getExtra

.claude/parallel-chunk-upload-storage-plan.md

@@ -1,174 +0,0 @@
-# Parallel Chunk Upload Support for utopia-php/storage
-
-## Context
-
-The Appwrite API now supports out-of-order chunked uploads (chunks can arrive in any sequence). The next step is **parallel uploads** — multiple chunks uploaded simultaneously via separate HTTP requests. The SDK guarantees the first chunk is sent before any parallel chunks, so the document creation race is handled at the API layer. However, the storage device layer has a race condition that must be fixed.
-
-## Problem: `Local::joinChunks()` Race
-
-When two requests upload the final missing chunks in parallel, both can observe `countChunks() == $chunks` and call `joinChunks()` simultaneously.
-
-### Current behavior (loser throws)
-
-```php
-// Local::joinChunks()
-$dest = \fopen($tmpAssemble, 'wb');
-// ... stream all parts into $tmpAssemble ...
-
-if (! \rename($tmpAssemble, $path)) {
-    \unlink($tmpAssemble);
-    throw new Exception('Failed to finalize assembled file '.$path);
-}
-```
-
-The winner succeeds with `rename()`. The loser gets `false` from `rename()` (file already exists at `$path`) and throws a 500-error exception. The client that lost the race receives an error even though the file is fully assembled.
-
-### Required behavior
-
-If `$path` already exists, another request already assembled the file. The loser should **silently succeed** — the file is complete, nothing more to do.
-
-## Proposed Changes
-
-### 1. `Local::joinChunks()` — Handle assembly race
-
-Before opening `$tmpAssemble`, check if the final file already exists. If it does, skip assembly entirely.
-
-```php
-private function joinChunks(string $path, int $chunks): void
-{
-    // Race winner already assembled the file
-    if (\file_exists($path)) {
-        return;
-    }
-
-    $tmp = \dirname($path).DIRECTORY_SEPARATOR.'tmp_'.asename($path);
-    $tmpAssemble = \dirname($path).DIRECTORY_SEPARATOR.'tmp_assemble_'.asename($path);
-
-    // ... rest of assembly logic ...
-
-    if (! \rename($tmpAssemble, $path)) {
-        // Another request may have won the race between fclose and rename
-        if (\file_exists($path)) {
-            \unlink($tmpAssemble);
-            return;
-        }
-        \unlink($tmpAssemble);
-        throw new Exception('Failed to finalize assembled file '.$path);
-    }
-
-    // ... cleanup ...
-}
-```
-
-### 2. `Local::countChunks()` — Reliability under concurrent writes
-
-`countChunks()` uses `glob()` on the temp directory. Under heavy parallel load, `glob()` might miss files or return inconsistent counts. The current implementation is already fairly robust (it validates `.part.\d+` suffix), but we should document that the return value is a best-effort snapshot.
-
-No code change needed here unless tests reveal issues.
-
-### 3. Tests — Concurrent chunk uploads
-
-Add a test that simulates two parallel requests completing a multi-chunk upload:
-
-```php
-public function testParallelChunkUpload(): void
-{
-    $storage = $this->makeJoinTestStorage();
-    $dest = $storage->getRoot().DIRECTORY_SEPARATOR.'parallel.dat';
-
-    // Upload chunk 1 (creates temp directory)
-    $storage->uploadData('AAAA', $dest, 'application/octet-stream', 1, 2);
-
-    // Simulate two parallel requests uploading the last chunk
-    // In a real test, use pcntl_fork() or pthreads for true concurrency
-    // For the test suite, sequential calls are sufficient if we verify
-    // the second call doesn't throw after the first completed assembly
-    $storage->uploadData('BBBB', $dest, 'application/octet-stream', 2, 2);
-
-    // Verify file exists and is correct
-    $this->assertTrue(\file_exists($dest));
-    $this->assertSame('AAAABBBB', \file_get_contents($dest));
-
-    // Verify second assembly attempt doesn't throw
-    // (This simulates the race where another request already assembled)
-    try {
-        $storage->uploadData('BBBB', $dest, 'application/octet-stream', 2, 2);
-    } catch (\Exception $e) {
-        $this->fail('Duplicate assembly should not throw: '.$e->getMessage());
-    }
-
-    $storage->delete($storage->getRoot(), true);
-}
-```
-
-A more realistic concurrent test using `pcntl_fork()`:
-
-```php
-public function testParallelChunkUploadWithFork(): void
-{
-    if (!\function_exists('pcntl_fork')) {
-        $this->markTestSkipped('pcntl extension required for fork-based concurrency test');
-    }
-
-    $storage = $this->makeJoinTestStorage();
-    $dest = $storage->getRoot().DIRECTORY_SEPARATOR.'parallel-fork.dat';
-
-    // Pre-upload chunk 1
-    $storage->uploadData('AAAA', $dest, 'application/octet-stream', 1, 2);
-
-    $pid = pcntl_fork();
-    if ($pid === -1) {
-        $this->fail('Failed to fork');
-    } elseif ($pid === 0) {
-        // Child process: upload chunk 2
-        try {
-            $storage->uploadData('BBBB', $dest, 'application/octet-stream', 2, 2);
-            exit(0);
-        } catch (\Exception $e) {
-            exit(1);
-        }
-    }
-
-    // Parent process: also upload chunk 2 (race condition)
-    $parentSuccess = true;
-    try {
-        $storage->uploadData('BBBB', $dest, 'application/octet-stream', 2, 2);
-    } catch (\Exception $e) {
-        $parentSuccess = false;
-    }
-
-    pcntl_waitpid($pid, $status);
-    $childSuccess = pcntl_wexitstatus($status) === 0;
-
-    // At least one should succeed
-    $this->assertTrue($parentSuccess || $childSuccess, 'At least one parallel upload should succeed');
-
-    // File should be correctly assembled
-    $this->assertTrue(\file_exists($dest));
-    $this->assertSame('AAAABBBB', \file_get_contents($dest));
-
-    $storage->delete($storage->getRoot(), true);
-}
-```
-
-## S3 Device
-
-S3 already handles out-of-order multipart uploads natively. The `completeMultipartUpload` call with `ksort()` sorts parts by number regardless of upload order. However, parallel `completeMultipartUpload` calls for the same `uploadId` would still be problematic.
-
-This is an **API-layer concern** — the Appwrite API should ensure only one request calls `completeMultipartUpload` per upload. The S3 device itself does not need changes.
-
-## Files to Change
-
-| File | Change |
-|------|--------|
-| `src/Storage/Device/Local.php` | Add `file_exists($path)` guard at start of `joinChunks()` and in `rename()` failure handler |
-| `tests/Storage/Device/LocalTest.php` | Add `testParallelChunkUpload` and `testParallelChunkUploadWithFork` |
-
-## Backwards Compatibility
-
-Fully backwards compatible. The change only affects the error path when `rename()` fails due to an existing file. Previously it threw; now it returns silently. No public API signatures change.
-
-## Related PRs
-
-- Appwrite server PR: https://github.com/appwrite/appwrite/pull/12138 (out-of-order upload support)
-- This storage PR is a prerequisite for the follow-up Appwrite PR that enables parallel chunk uploads at the API level.

.claude/skills/patch-release-checklist/SKILL.md

@@ -1,29 +0,0 @@
-# Patch Release Checklist for Appwrite
-
-When bumping a patch version (e.g., `1.9.0` -> `1.9.1`), follow this checklist.
-
-## Checklist
-
-### Bump console image
-
-Update the console Docker image tag in both files:
-- [ ] `docker-compose.yml` -- update `image: appwrite/console:X.Y.Z`
-- [ ] `app/views/install/compose.phtml` -- update `image: <?php echo $organization; ?>/console:X.Y.Z`
-
-### Bump Appwrite version
-
-- [ ] **`app/init/constants.php`** -- update `APP_VERSION_STABLE` to the new version (e.g., `'1.9.1'`). In same file, increment `APP_CACHE_BUSTER` by 1.
-- [ ] **`README.md`** -- update the Docker image tag `appwrite/appwrite:X.Y.Z` in all 3 install code blocks (Unix, Windows CMD, PowerShell).
-- [ ] **`README-CN.md`** -- same Docker image tag update in all 3 install code blocks.
-- [ ] **`src/Appwrite/Migration/Migration.php`** -- add the new version to the `$versions` array, mapping it to a migration class. If new class exists, use that, otherwise use sle same class as previous version
-
-### Update CHANGES.md
-
-- [ ] Add a new `# Version X.Y.Z` section at the top of `CHANGES.md` with subsections: `### Notable changes`, `### Fixes`, `### Miscellaneous`
-
-## Final review
-
-- [ ] Ask user to review changes before commiting
-- [ ] Ask user to update `CHANGES.md` with PRs
-- [ ] Ask user to generate specs, if needed
-- [ ] Ask user to add request and response filters, if needed

.env

@@ -146,5 +146,3 @@ _APP_STATS_USAGE_DUAL_WRITING_DBS=database_db_main
 _APP_TRUSTED_HEADERS=x-forwarded-for
 _APP_POOL_ADAPTER=stack
 _APP_WORKER_SCREENSHOTS_ROUTER=http://appwrite
-_TESTS_OAUTH2_GITHUB_CLIENT_ID=
-_TESTS_OAUTH2_GITHUB_CLIENT_SECRET=

.github/workflows/benchmark-comment.js

@@ -1,349 +0,0 @@
-const fs = require('fs');
-
-const marker = '<!-- appwrite-benchmark-results -->';
-const serviceLabels = ['Account', 'TablesDB', 'Storage', 'Functions'];
-
-module.exports = async ({ github, context, core }) => {
-    const body = buildComment(core);
-    fs.writeFileSync('benchmark-comment.txt', body);
-
-    const pullRequest = context.payload.pull_request;
-    if (!pullRequest || pullRequest.head.repo.full_name !== `${context.repo.owner}/${context.repo.repo}`) {
-        return;
-    }
-
-    const comments = await github.paginate(github.rest.issues.listComments, {
-        owner: context.repo.owner,
-        repo: context.repo.repo,
-        issue_number: pullRequest.number,
-        per_page: 100,
-    });
-
-    const existing = comments.find((comment) => {
-        return comment.user?.type === 'Bot' && comment.body?.includes(marker);
-    }) || comments.find((comment) => {
-        return comment.user?.type === 'Bot' && comment.body?.includes('Benchmark results');
-    });
-
-    if (existing) {
-        await github.rest.issues.updateComment({
-            owner: context.repo.owner,
-            repo: context.repo.repo,
-            comment_id: existing.id,
-            body,
-        });
-        return;
-    }
-
-    await github.rest.issues.createComment({
-        owner: context.repo.owner,
-        repo: context.repo.repo,
-        issue_number: pullRequest.number,
-        body,
-    });
-};
-
-function buildComment(core) {
-    const before = readSummary('benchmark-before-summary.json', core);
-    const after = readSummary('benchmark-after-summary.json', core);
-    const beforeSamples = readSamples('benchmark-before-samples.json', core);
-    const afterSamples = readSamples('benchmark-after-samples.json', core);
-    const baseRef = markdownText(process.env.BENCHMARK_BASE_REF || 'base');
-    const headRef = markdownText(process.env.BENCHMARK_HEAD_REF || 'head');
-    const rows = benchmarkRows(before, after, beforeSamples, afterSamples);
-    const topWaits = topSamples(afterSamples, 'appwrite_api_waiting', 3);
-    const lines = [
-        marker,
-        '## :sparkles: Benchmark results',
-        '',
-        `Comparing ${baseRef} (before) to ${headRef} (after).`,
-        '',
-    ];
-
-    if (before === null) {
-        lines.push('> Before benchmark did not complete; showing current branch metrics only.', '');
-    }
-    if (after === null) {
-        lines.push('> Current branch benchmark did not complete; showing available metrics only.', '');
-    }
-
-    lines.push(
-        '**Before**',
-        '',
-        metricTable(rows, 'before'),
-        '',
-        '**After**',
-        '',
-        metricTable(rows, 'after'),
-        '',
-        '**Delta**',
-        '',
-        '| Scenario | P95 delta (ms) |',
-        '| --- | ---: |',
-        ...rows.map(deltaRow),
-        '',
-        '<details>',
-        '<summary><strong>Top API waits</strong></summary>',
-        '',
-        '<br>',
-        '',
-        '| API request | Max wait (ms) |',
-        '| --- | ---: |',
-        ...topWaitRows(topWaits),
-        '',
-        '</details>',
-    );
-
-    return `${lines.join('\n')}\n`;
-}
-
-function readSummary(path, core) {
-    if (!fs.existsSync(path)) {
-        return null;
-    }
-
-    try {
-        return JSON.parse(fs.readFileSync(path, 'utf8'));
-    } catch (error) {
-        core?.warning(`Invalid benchmark summary ${path}: ${error.message}`);
-        return null;
-    }
-}
-
-function readSamples(path, core) {
-    if (!fs.existsSync(path)) {
-        return [];
-    }
-
-    const contents = fs.readFileSync(path, 'utf8').trim();
-    if (contents === '') {
-        return [];
-    }
-
-    return contents
-        .split('\n')
-        .filter(Boolean)
-        .flatMap((line) => {
-            try {
-                return [JSON.parse(line)];
-            } catch (error) {
-                core?.warning(`Invalid benchmark sample in ${path}: ${error.message}`);
-                return [];
-            }
-        });
-}
-
-function benchmarkRows(before, after, beforeSamples, afterSamples) {
-    const beforeServices = serviceStats(beforeSamples);
-    const afterServices = serviceStats(afterSamples);
-    return [
-        {
-            label: 'API total',
-            before: apiSampleStats(beforeSamples) || summaryStats(before, 'appwrite_api_duration'),
-            after: apiSampleStats(afterSamples) || summaryStats(after, 'appwrite_api_duration'),
-        },
-        ...serviceLabels.map((label) => ({
-            label,
-            before: beforeServices.get(label) || null,
-            after: afterServices.get(label) || null,
-        })),
-    ];
-}
-
-function summaryStats(summary, durationMetric, iterationsMetric = null, rpsMetric = null) {
-    const values = metricValues(summary, durationMetric);
-    if (!values) {
-        return null;
-    }
-
-    return {
-        p50: values.med ?? null,
-        p95: values['p(95)'] ?? null,
-        iterations: iterationsMetric ? metricValue(summary, iterationsMetric, 'count') : values.count ?? null,
-        rps: rpsMetric ? metricValue(summary, rpsMetric, 'rate') : null,
-    };
-}
-
-function serviceStats(samples) {
-    const apiSamples = samples.filter((sample) => {
-        return sample.metric === 'appwrite_api_duration' && typeof sample.data?.value === 'number';
-    });
-    const groups = new Map();
-
-    for (const sample of apiSamples) {
-        const service = serviceFromName(sample.data.tags?.name || '');
-        if (!service) {
-            continue;
-        }
-
-        const serviceSamples = groups.get(service) || [];
-        serviceSamples.push(sample);
-        groups.set(service, serviceSamples);
-    }
-
-    return new Map([...groups.entries()].map(([service, serviceSamples]) => {
-        const values = serviceSamples.map((sample) => sample.data.value);
-        const durationSeconds = sampleWindowSeconds(serviceSamples);
-        return [service, {
-            p50: percentile(values, 50),
-            p95: percentile(values, 95),
-            iterations: values.length,
-            rps: durationSeconds ? values.length / durationSeconds : null,
-        }];
-    }));
-}
-
-function apiSampleStats(samples) {
-    const apiSamples = samples.filter((sample) => {
-        return sample.metric === 'appwrite_api_duration' && typeof sample.data?.value === 'number';
-    });
-    const values = apiSamples.map((sample) => sample.data.value);
-    if (values.length === 0) {
-        return null;
-    }
-
-    const durationSeconds = sampleWindowSeconds(apiSamples);
-    return {
-        p50: percentile(values, 50),
-        p95: percentile(values, 95),
-        iterations: values.length,
-        rps: durationSeconds ? values.length / durationSeconds : null,
-    };
-}
-
-function serviceFromName(name) {
-    if (name.startsWith('account.')) {
-        return 'Account';
-    }
-    if (name.startsWith('tablesdb.')) {
-        return 'TablesDB';
-    }
-    if (name.startsWith('storage.') || name.startsWith('tokens.')) {
-        return 'Storage';
-    }
-    if (name.startsWith('functions.')) {
-        return 'Functions';
-    }
-    return null;
-}
-
-function sampleWindowSeconds(samples) {
-    const times = samples
-        .map((sample) => Date.parse(sample.data?.time))
-        .filter((value) => !Number.isNaN(value));
-    if (times.length < 2) {
-        return null;
-    }
-
-    return Math.max((Math.max(...times) - Math.min(...times)) / 1000, 1);
-}
-
-function percentile(values, percentileValue) {
-    if (values.length === 0) {
-        return null;
-    }
-
-    const sorted = [...values].sort((left, right) => left - right);
-    const index = Math.ceil((percentileValue / 100) * sorted.length) - 1;
-    return sorted[Math.max(0, Math.min(index, sorted.length - 1))];
-}
-
-function metricValues(data, metric) {
-    return data?.metrics?.[metric]?.values ?? null;
-}
-
-function metricValue(data, metric, stat) {
-    return metricValues(data, metric)?.[stat] ?? null;
-}
-
-function metricTable(rows, side) {
-    return [
-        '| Scenario | P50 (ms) | P95 (ms) | Requests | RPS |',
-        '| --- | ---: | ---: | ---: | ---: |',
-        ...rows.map((row) => metricRow(row, side)),
-    ].join('\n');
-}
-
-function metricRow(row, side) {
-    const values = row[side];
-    return `| ${row.label} | ${formatMs(values?.p50)} | ${formatMs(values?.p95)} | ${formatCount(values?.iterations)} | ${formatRate(values?.rps)} |`;
-}
-
-function deltaRow(row) {
-    return `| ${row.label} | ${formatDelta(row.before?.p95, row.after?.p95)} |`;
-}
-
-function topSamples(samples, metric, limit) {
-    const byName = samples.reduce((result, sample) => {
-        if (sample.metric !== metric || typeof sample.data?.value !== 'number') {
-            return result;
-        }
-
-        const name = sample.data.tags?.name || 'unknown';
-        const current = result.get(name);
-        if (!current || sample.data.value > current.value) {
-            result.set(name, { name, value: sample.data.value });
-        }
-
-        return result;
-    }, new Map());
-
-    return [...byName.values()]
-        .sort((left, right) => right.value - left.value)
-        .slice(0, limit);
-}
-
-function topWaitRows(samples) {
-    if (samples.length === 0) {
-        return ['| n/a | n/a |'];
-    }
-
-    return samples.map((sample) => {
-        return `| ${markdownText(sample.name).replace(/\|/g, '\\|')} | ${formatMs(sample.value)} |`;
-    });
-}
-
-function markdownText(value) {
-    return String(value || '').replace(/[\r\n]/g, ' ').replace(/[&<>"']/g, (char) => {
-        return ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#039;' })[char];
-    });
-}
-
-function formatMs(value) {
-    return formatNumber(value, 2);
-}
-
-function formatRate(value) {
-    return formatNumber(value, 2);
-}
-
-function formatCount(value) {
-    if (value === null || value === undefined || Number.isNaN(value)) {
-        return 'n/a';
-    }
-
-    return `${Math.round(value)}`;
-}
-
-function formatDelta(before, after) {
-    if (before === null || before === undefined || after === null || after === undefined || Number.isNaN(before) || Number.isNaN(after)) {
-        return 'n/a';
-    }
-
-    const difference = Number((after - before).toFixed(2));
-    return `${difference > 0 ? '+' : ''}${trimNumber(difference)}`;
-}
-
-function formatNumber(value, decimals) {
-    if (value === null || value === undefined || Number.isNaN(value)) {
-        return 'n/a';
-    }
-
-    return trimNumber(Number(value).toFixed(decimals));
-}
-
-function trimNumber(value) {
-    const text = String(value);
-    const trimmed = text.includes('.') ? text.replace(/\.?0+$/, '') : text;
-    return trimmed === '' ? '0' : trimmed;
-}

.github/workflows/ci.yml

@@ -7,8 +7,6 @@ concurrency:
 env:
   COMPOSE_FILE: docker-compose.yml
   IMAGE: appwrite-dev
-  REGISTRY_IMAGE: ghcr.io/${{ github.repository }}/appwrite-dev
-  K6_VERSION: '0.53.0'
 
 on:
   pull_request:
@@ -20,10 +18,6 @@ on:
         type: string
         default: ''
 
-permissions:
-  contents: read
-  packages: write
-
 jobs:
   dependencies:
     name: Checks / Dependencies
@@ -216,7 +210,7 @@ jobs:
         with:
           script: |
             const allDatabases = ['MariaDB', 'PostgreSQL', 'MongoDB'];
-            const allModes = ['dedicated', 'shared'];
+            const allModes = ['dedicated', 'shared_v1', 'shared_v2'];
 
             const defaultDatabases = ['MongoDB'];
             const defaultModes = ['dedicated'];
@@ -263,30 +257,32 @@ jobs:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
-      - name: Build and push Appwrite
+      - name: Build Appwrite
         uses: docker/build-push-action@v6
         with:
           context: .
-          push: true
-          tags: ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
+          push: false
+          tags: ${{ env.IMAGE }}
+          load: true
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          outputs: type=docker,dest=/tmp/${{ env.IMAGE }}.tar
           target: development
           build-args: |
             DEBUG=false
             TESTING=true
             VERSION=dev
 
+      - name: Upload Docker Image
+        uses: actions/upload-artifact@v7
+        with:
+          name: ${{ env.IMAGE }}
+          path: /tmp/${{ env.IMAGE }}.tar
+          retention-days: 1
+
   unit:
     name: Tests / Unit
     runs-on: ubuntu-latest
@@ -294,32 +290,26 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      packages: read
     steps:
       - name: checkout
         uses: actions/checkout@v6
 
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ env.IMAGE }}
+          path: /tmp
+
       - name: Login to Docker Hub
         uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Docker Image
-        run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-
       - name: Load and Start Appwrite
         timeout-minutes: 5
         run: |
+          docker load --input /tmp/${{ env.IMAGE }}.tar
           docker compose pull --quiet --ignore-buildable
           docker compose up -d --quiet-pull --wait
 
@@ -347,32 +337,26 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      packages: read
     steps:
       - name: checkout
         uses: actions/checkout@v6
 
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ env.IMAGE }}
+          path: /tmp
+
       - name: Login to Docker Hub
         uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Docker Image
-        run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-
       - name: Load and Start Appwrite
         timeout-minutes: 5
         run: |
+          docker load --input /tmp/${{ env.IMAGE }}.tar
           docker compose pull --quiet --ignore-buildable
           docker compose up -d --quiet-pull --wait
 
@@ -411,7 +395,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      packages: read
     strategy:
       fail-fast: false
       matrix:
@@ -446,8 +429,6 @@ jobs:
         include:
           - service: Databases
             runner: blacksmith-4vcpu-ubuntu-2404
-            paratest_processes: 3
-            timeout_minutes: 30
           - service: Sites
             runner: blacksmith-4vcpu-ubuntu-2404
           - service: Functions
@@ -458,18 +439,18 @@ jobs:
             runner: blacksmith-4vcpu-ubuntu-2404
           - service: TablesDB
             runner: blacksmith-4vcpu-ubuntu-2404
-            paratest_processes: 3
-            timeout_minutes: 30
-          - service: Migrations
-            paratest_processes: 1
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      - name: Set environment
-        run: |
-          echo "_APP_OPTIONS_ROUTER_PROTECTION=enabled" >> $GITHUB_ENV
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ env.IMAGE }}
+          path: /tmp
 
+      - name: Set database environment
+        run: |
           if [ "${{ matrix.database }}" = "MariaDB" ]; then
             echo "COMPOSE_PROFILES=mariadb" >> $GITHUB_ENV
             echo "_APP_DB_ADAPTER=mariadb" >> $GITHUB_ENV
@@ -493,26 +474,18 @@ jobs:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Docker Image
-        run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-
       - name: Load and Start Appwrite
         timeout-minutes: 5
         env:
           _APP_BROWSER_HOST: http://invalid-browser/v1
           _APP_DATABASE_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'database_db_main' || '' }}
+          _APP_DATABASE_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'database_db_main' || '' }}
           _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'documentsdb_db_main' || '' }}
+          _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'documentsdb_db_main' || '' }}
           _APP_DATABASE_VECTORSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'vectorsdb_db_main' || '' }}
+          _APP_DATABASE_VECTORSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'vectorsdb_db_main' || '' }}
         run: |
+          docker load --input /tmp/${{ env.IMAGE }}.tar
           docker compose pull --quiet --ignore-buildable
           docker compose up -d --quiet-pull --wait
 
@@ -529,7 +502,7 @@ jobs:
         with:
           max_attempts: 2
           retry_wait_seconds: 60
-          timeout_minutes: ${{ matrix.timeout_minutes || 20 }}
+          timeout_minutes: 20
           job_id: ${{ job.check_run_id }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           test_dir: tests/e2e/Services/${{ matrix.service }}
@@ -539,19 +512,12 @@ jobs:
             # Services that rely on sequential test method execution (shared static state)
             FUNCTIONAL_FLAG="--functional"
             case "${{ matrix.service }}" in
-              Databases|TablesDB|Functions|Realtime|GraphQL|ProjectWebhooks) FUNCTIONAL_FLAG="" ;;
+              Databases|TablesDB|Functions|Realtime) FUNCTIONAL_FLAG="" ;;
             esac
 
-            PARATEST_PROCESSES="${{ matrix.paratest_processes }}"
-            if [ -z "$PARATEST_PROCESSES" ]; then
-              PARATEST_PROCESSES="$(nproc)"
-            fi
-
             docker compose exec -T \
               -e _APP_E2E_RESPONSE_FORMAT="${{ github.event.inputs.response_format }}" \
-              -e _TESTS_OAUTH2_GITHUB_CLIENT_ID="${{ secrets.TESTS_OAUTH2_GITHUB_CLIENT_ID }}" \
-              -e _TESTS_OAUTH2_GITHUB_CLIENT_SECRET="${{ secrets.TESTS_OAUTH2_GITHUB_CLIENT_SECRET }}" \
-              appwrite vendor/bin/paratest --processes "$PARATEST_PROCESSES" $FUNCTIONAL_FLAG "$SERVICE_PATH" --exclude-group abuseEnabled --exclude-group screenshots --log-junit tests/e2e/Services/${{ matrix.service }}/junit.xml
+              appwrite vendor/bin/paratest --processes $(nproc) $FUNCTIONAL_FLAG "$SERVICE_PATH" --exclude-group abuseEnabled --exclude-group screenshots --log-junit tests/e2e/Services/${{ matrix.service }}/junit.xml
 
