12dc648cff
perf: round 4 — one-pass row paths, drive-selector cache, CalDAV single-parse, streamed Azure, batched hydration
...
Nine benchmark-gated changes (benches/ROUND4.md; every one ships with a
BEFORE/AFTER bench + equivalence gate, rollback rule as ROUND2/3):
- Row→entity path build: one-pass StoragePath::from_folder_and_name /
from_joined + normalize_storage_name_owned + alloc-free Display —
743→417 ns/file-row (1.78x), −5 allocs/row on every listing surface.
- WebDAV drive-selector: per-user readable_cache (single-flight, 30 s
TTL, explicit invalidation incl. membership + group changes) replaces
the grants join per request — 441 µs → 0.8 µs (~550x), 0 queries warm.
- CalDAV from_ical/update_ical_data: 8 full IcalParser runs per VEVENT
→ 1 (7.1x per PUT, 4.4x on 50-event imports); alloc-free split_vevents,
chunk scan without the whole-body uppercase copy (1.4x), borrowed-key
UID grouping (1.3x), REPORT props no longer cloned.
- PROPFIND emit: partition Vecs dropped (single-pass 404 list) + stack
rendered RFC 3339/2822 dates, sizes, quoted etags (common::fmt,
chrono-byte-identical, sweep-tested) on both DAV surfaces — 1.22x
per page, 17.9→12.0 allocs/row.
- Grant-listing hydration: calendars/address books/playlists batch
hydrate via = ANY($1) — 15 serial queries → 1 (~13x per sync poll).
- user-flags cache: get→insert → try_get_with single-flight (32→1
queries per cold herd).
- Azure downloads: whole-blob Vec buffering → streamed SDK pages —
TTFB 349→4 ms (87x), peak heap 480→1.9 MiB (254x) on 256 MiB blobs;
new OXICLOUD_AZURE_ENDPOINT_URL override (Azurite/bench hook).
- Face indexing: unbounded per-image tokio::spawn → core-count
semaphore, permit before blob read — peak heap 1175→176 MiB (6.7x).
Checks: cargo fmt, clippy --all-features --all-targets -D warnings,
cargo test --workspace (523 passed) + --features test_utils. hurl API
suite and dockerized integration DB not runnable in this environment —
left to CI.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_017aJu9ghvuT8WqC31ZEGTBA
2026-07-17 13:48:37 +00:00
a6427fc028
feat(drive): add readonly policy
...
permmit admin to freeze a drive, trash janitor background job is also disabled for this drive
2026-07-16 01:02:15 +02:00
c62f97d8f2
readd removed utility, cleanup/shorten enum usage
2026-07-13 22:22:12 +02:00
8a405af5e1
refactor(drive): match DriveKind directly instead of Drive::is_personal()
...
Drops the boolean is_personal() wrapper in favor of matching
DriveKind::Personal/Shared at the two call sites, matching the
exhaustive-match convention already used for DriveKind elsewhere
(as_str, parse, DriveKindDto::from).
2026-07-13 19:51:40 +02:00
f7deb7aaf4
fix(authz): invalidate role cache on change
2026-07-06 23:07:49 +02:00
01ff7dab0b
feat(drive): impl policy photo + music policies
...
add `include_in_photo_index` and `include_in_music_index` policies
both true for default personal drive
photo is implemented
music is not yet implemented
2026-07-01 21:57:37 +02:00
ee92d365b9
feat(drive): ensure drive_id updated on file|folder moved to another drive
2026-06-29 21:11:40 +02:00
66f2aaa250
feat(drive): add drive policie
...
- add policy forbid_external_sharing
- add policy forbid_sharing
- add polocy forbid_cross_drive_move
- add policy forbid_owner_role_change
2026-06-26 14:04:36 +02:00
ddb131da8b
feat(drive): add policy forbid_public_links
2026-06-26 13:59:02 +02:00
7d24015fc4
feat(drive): add drive deletion
...
- conditions: drive must be empty
- deletion forbidden on main personal drive
2026-06-24 21:17:27 +02:00
d77846119f
feat(drive): UI: add drive edition for admin
2026-06-24 01:20:44 +02:00
a5b24a7453
feat(drive): add /api/drive
...
- permit shared drive creation from oxicloud admin (for now)
- prepare other personal drive creation (Not implemented), need to validate
quota policies and strategy first
- add hurl test to verify permissions
2026-06-23 23:50:57 +02:00
4eb9707774
feat(drive): check user grants on drive
...
use drive's grant whant handling a file or folder
2026-06-23 20:26:31 +02:00
Claude