
+}

apps/api/src/documents/documents.service.ts

@@ -93,7 +93,15 @@ export class DocumentsService {
         title: true,
         parentId: true,
         order: true,
+        createdAt: true,
         updatedAt: true,
+        creator: {
+          select: {
+            id: true,
+            name: true,
+            avatarUrl: true,
+          },
+        },
       },
     });
     return docs;