       - name: Failure Logs
         if: failure()
@@ -566,7 +532,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      packages: read
     strategy:
       fail-fast: false
       matrix:
@@ -574,8 +539,12 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
+
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
         with:
-          fetch-depth: 1
+          name: ${{ env.IMAGE }}
+          path: /tmp
 
       - name: Login to Docker Hub
         uses: docker/login-action@v4
@@ -583,26 +552,18 @@ jobs:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Docker Image
-        run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-
       - name: Load and Start Appwrite
         timeout-minutes: 5
         env:
           _APP_OPTIONS_ABUSE: enabled
           _APP_DATABASE_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'database_db_main' || '' }}
+          _APP_DATABASE_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'database_db_main' || '' }}
           _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'documentsdb_db_main' || '' }}
+          _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'documentsdb_db_main' || '' }}
           _APP_DATABASE_VECTORSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'vectorsdb_db_main' || '' }}
+          _APP_DATABASE_VECTORSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'vectorsdb_db_main' || '' }}
         run: |
+          docker load --input /tmp/${{ env.IMAGE }}.tar
           docker compose pull --quiet --ignore-buildable
           docker compose up -d --quiet-pull --wait
 
@@ -633,7 +594,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      packages: read
     strategy:
       fail-fast: false
       matrix:
@@ -642,31 +602,29 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v6
 
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ env.IMAGE }}
+          path: /tmp
+
       - name: Login to Docker Hub
         uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Docker Image
-        run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-
       - name: Load and Start Appwrite
         timeout-minutes: 5
         env:
           _APP_DATABASE_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'database_db_main' || '' }}
+          _APP_DATABASE_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'database_db_main' || '' }}
           _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'documentsdb_db_main' || '' }}
+          _APP_DATABASE_DOCUMENTSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'documentsdb_db_main' || '' }}
           _APP_DATABASE_VECTORSDB_SHARED_TABLES: ${{ matrix.mode != 'dedicated' && 'vectorsdb_db_main' || '' }}
+          _APP_DATABASE_VECTORSDB_SHARED_TABLES_V1: ${{ matrix.mode == 'shared_v1' && 'vectorsdb_db_main' || '' }}
         run: |
+          docker load --input /tmp/${{ env.IMAGE }}.tar
           docker compose pull --quiet --ignore-buildable
           docker compose up -d --quiet-pull --wait
 
@@ -700,20 +658,19 @@ jobs:
 
   benchmark:
     name: Benchmark
-    if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     needs: build
     permissions:
-      actions: read
-      contents: read
-      issues: write
       pull-requests: write
-      packages: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
+
+      - name: Download Docker Image
+        uses: actions/download-artifact@v7
         with:
-          fetch-depth: 1
+          name: ${{ env.IMAGE }}
+          path: /tmp
 
       - name: Login to Docker Hub
         uses: docker/login-action@v4
@@ -721,153 +678,79 @@ jobs:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Pull Appwrite image
+      - name: Load and Start Appwrite
         run: |
-          docker pull ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}
-          docker tag ${{ env.REGISTRY_IMAGE }}:${{ github.sha }} ${{ env.IMAGE }}:after
+          sed -i 's/traefik/localhost/g' .env
+          docker load --input /tmp/${{ env.IMAGE }}.tar
+          docker compose up -d
+          sleep 10
 
-      - name: Setup k6
-        uses: grafana/setup-k6-action@ffe7d7290dfa715e48c2ccc924d068444c94bde2
-        with:
-          k6-version: ${{ env.K6_VERSION }}
-
-      - name: Prepare benchmark before
-        id: benchmark_before_prepare
-        continue-on-error: true
+      - name: Install Oha
         run: |
-          git fetch --depth=1 origin ${{ github.event.pull_request.base.sha }}
-          git worktree add --detach /tmp/appwrite-benchmark-before ${{ github.event.pull_request.base.sha }}
-          docker build \
-            --cache-from ${{ env.IMAGE }}:after \
-            --target development \
-            --build-arg DEBUG=false \
-            --build-arg TESTING=true \
-            --build-arg VERSION=dev \
-            --tag ${{ env.IMAGE }}:before \
-            /tmp/appwrite-benchmark-before
+          echo "deb [signed-by=/usr/share/keyrings/azlux-archive-keyring.gpg] http://packages.azlux.fr/debian/ stable main" | sudo tee /etc/apt/sources.list.d/azlux.list
+          sudo wget -O /usr/share/keyrings/azlux-archive-keyring.gpg https://azlux.fr/repo.gpg
+          sudo apt update
+          sudo apt install oha
+          oha --version
 
-      - name: Start before Appwrite
-        id: benchmark_before_start
-        if: steps.benchmark_before_prepare.outcome == 'success'
-        continue-on-error: true
-        working-directory: /tmp/appwrite-benchmark-before
-        env:
-          _APP_DOMAIN: localhost
-          _APP_CONSOLE_DOMAIN: localhost
-          _APP_DOMAIN_FUNCTIONS: functions.localhost
-          _APP_OPTIONS_ABUSE: disabled
+      - name: Benchmark PR
+        run: 'oha -z 180s http://localhost/v1/health/version --output-format json > benchmark.json'
+
+      - name: Cleaning
+        run: docker compose down -v
+
+      - name: Installing latest version
         run: |
-          docker tag ${{ env.IMAGE }}:before ${{ env.IMAGE }}
-          docker compose up -d --wait --no-build
+          rm docker-compose.yml
+          rm .env
+          curl https://appwrite.io/install/compose -o docker-compose.yml
+          curl https://appwrite.io/install/env -o .env
+          sed -i 's/_APP_OPTIONS_ABUSE=enabled/_APP_OPTIONS_ABUSE=disabled/g' .env
+          docker compose up -d
+          sleep 10
 
-      - name: Prepare benchmark files
-        run: rm -f benchmark-before-summary.json benchmark-after-summary.json benchmark-before-samples.json benchmark-after-samples.json
+      - name: Benchmark Latest
+        run: oha -z 180s http://localhost/v1/health/version --output-format json > benchmark-latest.json
 
-      - name: Benchmark before
-        if: steps.benchmark_before_start.outcome == 'success'
-        continue-on-error: true
-        uses: grafana/run-k6-action@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
-        env:
-          APPWRITE_ENDPOINT: 'http://localhost/v1'
-          APPWRITE_BENCHMARK_ITERATIONS: '5'
-          APPWRITE_BENCHMARK_VUS: '1'
-          APPWRITE_WORKER_TIMEOUT_MS: '120000'
-          APPWRITE_BENCHMARK_SUMMARY_PATH: 'benchmark-before-summary.json'
-        with:
-          path: tests/benchmarks/http.js
-          flags: --quiet --out json=benchmark-before-samples.json
-          cloud-comment-on-pr: false
-          debug: true
-
-      - name: Stop before Appwrite
-        if: always()
+      - name: Prepare comment
         run: |
-          if [ -d /tmp/appwrite-benchmark-before ]; then
-            cd /tmp/appwrite-benchmark-before
-            docker compose down -v || true
-          fi
-
-      - name: Wait for benchmark ports
-        if: always()
-        run: |
-          for port in 80 443 8080 9503; do
-            for attempt in $(seq 1 30); do
-              if ! ss -ltn | awk '{print $4}' | grep -Eq "[:.]${port}$"; then
-                break
-              fi
-              sleep 1
-            done
-
-            if ss -ltn | awk '{print $4}' | grep -Eq "[:.]${port}$"; then
-              echo "Port ${port} is still in use after stopping the before stack"
-              ss -ltn
-              exit 1
-            fi
-          done
-
-      - name: Start after Appwrite
-        env:
-          _APP_DOMAIN: localhost
-          _APP_CONSOLE_DOMAIN: localhost
-          _APP_DOMAIN_FUNCTIONS: functions.localhost
-          _APP_OPTIONS_ABUSE: disabled
-        run: |
-          docker tag ${{ env.IMAGE }}:after ${{ env.IMAGE }}
-          docker compose up -d --wait --no-build
-
-      - name: Benchmark after
-        id: benchmark_after
-        continue-on-error: true
-        uses: grafana/run-k6-action@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
-        env:
-          APPWRITE_ENDPOINT: 'http://localhost/v1'
-          APPWRITE_BENCHMARK_ITERATIONS: '5'
-          APPWRITE_BENCHMARK_VUS: '1'
-          APPWRITE_WORKER_TIMEOUT_MS: '120000'
-          APPWRITE_BENCHMARK_PREVIOUS_SUMMARY_PATH: '../../benchmark-before-summary.json'
-          APPWRITE_BENCHMARK_SUMMARY_PATH: 'benchmark-after-summary.json'
-        with:
-          path: tests/benchmarks/http.js
-          flags: --quiet --out json=benchmark-after-samples.json
-          cloud-comment-on-pr: false
-          debug: true
-
-      - name: Stop after Appwrite
-        if: always()
-        run: docker compose down -v || true
-
-      - name: Comment on PR
-        if: always()
-        uses: actions/github-script@v8
-        env:
-          BENCHMARK_BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BENCHMARK_HEAD_REF: ${{ github.event.pull_request.head.ref }}
-        with:
-          script: |
-            const comment = require('./.github/workflows/benchmark-comment.js');
-            await comment({ github, context, core });
+          echo '## :sparkles: Benchmark results' > benchmark.txt
+          echo ' ' >> benchmark.txt
+          echo "- Requests per second: $(jq -r '.summary.requestsPerSec|tonumber?|floor|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark.json)" >> benchmark.txt
+          echo "- Requests with 200 status code: $(jq -r '.statusCodeDistribution."200"|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark.json)" >> benchmark.txt
+          echo "- P99 latency: $(jq -r '.latencyPercentiles.p99' benchmark.json )" >> benchmark.txt
+          echo " " >> benchmark.txt
+          echo " " >> benchmark.txt
+          echo "## :zap:  Benchmark Comparison" >> benchmark.txt
+          echo " " >> benchmark.txt
+          echo "| Metric | This PR | Latest version | "  >> benchmark.txt
+          echo "| --- | --- | --- | "  >> benchmark.txt
+          echo "| RPS | $(jq -r '.summary.requestsPerSec|tonumber?|floor|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark.json) | $(jq -r '.summary.requestsPerSec|tonumber|floor|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark-latest.json) | "  >> benchmark.txt
+          echo "| 200 | $(jq -r '.statusCodeDistribution."200"|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark.json) | $(jq -r '.statusCodeDistribution."200"|tostring|[while(length>0;.[:-3])|.[-3:]]|reverse|join(",")' benchmark-latest.json) | "  >> benchmark.txt
+          echo "| P99 | $(jq -r '.latencyPercentiles.p99' benchmark.json ) | $(jq -r '.latencyPercentiles.p99' benchmark-latest.json ) | "  >> benchmark.txt
 
       - name: Save results
         uses: actions/upload-artifact@v7
         if: ${{ !cancelled() }}
         with:
-          name: benchmark-results
-          path: |
-            benchmark-comment.txt
-            benchmark-before-summary.json
-            benchmark-after-summary.json
-            benchmark-before-samples.json
-            benchmark-after-samples.json
+          name: benchmark.json
+          path: benchmark.json
           retention-days: 7
 
-      - name: Fail benchmark
-        if: always() && steps.benchmark_after.outcome != 'success'
-        run: exit 1
+      - name: Find Comment
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: peter-evans/find-comment@v3
+        id: fc
+        with:
+          issue-number: ${{ github.event.pull_request.number }}
+          comment-author: 'github-actions[bot]'
+          body-includes: Benchmark results
+
+      - name: Comment on PR
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: peter-evans/create-or-update-comment@v4
+        with:
+          comment-id: ${{ steps.fc.outputs.comment-id }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body-path: benchmark.txt
+          edit-mode: replace

.github/workflows/cleanup-cache.yml

@@ -5,11 +5,6 @@ on:
     types:
       - closed
 
-permissions:
-  actions: write
-  contents: read
-  packages: write
-
 jobs:
   cleanup:
     runs-on: ubuntu-latest
@@ -41,29 +36,4 @@ jobs:
             done
           done
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Cleanup GHCR image
-        continue-on-error: true
-        run: |
-          package_path="${GITHUB_REPOSITORY#*/}/appwrite-dev"
-          encoded_path="$(printf '%s' "$package_path" | jq -Rr @uri)"
-
-          gh api --paginate "/repos/${GITHUB_REPOSITORY}/pulls/${{ github.event.pull_request.number }}/commits" --jq '.[].sha' | while read -r sha; do
-            version_ids=$(gh api --paginate -H "Accept: application/vnd.github+json" \
-              "/orgs/${GITHUB_REPOSITORY_OWNER}/packages/container/${encoded_path}/versions" \
-              --jq ".[] | select(.metadata.container.tags | index(\"${sha}\")) | .id")
-
-            if [ -z "$version_ids" ]; then
-              echo "No GHCR version found for SHA ${sha}"
-              continue
-            fi
-
-            echo "$version_ids" | while read -r version_id; do
-              gh api --method DELETE -H "Accept: application/vnd.github+json" \
-                "/orgs/${GITHUB_REPOSITORY_OWNER}/packages/container/${encoded_path}/versions/${version_id}"
-              echo "Deleted ${package_path}:${sha} (version ${version_id})"
-            done
-          done
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/nightly.yml

@@ -24,11 +24,9 @@ jobs:
           ignore-unfixed: 'false'
           severity: 'CRITICAL,HIGH'
       - name: Upload Docker Image Scan Results
-        uses: github/codeql-action/upload-sarif@v4
-        if: always() && hashFiles('trivy-image-results.sarif') != ''
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: 'trivy-image-results.sarif'
-          category: 'trivy-image'
 
   scan-code:
     name: Scan Code
@@ -44,8 +42,6 @@ jobs:
           output: 'trivy-fs-results.sarif'
           severity: 'CRITICAL,HIGH'
       - name: Upload Code Scan Results
-        uses: github/codeql-action/upload-sarif@v4
-        if: always() && hashFiles('trivy-fs-results.sarif') != ''
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: 'trivy-fs-results.sarif'
-          category: 'trivy-source'

AGENTS.md

@@ -115,10 +115,6 @@ Common injections: `$response`, `$request`, `$dbForProject`, `$dbForPlatform`, `
 - Never hardcode credentials -- use environment variables.
 - Code changes may require container restart. No central log location -- check relevant containers.
 
-## Patch release process
-
-For bumping patch versions (e.g., `1.9.0` -> `1.9.1`), follow the checklist in `.claude/skills/patch-release-checklist/SKILL.md`. It covers the 4 files that must be updated, console image bumps, CHANGES.md updates, and common pitfalls to avoid.
-
 ## Cross-repo context
 
 Appwrite is the base server for `appwrite/cloud`. Changes to the Action pattern, module structure, DI system, or response models affect cloud. The `feat-dedicated-db` feature spans cloud, edge, and console.

CHANGES.md

@@ -892,7 +892,7 @@
 * Unset index length by @fogelito in https://github.com/appwrite/appwrite/pull/8978
 * Update base to 0.9.5 by @basert in https://github.com/appwrite/appwrite/pull/9005
 * Sync main into 1.6.x by @TorstenDittmann in https://github.com/appwrite/appwrite/pull/9011
-* Improved shared tables by @abnegate in https://github.com/appwrite/appwrite/pull/9013
+* Improved shared tables V2 by @abnegate in https://github.com/appwrite/appwrite/pull/9013
 * Ensure backwards compatibility for 1.6.x by @christyjacob4 in https://github.com/appwrite/appwrite/pull/9018
 
 # Version 1.6.0

Dockerfile

@@ -12,7 +12,7 @@ RUN composer install --ignore-platform-reqs --optimize-autoloader \
     --no-plugins --no-scripts --prefer-dist \
     `if [ "$TESTING" != "true" ]; then echo "--no-dev"; fi`
 
-FROM appwrite/base:1.2.1 AS base
+FROM appwrite/base:1.0.1 AS base
 
 LABEL maintainer="team@appwrite.io"
 
@@ -24,10 +24,6 @@ ENV _APP_VERSION=$VERSION \
     _APP_HOME=https://appwrite.io
 
 RUN \
-    if [ "$DEBUG" != "true" ]; then \
-    rm -f /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini && \
-    rm -f /usr/local/lib/php/extensions/no-debug-non-zts-*/xdebug.so; \
-    fi && \
     if [ "$DEBUG" == "true" ]; then \
     apk add boost boost-dev; \
     fi
@@ -104,8 +100,7 @@ RUN mkdir -p /etc/letsencrypt/live/ && chmod -Rf 755 /etc/letsencrypt/live/
 FROM base AS production
 
 RUN rm -rf /usr/src/code/app/config/specs && \
-    rm -f /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini /usr/local/etc/php/conf.d/xdebug.ini && \
-    rm -f /usr/local/lib/php/extensions/no-debug-non-zts-*/xdebug.so && \
+    rm -f /usr/local/lib/php/extensions/no-debug-non-zts-20240924/xdebug.so && \
     find /usr -name '*.a' -delete 2>/dev/null || true && \
     find /usr -type d -name '__pycache__' -exec rm -rf {} + 2>/dev/null || true && \
     find /usr -name '*.pyc' -delete 2>/dev/null || true

app/cli.php

@@ -2,10 +2,10 @@
 
 require_once __DIR__ . '/init.php';
 
+use Appwrite\Event\Certificate;
 use Appwrite\Event\Delete;
 use Appwrite\Event\Event;
 use Appwrite\Event\Func;
-use Appwrite\Event\Publisher\Certificate as CertificatePublisher;
 use Appwrite\Event\Publisher\StatsResources as StatsResourcesPublisher;
 use Appwrite\Event\Publisher\Usage as UsagePublisher;
 use Appwrite\Platform\Appwrite;
@@ -253,10 +253,6 @@ $container->set('publisherForUsage', fn (Publisher $publisher) => new UsagePubli
     $publisher,
     new Queue(System::getEnv('_APP_STATS_USAGE_QUEUE_NAME', Event::STATS_USAGE_QUEUE_NAME))
 ), ['publisher']);
-$container->set('publisherForCertificates', fn (Publisher $publisher) => new CertificatePublisher(
-    $publisher,
-    new Queue(System::getEnv('_APP_CERTIFICATES_QUEUE_NAME', Event::CERTIFICATES_QUEUE_NAME))
-), ['publisher']);
 $container->set('publisherForStatsResources', fn (Publisher $publisher) => new StatsResourcesPublisher(
     $publisher,
     new Queue(System::getEnv('_APP_STATS_RESOURCES_QUEUE_NAME', Event::STATS_RESOURCES_QUEUE_NAME))
@@ -267,6 +263,9 @@ $container->set('queueForFunctions', function (Publisher $publisher) {
 $container->set('queueForDeletes', function (Publisher $publisher) {
     return new Delete($publisher);
 }, ['publisher']);
+$container->set('queueForCertificates', function (Publisher $publisher) {
+    return new Certificate($publisher);
+}, ['publisher']);
 $container->set('logError', function (Registry $register) {
     return function (Throwable $error, string $namespace, string $action) use ($register) {
         Console::error('[Error] Timestamp: ' . date('c', time()));

app/config/apis.php

@@ -9,8 +9,8 @@ return [
         'key' => 'graphql',
         'name' => 'GraphQL',
     ],
-    'websocket' => [
-        'key' => 'websocket',
-        'name' => 'Websocket',
+    'realtime' => [
+        'key' => 'realtime',
+        'name' => 'Realtime',
     ],
 ];

app/config/console.php

@@ -34,11 +34,6 @@ $console = [
     'legalAddress' => '',
     'legalTaxId' => '',
     'auths' => [
-        'membershipsUserName' => true,
-        'membershipsUserEmail' => true,
-        'membershipsMfa' => true,
-        'membershipsUserId' => true,
-        'membershipsUserPhone' => true,
         'mockNumbers' => [],
         'invites' => System::getEnv('_APP_CONSOLE_INVITES', 'enabled') === 'enabled',
         'limit' => (System::getEnv('_APP_CONSOLE_WHITELIST_ROOT', 'enabled') === 'enabled') ? 1 : 0, // limit signup to 1 user

app/config/errors.php

@@ -54,11 +54,6 @@ return [
         'description' => 'Rate limit for the current endpoint has been exceeded. Please try again after some time.',
         'code' => 429,
     ],
-    Exception::GENERAL_RESOURCE_LOCKED => [
-        'name' => Exception::GENERAL_RESOURCE_LOCKED,
-        'description' => 'The requested resource is currently being modified by another request. Please retry after a brief delay.',
-        'code' => 409,
-    ],
     Exception::GENERAL_SMTP_DISABLED => [
         'name' => Exception::GENERAL_SMTP_DISABLED,
         'description' => 'SMTP is disabled on your Appwrite instance. You can <a href="/docs/email-delivery">learn more about setting up SMTP</a> in our docs.',
@@ -389,7 +384,7 @@ return [
     ],
     Exception::API_KEY_EXPIRED => [
         'name' => Exception::API_KEY_EXPIRED,
-        'description' => 'The ephemeral API key has expired. Please don\'t use ephemeral API keys for more than duration of the execution.',
+        'description' => 'The dynamic API key has expired. Please don\'t use dynamic API keys for more than duration of the execution.',
         'code' => 401,
     ],
 
@@ -1413,19 +1408,4 @@ return [
         'description' => 'When using project API key, make sure to pass x-appwrite-project header with your project ID.',
         'code' => 403,
     ],
-    Exception::MOCK_NUMBER_ALREADY_EXISTS => [
-        'name' => Exception::MOCK_NUMBER_ALREADY_EXISTS,
-        'description' => 'Mock number with the requested number already exists. Try again with a different number. or update OTP of existing mock number.',
-        'code' => 409,
-    ],
-    Exception::MOCK_NUMBER_NOT_FOUND => [
-        'name' => Exception::MOCK_NUMBER_NOT_FOUND,
-        'description' => 'Mock number with the requested number could not be found.',
-        'code' => 404,
-    ],
-    Exception::MOCK_NUMBER_LIMIT_EXCEEDED => [
-        'name' => Exception::MOCK_NUMBER_LIMIT_EXCEEDED,
-        'description' => 'The maximum number of mock phones for this project has been reached.',
-        'code' => 400,
-    ],
 ];

app/config/locale/templates.php

@@ -9,5 +9,11 @@ return [
         'mfaChallenge',
         'sessionAlert',
         'otpSession'
+    ],
+    'sms' => [
+        'verification',
+        'login',
+        'invitation',
+        'mfaChallenge'
     ]
 ];

app/config/oAuthProviders.php

@@ -167,17 +167,6 @@ return [
         'mock' => false,
         'class' => 'Appwrite\\Auth\\OAuth2\\Figma',
     ],
-    'fusionauth' => [
-        'name' => 'FusionAuth',
-        'developers' => 'https://fusionauth.io/docs/',
-        'icon' => 'icon-fusionauth',
-        'enabled' => true,
-        'sandbox' => false,
-        'form' => 'fusionauth.phtml',
-        'beta' => false,
-        'mock' => false,
-        'class' => 'Appwrite\\Auth\\OAuth2\\FusionAuth',
-    ],
     'github' => [
         'name' => 'GitHub',
         'developers' => 'https://developer.github.com/',
@@ -211,28 +200,6 @@ return [
         'mock' => false,
         'class' => 'Appwrite\\Auth\\OAuth2\\Google',
     ],
-    'keycloak' => [
-        'name' => 'Keycloak',
-        'developers' => 'https://www.keycloak.org/documentation',
-        'icon' => 'icon-keycloak',
-        'enabled' => true,
-        'sandbox' => false,
-        'form' => 'keycloak.phtml',
-        'beta' => false,
-        'mock' => false,
-        'class' => 'Appwrite\\Auth\\OAuth2\\Keycloak',
-    ],
-    'kick' => [
-        'name' => 'Kick',
-        'developers' => 'https://docs.kick.com/',
-        'icon' => 'icon-kick',
-        'enabled' => true,
-        'sandbox' => false,
-        'form' => false,
-        'beta' => false,
-        'mock' => false,
-        'class' => 'Appwrite\\Auth\\OAuth2\\Kick',
-    ],
     'linkedin' => [
         'name' => 'LinkedIn',
         'developers' => 'https://developer.linkedin.com/',

app/config/roles.php

@@ -21,8 +21,8 @@ $member = [
     'projects.read',
     'locale.read',
     'avatars.read',
-    'executions.read',
-    'executions.write',
+    'execution.read',
+    'execution.write',
     'targets.read',
     'targets.write',
     'subscribers.write',
@@ -55,14 +55,6 @@ $admins = [
     'tables.write',
     'platforms.read',
     'platforms.write',
-    'oauth2.read',
-    'oauth2.write',
-    'mocks.read',
-    'mocks.write',
-    'policies.read',
-    'policies.write',
-    'templates.read',
-    'templates.write',
     'projects.write',
     'keys.read',
     'keys.write',
@@ -81,8 +73,8 @@ $admins = [
     'sites.write',
     'log.read',
     'log.write',
-    'executions.read',
-    'executions.write',
+    'execution.read',
+    'execution.write',
     'rules.read',
     'rules.write',
     'migrations.read',
@@ -123,7 +115,7 @@ return [
             'files.write',
             'locale.read',
             'avatars.read',
-            'executions.write',
+            'execution.write',
         ],
     ],
     User::ROLE_USERS => [

app/config/scopes/project.php

@@ -1,340 +1,207 @@
 <?php
 
-// List of publicly visible scopes
-return [
-    // Project
+return [ // List of publicly visible scopes
+    'sessions.write' => [
+        'description' => 'Access to create, update, and delete user sessions',
+    ],
+    'users.read' => [
+        'description' => 'Access to read your project\'s users',
+    ],
+    'users.write' => [
+        'description' => 'Access to create, update, and delete your project\'s users',
+    ],
+    'teams.read' => [
+        'description' => 'Access to read your project\'s teams',
+    ],
+    'teams.write' => [
+        'description' => 'Access to create, update, and delete your project\'s teams',
+    ],
+    'databases.read' => [
+        'description' => 'Access to read your project\'s databases',
+    ],
+    'databases.write' => [
+        'description' => 'Access to create, update, and delete your project\'s databases',
+    ],
+    'collections.read' => [
+        'description' => 'Access to read your project\'s database collections',
+    ],
+    'collections.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database collections',
+    ],
+    'tables.read' => [
+        'description' => 'Access to read your project\'s database tables',
+    ],
+    'tables.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database tables',
+    ],
+    'attributes.read' => [
+        'description' => 'Access to read your project\'s database collection\'s attributes',
+    ],
+    'attributes.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database collection\'s attributes',
+    ],
+    'columns.read' => [
+        'description' => 'Access to read your project\'s database table\'s columns',
+    ],
+    'columns.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database table\'s columns',
+    ],
+    'indexes.read' => [
+        'description' => 'Access to read your project\'s database table\'s indexes',
+    ],
+    'indexes.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database table\'s indexes',
+    ],
+    'documents.read'  => [
+        'description' => 'Access to read your project\'s database documents',
+    ],
+    'documents.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database documents',
+    ],
+    'rows.read'  => [
+        'description' => 'Access to read your project\'s database rows',
+    ],
+    'rows.write' => [
+        'description' => 'Access to create, update, and delete your project\'s database rows',
+    ],
+    'files.read' => [
+        'description' => 'Access to read your project\'s storage files and preview images',
+    ],
+    'files.write' => [
+        'description' => 'Access to create, update, and delete your project\'s storage files',
+    ],
+    'buckets.read' => [
+        'description' => 'Access to read your project\'s storage buckets',
+    ],
+    'buckets.write' => [
+        'description' => 'Access to create, update, and delete your project\'s storage buckets',
+    ],
+    'functions.read' => [
+        'description' => 'Access to read your project\'s functions and code deployments',
+    ],
+    'functions.write' => [
+        'description' => 'Access to create, update, and delete your project\'s functions and code deployments',
+    ],
+    'sites.read' => [
+        'description' => 'Access to read your project\'s sites and deployments',
+    ],
+    'sites.write' => [
+        'description' => 'Access to create, update, and delete your project\'s sites and deployments',
+    ],
+    'log.read' => [
+        'description' => 'Access to read your site\'s logs',
+    ],
+    'log.write' => [
+        'description' => 'Access to update, and delete your site\'s logs',
+    ],
+    'execution.read' => [
+        'description' => 'Access to read your project\'s execution logs',
+    ],
+    'execution.write' => [
+        'description' => 'Access to execute your project\'s functions',
+    ],
+    'locale.read' => [
+        'description' => 'Access to access your project\'s Locale service',
+    ],
+    'avatars.read' => [
+        'description' => 'Access to access your project\'s Avatars service',
+    ],
+    'health.read' => [
+        'description' => 'Access to read your project\'s health status',
+    ],
+    'providers.read' => [
+        'description' => 'Access to read your project\'s providers',
+    ],
+    'providers.write' => [
+        'description' => 'Access to create, update, and delete your project\'s providers',
+    ],
+    'messages.read' => [
+        'description' => 'Access to read your project\'s messages',
+    ],
+    'messages.write' => [
+        'description' => 'Access to create, update, and delete your project\'s messages',
+    ],
+    'topics.read' => [
+        'description' => 'Access to read your project\'s topics',
+    ],
+    'topics.write' => [
+        'description' => 'Access to create, update, and delete your project\'s topics',
+    ],
+    'subscribers.read' => [
+        'description' => 'Access to read your project\'s subscribers',
+    ],
+    'subscribers.write' => [
+        'description' => 'Access to create, update, and delete your project\'s subscribers',
+    ],
+    'targets.read' => [
+        'description' => 'Access to read your project\'s targets',
+    ],
+    'targets.write' => [
+        'description' => 'Access to create, update, and delete your project\'s targets',
+    ],
+    'rules.read' => [
+        'description' => 'Access to read your project\'s proxy rules',
+    ],
+    'rules.write' => [
+        'description' => 'Access to create, update, and delete your project\'s proxy rules',
+    ],
+    'schedules.read' => [
+        'description' => 'Access to read your project\'s schedules',
+    ],
+    'schedules.write' => [
+        'description' => 'Access to create, update, and delete your project\'s schedules',
+    ],
+    'migrations.read' => [
+        'description' => 'Access to read your project\'s migrations',
+    ],
+    'migrations.write' => [
+        'description' => 'Access to create, update, and delete your project\'s migrations.',
+    ],
+    'vcs.read' => [
+        'description' => 'Access to read your project\'s VCS repositories',
+    ],
+    'vcs.write' => [
+        'description' => 'Access to create, update, and delete your project\'s VCS repositories',
+    ],
+    'assistant.read' => [
+        'description' => 'Access to read the Assistant service',
+    ],
+    'tokens.read' => [
+        'description' => 'Access to read your project\'s tokens',
+    ],
+    'tokens.write' => [
+        'description' => 'Access to create, update, and delete your project\'s tokens',
+    ],
+    "webhooks.read" => [
+        "description" =>
+            "Access to read project\'s webhooks",
+    ],
+    "webhooks.write" => [
+        "description" =>
+            "Access to create, update, and delete project\'s webhooks",
+    ],
     "project.read" => [
         "description" =>
             "Access to read project\'s information",
-        "category" => "Project",
     ],
     "project.write" => [
         "description" =>
             "Access to update project\'s information",
-        "category" => "Project",
     ],
     "keys.read" => [
         "description" =>
             "Access to read project\'s keys",
-        "category" => "Project",
     ],
     "keys.write" => [
         "description" =>
             "Access to create, update, and delete project\'s keys",
-        "category" => "Project",
     ],
     "platforms.read" => [
         "description" =>
             "Access to read project\'s platforms",
-        "category" => "Project",
     ],
     "platforms.write" => [
         "description" =>
             "Access to create, update, and delete project\'s platforms",
-        "category" => "Project",
-    ],
-    "mocks.read" => [
-        "description" =>
-            "Access to read project\'s mocks",
-        "category" => "Project",
-    ],
-    "mocks.write" => [
-        "description" =>
-            "Access to create, update, and delete project\'s mocks",
-        "category" => "Project",
-    ],
-    "policies.read" => [
-        "description" =>
-            "Access to read project\'s policies",
-        "category" => "Project",
-    ],
-    "policies.write" => [
-        "description" =>
-            "Access to update project\'s policies",
-        "category" => "Project",
-    ],
-    "templates.read" => [
-        "description" =>
-            "Access to read project\'s templates",
-        "category" => "Project",
-    ],
-    "templates.write" => [
-        "description" =>
-            "Access to create, update, and delete project\'s templates",
-        "category" => "Project",
-    ],
-    "oauth2.read" => [
-        "description" =>
-            "Access to read project\'s OAuth2 configuration",
-        "category" => "Project",
-    ],
-    "oauth2.write" => [
-        "description" =>
-            "Access to update project\'s OAuth2 configuration",
-        "category" => "Project",
-    ],
-
-    // Auth
-    'users.read' => [
-        'description' => 'Access to read users',
-        'category' => 'Auth',
-    ],
-    'users.write' => [
-        'description' => 'Access to create, update, and delete users',
-        'category' => 'Auth',
-    ],
-    'sessions.read' => [
-        'description' => 'Access to read user sessions',
-        'category' => 'Auth',
-    ],
-    'sessions.write' => [
-        'description' => 'Access to create, update, and delete user sessions',
-        'category' => 'Auth',
-    ],
-    'teams.read' => [
-        'description' => 'Access to read teams',
-        'category' => 'Auth',
-    ],
-    'teams.write' => [
-        'description' => 'Access to create, update, and delete teams',
-        'category' => 'Auth',
-    ],
-
-    // Databases
-    'databases.read' => [
-        'description' => 'Access to read databases',
-        'category' => 'Databases',
-    ],
-    'databases.write' => [
-        'description' => 'Access to create, update, and delete databases',
-        'category' => 'Databases',
-    ],
-    'tables.read' => [
-        'description' => 'Access to read database tables',
-        'category' => 'Databases',
-    ],
-    'tables.write' => [
-        'description' => 'Access to create, update, and delete database tables',
-        'category' => 'Databases',
-    ],
-    'columns.read' => [
-        'description' => 'Access to read database table columns',
-        'category' => 'Databases',
-    ],
-    'columns.write' => [
-        'description' => 'Access to create, update, and delete database table columns',
-        'category' => 'Databases',
-    ],
-    'indexes.read' => [
-        'description' => 'Access to read database table indexes',
-        'category' => 'Databases',
-    ],
-    'indexes.write' => [
-        'description' => 'Access to create, update, and delete database table indexes',
-        'category' => 'Databases',
-    ],
-    'rows.read'  => [
-        'description' => 'Access to read database table rows',
-        'category' => 'Databases',
-    ],
-    'rows.write' => [
-        'description' => 'Access to create, update, and delete database table rows',
-        'category' => 'Databases',
-    ],
-    'collections.read' => [
-        'description' => 'Access to read database collections',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-    'collections.write' => [
-        'description' => 'Access to create, update, and delete database collections',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-    'attributes.read' => [
-        'description' => 'Access to read database collection attributes',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-    'attributes.write' => [
-        'description' => 'Access to create, update, and delete database collection attributes',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-    'documents.read'  => [
-        'description' => 'Access to read database collection documents',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-    'documents.write' => [
-        'description' => 'Access to create, update, and delete database collection documents',
-        'category' => 'Databases',
-        'deprecated' => true,
-    ],
-
-    // Storage
-    'buckets.read' => [
-        'description' => 'Access to read storage buckets',
-        'category' => 'Storage',
-    ],
-    'buckets.write' => [
-        'description' => 'Access to create, update, and delete storage buckets',
-        'category' => 'Storage',
-    ],
-    'files.read' => [
-        'description' => 'Access to read storage files and preview images',
-        'category' => 'Storage',
-    ],
-    'files.write' => [
-        'description' => 'Access to create, update, and delete storage files',
-        'category' => 'Storage',
-    ],
-    'tokens.read' => [
-        'description' => 'Access to read storage file tokens',
-        'category' => 'Storage',
-    ],
-    'tokens.write' => [
-        'description' => 'Access to create, update, and delete storage file tokens',
-        'category' => 'Storage',
-    ],
-
-    // Functions
-    'functions.read' => [
-        'description' => 'Access to read functions and deployments',
-        'category' => 'Functions',
-    ],
-    'functions.write' => [
-        'description' => 'Access to create, update, and delete functions and deployments',
-        'category' => 'Functions',
-    ],
-    'executions.read' => [
-        'description' => 'Access to read function executions',
-        'category' => 'Functions',
-    ],
-    'executions.write' => [
-        'description' => 'Access to create function executions',
-        'category' => 'Functions',
-    ],
-
-    // Sites
-    'sites.read' => [
-        'description' => 'Access to read sites and deployments',
-        'category' => 'Sites',
-    ],
-    'sites.write' => [
-        'description' => 'Access to create, update, and delete sites and deployments',
-        'category' => 'Sites',
-    ],
-    'log.read' => [
-        'description' => 'Access to read site logs',
-        'category' => 'Sites',
-    ],
-    'log.write' => [
-        'description' => 'Access to update, and delete site logs',
-        'category' => 'Sites',
-    ],
-
-    // Messaging
-    'providers.read' => [
-        'description' => 'Access to read messaging providers',
-        'category' => 'Messaging',
-    ],
-    'providers.write' => [
-        'description' => 'Access to create, update, and delete messaging providers',
-        'category' => 'Messaging',
-    ],
-    'topics.read' => [
-        'description' => 'Access to read messaging topics',
-        'category' => 'Messaging',
-    ],
-    'topics.write' => [
-        'description' => 'Access to create, update, and delete messaging topics',
-        'category' => 'Messaging',
-    ],
-    'subscribers.read' => [
-        'description' => 'Access to read messaging subscribers',
-        'category' => 'Messaging',
-    ],
-    'subscribers.write' => [
-        'description' => 'Access to create, update, and delete messaging subscribers',
-        'category' => 'Messaging',
-    ],
-    'targets.read' => [
-        'description' => 'Access to read messaging targets',
-        'category' => 'Messaging',
-    ],
-    'targets.write' => [
-        'description' => 'Access to create, update, and delete messaging targets',
-        'category' => 'Messaging',
-    ],
-    'messages.read' => [
-        'description' => 'Access to read messaging messages',
-        'category' => 'Messaging',
-    ],
-    'messages.write' => [
-        'description' => 'Access to create, update, and delete messaging messages',
-        'category' => 'Messaging',
-    ],
-
-    // Other
-    "webhooks.read" => [
-        "description" =>
-            "Access to read webhooks",
-        'category' => 'Other',
-    ],
-    "webhooks.write" => [
-        "description" =>
-            "Access to create, update, and delete webhooks",
-        'category' => 'Other',
-    ],
-    'locale.read' => [
-        'description' => 'Access to use Locale service',
-        'category' => 'Other',
-    ],
-    'avatars.read' => [
-        'description' => 'Access to use Avatars service',
-        'category' => 'Other',
-    ],
-    'health.read' => [
-        'description' => 'Access to use Health service',
-        'category' => 'Other',
-    ],
-    'assistant.read' => [
-        'description' => 'Access to use Assistant service',
-        'category' => 'Other',
-    ],
-    'migrations.read' => [
-        'description' => 'Access to read migrations',
-        'category' => 'Other',
-    ],
-    'migrations.write' => [
-        'description' => 'Access to create, update, and delete migrations.',
-        'category' => 'Other',
-    ],
-
-    // TODO: Figure out where to move those
-    'schedules.read' => [
-        'description' => 'Access to read schedules.',
-        'category' => 'Other',
-    ],
-    'schedules.write' => [
-        'description' => 'Access to create, update, and delete schedules.',
-        'category' => 'Other',
-    ],
-    'vcs.read' => [
-        'description' => 'Access to read resources under VCS service.',
-        'category' => 'Other',
-    ],
-    'vcs.write' => [
-        'description' => 'Access to create, update, and delete resources under VCS service.',
-        'category' => 'Other',
-    ],
-    'rules.read' => [
-        'description' => 'Access to read proxy rules.',
-        'category' => 'Other',
-    ],
-    'rules.write' => [
-        'description' => 'Access to create, update, and delete proxy rules.',
-        'category' => 'Other',
     ],
 ];

app/config/sdks.php

@@ -300,26 +300,6 @@ return [
                 'repoBranch' => 'main',
                 'changelog' => \realpath(__DIR__ . '/../../docs/sdks/cursor-plugin/CHANGELOG.md'),
             ],
-            [
-                'key' => 'claude-plugin',
-                'name' => 'ClaudePlugin',
-                'version' => '0.1.0',
-                'url' => 'https://github.com/appwrite/claude-plugin.git',
-                'enabled' => true,
-                'beta' => false,
-                'dev' => false,
-                'hidden' => false,
-                'spec' => 'static',
-                'family' => APP_SDK_PLATFORM_STATIC,
-                'prism' => 'claude-plugin',
-                'source' => \realpath(__DIR__ . '/../sdks/static-claude-plugin'),
-                'gitUrl' => 'git@github.com:appwrite/claude-plugin.git',
-                'gitRepoName' => 'claude-plugin',
-                'gitUserName' => 'appwrite',
-                'gitBranch' => 'dev',
-                'repoBranch' => 'main',
-                'changelog' => \realpath(__DIR__ . '/../../docs/sdks/claude-plugin/CHANGELOG.md'),
-            ],
         ],
     ],
 

app/config/services.php

@@ -137,7 +137,7 @@ return [
         'docs' => true,
         'docsUrl' => '',
         'tests' => false,
-        'optional' => true,
+        'optional' => false,
         'icon' => '',
         'platforms' => ['client', 'server', 'console'],
     ],
@@ -193,7 +193,7 @@ return [
         'docs' => false,
         'docsUrl' => '',
         'tests' => false,
-        'optional' => true,
+        'optional' => false,
         'icon' => '',
         'platforms' => ['client', 'server', 'console'],
     ],
@@ -235,7 +235,7 @@ return [
         'docs' => true,
         'docsUrl' => 'https://appwrite.io/docs/proxy',
         'tests' => false,
-        'optional' => true,
+        'optional' => false,
         'icon' => '/images/services/proxy.png',
         'platforms' => ['client', 'server', 'console'],
     ],
@@ -286,12 +286,12 @@ return [
         'name' => 'Migrations',
         'subtitle' => 'The Migrations service allows you to migrate third-party data to your Appwrite project.',
         'description' => '/docs/services/migrations.md',
-        'controller' => '', // Uses modules
+        'controller' => 'api/migrations.php',
         'sdk' => true,
         'docs' => true,
         'docsUrl' => 'https://appwrite.io/docs/migrations',
         'tests' => true,
-        'optional' => true,
+        'optional' => false,
         'icon' => '/images/services/migrations.png',
         'platforms' => ['client', 'server', 'console'],
     ],

app/config/templates/site.php

@@ -1487,13 +1487,13 @@ return [
         ]
     ],
     [
-        'key' => 'dashboard-react-admin',
-        'name' => 'E-commerce dashboard with React Admin',
-        'tagline' => 'A React-based admin dashboard template with e-commerce features.',
+        'key' => 'crm-dashboard-react-admin',
+        'name' => 'CRM dashboard with React Admin',
+        'tagline' => 'A React-based admin dashboard template with CRM features.',
         'score' => 4, // 0 to 10 based on looks of screenshot (avoid 1,2,3,8,9,10 if possible)
-        'useCases' => [SiteUseCases::DASHBOARD, SiteUseCases::ECOMMERCE],
-        'screenshotDark' => $url . '/images/sites/templates/dashboard-react-admin-dark.png',
-        'screenshotLight' => $url . '/images/sites/templates/dashboard-react-admin-light.png',
+        'useCases' => [SiteUseCases::DASHBOARD],
+        'screenshotDark' => $url . '/images/sites/templates/crm-dashboard-react-admin-dark.png',
+        'screenshotLight' => $url . '/images/sites/templates/crm-dashboard-react-admin-light.png',
         'frameworks' => [
             getFramework('REACT', [
                 'providerRootDirectory' => './react/react-admin',

app/config/variables.php

@@ -34,15 +34,6 @@ return [
                 'question' => '',
                 'filter' => ''
             ],
-            [
-                'name' => '_APP_LOCKING_ENABLED',
-                'description' => 'Enable distributed locking for platform writes. Locks coordinate concurrent updates across API pods so that read-modify-write operations on shared documents do not lose updates. By default, set to \'enabled\'. Set to \'disabled\' as an emergency kill switch — locks become no-ops (fail-open) and concurrent writes will race.',
-                'introduction' => '1.9.3',
-                'default' => 'enabled',
-                'required' => false,
-                'question' => '',
-                'filter' => ''
-            ],
             [
                 'name' => '_APP_OPTIONS_FORCE_HTTPS',
                 'description' => 'Allows you to force HTTPS connection to your API. This feature redirects any HTTP call to HTTPS and adds the \'Strict-Transport-Security\' header to all HTTP responses. By default, set to \'enabled\'. To disable, set to \'disabled\'. This feature will work only when your ports are set to default 80 and 443, and you have set up wildcard certificates with DNS challenge.',
@@ -881,18 +872,18 @@ return [
             ],
             [
                 'name' => '_APP_FUNCTIONS_BUILD_TIMEOUT',
-                'description' => 'Deprecated since 1.7.0. The maximum number of seconds allowed as a timeout value when building a new function. The default value is 2700 seconds.',
+                'description' => 'Deprecated since 1.7.0. The maximum number of seconds allowed as a timeout value when building a new function. The default value is 900 seconds.',
                 'introduction' => '0.13.0',
-                'default' => '2700',
+                'default' => '900',
                 'required' => false,
                 'question' => '',
                 'filter' => ''
             ],
             [
                 'name' => '_APP_COMPUTE_BUILD_TIMEOUT',
-                'description' => 'The maximum number of seconds allowed as a timeout value when building a new function or site. The default value is 2700 seconds.',
+                'description' => 'The maximum number of seconds allowed as a timeout value when building a new function or site. The default value is 900 seconds.',
                 'introduction' => '1.7.0',
-                'default' => '2700',
+                'default' => '900',
                 'required' => false,
                 'question' => '',
                 'filter' => ''

app/controllers/api/account.php

@@ -133,6 +133,9 @@ $createSession = function (string $userId, string $secret, Request $request, Res
     });
 
     $provider = match ($verifiedToken->getAttribute('type')) {
+        TOKEN_TYPE_VERIFICATION,
+        TOKEN_TYPE_RECOVERY,
+        TOKEN_TYPE_INVITE => SESSION_PROVIDER_EMAIL,
         TOKEN_TYPE_MAGIC_URL => SESSION_PROVIDER_MAGIC_URL,
         TOKEN_TYPE_PHONE => SESSION_PROVIDER_PHONE,
         TOKEN_TYPE_OAUTH2 => $oauthProvider,
@@ -332,15 +335,15 @@ Http::post('/v1/account')
             throw new Exception(Exception::GENERAL_INVALID_EMAIL);
         }
 
-        if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+        if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
             throw new Exception(Exception::USER_EMAIL_DISPOSABLE);
         }
 
-        if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+        if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
             throw new Exception(Exception::USER_EMAIL_NOT_CANONICAL);
         }
 
-        if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+        if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
             throw new Exception(Exception::USER_EMAIL_FREE);
         }
 
@@ -450,7 +453,7 @@ Http::delete('/v1/account')
     ->groups(['api', 'account'])
     ->label('scope', 'account')
     ->label('audits.event', 'user.delete')
-    ->label('audits.resource', 'user/{user.$id}')
+    ->label('audits.resource', 'user/{response.$id}')
     ->label('sdk', new Method(
         namespace: 'account',
         group: 'account',
@@ -471,26 +474,19 @@ Http::delete('/v1/account')
     ->inject('dbForProject')
     ->inject('queueForEvents')
     ->inject('queueForDeletes')
-    ->inject('authorization')
-    ->action(function (Document $user, Document $project, Response $response, Database $dbForProject, Event $queueForEvents, Delete $queueForDeletes, Authorization $authorization) {
+    ->action(function (Document $user, Document $project, Response $response, Database $dbForProject, Event $queueForEvents, Delete $queueForDeletes) {
         if ($user->isEmpty()) {
             throw new Exception(Exception::USER_NOT_FOUND);
         }
 
         if ($project->getId() === 'console') {
+            // get all memberships
             $memberships = $user->getAttribute('memberships', []);
             foreach ($memberships as $membership) {
-                if (!$membership->getAttribute('confirm', false)) {
-                    continue;
+                // prevent deletion if at least one active membership
+                if ($membership->getAttribute('confirm', false)) {
+                    throw new Exception(Exception::USER_DELETION_PROHIBITED);
                 }
-
-                $team = $dbForProject->getDocument('teams', $membership->getAttribute('teamId'));
-                if ($team->isEmpty()) {
-                    continue;
-                }
-
-                // Team is left as-is — we don't promote non-owner members to owner.
-                // Orphan teams are cleaned up later by Cloud's inactive project cleanup.
             }
         }
 
@@ -834,7 +830,7 @@ Http::patch('/v1/account/sessions/:sessionId')
             throw new Exception(Exception::PROJECT_PROVIDER_UNSUPPORTED);
         }
 
-        if (!empty($provider) && \class_exists($className)) {
+        if (!empty($provider) && $className !== null && \class_exists($className)) {
             $appId = $project->getAttribute('oAuthProviders', [])[$provider . 'Appid'] ?? '';
             $appSecret = $project->getAttribute('oAuthProviders', [])[$provider . 'Secret'] ?? '{}';
 
@@ -1601,7 +1597,7 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
             }
         }
 
-        if ($user->isEmpty()) { // No user logged in or with OAuth2 provider ID, create new one or connect with account with same email
+        if ($user === false || $user->isEmpty()) { // No user logged in or with OAuth2 provider ID, create new one or connect with account with same email
             if (empty($email)) {
                 $failureRedirect(Exception::USER_UNAUTHORIZED, 'OAuth provider failed to return email.');
             }
@@ -1618,7 +1614,7 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
             }
 
             // If user is not found, check if there is a user with the same email
-            if ($user->isEmpty()) {
+            if ($user === false || $user->isEmpty()) {
                 $userWithEmail = $dbForProject->findOne('users', [
                     Query::equal('email', [$email]),
                 ]);
@@ -1631,7 +1627,7 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
             }
 
             // If user is not found, check if there is an identity with the same email
-            if ($user->isEmpty()) {
+            if ($user === false || $user->isEmpty()) {
                 $identityWithMatchingEmail = $dbForProject->findOne('identities', [
                     Query::equal('providerEmail', [$email]),
                 ]);
@@ -1643,7 +1639,7 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
                 }
             }
 
-            if ($user->isEmpty()) { // Last option -> create the user
+            if ($user === false || $user->isEmpty()) { // Last option -> create the user
                 $limit = $project->getAttribute('auths', [])['limit'] ?? 0;
 
                 if ($limit !== 0) {
@@ -1676,15 +1672,15 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
                     $failureRedirect(Exception::GENERAL_INVALID_EMAIL);
                 }
 
-                if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+                if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
                     $failureRedirect(Exception::USER_EMAIL_DISPOSABLE);
                 }
 
-                if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+                if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
                     $failureRedirect(Exception::USER_EMAIL_NOT_CANONICAL);
                 }
 
-                if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+                if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
                     $failureRedirect(Exception::USER_EMAIL_FREE);
                 }
 
@@ -1817,15 +1813,15 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
                 $failureRedirect(Exception::GENERAL_INVALID_EMAIL);
             }
 
-            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
                 $failureRedirect(Exception::USER_EMAIL_DISPOSABLE);
             }
 
-            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
                 $failureRedirect(Exception::USER_EMAIL_NOT_CANONICAL);
             }
 
-            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
                 $failureRedirect(Exception::USER_EMAIL_FREE);
             }
 
@@ -1951,7 +1947,7 @@ Http::get('/v1/account/sessions/oauth2/:provider/redirect')
                 ->addCookie($store->getKey(), $encoded, (new \DateTime($expire))->getTimestamp(), '/', $cookieDomain, ('https' == $protocol), true, Config::getParam('cookieSamesite'));
         }
 
-        if (isset($sessionUpgrade) && isset($session)) {
+        if (isset($sessionUpgrade) && $sessionUpgrade && isset($session)) {
             foreach ($user->getAttribute('targets', []) as $target) {
                 if ($target->getAttribute('providerType') !== MESSAGE_TYPE_PUSH) {
                     continue;
@@ -2175,15 +2171,15 @@ Http::post('/v1/account/tokens/magic-url')
                 throw new Exception(Exception::GENERAL_INVALID_EMAIL);
             }
 
-            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
                 throw new Exception(Exception::USER_EMAIL_DISPOSABLE);
             }
 
-            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
                 throw new Exception(Exception::USER_EMAIL_NOT_CANONICAL);
             }
 
-            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
                 throw new Exception(Exception::USER_EMAIL_FREE);
             }
 
@@ -2269,10 +2265,7 @@ Http::post('/v1/account/tokens/magic-url')
 
         $subject = $locale->getText("emails.magicSession.subject");
         $preview = $locale->getText("emails.magicSession.preview");
-
-        $customTemplate =
-            $project->getAttribute('templates', [])['email.magicSession-' . $locale->default] ??
-            $project->getAttribute('templates', [])['email.magicSession-' . $locale->fallback] ?? [];
+        $customTemplate = $project->getAttribute('templates', [])['email.magicSession-' . $locale->default] ?? [];
 
         $detector = new Detector($request->getUserAgent('UNKNOWN'));
         $agentOs = $detector->getOS();
@@ -2302,8 +2295,8 @@ Http::post('/v1/account/tokens/magic-url')
 
         $senderEmail = System::getEnv('_APP_SYSTEM_EMAIL_ADDRESS', APP_EMAIL_TEAM);
         $senderName = System::getEnv('_APP_SYSTEM_EMAIL_NAME', APP_NAME . ' Server');
-        $replyToEmail = '';
-        $replyToName = '';
+
+        $replyTo = "";
 
         if ($smtpEnabled) {
             if (!empty($smtp['senderEmail'])) {
@@ -2312,13 +2305,8 @@ Http::post('/v1/account/tokens/magic-url')
             if (!empty($smtp['senderName'])) {
                 $senderName = $smtp['senderName'];
             }
-            // Includes backwards compatibility: fall back to legacy `replyTo` key
-            $smtpReplyToEmail = $smtp['replyToEmail'] ?? $smtp['replyTo'] ?? '';
-            if (!empty($smtpReplyToEmail)) {
-                $replyToEmail = $smtpReplyToEmail;
-            }
-            if (!empty($smtp['replyToName'])) {
-                $replyToName = $smtp['replyToName'];
+            if (!empty($smtp['replyTo'])) {
+                $replyTo = $smtp['replyTo'];
             }
 
             $queueForMails
@@ -2335,13 +2323,8 @@ Http::post('/v1/account/tokens/magic-url')
                 if (!empty($customTemplate['senderName'])) {
                     $senderName = $customTemplate['senderName'];
                 }
-                // Includes backwards compatibility: fall back to legacy `replyTo` key
-                $customReplyToEmail = $customTemplate['replyToEmail'] ?? $customTemplate['replyTo'] ?? '';
-                if (!empty($customReplyToEmail)) {
-                    $replyToEmail = $customReplyToEmail;
-                }
-                if (!empty($customTemplate['replyToName'])) {
-                    $replyToName = $customTemplate['replyToName'];
+                if (!empty($customTemplate['replyTo'])) {
+                    $replyTo = $customTemplate['replyTo'];
                 }
 
                 $body = $customTemplate['message'] ?? '';
@@ -2349,8 +2332,7 @@ Http::post('/v1/account/tokens/magic-url')
             }
 
             $queueForMails
-                ->setSmtpReplyToEmail($replyToEmail)
-                ->setSmtpReplyToName($replyToName)
+                ->setSmtpReplyTo($replyTo)
                 ->setSmtpSenderEmail($senderEmail)
                 ->setSmtpSenderName($senderName);
         }
@@ -2496,15 +2478,15 @@ Http::post('/v1/account/tokens/email')
                 throw new Exception(Exception::GENERAL_INVALID_EMAIL);
             }
 
-            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+            if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
                 throw new Exception(Exception::USER_EMAIL_DISPOSABLE);
             }
 
-            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+            if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
                 throw new Exception(Exception::USER_EMAIL_NOT_CANONICAL);
             }
 
-            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+            if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
                 throw new Exception(Exception::USER_EMAIL_FREE);
             }
 
@@ -2593,9 +2575,7 @@ Http::post('/v1/account/tokens/email')
         $preview = $locale->getText("emails.otpSession.preview");
         $heading = $locale->getText("emails.otpSession.heading");
 
-        $customTemplate =
-            $project->getAttribute('templates', [])['email.otpSession-' . $locale->default] ??
-            $project->getAttribute('templates', [])['email.otpSession-' . $locale->fallback] ?? [];
+        $customTemplate = $project->getAttribute('templates', [])['email.otpSession-' . $locale->default] ?? [];
         $smtpBaseTemplate = $project->getAttribute('smtpBaseTemplate', 'email-base');
 
         $validator = new FileName();
@@ -2631,8 +2611,7 @@ Http::post('/v1/account/tokens/email')
 
         $senderEmail = System::getEnv('_APP_SYSTEM_EMAIL_ADDRESS', APP_EMAIL_TEAM);
         $senderName = System::getEnv('_APP_SYSTEM_EMAIL_NAME', APP_NAME . ' Server');
-        $replyToEmail = '';
-        $replyToName = '';
+        $replyTo = "";
 
         if ($smtpEnabled) {
             if (!empty($smtp['senderEmail'])) {
@@ -2641,13 +2620,8 @@ Http::post('/v1/account/tokens/email')
             if (!empty($smtp['senderName'])) {
                 $senderName = $smtp['senderName'];
             }
-            // Includes backwards compatibility: fall back to legacy `replyTo` key
-            $smtpReplyToEmail = $smtp['replyToEmail'] ?? $smtp['replyTo'] ?? '';
-            if (!empty($smtpReplyToEmail)) {
-                $replyToEmail = $smtpReplyToEmail;
-            }
-            if (!empty($smtp['replyToName'])) {
-                $replyToName = $smtp['replyToName'];
+            if (!empty($smtp['replyTo'])) {
+                $replyTo = $smtp['replyTo'];
             }
 
             $queueForMails
@@ -2664,13 +2638,8 @@ Http::post('/v1/account/tokens/email')
                 if (!empty($customTemplate['senderName'])) {
                     $senderName = $customTemplate['senderName'];
                 }
-                // Includes backwards compatibility: fall back to legacy `replyTo` key
-                $customReplyToEmail = $customTemplate['replyToEmail'] ?? $customTemplate['replyTo'] ?? '';
-                if (!empty($customReplyToEmail)) {
-                    $replyToEmail = $customReplyToEmail;
-                }
-                if (!empty($customTemplate['replyToName'])) {
-                    $replyToName = $customTemplate['replyToName'];
+                if (!empty($customTemplate['replyTo'])) {
+                    $replyTo = $customTemplate['replyTo'];
                 }
 
                 $body = $customTemplate['message'] ?? '';
@@ -2678,8 +2647,7 @@ Http::post('/v1/account/tokens/email')
             }
 
             $queueForMails
-                ->setSmtpReplyToEmail($replyToEmail)
-                ->setSmtpReplyToName($replyToName)
+                ->setSmtpReplyTo($replyTo)
                 ->setSmtpSenderEmail($senderEmail)
                 ->setSmtpSenderName($senderName);
         }
@@ -3000,6 +2968,11 @@ Http::post('/v1/account/tokens/phone')
         if ($sendSMS) {
             $message = Template::fromFile(__DIR__ . '/../../config/locale/templates/sms-base.tpl');
 
+            $customTemplate = $project->getAttribute('templates', [])['sms.login-' . $locale->default] ?? [];
+            if (!empty($customTemplate)) {
+                $message = $customTemplate['message'] ?? $message;
+            }
+
             $projectName = $project->getAttribute('name');
             if ($project->getId() === 'console') {
                 $projectName = $platform['platformName'];
@@ -3294,7 +3267,7 @@ Http::patch('/v1/account/password')
             }
 
             $history[] = $newPassword;
-            $history = array_slice($history, -$historyLimit);
+            $history = array_slice($history, (count($history) - $historyLimit), $historyLimit);
         }
 
         if ($project->getAttribute('auths', [])['personalDataCheck'] ?? false) {
@@ -3417,15 +3390,15 @@ Http::patch('/v1/account/email')
             throw new Exception(Exception::GENERAL_INVALID_EMAIL);
         }
 
-        if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && $emailMetadata['emailIsDisposable']) {
+        if (($plan['supportsDisposableEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['disposableEmails'] ?? false) && ($emailMetadata['emailIsDisposable'] ?? false)) {
             throw new Exception(Exception::USER_EMAIL_DISPOSABLE);
         }
 
-        if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && $emailMetadata['emailIsCanonical'] === false) {
+        if (($plan['supportsCanonicalEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['canonicalEmails'] ?? false) && ($emailMetadata['emailIsCanonical'] ?? true) === false) {
             throw new Exception(Exception::USER_EMAIL_NOT_CANONICAL);
         }
 
-        if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && $emailMetadata['emailIsFree']) {
+        if (($plan['supportsFreeEmailValidation'] ?? false) && ($project->getAttribute('auths', [])['freeEmails'] ?? false) && ($emailMetadata['emailIsFree'] ?? false)) {
             throw new Exception(Exception::USER_EMAIL_FREE);
         }
 
@@ -3457,6 +3430,9 @@ Http::patch('/v1/account/email')
 
         try {
             $user = $dbForProject->updateDocument('users', $user->getId(), $user);
+            /**
+             * @var Document $oldTarget
+             */
             $oldTarget = $user->find('identifier', $oldEmail, 'targets');
 
             if ($oldTarget instanceof Document && !$oldTarget->isEmpty()) {
@@ -3543,6 +3519,9 @@ Http::patch('/v1/account/phone')
 
         try {
             $user = $dbForProject->updateDocument('users', $user->getId(), $user);
+            /**
+             * @var Document $oldTarget
+             */
             $oldTarget = $user->find('identifier', $oldPhone, 'targets');
 
             if ($oldTarget instanceof Document && !$oldTarget->isEmpty()) {
@@ -3747,9 +3726,7 @@ Http::post('/v1/account/recovery')
         $body = $locale->getText("emails.recovery.body");
         $subject = $locale->getText("emails.recovery.subject");
         $preview = $locale->getText("emails.recovery.preview");
-        $customTemplate =
-            $project->getAttribute('templates', [])['email.recovery-' . $locale->default] ??
-            $project->getAttribute('templates', [])['email.recovery-' . $locale->fallback] ?? [];
+        $customTemplate = $project->getAttribute('templates', [])['email.recovery-' . $locale->default] ?? [];
 
         $message = Template::fromFile(__DIR__ . '/../../config/locale/templates/email-inner-base.tpl');
         $message
@@ -3766,8 +3743,7 @@ Http::post('/v1/account/recovery')
 
         $senderEmail = System::getEnv('_APP_SYSTEM_EMAIL_ADDRESS', APP_EMAIL_TEAM);
         $senderName = System::getEnv('_APP_SYSTEM_EMAIL_NAME', APP_NAME . ' Server');
-        $replyToEmail = '';
-        $replyToName = '';
+        $replyTo = "";
 
         if ($smtpEnabled) {
             if (!empty($smtp['senderEmail'])) {
@@ -3776,13 +3752,8 @@ Http::post('/v1/account/recovery')
             if (!empty($smtp['senderName'])) {
                 $senderName = $smtp['senderName'];
             }
-            // Includes backwards compatibility: fall back to legacy `replyTo` key
-            $smtpReplyToEmail = $smtp['replyToEmail'] ?? $smtp['replyTo'] ?? '';
-            if (!empty($smtpReplyToEmail)) {
-                $replyToEmail = $smtpReplyToEmail;
-            }
-            if (!empty($smtp['replyToName'])) {
-                $replyToName = $smtp['replyToName'];
+            if (!empty($smtp['replyTo'])) {
+                $replyTo = $smtp['replyTo'];
             }
 
             $queueForMails
@@ -3799,13 +3770,8 @@ Http::post('/v1/account/recovery')
                 if (!empty($customTemplate['senderName'])) {
                     $senderName = $customTemplate['senderName'];
                 }
-                // Includes backwards compatibility: fall back to legacy `replyTo` key
-                $customReplyToEmail = $customTemplate['replyToEmail'] ?? $customTemplate['replyTo'] ?? '';
-                if (!empty($customReplyToEmail)) {
-                    $replyToEmail = $customReplyToEmail;
-                }
-                if (!empty($customTemplate['replyToName'])) {
-                    $replyToName = $customTemplate['replyToName'];
+                if (!empty($customTemplate['replyTo'])) {
+                    $replyTo = $customTemplate['replyTo'];
                 }
 
                 $body = $customTemplate['message'] ?? '';
@@ -3813,8 +3779,7 @@ Http::post('/v1/account/recovery')
             }
 
             $queueForMails
-                ->setSmtpReplyToEmail($replyToEmail)
-                ->setSmtpReplyToName($replyToName)
+                ->setSmtpReplyTo($replyTo)
                 ->setSmtpSenderEmail($senderEmail)
                 ->setSmtpSenderName($senderName);
         }
@@ -4069,9 +4034,7 @@ Http::post('/v1/account/verifications/email')
         $subject = $locale->getText("emails.verification.subject");
         $heading = $locale->getText("emails.verification.heading");
 
-        $customTemplate =
-            $project->getAttribute('templates', [])['email.verification-' . $locale->default] ??
-            $project->getAttribute('templates', [])['email.verification-' . $locale->fallback] ?? [];
+        $customTemplate = $project->getAttribute('templates', [])['email.verification-' . $locale->default] ?? [];
         $smtpBaseTemplate = $project->getAttribute('smtpBaseTemplate', 'email-base');
 
         $validator = new FileName();
@@ -4097,8 +4060,7 @@ Http::post('/v1/account/verifications/email')
 
         $senderEmail = System::getEnv('_APP_SYSTEM_EMAIL_ADDRESS', APP_EMAIL_TEAM);
         $senderName = System::getEnv('_APP_SYSTEM_EMAIL_NAME', APP_NAME . ' Server');
-        $replyToEmail = '';
-        $replyToName = '';
+        $replyTo = "";
 
         if ($smtpEnabled) {
             if (!empty($smtp['senderEmail'])) {
@@ -4107,13 +4069,8 @@ Http::post('/v1/account/verifications/email')
             if (!empty($smtp['senderName'])) {
                 $senderName = $smtp['senderName'];
             }
-            // Includes backwards compatibility: fall back to legacy `replyTo` key
-            $smtpReplyToEmail = $smtp['replyToEmail'] ?? $smtp['replyTo'] ?? '';
-            if (!empty($smtpReplyToEmail)) {
-                $replyToEmail = $smtpReplyToEmail;
-            }
-            if (!empty($smtp['replyToName'])) {
-                $replyToName = $smtp['replyToName'];
+            if (!empty($smtp['replyTo'])) {
+                $replyTo = $smtp['replyTo'];
             }
 
             $queueForMails
@@ -4130,13 +4087,8 @@ Http::post('/v1/account/verifications/email')
                 if (!empty($customTemplate['senderName'])) {
                     $senderName = $customTemplate['senderName'];
                 }
-                // Includes backwards compatibility: fall back to legacy `replyTo` key
-                $customReplyToEmail = $customTemplate['replyToEmail'] ?? $customTemplate['replyTo'] ?? '';
-                if (!empty($customReplyToEmail)) {
-                    $replyToEmail = $customReplyToEmail;
-                }
-                if (!empty($customTemplate['replyToName'])) {
-                    $replyToName = $customTemplate['replyToName'];
+                if (!empty($customTemplate['replyTo'])) {
+                    $replyTo = $customTemplate['replyTo'];
                 }
 
                 $body = $customTemplate['message'] ?? '';
@@ -4144,8 +4096,7 @@ Http::post('/v1/account/verifications/email')
             }
 
             $queueForMails
-                ->setSmtpReplyToEmail($replyToEmail)
-                ->setSmtpReplyToName($replyToName)
+                ->setSmtpReplyTo($replyTo)
                 ->setSmtpSenderEmail($senderEmail)
                 ->setSmtpSenderName($senderName);
         }
@@ -4382,6 +4333,11 @@ Http::post('/v1/account/verifications/phone')
         if ($sendSMS) {
             $message = Template::fromFile(__DIR__ . '/../../config/locale/templates/sms-base.tpl');
 
+            $customTemplate = $project->getAttribute('templates', [])['sms.verification-' . $locale->default] ?? [];
+            if (!empty($customTemplate)) {
+                $message = $customTemplate['message'] ?? $message;
+            }
+
             $messageContent = Template::fromString($locale->getText("sms.verification.body"));
             $messageContent
                 ->setParam('{{project}}', $project->getAttribute('name'))
@@ -4656,7 +4612,7 @@ Http::delete('/v1/account/targets/:targetId/push')
     ->groups(['api', 'account'])
     ->label('scope', 'targets.write')
     ->label('audits.event', 'target.delete')
-    ->label('audits.resource', 'target/{request.targetId}')
+    ->label('audits.resource', 'target/response.$id')
     ->label('event', 'users.[userId].targets.[targetId].delete')
     ->label('sdk', new Method(
         namespace: 'account',

app/controllers/api/graphql.php

@@ -231,7 +231,7 @@ function execute(
     $validations = GraphQL::getStandardValidationRules();
 
     if (System::getEnv('_APP_GRAPHQL_INTROSPECTION', 'enabled') === 'disabled') {
-        $validations[] = new DisableIntrospection(DisableIntrospection::ENABLED);
+        $validations[] = new DisableIntrospection();
     }
 
     if (System::getEnv('_APP_OPTIONS_ABUSE', 'enabled') !== 'disabled') {

app/controllers/api/messaging.php

@@ -482,6 +482,7 @@ Http::post('/v1/messaging/providers/msg91')
             $enabled === true
             && \array_key_exists('senderId', $credentials)
             && \array_key_exists('authKey', $credentials)
+            && \array_key_exists('from', $options)
         ) {
             $enabled = true;
         } else {
@@ -3206,6 +3207,10 @@ Http::post('/v1/messaging/messages/email')
             throw new Exception(Exception::MESSAGE_MISSING_TARGET);
         }
 
+        if ($status === MessageStatus::SCHEDULED && \is_null($scheduledAt)) {
+            throw new Exception(Exception::MESSAGE_MISSING_SCHEDULE);
+        }
+
         $mergedTargets = \array_merge($targets, $cc, $bcc);
 
         if (!empty($mergedTargets)) {
@@ -3381,6 +3386,10 @@ Http::post('/v1/messaging/messages/sms')
             throw new Exception(Exception::MESSAGE_MISSING_TARGET);
         }
 
+        if ($status === MessageStatus::SCHEDULED && \is_null($scheduledAt)) {
+            throw new Exception(Exception::MESSAGE_MISSING_SCHEDULE);
+        }
+
         if (!empty($targets)) {
             $foundTargets = $dbForProject->find('targets', [
                 Query::equal('$id', $targets),
@@ -3518,6 +3527,10 @@ Http::post('/v1/messaging/messages/push')
             throw new Exception(Exception::MESSAGE_MISSING_TARGET);
         }
 
+        if ($status === MessageStatus::SCHEDULED && \is_null($scheduledAt)) {
+            throw new Exception(Exception::MESSAGE_MISSING_SCHEDULE);
+        }
+
         if (!empty($targets)) {
             $foundTargets = $dbForProject->find('targets', [
                 Query::equal('$id', $targets),
@@ -4647,7 +4660,7 @@ Http::delete('/v1/messaging/messages/:messageId')
                 if (!empty($scheduleId)) {
                     try {
                         $dbForPlatform->deleteDocument('schedules', $scheduleId);
-                    } catch (\Throwable) {
+                    } catch (Exception) {
                         // Ignore
                     }
                 }

app/controllers/api/project.php

@@ -113,12 +113,11 @@ Http::get('/v1/project/usage')
         $factor = match ($period) {
             '1h' => 3600,
             '1d' => 86400,
-            default => throw new \LogicException('Unsupported period: ' . $period),
         };
 
         $limit = match ($period) {
             '1h' => (new DateTime($startDate))->diff(new DateTime($endDate))->days * 24,
-            '1d' => (new DateTime($startDate))->diff(new DateTime($endDate))->days,
+            '1d' => (new DateTime($startDate))->diff(new DateTime($endDate))->days
         };
 
         $format = match ($period) {

app/controllers/api/users.php

@@ -856,7 +856,7 @@ Http::get('/v1/users/:userId/targets/:targetId')
 Http::get('/v1/users/:userId/sessions')
     ->desc('List user sessions')
     ->groups(['api', 'users'])
-    ->label('scope', ['users.read', 'sessions.read'])
+    ->label('scope', 'users.read')
     ->label('sdk', new Method(
         namespace: 'users',
         group: 'sessions',
@@ -1535,7 +1535,7 @@ Http::patch('/v1/users/:userId/email')
                 Query::equal('identifier', [$email]),
             ]);
 
-            if (!$target->isEmpty()) {
+            if ($target instanceof Document && !$target->isEmpty()) {
                 throw new Exception(Exception::USER_TARGET_ALREADY_EXISTS);
             }
         }
@@ -1595,6 +1595,9 @@ Http::patch('/v1/users/:userId/email')
                 'emailIsDisposable' => $user->getAttribute('emailIsDisposable'),
                 'emailIsFree' => $user->getAttribute('emailIsFree'),
             ]));
+            /**
+             * @var Document $oldTarget
+             */
             $oldTarget = $user->find('identifier', $oldEmail, 'targets');
 
             if ($oldTarget instanceof Document && !$oldTarget->isEmpty()) {
@@ -1678,7 +1681,7 @@ Http::patch('/v1/users/:userId/phone')
                 Query::equal('identifier', [$number]),
             ]);
 
-            if (!$target->isEmpty()) {
+            if ($target instanceof Document && !$target->isEmpty()) {
                 throw new Exception(Exception::USER_TARGET_ALREADY_EXISTS);
             }
         }
@@ -1688,6 +1691,9 @@ Http::patch('/v1/users/:userId/phone')
                 'phone' => $phoneValue,
                 'phoneVerification' => $user->getAttribute('phoneVerification'),
             ]));
+            /**
+             * @var Document $oldTarget
+             */
             $oldTarget = $user->find('identifier', $oldPhone, 'targets');
 
             if ($oldTarget instanceof Document && !$oldTarget->isEmpty()) {
@@ -2246,8 +2252,8 @@ Http::delete('/v1/users/:userId/mfa/authenticators/:type')
     ->label('event', 'users.[userId].delete.mfa')
     ->label('scope', 'users.write')
     ->label('audits.event', 'user.update')
-    ->label('audits.resource', 'user/{request.userId}')
-    ->label('audits.userId', '{request.userId}')
+    ->label('audits.resource', 'user/{response.$id}')
+    ->label('audits.userId', '{response.$id}')
     ->label('usage.metric', 'users.{scope}.requests.update')
     ->label('sdk', [
         new Method(
@@ -2314,7 +2320,7 @@ Http::post('/v1/users/:userId/sessions')
     ->desc('Create session')
     ->groups(['api', 'users'])
     ->label('event', 'users.[userId].sessions.[sessionId].create')
-    ->label('scope', ['users.write', 'sessions.write'])
+    ->label('scope', 'users.write')
     ->label('audits.event', 'session.create')
     ->label('audits.resource', 'user/{request.userId}')
     ->label('usage.metric', 'sessions.{scope}.requests.create')
@@ -2470,7 +2476,7 @@ Http::delete('/v1/users/:userId/sessions/:sessionId')
     ->desc('Delete user session')
     ->groups(['api', 'users'])
     ->label('event', 'users.[userId].sessions.[sessionId].delete')
-    ->label('scope', ['users.write', 'sessions.write'])
+    ->label('scope', 'users.write')
     ->label('audits.event', 'session.delete')
     ->label('audits.resource', 'user/{request.userId}')
     ->label('sdk', new Method(
@@ -2521,7 +2527,7 @@ Http::delete('/v1/users/:userId/sessions')
     ->desc('Delete user sessions')
     ->groups(['api', 'users'])
     ->label('event', 'users.[userId].sessions.delete')
-    ->label('scope', ['users.write', 'sessions.write'])
+    ->label('scope', 'users.write')
     ->label('audits.event', 'session.delete')
     ->label('audits.resource', 'user/{user.$id}')
     ->label('sdk', new Method(
@@ -2836,7 +2842,6 @@ Http::get('/v1/users/usage')
         $format = match ($days['period']) {
             '1h' => 'Y-m-d\TH:00:00.000P',
             '1d' => 'Y-m-d\T00:00:00.000P',
-            default => throw new \LogicException('Unsupported period: ' . $days['period']),
         };
 
         foreach ($metrics as $metric) {

app/controllers/general.php

@@ -7,11 +7,10 @@ use Ahc\Jwt\JWTException;
 use Appwrite\Auth\Key;
 use Appwrite\Bus\Events\ExecutionCompleted;
 use Appwrite\Bus\Events\RequestCompleted;
+use Appwrite\Event\Certificate;
 use Appwrite\Event\Delete as DeleteEvent;
 use Appwrite\Event\Event;
-use Appwrite\Event\Publisher\Certificate;
 use Appwrite\Extend\Exception as AppwriteException;
-use Appwrite\Locking\Lock;
 use Appwrite\Network\Cors;
 use Appwrite\Platform\Appwrite;
 use Appwrite\SDK\Method;
@@ -26,9 +25,6 @@ use Appwrite\Utopia\Request\Filters\V18 as RequestV18;
 use Appwrite\Utopia\Request\Filters\V19 as RequestV19;
 use Appwrite\Utopia\Request\Filters\V20 as RequestV20;
 use Appwrite\Utopia\Request\Filters\V21 as RequestV21;
-use Appwrite\Utopia\Request\Filters\V22 as RequestV22;
-use Appwrite\Utopia\Request\Filters\V23 as RequestV23;
-use Appwrite\Utopia\Request\Filters\V24 as RequestV24;
 use Appwrite\Utopia\Response;
 use Appwrite\Utopia\Response\Filters\V16 as ResponseV16;
 use Appwrite\Utopia\Response\Filters\V17 as ResponseV17;
@@ -36,9 +32,6 @@ use Appwrite\Utopia\Response\Filters\V18 as ResponseV18;
 use Appwrite\Utopia\Response\Filters\V19 as ResponseV19;
 use Appwrite\Utopia\Response\Filters\V20 as ResponseV20;
 use Appwrite\Utopia\Response\Filters\V21 as ResponseV21;
-use Appwrite\Utopia\Response\Filters\V22 as ResponseV22;
-use Appwrite\Utopia\Response\Filters\V23 as ResponseV23;
-use Appwrite\Utopia\Response\Filters\V24 as ResponseV24;
 use Appwrite\Utopia\View;
 use Executor\Executor;
 use MaxMind\Db\Reader;
@@ -70,9 +63,9 @@ use Utopia\Validator\Text;
 
 Config::setParam('cookieSamesite', Response::COOKIE_SAMESITE_NONE);
 
-function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, Authorization $authorization, ?Key $apiKey, DeleteEvent $queueForDeletes, int $executionsRetentionCount, Lock $lock)
+function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, Authorization $authorization, ?Key $apiKey, DeleteEvent $queueForDeletes, int $executionsRetentionCount)
 {
-    $host = $request->getHostname();
+    $host = $request->getHostname() ?? '';
     if (!empty($previewHostname)) {
         $host = $previewHostname;
     }
@@ -123,7 +116,7 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
             }
         }
 
-        if (!in_array($host, $platformHostnames) && System::getEnv('_APP_OPTIONS_ROUTER_PROTECTION', 'enabled') === 'enabled') {
+        if (!in_array($host, $platformHostnames)) {
             throw new AppwriteException(AppwriteException::GENERAL_ACCESS_FORBIDDEN, 'Router protection does not allow accessing Appwrite over this domain. Please add it as custom domain to your project or disable _APP_OPTIONS_ROUTER_PROTECTION environment variable.', view: $errorView);
         }
 
@@ -139,7 +132,9 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
     if (!$project->isEmpty() && $project->getId() !== 'console') {
         $accessedAt = $project->getAttribute('accessedAt', 0);
         if (DateTime::formatTz(DateTime::addSeconds(new \DateTime(), -APP_PROJECT_ACCESS)) > $accessedAt) {
-            $lock->set('projects', $project->getId(), 'accessedAt', DateTime::now());
+            $authorization->skip(fn () => $dbForPlatform->updateDocument('projects', $project->getId(), new Document([
+                'accessedAt' => DateTime::now()
+            ])));
         }
 
         /**
@@ -203,6 +198,12 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
             $deployment = $authorization->skip(fn () => $dbForProject->getDocument('deployments', $activeDeploymentId));
         }
 
+        if ($deployment->getAttribute('resourceType', '') === 'functions') {
+            $type = 'function';
+        } elseif ($deployment->getAttribute('resourceType', '') === 'sites') {
+            $type = 'site';
+        }
+
         if ($deployment->isEmpty()) {
             $resourceType = $rule->getAttribute('deploymentResourceType', '');
             $resourceId = $rule->getAttribute('deploymentResourceId', '');
@@ -212,14 +213,6 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
             throw $exception;
         }
 
-        if ($deployment->getAttribute('resourceType', '') === 'functions') {
-            $type = 'function';
-        } elseif ($deployment->getAttribute('resourceType', '') === 'sites') {
-            $type = 'site';
-        } else {
-            throw new AppwriteException(AppwriteException::GENERAL_SERVER_ERROR, 'Unknown deployment resource type', view: $errorView);
-        }
-
         $resource = $type === 'function' ?
             $authorization->skip(fn () => $dbForProject->getDocument('functions', $deployment->getAttribute('resourceId', ''))) :
             $authorization->skip(fn () => $dbForProject->getDocument('sites', $deployment->getAttribute('resourceId', '')));
@@ -307,13 +300,13 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
             }
         }
 
-        $body = $swooleRequest->getContent() ?: '';
+        $body = $swooleRequest->getContent() ?? '';
         $method = $swooleRequest->server['request_method'];
 
         $requestHeaders = $request->getHeaders();
 
         if ($resource->isEmpty() || !$resource->getAttribute('enabled')) {
-            if ($type === 'function') {
+            if ($type === 'functions') {
                 throw new AppwriteException(AppwriteException::FUNCTION_NOT_FOUND, view: $errorView);
             } else {
                 throw new AppwriteException(AppwriteException::SITE_NOT_FOUND, view: $errorView);
@@ -335,6 +328,7 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
         $runtime = match ($type) {
             'function' => $runtimes[$resource->getAttribute('runtime')] ?? null,
             'site' => $runtimes[$resource->getAttribute('buildRuntime')] ?? null,
+            default => null
         };
 
         // Static site enforced runtime
@@ -398,7 +392,7 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
             'projectId' => $project->getId(),
             'scopes' => $resource->getAttribute('scopes', [])
         ]);
-        $headers['x-appwrite-key'] = API_KEY_EPHEMERAL . '_' . $jwtKey;
+        $headers['x-appwrite-key'] = API_KEY_DYNAMIC . '_' . $jwtKey;
         $headers['x-appwrite-trigger'] = 'http';
         $headers['x-appwrite-user-jwt'] = '';
 
@@ -463,10 +457,10 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
         // V2 vars
         if ($version === 'v2') {
             $vars = \array_merge($vars, [
-                'APPWRITE_FUNCTION_TRIGGER' => $headers['x-appwrite-trigger'],
+                'APPWRITE_FUNCTION_TRIGGER' => $headers['x-appwrite-trigger'] ?? '',
                 'APPWRITE_FUNCTION_DATA' => $body,
-                'APPWRITE_FUNCTION_USER_ID' => $headers['x-appwrite-user-id'],
-                'APPWRITE_FUNCTION_JWT' => $headers['x-appwrite-user-jwt']
+                'APPWRITE_FUNCTION_USER_ID' => $headers['x-appwrite-user-id'] ?? '',
+                'APPWRITE_FUNCTION_JWT' => $headers['x-appwrite-user-jwt'] ?? ''
             ]);
         }
 
@@ -682,8 +676,9 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
 
             if (\is_string($logs) && \strlen($logs) > $maxLogLength) {
                 $warningMessage = "[WARNING] Logs truncated. The output exceeded {$maxLogLength} characters.\n";
-                $maxContentLength = $maxLogLength - \strlen($warningMessage);
-                $logs = $warningMessage . \substr($logs, -$maxContentLength);
+                $warningLength = \strlen($warningMessage);
+                $maxContentLength = max(0, $maxLogLength - $warningLength);
+                $logs = $warningMessage . ($maxContentLength > 0 ? \substr($logs, -$maxContentLength) : '');
             }
 
             // Truncate errors if they exceed the limit
@@ -692,8 +687,9 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
 
             if (\is_string($errors) && \strlen($errors) > $maxErrorLength) {
                 $warningMessage = "[WARNING] Errors truncated. The output exceeded {$maxErrorLength} characters.\n";
-                $maxContentLength = $maxErrorLength - \strlen($warningMessage);
-                $errors = $warningMessage . \substr($errors, -$maxContentLength);
+                $warningLength = \strlen($warningMessage);
+                $maxContentLength = max(0, $maxErrorLength - $warningLength);
+                $errors = $warningMessage . ($maxContentLength > 0 ? \substr($errors, -$maxContentLength) : '');
             }
             /** Update execution status */
             $status = $executionResponse['statusCode'] >= 500 ? 'failed' : 'completed';
@@ -721,12 +717,14 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
                 throw $th;
             }
         } finally {
-            $bus->dispatch(new ExecutionCompleted(
-                execution: $execution->getArrayCopy(),
-                project: $project->getArrayCopy(),
-                spec: $spec,
-                resource: $resource->getArrayCopy(),
-            ));
+            if ($type === 'function' || $type === 'site') {
+                $bus->dispatch(new ExecutionCompleted(
+                    execution: $execution->getArrayCopy(),
+                    project: $project->getArrayCopy(),
+                    spec: $spec,
+                    resource: $resource->getArrayCopy(),
+                ));
+            }
         }
 
         $execution->setAttribute('logs', '');
@@ -848,16 +846,15 @@ Http::init()
     ->inject('authorization')
     ->inject('queueForDeletes')
     ->inject('executionsRetentionCount')
-    ->inject('lock')
-    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Document $project, Database $dbForPlatform, callable $getProjectDB, Locale $locale, array $localeCodes, Reader $geodb, Event $queueForEvents, Bus $bus, Executor $executor, array $platform, callable $isResourceBlocked, string $previewHostname, Document $devKey, ?Key $apiKey, Cors $cors, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount, Lock $lock) {
+    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Document $project, Database $dbForPlatform, callable $getProjectDB, Locale $locale, array $localeCodes, Reader $geodb, Event $queueForEvents, Bus $bus, Executor $executor, array $platform, callable $isResourceBlocked, string $previewHostname, Document $devKey, ?Key $apiKey, Cors $cors, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount) {
         /*
         * Appwrite Router
         */
-        $hostname = $request->getHostname();
+        $hostname = $request->getHostname() ?? '';
         $platformHostnames = $platform['hostnames'] ?? [];
         // Only run Router when external domain
         if (!\in_array($hostname, $platformHostnames) || !empty($previewHostname)) {
-            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount, $lock)) {
+            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount)) {
                 $utopia->getRoute()?->label('router', true);
             }
         }
@@ -895,15 +892,6 @@ Http::init()
             if (version_compare($requestFormat, '1.9.0', '<')) {
                 $request->addFilter(new RequestV21());
             }
-            if (version_compare($requestFormat, '1.9.1', '<')) {
-                $request->addFilter(new RequestV22());
-            }
-            if (version_compare($requestFormat, '1.9.2', '<')) {
-                $request->addFilter(new RequestV23());
-            }
-            if (version_compare($requestFormat, '1.9.3', '<')) {
-                $request->addFilter(new RequestV24());
-            }
         }
 
         $localeParam = (string) $request->getParam('locale', $request->getHeader('x-appwrite-locale', ''));
@@ -928,15 +916,6 @@ Http::init()
          */
         $responseFormat = $request->getHeader('x-appwrite-response-format', System::getEnv('_APP_SYSTEM_RESPONSE_FORMAT', ''));
         if ($responseFormat) {
-            if (version_compare($responseFormat, '1.9.3', '<')) {
-                $response->addFilter(new ResponseV24());
-            }
-            if (version_compare($responseFormat, '1.9.2', '<')) {
-                $response->addFilter(new ResponseV23());
-            }
-            if (version_compare($responseFormat, '1.9.1', '<')) {
-                $response->addFilter(new ResponseV22());
-            }
             if (version_compare($responseFormat, '1.9.0', '<')) {
                 $response->addFilter(new ResponseV21());
             }
@@ -1027,11 +1006,11 @@ Http::init()
    ->inject('request')
    ->inject('console')
    ->inject('dbForPlatform')
-   ->inject('publisherForCertificates')
+   ->inject('queueForCertificates')
    ->inject('platform')
     ->inject('authorization')
     ->inject('certifiedDomains')
-   ->action(function (Request $request, Document $console, Database $dbForPlatform, Certificate $publisherForCertificates, array $platform, Authorization $authorization, Table $certifiedDomains) {
+   ->action(function (Request $request, Document $console, Database $dbForPlatform, Certificate $queueForCertificates, array $platform, Authorization $authorization, Table $certifiedDomains) {
        $hostname = $request->getHostname();
        $platformHostnames = $platform['hostnames'] ?? [];
 
@@ -1057,7 +1036,7 @@ Http::init()
        }
 
        // 4. Check/create rule (requires DB access)
-       $authorization->skip(function () use ($dbForPlatform, $domain, $console, $publisherForCertificates, $certifiedDomains) {
+       $authorization->skip(function () use ($dbForPlatform, $domain, $console, $queueForCertificates, $certifiedDomains) {
            try {
                // TODO: (@Meldiron) Remove after 1.7.x migration
                $isMd5 = System::getEnv('_APP_RULES_FORMAT') === 'md5';
@@ -1113,11 +1092,10 @@ Http::init()
                $dbForPlatform->createDocument('rules', $document);
 
                Console::info('Issuing a TLS certificate for the main domain (' . $domain->get() . ') in a few seconds...');
-               $publisherForCertificates->enqueue(new \Appwrite\Event\Message\Certificate(
-                   project: $console,
-                   domain: $document,
-                   skipRenewCheck: true,
-               ));
+               $queueForCertificates
+                   ->setDomain($document)
+                   ->setSkipRenewCheck(true)
+                   ->trigger();
            } catch (Duplicate $e) {
                Console::info('Certificate already exists');
            } finally {
@@ -1148,15 +1126,14 @@ Http::options()
     ->inject('authorization')
     ->inject('queueForDeletes')
     ->inject('executionsRetentionCount')
-    ->inject('lock')
-    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, Document $project, Document $devKey, ?Key $apiKey, Cors $cors, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount, Lock $lock) {
+    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, Document $project, Document $devKey, ?Key $apiKey, Cors $cors, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount) {
         /*
         * Appwrite Router
         */
         $platformHostnames = $platform['hostnames'] ?? [];
         // Only run Router when external domain
         if (!in_array($request->getHostname(), $platformHostnames) || !empty($previewHostname)) {
-            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount, $lock)) {
+            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount)) {
                 $utopia->getRoute()?->label('router', true);
             }
         }
@@ -1442,7 +1419,6 @@ Http::error()
             case 402: // Error allowed publicly
             case 403: // Error allowed publicly
             case 404: // Error allowed publicly
-            case 405: // Error allowed publicly
             case 408: // Error allowed publicly
             case 409: // Error allowed publicly
             case 412: // Error allowed publicly
@@ -1513,9 +1489,9 @@ Http::error()
                 ->setParam('development', Http::isDevelopment())
                 ->setParam('projectName', $project->getAttribute('name'))
                 ->setParam('projectURL', $project->getAttribute('url'))
-                ->setParam('message', $output['message'])
-                ->setParam('type', $output['type'])
-                ->setParam('code', $output['code'])
+                ->setParam('message', $output['message'] ?? '')
+                ->setParam('type', $output['type'] ?? '')
+                ->setParam('code', $output['code'] ?? '')
                 ->setParam('trace', $output['trace'] ?? [])
                 ->setParam('exception', $error);
 
@@ -1551,14 +1527,13 @@ Http::get('/robots.txt')
     ->inject('authorization')
     ->inject('queueForDeletes')
     ->inject('executionsRetentionCount')
-    ->inject('lock')
-    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, ?Key $apiKey, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount, Lock $lock) {
+    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, ?Key $apiKey, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount) {
         $platformHostnames = $platform['hostnames'] ?? [];
         if (in_array($request->getHostname(), $platformHostnames) || !empty($previewHostname)) {
             $template = new View(__DIR__ . '/../views/general/robots.phtml');
             $response->text($template->render(false));
         } else {
-            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount, $lock)) {
+            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount)) {
                 $utopia->getRoute()?->label('router', true);
             }
         }
@@ -1586,14 +1561,13 @@ Http::get('/humans.txt')
     ->inject('authorization')
     ->inject('queueForDeletes')
     ->inject('executionsRetentionCount')
-    ->inject('lock')
-    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, ?Key $apiKey, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount, Lock $lock) {
+    ->action(function (Http $utopia, SwooleRequest $swooleRequest, Request $request, Response $response, Log $log, Database $dbForPlatform, callable $getProjectDB, Event $queueForEvents, Bus $bus, Executor $executor, Reader $geodb, callable $isResourceBlocked, array $platform, string $previewHostname, ?Key $apiKey, Authorization $authorization, DeleteEvent $queueForDeletes, int $executionsRetentionCount) {
         $platformHostnames = $platform['hostnames'] ?? [];
         if (in_array($request->getHostname(), $platformHostnames) || !empty($previewHostname)) {
             $template = new View(__DIR__ . '/../views/general/humans.phtml');
             $response->text($template->render(false));
         } else {
-            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount, $lock)) {
+            if (router($utopia, $dbForPlatform, $getProjectDB, $swooleRequest, $request, $response, $log, $queueForEvents, $bus, $executor, $geodb, $isResourceBlocked, $platform, $previewHostname, $authorization, $apiKey, $queueForDeletes, $executionsRetentionCount)) {
                 $utopia->getRoute()?->label('router', true);
             }
         }
@@ -1632,7 +1606,7 @@ Http::get('/.well-known/acme-challenge/*')
             throw new AppwriteException(AppwriteException::GENERAL_ROUTE_NOT_FOUND, 'Unknown path');
         }
 
-        if (\substr($absolute, 0, \strlen($base)) !== $base) {
+        if (!\substr($absolute, 0, \strlen($base)) === $base) {
             throw new AppwriteException(AppwriteException::GENERAL_UNAUTHORIZED_SCOPE, 'Invalid path');
         }
 
@@ -1711,7 +1685,7 @@ Http::get('/_appwrite/authorize')
     ->inject('previewHostname')
     ->action(function (Request $request, Response $response, string $previewHostname) {
 
-        $host = $request->getHostname();
+        $host = $request->getHostname() ?? '';
         if (!empty($previewHostname)) {
             $host = $previewHostname;
         }

app/controllers/mock.php

@@ -251,7 +251,7 @@ Http::get('/v1/mock/github/callback')
         $privateKey = System::getEnv('_APP_VCS_GITHUB_PRIVATE_KEY');
         $githubAppId = System::getEnv('_APP_VCS_GITHUB_APP_ID');
         $github->initializeVariables($providerInstallationId, $privateKey, $githubAppId);
-        $owner = $github->getOwnerName($providerInstallationId);
+        $owner = $github->getOwnerName($providerInstallationId) ?? '';
 
         $projectInternalId = $project->getSequence();
 

app/controllers/shared/api.php

@@ -3,24 +3,21 @@
 use Appwrite\Auth\Key;
 use Appwrite\Auth\MFA\Type\TOTP;
 use Appwrite\Bus\Events\RequestCompleted;
+use Appwrite\Event\Audit;
 use Appwrite\Event\Build;
-use Appwrite\Event\Context\Audit as AuditContext;
 use Appwrite\Event\Database as EventDatabase;
 use Appwrite\Event\Delete;
 use Appwrite\Event\Event;
 use Appwrite\Event\Func;
 use Appwrite\Event\Mail;
-use Appwrite\Event\Message\Audit as AuditMessage;
 use Appwrite\Event\Message\Usage as UsageMessage;
 use Appwrite\Event\Messaging;
-use Appwrite\Event\Publisher\Audit;
 use Appwrite\Event\Publisher\Usage as UsagePublisher;
 use Appwrite\Event\Realtime;
 use Appwrite\Event\Webhook;
 use Appwrite\Extend\Exception;
 use Appwrite\Extend\Exception as AppwriteException;
 use Appwrite\Functions\EventProcessor;
-use Appwrite\Locking\Lock;
 use Appwrite\SDK\Method;
 use Appwrite\Usage\Context;
 use Appwrite\Utopia\Database\Documents\User;
@@ -45,9 +42,9 @@ use Utopia\System\System;
 use Utopia\Telemetry\Adapter as Telemetry;
 use Utopia\Validator\WhiteList;
 
-$parseLabel = function (string $label, array $responsePayload, array $requestParams, User $user, Document $project) {
+$parseLabel = function (string $label, array $responsePayload, array $requestParams, User $user) {
     preg_match_all('/{(.*?)}/', $label, $matches);
-    foreach ($matches[1] as $pos => $match) {
+    foreach ($matches[1] ?? [] as $pos => $match) {
         $find = $matches[0][$pos];
         $parts = explode('.', $match);
 
@@ -55,12 +52,11 @@ $parseLabel = function (string $label, array $responsePayload, array $requestPar
             throw new Exception(Exception::GENERAL_SERVER_ERROR, "The server encountered an error while parsing the label: $label. Please create an issue on GitHub to allow us to investigate further https://github.com/appwrite/appwrite/issues/new/choose");
         }
 
-        $namespace = $parts[0];
-        $replace = $parts[1];
+        $namespace = $parts[0] ?? '';
+        $replace = $parts[1] ?? '';
 
         $params = match ($namespace) {
             'user' => (array) $user,
-            'project' => $project->getArrayCopy(),
             'request' => $requestParams,
             default => $responsePayload,
         };
@@ -92,7 +88,7 @@ Http::init()
     ->inject('request')
     ->inject('dbForPlatform')
     ->inject('dbForProject')
-    ->inject('auditContext')
+    ->inject('queueForAudits')
     ->inject('project')
     ->inject('user')
     ->inject('session')
@@ -101,8 +97,7 @@ Http::init()
     ->inject('team')
     ->inject('apiKey')
     ->inject('authorization')
-    ->inject('lock')
-    ->action(function (Http $utopia, Request $request, Database $dbForPlatform, Database $dbForProject, AuditContext $auditContext, Document $project, User $user, ?Document $session, array $servers, string $mode, Document $team, ?Key $apiKey, Authorization $authorization, Lock $lock) {
+    ->action(function (Http $utopia, Request $request, Database $dbForPlatform, Database $dbForProject, Audit $queueForAudits, Document $project, User $user, ?Document $session, array $servers, string $mode, Document $team, ?Key $apiKey, Authorization $authorization) {
         $route = $utopia->getRoute();
         if ($route === null) {
             throw new AppwriteException(AppwriteException::GENERAL_ROUTE_NOT_FOUND);
@@ -185,8 +180,7 @@ Http::init()
             // Handle special app role case
             if ($apiKey->getRole() === User::ROLE_APPS) {
                 // Disable authorization checks for project API keys
-                // Dynamic supported for backwards compatibility
-                if (($apiKey->getType() === API_KEY_STANDARD || $apiKey->getType() === API_KEY_EPHEMERAL || $apiKey->getType() === 'dynamic') && $apiKey->getProjectId() === $project->getId()) {
+                if (($apiKey->getType() === API_KEY_STANDARD || $apiKey->getType() === API_KEY_DYNAMIC) && $apiKey->getProjectId() === $project->getId()) {
                     $authorization->setDefaultStatus(false);
                 }
 
@@ -199,7 +193,7 @@ Http::init()
                     'name' => $apiKey->getName(),
                 ]);
 
-                $auditContext->user = $user;
+                $queueForAudits->setUser($user);
             }
 
             // For standard keys, update last accessed time
@@ -247,31 +241,30 @@ Http::init()
                         $sdks[] = $sdk;
 
                         $updates->setAttribute('sdks', $sdks);
-                        $updates->setAttribute('accessedAt', DateTime::now());
+                        $updates->setAttribute('accessedAt', Datetime::now());
                     }
                 }
 
                 if (! $updates->isEmpty()) {
-                    $lock->run('keys', $dbKey->getId(), function () use ($dbForPlatform, $dbKey, $updates, $apiKey, $project, $user, $team) {
-                        $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->updateDocument('keys', $dbKey->getId(), $updates));
+                    $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->updateDocument('keys', $dbKey->getId(), $updates));
 
-                        if (! empty($apiKey->getProjectId())) {
-                            $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('projects', $project->getId()));
-                        } elseif (! empty($apiKey->getUserId())) {
-                            $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('users', $user->getId()));
-                        } elseif (! empty($apiKey->getTeamId())) {
-                            $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('teams', $team->getId()));
-                        }
-                    });
+                    if (! empty($apiKey->getProjectId())) {
+                        $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('projects', $project->getId()));
+                    } elseif (! empty($apiKey->getUserId())) {
+                        $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('users', $user->getId()));
+                    } elseif (! empty($apiKey->getTeamId())) {
+                        $dbForPlatform->getAuthorization()->skip(fn () => $dbForPlatform->purgeCachedDocument('teams', $team->getId()));
+                    }
                 }
 
                 $userClone = clone $user;
                 $userClone->setAttribute('type', match ($apiKey->getType()) {
                     API_KEY_STANDARD => ACTIVITY_TYPE_KEY_PROJECT,
                     API_KEY_ACCOUNT => ACTIVITY_TYPE_KEY_ACCOUNT,
-                    default => ACTIVITY_TYPE_KEY_ORGANIZATION,
+                    API_KEY_ORGANIZATION => ACTIVITY_TYPE_KEY_ORGANIZATION,
+                    default => ACTIVITY_TYPE_KEY_PROJECT,
                 });
-                $auditContext->user = $userClone;
+                $queueForAudits->setUser($userClone);
             }
 
             // Apply permission
@@ -390,10 +383,12 @@ Http::init()
         }
 
         // Step 6: Update project and user last activity
-        if ($project->getId() !== 'console') {
+        if (! $project->isEmpty() && $project->getId() !== 'console') {
             $accessedAt = $project->getAttribute('accessedAt', 0);
             if (DateTime::formatTz(DateTime::addSeconds(new \DateTime(), -APP_PROJECT_ACCESS)) > $accessedAt) {
-                $lock->set('projects', $project->getId(), 'accessedAt', DateTime::now());
+                $authorization->skip(fn () => $dbForPlatform->updateDocument('projects', $project->getId(), new Document([
+                    'accessedAt' => DateTime::now()
+                ])));
             }
         }
 
@@ -410,12 +405,17 @@ Http::init()
                         'accessedAt' => $user->getAttribute('accessedAt')
                     ]));
                 } else {
-                    $lock->set('users', $user->getId(), 'accessedAt', $user->getAttribute('accessedAt'));
+                    $authorization->skip(fn () => $dbForPlatform->updateDocument('users', $user->getId(), new Document([
+                        'accessedAt' => $user->getAttribute('accessedAt')
+                    ])));
                 }
             }
         }
 
         // Steps 7-9: Access Control - Method, Namespace and Scope Validation
+        /**
+         * @var ?Method $method
+         */
         $method = $route->getLabel('sdk', false);
 
         // Take the first method if there's more than one,
@@ -425,7 +425,7 @@ Http::init()
         }
 
         if (! empty($method)) {
-            $namespace = \strtolower($method->getNamespace());
+            $namespace = $method->getNamespace();
 
             if (
                 array_key_exists($namespace, $project->getAttribute('services', []))
@@ -436,15 +436,6 @@ Http::init()
             }
         }
 
-        // Step 8b: Check REST protocol status
-        if (
-            array_key_exists('rest', $project->getAttribute('apis', []))
-            && ! $project->getAttribute('apis', [])['rest']
-            && ! ($user->isPrivileged($authorization->getRoles()) || $user->isApp($authorization->getRoles()))
-        ) {
-            throw new AppwriteException(AppwriteException::GENERAL_API_DISABLED);
-        }
-
         // Step 9: Validate scope permissions
         $allowed = (array) $route->getLabel('scope', 'none');
         if (empty(\array_intersect($allowed, $scopes))) {
@@ -486,7 +477,7 @@ Http::init()
     ->inject('user')
     ->inject('queueForEvents')
     ->inject('queueForMessaging')
-    ->inject('auditContext')
+    ->inject('queueForAudits')
     ->inject('queueForDeletes')
     ->inject('queueForDatabase')
     ->inject('queueForBuilds')
@@ -503,7 +494,7 @@ Http::init()
     ->inject('telemetry')
     ->inject('platform')
     ->inject('authorization')
-    ->action(function (Http $utopia, Request $request, Response $response, Document $project, User $user, Event $queueForEvents, Messaging $queueForMessaging, AuditContext $auditContext, Delete $queueForDeletes, EventDatabase $queueForDatabase, Build $queueForBuilds, Context $usage, Func $queueForFunctions, Mail $queueForMails, Database $dbForProject, callable $timelimit, Document $resourceToken, string $mode, ?Key $apiKey, array $plan, Document $devKey, Telemetry $telemetry, array $platform, Authorization $authorization) {
+    ->action(function (Http $utopia, Request $request, Response $response, Document $project, User $user, Event $queueForEvents, Messaging $queueForMessaging, Audit $queueForAudits, Delete $queueForDeletes, EventDatabase $queueForDatabase, Build $queueForBuilds, Context $usage, Func $queueForFunctions, Mail $queueForMails, Database $dbForProject, callable $timelimit, Document $resourceToken, string $mode, ?Key $apiKey, array $plan, Document $devKey, Telemetry $telemetry, array $platform, Authorization $authorization) {
 
         $response->setUser($user);
         $request->setUser($user);
@@ -520,6 +511,14 @@ Http::init()
             default => '',
         };
 
+        if (
+            array_key_exists('rest', $project->getAttribute('apis', []))
+            && ! $project->getAttribute('apis', [])['rest']
+            && ! ($user->isPrivileged($authorization->getRoles()) || $user->isApp($authorization->getRoles()))
+        ) {
+            throw new AppwriteException(AppwriteException::GENERAL_API_DISABLED);
+        }
+
         /*
         * Abuse Check
         */
@@ -596,12 +595,13 @@ Http::init()
             ->setProject($project)
             ->setUser($user);
 
-        $auditContext->mode = $mode;
-        $auditContext->userAgent = $request->getUserAgent('');
-        $auditContext->ip = $request->getIP();
-        $auditContext->hostname = $request->getHostname();
-        $auditContext->event = $route->getLabel('audits.event', '');
-        $auditContext->project = $project;
+        $queueForAudits
+            ->setMode($mode)
+            ->setUserAgent($request->getUserAgent(''))
+            ->setIP($request->getIP())
+            ->setHostname($request->getHostname())
+            ->setEvent($route->getLabel('audits.event', ''))
+            ->setProject($project);
 
         /* If a session exists, use the user associated with the session */
         if (! $user->isEmpty()) {
@@ -610,7 +610,7 @@ Http::init()
             if (empty($user->getAttribute('type'))) {
                 $userClone->setAttribute('type', $mode === APP_MODE_ADMIN ? ACTIVITY_TYPE_ADMIN : ACTIVITY_TYPE_USER);
             }
-            $auditContext->user = $userClone;
+            $queueForAudits->setUser($userClone);
         }
 
         /* Auto-set projects */
@@ -644,7 +644,7 @@ Http::init()
 
             if (! empty($data) && ! $cacheLog->isEmpty()) {
                 $parts = explode('/', $cacheLog->getAttribute('resourceType', ''));
-                $type = $parts[0];
+                $type = $parts[0] ?? null;
 
                 if ($type === 'bucket' && (! $isImageTransformation || ! $isDisabled)) {
                     $bucketId = $parts[1] ?? null;
@@ -755,12 +755,7 @@ Http::shutdown()
     ->inject('project')
     ->inject('dbForProject')
     ->action(function (Http $utopia, Request $request, Response $response, Document $project, Database $dbForProject) {
-        $sessionLimit = $project->getAttribute('auths', [])['maxSessions'] ?? 0;
-
-        if ($sessionLimit === 0) {
-            return;
-        }
-
+        $sessionLimit = $project->getAttribute('auths', [])['maxSessions'] ?? APP_LIMIT_USER_SESSIONS_DEFAULT;
         $session = $response->getPayload();
         $userId = $session['userId'] ?? '';
         if (empty($userId)) {
@@ -794,8 +789,7 @@ Http::shutdown()
     ->inject('project')
     ->inject('user')
     ->inject('queueForEvents')
-    ->inject('auditContext')
-    ->inject('publisherForAudits')
+    ->inject('queueForAudits')
     ->inject('usage')
     ->inject('publisherForUsage')
     ->inject('queueForDeletes')
@@ -812,7 +806,7 @@ Http::shutdown()
     ->inject('bus')
     ->inject('apiKey')
     ->inject('mode')
-    ->action(function (Http $utopia, Request $request, Response $response, Document $project, User $user, Event $queueForEvents, AuditContext $auditContext, Audit $publisherForAudits, Context $usage, UsagePublisher $publisherForUsage, Delete $queueForDeletes, EventDatabase $queueForDatabase, Build $queueForBuilds, Messaging $queueForMessaging, Func $queueForFunctions, Event $queueForWebhooks, Realtime $queueForRealtime, Database $dbForProject, Authorization $authorization, callable $timelimit, EventProcessor $eventProcessor, Bus $bus, ?Key $apiKey, string $mode) use ($parseLabel) {
+    ->action(function (Http $utopia, Request $request, Response $response, Document $project, User $user, Event $queueForEvents, Audit $queueForAudits, Context $usage, UsagePublisher $publisherForUsage, Delete $queueForDeletes, EventDatabase $queueForDatabase, Build $queueForBuilds, Messaging $queueForMessaging, Func $queueForFunctions, Event $queueForWebhooks, Realtime $queueForRealtime, Database $dbForProject, Authorization $authorization, callable $timelimit, EventProcessor $eventProcessor, Bus $bus, ?Key $apiKey, string $mode) use ($parseLabel) {
 
         $responsePayload = $response->getPayload();
 
@@ -905,9 +899,9 @@ Http::shutdown()
          */
         $pattern = $route->getLabel('audits.resource', null);
         if (! empty($pattern)) {
-            $resource = $parseLabel($pattern, $responsePayload, $requestParams, $user, $project);
+            $resource = $parseLabel($pattern, $responsePayload, $requestParams, $user);
             if (! empty($resource) && $resource !== $pattern) {
-                $auditContext->resource = $resource;
+                $queueForAudits->setResource($resource);
             }
         }
 
@@ -917,8 +911,8 @@ Http::shutdown()
             if (empty($user->getAttribute('type'))) {
                 $userClone->setAttribute('type', $mode === APP_MODE_ADMIN ? ACTIVITY_TYPE_ADMIN : ACTIVITY_TYPE_USER);
             }
-            $auditContext->user = $userClone;
-        } elseif ($auditContext->user === null || $auditContext->user->isEmpty()) {
+            $queueForAudits->setUser($userClone);
+        } elseif ($queueForAudits->getUser() === null || $queueForAudits->getUser()->isEmpty()) {
             /**
              * User in the request is empty, and no user was set for auditing previously.
              * This indicates:
@@ -936,21 +930,24 @@ Http::shutdown()
                 'name' => 'Guest',
             ]);
 
-            $auditContext->user = $user;
+            $queueForAudits->setUser($user);
         }
 
-        $auditUser = $auditContext->user;
-        if (! empty($auditContext->resource) && ! $auditUser->isEmpty()) {
+        if (! empty($queueForAudits->getResource()) && ! $queueForAudits->getUser()->isEmpty()) {
             /**
              * audits.payload is switched to default true
              * in order to auto audit payload for all endpoints
              */
             $pattern = $route->getLabel('audits.payload', true);
             if (! empty($pattern)) {
-                $auditContext->payload = $responsePayload;
+                $queueForAudits->setPayload($responsePayload);
             }
 
-            $publisherForAudits->enqueue(AuditMessage::fromContext($auditContext));
+            foreach ($queueForEvents->getParams() as $key => $value) {
+                $queueForAudits->setParam($key, $value);
+            }
+
+            $queueForAudits->trigger();
         }
 
         if (! empty($queueForDeletes->getType())) {
@@ -974,16 +971,15 @@ Http::shutdown()
         if ($useCache) {
             $resource = $resourceType = null;
             $data = $response->getPayload();
-            $statusCode = $response->getStatusCode();
-            if (! empty($data['payload']) && $statusCode >= 200 && $statusCode < 300) {
+            if (! empty($data['payload'])) {
                 $pattern = $route->getLabel('cache.resource', null);
                 if (! empty($pattern)) {
-                    $resource = $parseLabel($pattern, $responsePayload, $requestParams, $user, $project);
+                    $resource = $parseLabel($pattern, $responsePayload, $requestParams, $user);
                 }
 
                 $pattern = $route->getLabel('cache.resourceType', null);
                 if (! empty($pattern)) {
-                    $resourceType = $parseLabel($pattern, $responsePayload, $requestParams, $user, $project);
+                    $resourceType = $parseLabel($pattern, $responsePayload, $requestParams, $user);
                 }
 
                 $cache = new Cache(

app/http.php

@@ -72,6 +72,8 @@ $swooleAdapter = new Server(
     container: $container,
 );
 
+$container->set('container', fn () => fn () => $swooleAdapter->getContainer());
+
 $http = $swooleAdapter->getServer();
 
 /**
@@ -413,19 +415,27 @@ $http->on(Constant::EVENT_START, function ($http) use ($payloadSize, $totalWorke
         $projectCollections = $collections['projects'];
 
         $sharedTables = \explode(',', System::getEnv('_APP_DATABASE_SHARED_TABLES', ''));
+        $sharedTablesV1 = \explode(',', System::getEnv('_APP_DATABASE_SHARED_TABLES_V1', ''));
+        $sharedTablesV2 = \array_diff($sharedTables, $sharedTablesV1);
+
         $documentsSharedTables = \explode(',', System::getEnv('_APP_DATABASE_DOCUMENTSDB_SHARED_TABLES', ''));
+        $documentsSharedTablesV1 = \explode(',', System::getEnv('_APP_DATABASE_DOCUMENTSDB_SHARED_TABLES_V1', ''));
+        $documentsSharedTablesV2 = \array_diff($documentsSharedTables, $documentsSharedTablesV1);
+
         $vectorSharedTables = \explode(',', System::getEnv('_APP_DATABASE_VECTORSDB_SHARED_TABLES', ''));
+        $vectorSharedTablesV1 = \explode(',', System::getEnv('_APP_DATABASE_VECTORSDB_SHARED_TABLES_V1', ''));
+        $vectorSharedTablesV2 = \array_diff($vectorSharedTables, $vectorSharedTablesV1);
 
         $cache = $app->getResource('cache');
 
-        // All shared tables pools that need project metadata collections
-        $allSharedTables = \array_values(\array_unique(\array_filter([
-            ...$sharedTables,
-            ...$documentsSharedTables,
-            ...$vectorSharedTables,
+        // All shared tables V2 pools that need project metadata collections
+        $sharedTablesV2All = \array_values(\array_unique(\array_filter([
+            ...$sharedTablesV2,
+            ...$documentsSharedTablesV2,
+            ...$vectorSharedTablesV2,
         ])));
 
-        foreach ($allSharedTables as $hostname) {
+        foreach ($sharedTablesV2All as $hostname) {
             Span::init('database.setup');
             Span::add('database.hostname', $hostname);
 
@@ -523,7 +533,6 @@ $swooleAdapter->onRequest(function ($utopiaRequest, $utopiaResponse) use ($files
     }
 
     $requestContainer = $swooleAdapter->getContainer();
-    $requestContainer->set('container', fn () => $requestContainer);
     $requestContainer->set('request', fn () => $request);
     $requestContainer->set('response', fn () => $response);
 

app/init/configs.php

@@ -12,7 +12,7 @@ Config::load('runtimes-v2', __DIR__ . '/../config/runtimes-v2.php', $configAdapt
 Config::load('template-runtimes', __DIR__ . '/../config/template-runtimes.php', $configAdapter);
 Config::load('events', __DIR__ . '/../config/events.php', $configAdapter);
 Config::load('auth', __DIR__ . '/../config/auth.php', $configAdapter);
-Config::load('protocols', __DIR__ . '/../config/protocols.php', $configAdapter);
+Config::load('apis', __DIR__ . '/../config/apis.php', $configAdapter);  // List of APIs
 Config::load('errors', __DIR__ . '/../config/errors.php', $configAdapter);
 Config::load('oAuthProviders', __DIR__ . '/../config/oAuthProviders.php', $configAdapter);
 Config::load('sdks', __DIR__ . '/../config/sdks.php', $configAdapter);

app/init/constants.php

@@ -1,7 +1,6 @@
 <?php
 
 use Appwrite\Platform\Modules\Compute\Specification;
-use Utopia\System\System;
 
 const APP_NAME = 'Appwrite';
 const APP_DOMAIN = 'appwrite.io';
@@ -25,6 +24,9 @@ const APP_MODE_ADMIN = 'admin';
 const APP_PAGING_LIMIT = 12;
 const APP_LIMIT_COUNT = 5000;
 const APP_LIMIT_USERS = 10_000;
+const APP_LIMIT_USER_PASSWORD_HISTORY = 20;
+const APP_LIMIT_USER_SESSIONS_MAX = 100;
+const APP_LIMIT_USER_SESSIONS_DEFAULT = 10;
 const APP_LIMIT_ANTIVIRUS = 20_000_000; //20MB
 const APP_LIMIT_ENCRYPTION = 20_000_000; //20MB
 const APP_LIMIT_COMPRESSION = 20_000_000; //20MB
@@ -44,8 +46,8 @@ const APP_PROJECT_ACCESS = 24 * 60 * 60; // 24 hours
 const APP_RESOURCE_TOKEN_ACCESS = 24 * 60 * 60; // 24 hours
 const APP_FILE_ACCESS = 24 * 60 * 60; // 24 hours
 const APP_CACHE_UPDATE = 24 * 60 * 60; // 24 hours
-const APP_CACHE_BUSTER = 4324;
-const APP_VERSION_STABLE = '1.9.3';
+const APP_CACHE_BUSTER = 4321;
+const APP_VERSION_STABLE = '1.9.0';
 const APP_DATABASE_ATTRIBUTE_EMAIL = 'email';
 const APP_DATABASE_ATTRIBUTE_ENUM = 'enum';
 const APP_DATABASE_ATTRIBUTE_IP = 'ip';
@@ -188,7 +190,7 @@ const BUILD_TYPE_RETRY = 'retry';
 
 // Deletion Types
 
-\define('ENABLE_EXECUTIONS_LIMIT_ON_ROUTE', System::getEnv('_APP_EXECUTIONS_LIMIT_ON_ROUTE', 'disabled') === 'enabled');
+const ENABLE_EXECUTIONS_LIMIT_ON_ROUTE = false;
 
 const DELETE_TYPE_DATABASES = 'databases';
 const DELETE_TYPE_DOCUMENT = 'document';
@@ -244,7 +246,6 @@ const APP_AUTH_TYPE_KEY = 'Key';
 const APP_AUTH_TYPE_ADMIN = 'Admin';
 // Response related
 const MAX_OUTPUT_CHUNK_SIZE = 10 * 1024 * 1024; // 10MB
-const APP_LIMIT_UPLOAD_CHUNK_SIZE = 5 * 1024 * 1024; // 5MB
 const APP_FUNCTION_LOG_LENGTH_LIMIT = 1000000;
 const APP_FUNCTION_ERROR_LENGTH_LIMIT = 1000000;
 // Function headers
@@ -256,7 +257,7 @@ const MESSAGE_TYPE_SMS = 'sms';
 const MESSAGE_TYPE_PUSH = 'push';
 // API key types
 const API_KEY_STANDARD = 'standard';
-const API_KEY_EPHEMERAL = 'ephemeral';
+const API_KEY_DYNAMIC = 'dynamic';
 const API_KEY_ORGANIZATION = 'organization';
 const API_KEY_ACCOUNT = 'account';
 // Usage metrics

app/init/models.php

@@ -56,11 +56,6 @@ use Appwrite\Utopia\Response\Model\ColumnString;
 use Appwrite\Utopia\Response\Model\ColumnText;
 use Appwrite\Utopia\Response\Model\ColumnURL;
 use Appwrite\Utopia\Response\Model\ColumnVarchar;
-use Appwrite\Utopia\Response\Model\ConsoleKeyScope;
-use Appwrite\Utopia\Response\Model\ConsoleKeyScopeList;
-use Appwrite\Utopia\Response\Model\ConsoleOAuth2Provider;
-use Appwrite\Utopia\Response\Model\ConsoleOAuth2ProviderList;
-use Appwrite\Utopia\Response\Model\ConsoleOAuth2ProviderParameter;
 use Appwrite\Utopia\Response\Model\ConsoleVariables;
 use Appwrite\Utopia\Response\Model\Continent;
 use Appwrite\Utopia\Response\Model\Country;
@@ -73,7 +68,6 @@ use Appwrite\Utopia\Response\Model\DetectionVariable;
 use Appwrite\Utopia\Response\Model\DevKey;
 use Appwrite\Utopia\Response\Model\Document as ModelDocument;
 use Appwrite\Utopia\Response\Model\Embedding;
-use Appwrite\Utopia\Response\Model\EphemeralKey;
 use Appwrite\Utopia\Response\Model\Error;
 use Appwrite\Utopia\Response\Model\ErrorDev;
 use Appwrite\Utopia\Response\Model\Execution;
@@ -111,47 +105,6 @@ use Appwrite\Utopia\Response\Model\MigrationReport;
 use Appwrite\Utopia\Response\Model\Mock;
 use Appwrite\Utopia\Response\Model\MockNumber;
 use Appwrite\Utopia\Response\Model\None;
-use Appwrite\Utopia\Response\Model\OAuth2Amazon;
-use Appwrite\Utopia\Response\Model\OAuth2Apple;
-use Appwrite\Utopia\Response\Model\OAuth2Auth0;
-use Appwrite\Utopia\Response\Model\OAuth2Authentik;
-use Appwrite\Utopia\Response\Model\OAuth2Autodesk;
-use Appwrite\Utopia\Response\Model\OAuth2Bitbucket;
-use Appwrite\Utopia\Response\Model\OAuth2Bitly;
-use Appwrite\Utopia\Response\Model\OAuth2Box;
-use Appwrite\Utopia\Response\Model\OAuth2Dailymotion;
-use Appwrite\Utopia\Response\Model\OAuth2Discord;
-use Appwrite\Utopia\Response\Model\OAuth2Disqus;
-use Appwrite\Utopia\Response\Model\OAuth2Dropbox;
-use Appwrite\Utopia\Response\Model\OAuth2Etsy;
-use Appwrite\Utopia\Response\Model\OAuth2Facebook;
-use Appwrite\Utopia\Response\Model\OAuth2Figma;
-use Appwrite\Utopia\Response\Model\OAuth2FusionAuth;
-use Appwrite\Utopia\Response\Model\OAuth2GitHub;
-use Appwrite\Utopia\Response\Model\OAuth2Gitlab;
-use Appwrite\Utopia\Response\Model\OAuth2Google;
-use Appwrite\Utopia\Response\Model\OAuth2Keycloak;
-use Appwrite\Utopia\Response\Model\OAuth2Kick;
-use Appwrite\Utopia\Response\Model\OAuth2Linkedin;
-use Appwrite\Utopia\Response\Model\OAuth2Microsoft;
-use Appwrite\Utopia\Response\Model\OAuth2Notion;
-use Appwrite\Utopia\Response\Model\OAuth2Oidc;
-use Appwrite\Utopia\Response\Model\OAuth2Okta;
-use Appwrite\Utopia\Response\Model\OAuth2Paypal;
-use Appwrite\Utopia\Response\Model\OAuth2Podio;
-use Appwrite\Utopia\Response\Model\OAuth2ProviderList;
-use Appwrite\Utopia\Response\Model\OAuth2Salesforce;
-use Appwrite\Utopia\Response\Model\OAuth2Slack;
-use Appwrite\Utopia\Response\Model\OAuth2Spotify;
-use Appwrite\Utopia\Response\Model\OAuth2Stripe;
-use Appwrite\Utopia\Response\Model\OAuth2Tradeshift;
-use Appwrite\Utopia\Response\Model\OAuth2Twitch;
-use Appwrite\Utopia\Response\Model\OAuth2WordPress;
-use Appwrite\Utopia\Response\Model\OAuth2X;
-use Appwrite\Utopia\Response\Model\OAuth2Yahoo;
-use Appwrite\Utopia\Response\Model\OAuth2Yandex;
-use Appwrite\Utopia\Response\Model\OAuth2Zoho;
-use Appwrite\Utopia\Response\Model\OAuth2Zoom;
 use Appwrite\Utopia\Response\Model\Phone;
 use Appwrite\Utopia\Response\Model\PlatformAndroid;
 use Appwrite\Utopia\Response\Model\PlatformApple;
@@ -159,24 +112,12 @@ use Appwrite\Utopia\Response\Model\PlatformLinux;
 use Appwrite\Utopia\Response\Model\PlatformList;
 use Appwrite\Utopia\Response\Model\PlatformWeb;
 use Appwrite\Utopia\Response\Model\PlatformWindows;
-use Appwrite\Utopia\Response\Model\PolicyList;
-use Appwrite\Utopia\Response\Model\PolicyMembershipPrivacy;
-use Appwrite\Utopia\Response\Model\PolicyPasswordDictionary;
-use Appwrite\Utopia\Response\Model\PolicyPasswordHistory;
-use Appwrite\Utopia\Response\Model\PolicyPasswordPersonalData;
-use Appwrite\Utopia\Response\Model\PolicySessionAlert;
-use Appwrite\Utopia\Response\Model\PolicySessionDuration;
-use Appwrite\Utopia\Response\Model\PolicySessionInvalidation;
-use Appwrite\Utopia\Response\Model\PolicySessionLimit;
-use Appwrite\Utopia\Response\Model\PolicyUserLimit;
 use Appwrite\Utopia\Response\Model\Preferences;
 use Appwrite\Utopia\Response\Model\Project;
 use Appwrite\Utopia\Response\Model\Provider;
 use Appwrite\Utopia\Response\Model\ProviderRepository;
 use Appwrite\Utopia\Response\Model\ProviderRepositoryFramework;
-use Appwrite\Utopia\Response\Model\ProviderRepositoryFrameworkList;
 use Appwrite\Utopia\Response\Model\ProviderRepositoryRuntime;
-use Appwrite\Utopia\Response\Model\ProviderRepositoryRuntimeList;
 use Appwrite\Utopia\Response\Model\ResourceToken;
 use Appwrite\Utopia\Response\Model\Row;
 use Appwrite\Utopia\Response\Model\Rule;
@@ -194,6 +135,7 @@ use Appwrite\Utopia\Response\Model\TemplateFramework;
 use Appwrite\Utopia\Response\Model\TemplateFunction;
 use Appwrite\Utopia\Response\Model\TemplateRuntime;
 use Appwrite\Utopia\Response\Model\TemplateSite;
+use Appwrite\Utopia\Response\Model\TemplateSMS;
 use Appwrite\Utopia\Response\Model\TemplateVariable;
 use Appwrite\Utopia\Response\Model\Token;
 use Appwrite\Utopia\Response\Model\Topic;
@@ -248,8 +190,8 @@ Response::setModel(new BaseList('Site Templates List', Response::MODEL_TEMPLATE_
 Response::setModel(new BaseList('Functions List', Response::MODEL_FUNCTION_LIST, 'functions', Response::MODEL_FUNCTION));
 Response::setModel(new BaseList('Function Templates List', Response::MODEL_TEMPLATE_FUNCTION_LIST, 'templates', Response::MODEL_TEMPLATE_FUNCTION));
 Response::setModel(new BaseList('Installations List', Response::MODEL_INSTALLATION_LIST, 'installations', Response::MODEL_INSTALLATION));
-Response::setModel(new ProviderRepositoryFrameworkList());
-Response::setModel(new ProviderRepositoryRuntimeList());
+Response::setModel(new BaseList('Framework Provider Repositories List', Response::MODEL_PROVIDER_REPOSITORY_FRAMEWORK_LIST, 'frameworkProviderRepositories', Response::MODEL_PROVIDER_REPOSITORY_FRAMEWORK));
+Response::setModel(new BaseList('Runtime Provider Repositories List', Response::MODEL_PROVIDER_REPOSITORY_RUNTIME_LIST, 'runtimeProviderRepositories', Response::MODEL_PROVIDER_REPOSITORY_RUNTIME));
 Response::setModel(new BaseList('Branches List', Response::MODEL_BRANCH_LIST, 'branches', Response::MODEL_BRANCH));
 Response::setModel(new BaseList('Frameworks List', Response::MODEL_FRAMEWORK_LIST, 'frameworks', Response::MODEL_FRAMEWORK));
 Response::setModel(new BaseList('Runtimes List', Response::MODEL_RUNTIME_LIST, 'runtimes', Response::MODEL_RUNTIME));
@@ -267,9 +209,6 @@ Response::setModel(new BaseList('Currencies List', Response::MODEL_CURRENCY_LIST
 Response::setModel(new BaseList('Phones List', Response::MODEL_PHONE_LIST, 'phones', Response::MODEL_PHONE));
 Response::setModel(new BaseList('Metric List', Response::MODEL_METRIC_LIST, 'metrics', Response::MODEL_METRIC, true, false));
 Response::setModel(new BaseList('Variables List', Response::MODEL_VARIABLE_LIST, 'variables', Response::MODEL_VARIABLE));
-Response::setModel(new BaseList('Mock Numbers List', Response::MODEL_MOCK_NUMBER_LIST, 'mockNumbers', Response::MODEL_MOCK_NUMBER));
-Response::setModel(new PolicyList());
-Response::setModel(new BaseList('Email Templates List', Response::MODEL_EMAIL_TEMPLATE_LIST, 'templates', Response::MODEL_EMAIL_TEMPLATE));
 Response::setModel(new BaseList('Status List', Response::MODEL_HEALTH_STATUS_LIST, 'statuses', Response::MODEL_HEALTH_STATUS));
 Response::setModel(new BaseList('Rule List', Response::MODEL_PROXY_RULE_LIST, 'rules', Response::MODEL_PROXY_RULE));
 Response::setModel(new BaseList('Schedules List', Response::MODEL_SCHEDULE_LIST, 'schedules', Response::MODEL_SCHEDULE));
@@ -395,59 +334,8 @@ Response::setModel(new Execution());
 Response::setModel(new Project());
 Response::setModel(new Webhook());
 Response::setModel(new Key());
-Response::setModel(new EphemeralKey());
 Response::setModel(new DevKey());
 Response::setModel(new MockNumber());
-Response::setModel(new OAuth2GitHub());
-Response::setModel(new OAuth2Discord());
-Response::setModel(new OAuth2Figma());
-Response::setModel(new OAuth2Dropbox());
-Response::setModel(new OAuth2Dailymotion());
-Response::setModel(new OAuth2Bitbucket());
-Response::setModel(new OAuth2Bitly());
-Response::setModel(new OAuth2Box());
-Response::setModel(new OAuth2Autodesk());
-Response::setModel(new OAuth2Google());
-Response::setModel(new OAuth2Zoom());
-Response::setModel(new OAuth2Zoho());
-Response::setModel(new OAuth2Yandex());
-Response::setModel(new OAuth2X());
-Response::setModel(new OAuth2WordPress());
-Response::setModel(new OAuth2Twitch());
-Response::setModel(new OAuth2Stripe());
-Response::setModel(new OAuth2Spotify());
-Response::setModel(new OAuth2Slack());
-Response::setModel(new OAuth2Podio());
-Response::setModel(new OAuth2Notion());
-Response::setModel(new OAuth2Salesforce());
-Response::setModel(new OAuth2Yahoo());
-Response::setModel(new OAuth2Linkedin());
-Response::setModel(new OAuth2Disqus());
-Response::setModel(new OAuth2Amazon());
-Response::setModel(new OAuth2Etsy());
-Response::setModel(new OAuth2Facebook());
-Response::setModel(new OAuth2Tradeshift());
-Response::setModel(new OAuth2Paypal());
-Response::setModel(new OAuth2Gitlab());
-Response::setModel(new OAuth2Authentik());
-Response::setModel(new OAuth2Auth0());
-Response::setModel(new OAuth2FusionAuth());
-Response::setModel(new OAuth2Keycloak());
-Response::setModel(new OAuth2Oidc());
-Response::setModel(new OAuth2Okta());
-Response::setModel(new OAuth2Kick());
-Response::setModel(new OAuth2Apple());
-Response::setModel(new OAuth2Microsoft());
-Response::setModel(new OAuth2ProviderList());
-Response::setModel(new PolicyPasswordDictionary());
-Response::setModel(new PolicyPasswordHistory());
-Response::setModel(new PolicyPasswordPersonalData());
-Response::setModel(new PolicySessionAlert());
-Response::setModel(new PolicySessionDuration());
-Response::setModel(new PolicySessionInvalidation());
-Response::setModel(new PolicySessionLimit());
-Response::setModel(new PolicyUserLimit());
-Response::setModel(new PolicyMembershipPrivacy());
 Response::setModel(new AuthProvider());
 Response::setModel(new PlatformWeb());
 Response::setModel(new PlatformApple());
@@ -485,13 +373,9 @@ Response::setModel(new Headers());
 Response::setModel(new Specification());
 Response::setModel(new Rule());
 Response::setModel(new Schedule());
+Response::setModel(new TemplateSMS());
 Response::setModel(new TemplateEmail());
 Response::setModel(new ConsoleVariables());
-Response::setModel(new ConsoleOAuth2ProviderParameter());
-Response::setModel(new ConsoleOAuth2Provider());
-Response::setModel(new ConsoleOAuth2ProviderList());
-Response::setModel(new ConsoleKeyScope());
-Response::setModel(new ConsoleKeyScopeList());
 Response::setModel(new MFAChallenge());
 Response::setModel(new MFARecoveryCodes());
 Response::setModel(new MFAType());

app/init/realtime/connection.php

@@ -85,7 +85,7 @@ return function (Container $container): void {
 
             return $dbForPlatform->findOne('rules', [
                 Query::equal('domain', [$domain]),
-            ]);
+            ]) ?? new Document();
         });
 
         $permitsCurrentProject = $rule->getAttribute('projectInternalId', '') === $project->getSequence();
@@ -139,7 +139,7 @@ return function (Container $container): void {
         $sdkValidator = new WhiteList($servers, true);
         $sdk = \strtolower($request->getHeader('x-sdk-name', 'UNKNOWN'));
 
-        if ($sdk !== 'unknown' && $sdkValidator->isValid($sdk)) {
+        if ($sdk !== 'UNKNOWN' && $sdkValidator->isValid($sdk)) {
             $sdks = $key->getAttribute('sdks', []);
 
             if (!\in_array($sdk, $sdks, true)) {
@@ -327,11 +327,9 @@ return function (Container $container): void {
             }
         }
 
-        // Query params mirror the header fallback pattern used by ?project= and ?devKey=,
-        // allowing Console to embed impersonation in direct file/image URLs where headers cannot be set.
-        $impersonateUserId = $request->getHeader('x-appwrite-impersonate-user-id', (string)$request->getParam('impersonateUserId', ''));
-        $impersonateEmail = $request->getHeader('x-appwrite-impersonate-user-email', (string)$request->getParam('impersonateEmail', ''));
-        $impersonatePhone = $request->getHeader('x-appwrite-impersonate-user-phone', (string)$request->getParam('impersonatePhone', ''));
+        $impersonateUserId = $request->getHeader('x-appwrite-impersonate-user-id', '');
+        $impersonateEmail = $request->getHeader('x-appwrite-impersonate-user-email', '');
+        $impersonatePhone = $request->getHeader('x-appwrite-impersonate-user-phone', '');
 
         if (!$user->isEmpty() && $user->getAttribute('impersonator', false)) {
             $userDb = ($mode === APP_MODE_ADMIN || $project->getId() === 'console') ? $dbForPlatform : $dbForProject;

app/init/registers.php

@@ -71,7 +71,7 @@ $register->set('logger', function () {
 
         $providerConfig = match ($providerName) {
             'sentry' => [ 'key' => $configChunks[0], 'projectId' => $configChunks[1] ?? '', 'host' => '',],
-            'logowl' => ['ticket' => $configChunks[0], 'host' => ''],
+            'logowl' => ['ticket' => $configChunks[0] ?? '', 'host' => ''],
             default => ['key' => $providerConfig],
         };
     }
@@ -249,11 +249,11 @@ $register->set('pools', function () {
     $poolSize = max(1, (int)($instanceConnections / $workerCount));
 
     foreach ($connections as $key => $connection) {
-        $type = $connection['type'];
-        $multiple = $connection['multiple'];
-        $schemes = $connection['schemes'];
+        $type = $connection['type'] ?? '';
+        $multiple = $connection['multiple'] ?? false;
+        $schemes = $connection['schemes'] ?? [];
         $config = [];
-        $dsns = explode(',', $connection['dsns']);
+        $dsns = explode(',', $connection['dsns'] ?? '');
         foreach ($dsns as &$dsn) {
             $dsn = explode('=', $dsn);
             $name = ($multiple) ? $key . '_' . $dsn[0] : $key;
@@ -318,7 +318,7 @@ $register->set('pools', function () {
                         ));
                     });
                 },
-                default => function () use ($dsnHost, $dsnPort, $dsnPass) {
+                'redis' => function () use ($dsnHost, $dsnPort, $dsnPass) {
                     $redis = new \Redis();
                     @$redis->pconnect($dsnHost, (int)$dsnPort);
                     if ($dsnPass) {
@@ -328,6 +328,7 @@ $register->set('pools', function () {
 
                     return $redis;
                 },
+                default => throw new Exception(Exception::GENERAL_SERVER_ERROR, 'Invalid scheme'),
             };
 
             $poolAdapter = System::getEnv('_APP_POOL_ADAPTER', default: 'stack') === 'swoole' ? new SwoolePool() : new StackPool();

app/init/resources.php

@@ -1,11 +1,8 @@
 <?php
 
 use Appwrite\Event\Event;
-use Appwrite\Event\Publisher\Audit as AuditPublisher;
-use Appwrite\Event\Publisher\Certificate as CertificatePublisher;
 use Appwrite\Event\Publisher\Execution as ExecutionPublisher;
 use Appwrite\Event\Publisher\Migration as MigrationPublisher;
-use Appwrite\Event\Publisher\Screenshot as ScreenshotPublisher;
 use Appwrite\Event\Publisher\StatsResources as StatsResourcesPublisher;
 use Appwrite\Event\Publisher\Usage as UsagePublisher;
 use Appwrite\Utopia\Database\Documents\User;
@@ -84,18 +81,6 @@ $container->set('publisherMessaging', function (Publisher $publisher) {
 $container->set('publisherWebhooks', function (Publisher $publisher) {
     return $publisher;
 }, ['publisher']);
-$container->set('publisherForAudits', fn (Publisher $publisher) => new AuditPublisher(
-    $publisher,
-    new Queue(System::getEnv('_APP_AUDITS_QUEUE_NAME', Event::AUDITS_QUEUE_NAME))
-), ['publisher']);
-$container->set('publisherForCertificates', fn (Publisher $publisher) => new CertificatePublisher(
-    $publisher,
-    new Queue(System::getEnv('_APP_CERTIFICATES_QUEUE_NAME', Event::CERTIFICATES_QUEUE_NAME))
-), ['publisher']);
-$container->set('publisherForScreenshots', fn (Publisher $publisher) => new ScreenshotPublisher(
-    $publisher,
-    new Queue(System::getEnv('_APP_SCREENSHOTS_QUEUE_NAME', Event::SCREENSHOTS_QUEUE_NAME))
-), ['publisher']);
 $container->set('publisherForUsage', fn (Publisher $publisher) => new UsagePublisher(
     $publisher,
     new Queue(System::getEnv('_APP_STATS_USAGE_QUEUE_NAME', Event::STATS_USAGE_QUEUE_NAME))
@@ -266,7 +251,7 @@ function getDevice(string $root, string $connection = ''): Device
                 return new Local($root);
         }
     } else {
-        switch (strtolower(System::getEnv('_APP_STORAGE_DEVICE', Storage::DEVICE_LOCAL))) {
+        switch (strtolower(System::getEnv('_APP_STORAGE_DEVICE', Storage::DEVICE_LOCAL) ?? '')) {
             case Storage::DEVICE_LOCAL:
             default:
                 return new Local($root);

app/init/resources/request.php

@@ -4,8 +4,9 @@ use Ahc\Jwt\JWT;
 use Ahc\Jwt\JWTException;
 use Appwrite\Auth\Key;
 use Appwrite\Databases\TransactionState;
+use Appwrite\Event\Audit as AuditEvent;
 use Appwrite\Event\Build;
-use Appwrite\Event\Context\Audit as AuditContext;
+use Appwrite\Event\Certificate;
 use Appwrite\Event\Database as EventDatabase;
 use Appwrite\Event\Delete;
 use Appwrite\Event\Event;
@@ -13,11 +14,11 @@ use Appwrite\Event\Func;
 use Appwrite\Event\Mail;
 use Appwrite\Event\Messaging;
 use Appwrite\Event\Realtime;
+use Appwrite\Event\Screenshot;
 use Appwrite\Event\Webhook;
 use Appwrite\Extend\Exception;
 use Appwrite\Functions\EventProcessor;
 use Appwrite\GraphQL\Schema;
-use Appwrite\Locking\Lock;
 use Appwrite\Network\Cors;
 use Appwrite\Network\Platform;
 use Appwrite\Network\Validator\Origin;
@@ -50,7 +51,6 @@ use Utopia\DSN\DSN;
 use Utopia\Http\Http;
 use Utopia\Locale\Locale;
 use Utopia\Logger\Log;
-use Utopia\Logger\Logger;
 use Utopia\Pools\Group;
 use Utopia\Queue\Publisher;
 use Utopia\Storage\Device;
@@ -69,16 +69,20 @@ return function (Container $container): void {
         return $utopia;
     }, ['utopia']);
 
-    $container->set('log', fn () => new Log(), []);
+    $breadcrumbs = [];
+    $breadcrumbs[] = microtime(true) . '::Init log';
+
+    $log = new Log();
+    $log->addExtra('breadcrumbs', $breadcrumbs);
+
+    //$breadcrumbs = $log->getExtra()['breadcrumbs'] ?? [];
+
+    $container->set('log', fn () => $log, $breadcrumbs);
 
     $container->set('logger', function ($register) {
         return $register->get('logger');
     }, ['register']);
 
-    $container->set('lock', function (\Redis $redis, Telemetry $telemetry, Database $dbForPlatform, Authorization $authorization, Log $log, ?Logger $logger, Document $project): Lock {
-        return new Lock($redis, $telemetry, $dbForPlatform, $authorization, $log, $logger, $project);
-    }, ['redis', 'telemetry', 'dbForPlatform', 'authorization', 'log', 'logger', 'project']);
-
     $container->set('authorization', function () {
         return new Authorization();
     }, []);
@@ -132,6 +136,9 @@ return function (Container $container): void {
     $container->set('queueForBuilds', function (Publisher $publisher) {
         return new Build($publisher);
     }, ['publisher']);
+    $container->set('queueForScreenshots', function (Publisher $publisher) {
+        return new Screenshot($publisher);
+    }, ['publisher']);
     $container->set('queueForDatabase', function (Publisher $publisher) {
         return new EventDatabase($publisher);
     }, ['publisher']);
@@ -150,13 +157,18 @@ return function (Container $container): void {
     $container->set('usage', function () {
         return new UsageContext();
     }, []);
-    $container->set('auditContext', fn () => new AuditContext(), []);
+    $container->set('queueForAudits', function (Publisher $publisher) {
+        return new AuditEvent($publisher);
+    }, ['publisher']);
     $container->set('queueForFunctions', function (Publisher $publisher) {
         return new Func($publisher);
     }, ['publisher']);
     $container->set('eventProcessor', function () {
         return new EventProcessor();
     }, []);
+    $container->set('queueForCertificates', function (Publisher $publisher) {
+        return new Certificate($publisher);
+    }, ['publisher']);
     $container->set('dbForPlatform', function (Group $pools, Cache $cache, Authorization $authorization) {
         $adapter = new DatabasePool($pools->get('console'));
         $database = new Database($adapter, $cache);
@@ -381,7 +393,7 @@ return function (Container $container): void {
 
             return $dbForPlatform->findOne('rules', [
                 Query::equal('domain', [$domain]),
-            ]);
+            ]) ?? new Document();
         });
 
         $permitsCurrentProject = $rule->getAttribute('projectInternalId', '') === $project->getSequence();
@@ -484,10 +496,14 @@ return function (Container $container): void {
         }
 
         // Get fallback session from old clients (no SameSite support) or clients who block 3rd-party cookies
-        $response->addHeader('X-Debug-Fallback', 'false');
+        if ($response) { // if in http context - add debug header
+            $response->addHeader('X-Debug-Fallback', 'false');
+        }
 
         if (empty($store->getProperty('id', '')) && empty($store->getProperty('secret', ''))) {
-            $response->addHeader('X-Debug-Fallback', 'true');
+            if ($response) {
+                $response->addHeader('X-Debug-Fallback', 'true');
+            }
             $fallback = $request->getHeader('x-fallback-cookies', '');
             $fallback = \json_decode($fallback, true);
             $store->decode(((is_array($fallback) && isset($fallback[$store->getKey()])) ? $fallback[$store->getKey()] : ''));
@@ -577,12 +593,10 @@ return function (Container $container): void {
             }
         }
 
-        // Impersonation: if current user has impersonator capability and headers/params are set, act as another user
-        // Query params mirror the header fallback pattern used by ?project= and ?devKey=,
-        // allowing Console to embed impersonation in direct file/image URLs where headers cannot be set.
-        $impersonateUserId = $request->getHeader('x-appwrite-impersonate-user-id', (string)$request->getParam('impersonateUserId', ''));
-        $impersonateEmail = $request->getHeader('x-appwrite-impersonate-user-email', (string)$request->getParam('impersonateEmail', ''));
-        $impersonatePhone = $request->getHeader('x-appwrite-impersonate-user-phone', (string)$request->getParam('impersonatePhone', ''));
+        // Impersonation: if current user has impersonator capability and headers are set, act as another user
+        $impersonateUserId = $request->getHeader('x-appwrite-impersonate-user-id', '');
+        $impersonateEmail = $request->getHeader('x-appwrite-impersonate-user-email', '');
+        $impersonatePhone = $request->getHeader('x-appwrite-impersonate-user-phone', '');
         if (!$user->isEmpty() && $user->getAttribute('impersonator', false)) {
             $userDb = (APP_MODE_ADMIN === $mode || $project->getId() === 'console') ? $dbForPlatform : $dbForProject;
             $targetUser = null;
@@ -1088,7 +1102,7 @@ return function (Container $container): void {
         $sdkValidator = new WhiteList($servers, true);
         $sdk = \strtolower($request->getHeader('x-sdk-name', 'UNKNOWN'));
 
-        if ($sdk !== 'unknown' && $sdkValidator->isValid($sdk)) {
+        if ($sdk !== 'UNKNOWN' && $sdkValidator->isValid($sdk)) {
             $sdks = $key->getAttribute('sdks', []);
 
             if (! in_array($sdk, $sdks)) {

app/init/worker/message.php

@@ -1,6 +1,8 @@
 <?php
 
+use Appwrite\Event\Audit;
 use Appwrite\Event\Build;
+use Appwrite\Event\Certificate;
 use Appwrite\Event\Database as EventDatabase;
 use Appwrite\Event\Delete;
 use Appwrite\Event\Event;
@@ -8,6 +10,7 @@ use Appwrite\Event\Func;
 use Appwrite\Event\Mail;
 use Appwrite\Event\Messaging;
 use Appwrite\Event\Realtime;
+use Appwrite\Event\Screenshot;
 use Appwrite\Event\Webhook;
 use Appwrite\Usage\Context;
 use Appwrite\Utopia\Database\Documents\User;
@@ -308,6 +311,10 @@ return function (Container $container): void {
         return new Build($publisher);
     }, ['publisher']);
 
+    $container->set('queueForScreenshots', function (Publisher $publisher) {
+        return new Screenshot($publisher);
+    }, ['publisher']);
+
     $container->set('queueForDeletes', function (Publisher $publisher) {
         return new Delete($publisher);
     }, ['publisher']);
@@ -316,6 +323,10 @@ return function (Container $container): void {
         return new Event($publisher);
     }, ['publisher']);
 
+    $container->set('queueForAudits', function (Publisher $publisher) {
+        return new Audit($publisher);
+    }, ['publisher']);
+
     $container->set('queueForWebhooks', function (Publisher $publisher) {
         return new Webhook($publisher);
     }, ['publisher']);
@@ -328,6 +339,10 @@ return function (Container $container): void {
         return new Realtime();
     }, []);
 
+    $container->set('queueForCertificates', function (Publisher $publisher) {
+        return new Certificate($publisher);
+    }, ['publisher']);
+
     $container->set('deviceForSites', function (Document $project, Telemetry $telemetry) {
         return new TelemetryDevice($telemetry, getDevice(APP_STORAGE_SITES . '/app-' . $project->getId()));
     }, ['project', 'telemetry']);
@@ -368,7 +383,7 @@ return function (Container $container): void {
 
                 $log->addTag('code', $error->getCode());
                 $log->addTag('verboseType', \get_class($error));
-                $log->addTag('projectId', $project->getId());
+                $log->addTag('projectId', $project->getId() ?? '');
 
                 $log->addExtra('file', $error->getFile());
                 $log->addExtra('line', $error->getLine());

app/realtime.php

@@ -38,7 +38,6 @@ use Utopia\DSN\DSN;
 use Utopia\Logger\Log;
 use Utopia\Pools\Group;
 use Utopia\Registry\Registry;
-use Utopia\Span\Span;
 use Utopia\System\System;
 use Utopia\Telemetry\Adapter\None as NoTelemetry;
 use Utopia\WebSocket\Adapter;
@@ -46,10 +45,6 @@ use Utopia\WebSocket\Server;
 
 require_once __DIR__ . '/init.php';
 
-if (System::getEnv('_APP_EDITION', 'self-hosted') === 'self-hosted') {
-    require_once __DIR__ . '/init/span.php';
-}
-
 /** @var Registry $register */
 $register = $GLOBALS['register'] ?? throw new \RuntimeException('Registry not initialized');
 
@@ -267,9 +262,7 @@ $stats->create();
 
 $containerId = uniqid();
 $statsDocument = null;
-
-$workerNumber = intval(System::getEnv('_APP_WORKERS_NUM', 0))
-    ?: intval(System::getEnv('_APP_CPU_NUM', swoole_cpu_num())) * intval(System::getEnv('_APP_WORKER_PER_CORE', 6));
+$workerNumber = intval(System::getEnv('_APP_CPU_NUM', swoole_cpu_num())) * intval(System::getEnv('_APP_WORKER_PER_CORE', 6));
 
 $adapter = new Adapter\Swoole(port: System::getEnv('PORT', 80));
 $adapter
@@ -401,27 +394,10 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
     Console::success('Worker ' . $workerId . ' started successfully');
 
     $telemetry = getTelemetry($workerId);
-    $realtimeDelayBuckets = [100, 250, 500, 750, 1000, 1500, 2000, 3000, 5000, 7500, 10000, 15000, 30000];
-    $workerTelemetryAttributes = ['workerId' => (string) $workerId];
     $register->set('telemetry', fn () => $telemetry);
-    $register->set('telemetry.workerAttributes', fn () => $workerTelemetryAttributes);
-    $register->set('telemetry.workerCounter', fn () => $telemetry->createUpDownCounter('realtime.server.active_workers'));
-    $register->set('telemetry.workerClientCounter', fn () => $telemetry->createUpDownCounter('realtime.server.worker_clients'));
-    $register->set('telemetry.workerSubscriptionCounter', fn () => $telemetry->createUpDownCounter('realtime.server.worker_subscriptions'));
     $register->set('telemetry.connectionCounter', fn () => $telemetry->createUpDownCounter('realtime.server.open_connections'));
     $register->set('telemetry.connectionCreatedCounter', fn () => $telemetry->createCounter('realtime.server.connection.created'));
     $register->set('telemetry.messageSentCounter', fn () => $telemetry->createCounter('realtime.server.message.sent'));
-    $register->set('telemetry.deliveryDelayHistogram', fn () => $telemetry->createHistogram(
-        name: 'realtime.server.delivery_delay',
-        unit: 'ms',
-        advisory: ['ExplicitBucketBoundaries' => $realtimeDelayBuckets],
-    ));
-    $register->set('telemetry.arrivalDelayHistogram', fn () => $telemetry->createHistogram(
-        name: 'realtime.server.arrival_delay',
-        unit: 'ms',
-        advisory: ['ExplicitBucketBoundaries' => $realtimeDelayBuckets],
-    ));
-    $register->get('telemetry.workerCounter')->add(1);
 
     $attempts = 0;
     $start = time();
@@ -538,28 +514,12 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
             $pubsub->subscribe(['realtime'], function (mixed $redis, string $channel, string $payload) use ($server, $workerId, $stats, $register, $realtime) {
                 $event = json_decode($payload, true);
 
-                $eventTimestamp = $event['data']['timestamp'] ?? null;
-                if (\is_string($eventTimestamp)) {
-                    try {
-                        $eventDate = new \DateTimeImmutable($eventTimestamp, new \DateTimeZone('UTC'));
-                        $now = new \DateTimeImmutable('now', new \DateTimeZone('UTC'));
-                        $eventTimestampMs = (float) $eventDate->format('U.u') * 1000;
-                        $nowTimestampMs = (float) $now->format('U.u') * 1000;
-                        $arrivalDelayMs = (int) \max(0, $nowTimestampMs - $eventTimestampMs);
-
-                        $register->get('telemetry.arrivalDelayHistogram')->record($arrivalDelayMs);
-                    } catch (\Throwable) {
-                        // Ignore invalid timestamp payloads.
-                    }
-                }
-
                 if ($event['permissionsChanged'] && isset($event['userId'])) {
                     $projectId = $event['project'];
                     $userId = $event['userId'];
 
                     if ($realtime->hasSubscriber($projectId, 'user:' . $userId)) {
                         $connection = array_key_first(reset($realtime->subscriptions[$projectId]['user:' . $userId]));
-                        $subscriptionsBefore = \count($realtime->getSubscriptionMetadata($connection));
                         $consoleDatabase = getConsoleDB();
                         $project = $consoleDatabase->getAuthorization()->skip(fn () => $consoleDatabase->getDocument('projects', $projectId));
                         $database = getProjectDB($project);
@@ -569,7 +529,6 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
 
                         $roles = $user->getRoles($database->getAuthorization());
                         $authorization = $realtime->connections[$connection]['authorization'] ?? null;
-                        $previousUserId = $realtime->connections[$connection]['userId'] ?? '';
 
                         $meta = $realtime->getSubscriptionMetadata($connection);
 
@@ -577,19 +536,13 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
 
                         foreach ($meta as $subscriptionId => $subscription) {
                             $queries = Query::parseQueries($subscription['queries'] ?? []);
-                            $channels = Realtime::rebindAccountChannels(
-                                $subscription['channels'] ?? [],
-                                $previousUserId,
-                                $userId
-                            );
                             $realtime->subscribe(
                                 $projectId,
                                 $connection,
                                 $subscriptionId,
                                 $roles,
-                                $channels,
-                                $queries,
-                                $userId
+                                $subscription['channels'] ?? [],
+                                $queries
                             );
                         }
 
@@ -597,12 +550,6 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
                         if ($authorization !== null) {
                             $realtime->connections[$connection]['authorization'] = $authorization;
                         }
-
-                        $subscriptionsAfter = \count($realtime->getSubscriptionMetadata($connection));
-                        $subscriptionDelta = $subscriptionsAfter - $subscriptionsBefore;
-                        if ($subscriptionDelta !== 0) {
-                            $register->get('telemetry.workerSubscriptionCounter')->add($subscriptionDelta, $register->get('telemetry.workerAttributes'));
-                        }
                     }
                 }
 
@@ -645,20 +592,6 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
                 if ($total > 0) {
                     $register->get('telemetry.messageSentCounter')->add($total);
                     $stats->incr($event['project'], 'messages', $total);
-                    $updatedAt = $event['data']['payload']['$updatedAt'] ?? null;
-                    if (\is_string($updatedAt)) {
-                        try {
-                            $updatedAtDate = new \DateTimeImmutable($updatedAt, new \DateTimeZone('UTC'));
-                            $now = new \DateTimeImmutable('now', new \DateTimeZone('UTC'));
-                            $updatedAtTimestampMs = (float) $updatedAtDate->format('U.u') * 1000;
-                            $nowTimestampMs = (float) $now->format('U.u') * 1000;
-                            $delayMs = (int) \max(0, $nowTimestampMs - $updatedAtTimestampMs);
-
-                            $register->get('telemetry.deliveryDelayHistogram')->record($delayMs);
-                        } catch (\Throwable) {
-                            // Ignore invalid timestamp payloads.
-                        }
-                    }
 
                     $projectId = $event['project'] ?? null;
 
@@ -688,16 +621,6 @@ $server->onWorkerStart(function (int $workerId) use ($server, $register, $stats,
     Console::error('Failed to restart pub/sub...');
 });
 
-$server->onWorkerStop(function (int $workerId) use ($register) {
-    Console::warning('Worker ' . $workerId . ' stopping');
-
-    try {
-        $register->get('telemetry.workerCounter')->add(-1);
-    } catch (\Throwable $th) {
-        Console::error('Realtime onWorkerStop telemetry error: ' . $th->getMessage());
-    }
-});
-
 $server->onOpen(function (int $connection, SwooleRequest $request) use ($server, $register, $stats, &$realtime, $registerConnectionResources) {
     global $container;
     $request = new Request($request);
@@ -713,20 +636,6 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
     $project = null;
     $logUser = null;
     $authorization = null;
-    $rawSize = $request->getSize();
-    $channelCount = 0;
-    $subscriptionCount = 0;
-    $outboundBytes = 0;
-    $responseCode = 200;
-    $subscriptionMode = 'message';
-    $success = false;
-
-    Span::init('realtime.open');
-    Span::add('realtime.connectionId', $connection);
-    Span::add('realtime.inboundBytes', $rawSize);
-    if (!empty($request->getOrigin())) {
-        Span::add('realtime.origin', $request->getOrigin());
-    }
 
     try {
         /** @var Document $project */
@@ -744,11 +653,9 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
         $user = $connectionContainer->get('user'); /** @var User $user */
         $logUser = $user;
 
-        $apis = $project->getAttribute('apis', []);
-        // Websocket is what to check, but realtime is checked too for backwards compatibility
-        $websocketEnabled = $apis['websocket'] ?? $apis['realtime'] ?? true;
         if (
-            !$websocketEnabled
+            array_key_exists('realtime', $project->getAttribute('apis', []))
+            && !$project->getAttribute('apis', [])['realtime']
             && !($user->isPrivileged($authorization->getRoles()) || $user->isApp($authorization->getRoles()))
         ) {
             throw new AppwriteException(AppwriteException::GENERAL_API_DISABLED);
@@ -776,6 +683,8 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
             throw new Exception(Exception::REALTIME_TOO_MANY_MESSAGES, 'Too many requests');
         }
 
+        $rawSize = $request->getSize();
+
         triggerStats([
             METRIC_REALTIME_INBOUND => $rawSize,
         ], $project->getId());
@@ -795,11 +704,9 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
         $roles = $user->getRoles($authorization);
 
         $channels = Realtime::convertChannels($request->getQuery('channels', []), $user->getId());
-        $channelCount = \count($channels);
 
         $updateStats = static function (string $projectId, ?string $teamId, string $payloadJson) use ($register, $stats): void {
             $register->get('telemetry.connectionCounter')->add(1);
-            $register->get('telemetry.workerClientCounter')->add(1, $register->get('telemetry.workerAttributes'));
             $register->get('telemetry.connectionCreatedCounter')->add(1);
 
             $stats->set($projectId, [
@@ -833,15 +740,11 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
             $realtime->subscribe($project->getId(), $connection, '', $roles, [], [], $user->getId());
             $realtime->connections[$connection]['authorization'] = $authorization;
             $server->send([$connection], $connectedPayloadJson);
-            $outboundBytes += \strlen($connectedPayloadJson);
             $updateStats($project->getId(), $project->getAttribute('teamId'), $connectedPayloadJson);
-            $subscriptionMode = 'message';
-            $success = true;
             return;
         }
 
         $names = array_keys($channels);
-        $subscriptionMode = 'url';
 
         try {
             $subscriptions = Realtime::constructSubscriptions(
@@ -868,10 +771,6 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
 
             $mapping[$index] = $subscriptionId;
         }
-        $subscriptionCount = \count($subscriptions);
-        if (!empty($subscriptions)) {
-            $register->get('telemetry.workerSubscriptionCounter')->add(\count($subscriptions), $register->get('telemetry.workerAttributes'));
-        }
 
         $realtime->connections[$connection]['authorization'] = $authorization;
 
@@ -887,9 +786,8 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
         ]);
 
         $server->send([$connection], $connectedPayloadJson);
-        $outboundBytes += \strlen($connectedPayloadJson);
         $updateStats($project->getId(), $project->getAttribute('teamId'), $connectedPayloadJson);
-        $success = true;
+
 
     } catch (Throwable $th) {
         logError($th, 'realtime', project: $project, user: $logUser, authorization: $authorization);
@@ -899,7 +797,6 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
         if (!\is_int($code)) {
             $code = 500;
         }
-        $responseCode = $code;
 
         $message = $th->getMessage();
 
@@ -917,9 +814,7 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
             ]
         ];
 
-        $responsePayloadJson = json_encode($response);
-        $server->send([$connection], $responsePayloadJson);
-        $outboundBytes += \strlen($responsePayloadJson);
+        $server->send([$connection], json_encode($response));
         $server->close($connection, $code);
 
         if (System::getEnv('_APP_ENV', 'production') === 'development') {
@@ -927,44 +822,16 @@ $server->onOpen(function (int $connection, SwooleRequest $request) use ($server,
             Console::error('[Error] Code: ' . $response['data']['code']);
             Console::error('[Error] Message: ' . $response['data']['message']);
         }
-        Span::error($th);
-    } finally {
-        Span::add('realtime.success', $success);
-        Span::add('realtime.responseCode', $responseCode);
-        Span::add('realtime.subscriptionMode', $subscriptionMode);
-        Span::add('realtime.channelCount', $channelCount);
-        Span::add('realtime.subscriptionCount', $subscriptionCount);
-        Span::add('realtime.outboundBytes', $outboundBytes);
-        if (!empty($project?->getId())) {
-            Span::add('realtime.projectId', $project->getId());
-        }
-        if (!empty($logUser?->getId())) {
-            Span::add('realtime.userId', $logUser->getId());
-        }
-        Span::current()?->finish();
     }
 });
 
-$server->onMessage(function (int $connection, string $message) use ($server, $realtime, $containerId, $register) {
+$server->onMessage(function (int $connection, string $message) use ($server, $realtime, $containerId) {
     $project = null;
     $authorization = null;
-    $projectId = $realtime->connections[$connection]['projectId'] ?? null;
-    $rawSize = \strlen($message);
-    $messageType = 'invalid';
-    $subscriptionDelta = 0;
-    $subscriptionsRequested = 0;
-    $subscriptionsRemoved = 0;
-    $outboundBytes = 0;
-    $responseCode = 200;
-    $success = false;
-
-    Span::init('realtime.message');
-    Span::add('realtime.connectionId', $connection);
-    Span::add('realtime.inboundBytes', $rawSize);
-    Span::add('realtime.containerId', $containerId);
-
     try {
+        $rawSize = \strlen($message);
         $response = new Response(new SwooleResponse());
+        $projectId = $realtime->connections[$connection]['projectId'] ?? null;
 
         // Get authorization from connection (stored during onOpen)
         $authorization = $realtime->connections[$connection]['authorization'] ?? null;
@@ -1014,12 +881,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
             throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Message format is not valid.');
         }
 
-        $messageType = $message['type'] ?? 'invalid';
-
-        if (!\is_scalar($messageType)) {
-            throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Message type is not valid.');
-        }
-
         // Ping does not require project context; other messages do (e.g. after unsubscribe during auth)
         if (empty($projectId) && ($message['type'] ?? '') !== 'ping') {
             throw new Exception(Exception::REALTIME_POLICY_VIOLATION, 'Missing project context. Reconnect to the project first.');
@@ -1032,7 +893,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                 ]);
 
                 $server->send([$connection], $pongPayloadJson);
-                $outboundBytes += \strlen($pongPayloadJson);
 
                 if ($project !== null && !$project->isEmpty()) {
                     $pongOutboundBytes = \strlen($pongPayloadJson);
@@ -1078,13 +938,7 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
 
                 $authorization = $realtime->connections[$connection]['authorization'] ?? null;
                 $projectId = $realtime->connections[$connection]['projectId'] ?? null;
-                // Capture the pre-auth userId so we can rebind any account channels
-                // that were stored under it (e.g. guest who subscribed to `account`
-                // and now authenticates). unsubscribe() below clears the connection
-                // entry, so we must read it first.
-                $previousUserId = $realtime->connections[$connection]['userId'] ?? '';
 
-                $subscriptionsBefore = \count($realtime->getSubscriptionMetadata($connection));
                 $meta = $realtime->getSubscriptionMetadata($connection);
 
                 $realtime->unsubscribe($connection);
@@ -1092,18 +946,13 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                 if (!empty($projectId)) {
                     foreach ($meta as $subscriptionId => $subscription) {
                         $queries = Query::parseQueries($subscription['queries'] ?? []);
-                        $channels = Realtime::rebindAccountChannels(
-                            $subscription['channels'] ?? [],
-                            $previousUserId,
-                            $user->getId()
-                        );
 
                         $realtime->subscribe(
                             $projectId,
                             $connection,
                             $subscriptionId,
                             $roles,
-                            $channels,
+                            $subscription['channels'] ?? [],
                             $queries,
                             $user->getId()
                         );
@@ -1114,12 +963,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                     $realtime->connections[$connection]['authorization'] = $authorization;
                 }
 
-                $subscriptionsAfter = \count($realtime->getSubscriptionMetadata($connection));
-                $subscriptionDelta = $subscriptionsAfter - $subscriptionsBefore;
-                if ($subscriptionDelta !== 0) {
-                    $register->get('telemetry.workerSubscriptionCounter')->add($subscriptionDelta, $register->get('telemetry.workerAttributes'));
-                }
-
                 $user = $response->output($user, Response::MODEL_ACCOUNT);
 
                 $authResponsePayloadJson = json_encode([
@@ -1132,7 +975,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                 ]);
 
                 $server->send([$connection], $authResponsePayloadJson);
-                $outboundBytes += \strlen($authResponsePayloadJson);
 
                 if ($project !== null && !$project->isEmpty()) {
                     $authOutboundBytes = \strlen($authResponsePayloadJson);
@@ -1165,7 +1007,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
 
                 // bulk validation + parsing before subscribing
                 $parsedPayloads = [];
-                $subscriptionsBefore = \count($realtime->getSubscriptionMetadata($connection));
                 foreach ($message['data'] as $payload) {
                     if (!\is_array($payload)) {
                         throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Each subscribe payload must be an object.');
@@ -1194,28 +1035,22 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                         throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Invalid query: ' . $e->getMessage());
                     }
 
-                    $convertedChannels = \array_keys(Realtime::convertChannels($payload['channels'], $userId));
-
                     $parsedPayloads[] = [
                         'subscriptionId' => $subscriptionId,
                         'channels' => $payload['channels'],
-                        'convertedChannels' => $convertedChannels,
                         'queries' => $convertedQueries,
                     ];
                 }
 
                 foreach ($parsedPayloads as $parsedPayload) {
                     $subscriptionId = $parsedPayload['subscriptionId'];
-                    $channels = $parsedPayload['convertedChannels'];
+                    $channels = \array_keys(Realtime::convertChannels($parsedPayload['channels'], $userId));
                     $queries = $parsedPayload['queries'];
                     $realtime->subscribe($projectId, $connection, $subscriptionId, $roles, $channels, $queries);
                 }
-                $subscriptionsAfter = \count($realtime->getSubscriptionMetadata($connection));
-                $subscriptionDelta = $subscriptionsAfter - $subscriptionsBefore;
-                $subscriptionsRequested = \count($parsedPayloads);
-                if ($subscriptionDelta !== 0) {
-                    $register->get('telemetry.workerSubscriptionCounter')->add($subscriptionDelta, $register->get('telemetry.workerAttributes'));
-                }
+
+                // subscribe() overwrites the connection entry; restore auth so later onMessage uses the same context.
+                $realtime->connections[$connection]['authorization'] = $authorization;
 
                 $responsePayload = json_encode([
                     'type' => 'response',
@@ -1225,7 +1060,7 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                         'subscriptions' => \array_map(function (array $parsedPayload) {
                             return [
                                 'subscriptionId' => $parsedPayload['subscriptionId'],
-                                'channels' => $parsedPayload['convertedChannels'],
+                                'channels' => $parsedPayload['channels'],
                                 'queries' => \array_map(fn ($q) => $q->toString(), $parsedPayload['queries']),
                             ];
                         }, $parsedPayloads),
@@ -1233,7 +1068,6 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
                 ]);
 
                 $server->send([$connection], $responsePayload);
-                $outboundBytes += \strlen($responsePayload);
 
                 if ($project !== null && !$project->isEmpty()) {
                     $subscribeOutboundBytes = \strlen($responsePayload);
@@ -1247,79 +1081,15 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
 
                 break;
 
-            case 'unsubscribe':
-                if (!\is_array($message['data']) || !\array_is_list($message['data'])) {
-                    throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Payload is not valid.');
-                }
-
-                $subscriptionsBefore = \count($realtime->getSubscriptionMetadata($connection));
-
-                // Validate every payload before executing any removal so an invalid entry
-                // later in the batch does not leave earlier entries half-applied on the server.
-                $validatedIds = [];
-                foreach ($message['data'] as $payload) {
-                    if (
-                        !\is_array($payload)
-                        || !\array_key_exists('subscriptionId', $payload)
-                        || !\is_string($payload['subscriptionId'])
-                        || $payload['subscriptionId'] === ''
-                    ) {
-                        throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Each unsubscribe payload must include a non-empty subscriptionId.');
-                    }
-                    $validatedIds[] = $payload['subscriptionId'];
-                }
-
-                $unsubscribeResults = [];
-                foreach ($validatedIds as $subscriptionId) {
-                    $wasRemoved = $realtime->unsubscribeSubscription($connection, $subscriptionId);
-                    $unsubscribeResults[] = [
-                        'subscriptionId' => $subscriptionId,
-                        'removed' => $wasRemoved,
-                    ];
-                }
-                $subscriptionsAfter = \count($realtime->getSubscriptionMetadata($connection));
-                $subscriptionDelta = $subscriptionsAfter - $subscriptionsBefore;
-                $subscriptionsRequested = \count($validatedIds);
-                $subscriptionsRemoved = \count(\array_filter($unsubscribeResults, fn (array $item) => $item['removed']));
-                if ($subscriptionDelta !== 0) {
-                    $register->get('telemetry.workerSubscriptionCounter')->add($subscriptionDelta, $register->get('telemetry.workerAttributes'));
-                }
-
-                $unsubscribeResponsePayload = json_encode([
-                    'type' => 'response',
-                    'data' => [
-                        'to' => 'unsubscribe',
-                        'success' => true,
-                        'subscriptions' => $unsubscribeResults,
-                    ],
-                ]);
-
-                $server->send([$connection], $unsubscribeResponsePayload);
-                $outboundBytes += \strlen($unsubscribeResponsePayload);
-
-                if ($project !== null && !$project->isEmpty()) {
-                    $unsubscribeOutboundBytes = \strlen($unsubscribeResponsePayload);
-
-                    if ($unsubscribeOutboundBytes > 0) {
-                        triggerStats([
-                            METRIC_REALTIME_OUTBOUND => $unsubscribeOutboundBytes,
-                        ], $project->getId());
-                    }
-                }
-
-                break;
-
             default:
                 throw new Exception(Exception::REALTIME_MESSAGE_FORMAT_INVALID, 'Message type is not valid.');
         }
-        $success = true;
     } catch (Throwable $th) {
         logError($th, 'realtimeMessage', project: $project, authorization: $authorization);
         $code = $th->getCode();
         if (!is_int($code)) {
             $code = 500;
         }
-        $responseCode = $code;
 
         $message = $th->getMessage();
 
@@ -1336,52 +1106,19 @@ $server->onMessage(function (int $connection, string $message) use ($server, $re
             ]
         ];
 
-        $responsePayloadJson = json_encode($response);
-        $server->send([$connection], $responsePayloadJson);
-        $outboundBytes += \strlen($responsePayloadJson);
+        $server->send([$connection], json_encode($response));
 
         if ($th->getCode() === 1008) {
             $server->close($connection, $th->getCode());
         }
-        Span::error($th);
-    } finally {
-        Span::add('realtime.success', $success);
-        Span::add('realtime.responseCode', $responseCode);
-        Span::add('realtime.subscriptionDelta', $subscriptionDelta);
-        Span::add('realtime.subscriptionsRequested', $subscriptionsRequested);
-        Span::add('realtime.subscriptionsRemoved', $subscriptionsRemoved);
-        Span::add('realtime.subscribe.subscriptionsCount', $subscriptionsRequested);
-        Span::add('realtime.outboundBytes', $outboundBytes);
-        Span::add('realtime.projectId', $project?->getId() ?? $projectId);
-        Span::add('realtime.userId', $realtime->connections[$connection]['userId'] ?? null);
-        Span::add('realtime.messageType', $messageType);
-        Span::current()?->finish();
     }
 });
 
 $server->onClose(function (int $connection) use ($realtime, $stats, $register) {
-    $projectId = null;
-    $userId = null;
-    $subscriptionsBeforeClose = 0;
-    $success = false;
-
-    Span::init('realtime.close');
-    Span::add('realtime.connectionId', $connection);
-
-    if (array_key_exists($connection, $realtime->connections)) {
-        $projectId = $realtime->connections[$connection]['projectId'] ?? null;
-        $userId = $realtime->connections[$connection]['userId'] ?? null;
-    }
-
     try {
         if (array_key_exists($connection, $realtime->connections)) {
             $stats->decr($realtime->connections[$connection]['projectId'], 'connectionsTotal');
             $register->get('telemetry.connectionCounter')->add(-1);
-            $register->get('telemetry.workerClientCounter')->add(-1, $register->get('telemetry.workerAttributes'));
-            $subscriptionsBeforeClose = \count($realtime->getSubscriptionMetadata($connection));
-            if ($subscriptionsBeforeClose > 0) {
-                $register->get('telemetry.workerSubscriptionCounter')->add(-$subscriptionsBeforeClose, $register->get('telemetry.workerAttributes'));
-            }
 
             $projectId = $realtime->connections[$connection]['projectId'];
 
@@ -1389,30 +1126,12 @@ $server->onClose(function (int $connection) use ($realtime, $stats, $register) {
                 METRIC_REALTIME_CONNECTIONS => -1,
             ], $projectId);
         }
-        $success = true;
     } catch (\Throwable $th) {
         // Log only; do not rethrow. If we let this bubble, Swoole dumps full coroutine
         // backtraces and unsubscribe() below would never run (connection cleanup would fail).
         Console::error('Realtime onClose error: ' . $th->getMessage());
-        Span::error($th);
-    } finally {
-        try {
-            $realtime->unsubscribe($connection);
-        } catch (\Throwable $th) {
-            Console::error('Realtime onClose unsubscribe error: ' . $th->getMessage());
-            Span::error($th);
-        }
-
-        Span::add('realtime.success', $success);
-        if (!empty($projectId)) {
-            Span::add('realtime.projectId', $projectId);
-        }
-        if (!empty($userId)) {
-            Span::add('realtime.userId', $userId);
-        }
-        Span::add('realtime.subscriptionsBeforeClose', $subscriptionsBeforeClose);
-        Span::current()?->finish();
     }
+    $realtime->unsubscribe($connection);
 
     Console::info('Connection close: ' . $connection);
 });

app/views/install/compose.phtml

@@ -120,6 +120,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_SMTP_HOST
       - _APP_SMTP_PORT
       - _APP_SMTP_SECURE
@@ -255,6 +256,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_USAGE_STATS
       - _APP_LOGGING_CONFIG
 
@@ -285,6 +287,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
 
   appwrite-worker-webhooks:
@@ -312,6 +315,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_REDIS_HOST
       - _APP_REDIS_PORT
       - _APP_REDIS_USER
@@ -352,6 +356,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_STORAGE_DEVICE
       - _APP_STORAGE_S3_ACCESS_KEY
       - _APP_STORAGE_S3_SECRET
@@ -411,6 +416,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
 
   appwrite-worker-builds:
@@ -447,6 +453,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
       - _APP_VCS_GITHUB_APP_NAME
       - _APP_VCS_GITHUB_PRIVATE_KEY
@@ -522,6 +529,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
 
   appwrite-worker-executions:
@@ -584,6 +592,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_FUNCTIONS_TIMEOUT
       - _APP_SITES_TIMEOUT
       - _APP_COMPUTE_BUILD_TIMEOUT
@@ -621,6 +630,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_REDIS_HOST
       - _APP_REDIS_PORT
       - _APP_REDIS_USER
@@ -663,6 +673,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
       - _APP_SMS_FROM
       - _APP_SMS_PROVIDER
@@ -723,6 +734,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_LOGGING_CONFIG
       - _APP_MIGRATIONS_FIREBASE_CLIENT_ID
       - _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET
@@ -761,6 +773,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_MAINTENANCE_INTERVAL
       - _APP_MAINTENANCE_RETENTION_EXECUTION
       - _APP_MAINTENANCE_RETENTION_CACHE
@@ -793,6 +806,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_REDIS_HOST
       - _APP_REDIS_PORT
       - _APP_REDIS_USER
@@ -825,6 +839,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_REDIS_HOST
       - _APP_REDIS_PORT
       - _APP_REDIS_USER
@@ -856,6 +871,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
       - _APP_REDIS_HOST
       - _APP_REDIS_PORT
       - _APP_REDIS_USER
@@ -891,6 +907,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
 
   appwrite-task-scheduler-executions:
     image: <?php echo $organization; ?>/<?php echo $image; ?>:<?php echo $version."\n"; ?>
@@ -919,6 +936,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
 
   appwrite-task-scheduler-messages:
     image: <?php echo $organization; ?>/<?php echo $image; ?>:<?php echo $version."\n"; ?>
@@ -947,6 +965,7 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_DB_ADAPTER
 
 <?php if ($enableAssistant): ?>
   appwrite-assistant:
@@ -1049,12 +1068,13 @@ $hostPath = rtrim($this->getParam('hostPath', ''), '/');
     image: mongo:8.2.5
     container_name: appwrite-mongodb
     <<: *x-logging
-    restart: unless-stopped
     networks:
       - appwrite
     volumes:
       - appwrite-mongodb:/data/db
       - appwrite-mongodb-keyfile:/data/keyfile
+    ports:
+      - "27017:27017"
     environment:
       - MONGO_INITDB_ROOT_USERNAME=root
       - MONGO_INITDB_ROOT_PASSWORD=${_APP_DB_ROOT_PASS}
@@ -1185,6 +1205,7 @@ volumes:
 <?php elseif ($dbService === 'mongodb'): ?>
   appwrite-mongodb:
   appwrite-mongodb-keyfile:
+  appwrite-mongodb-config:
 <?php endif; ?>
   appwrite-redis:
   appwrite-cache:

app/worker.php

@@ -129,7 +129,7 @@ $worker
             $log->setAction('appwrite-queue-' . $queueName);
             $log->addTag('verboseType', get_class($error));
             $log->addTag('code', $error->getCode());
-            $log->addTag('projectId', $project->getId());
+            $log->addTag('projectId', $project->getId() ?? 'n/a');
             $log->addExtra('file', $error->getFile());
             $log->addExtra('line', $error->getLine());
             $log->addExtra('trace', $error->getTraceAsString());

composer.json

@@ -69,20 +69,19 @@
         "utopia-php/dsn": "0.2.1",
         "utopia-php/http": "0.34.*",
         "utopia-php/fetch": "0.5.*",
-        "utopia-php/validators": "0.2.*",
         "utopia-php/image": "0.8.*",
         "utopia-php/locale": "0.8.*",
         "utopia-php/logger": "0.6.*",
         "utopia-php/messaging": "0.22.*",
         "utopia-php/migration": "1.9.*",
-        "utopia-php/platform": "0.13.*",
+        "utopia-php/platform": "0.12.*",
         "utopia-php/pools": "1.*",
         "utopia-php/span": "1.1.*",
         "utopia-php/preloader": "0.2.*",
         "utopia-php/queue": "0.17.*",
         "utopia-php/servers": "0.3.*",
         "utopia-php/registry": "0.5.*",
-        "utopia-php/storage": "2.*",
+        "utopia-php/storage": "1.0.*",
         "utopia-php/system": "0.10.*",
         "utopia-php/telemetry": "0.2.*",
         "utopia-php/vcs": "3.*",
@@ -93,17 +92,10 @@
         "chillerlan/php-qrcode": "4.3.*",
         "adhocore/jwt": "1.1.*",
         "spomky-labs/otphp": "11.*",
-        "webonyx/graphql-php": "15.31.*",
+        "webonyx/graphql-php": "14.11.*",
         "league/csv": "9.14.*",
-        "enshrined/svg-sanitize": "0.22.*",
-        "utopia-php/lock": "0.2.*"
+        "enshrined/svg-sanitize": "0.22.*"
     },
-    "repositories": [
-        {
-            "type": "vcs",
-            "url": "https://github.com/utopia-php/lock"
-        }
-    ],
     "require-dev": {
         "ext-fileinfo": "*",
         "appwrite/sdk-generator": "*",

docker-compose.yml

@@ -212,7 +212,6 @@ services:
       - _APP_EXECUTOR_SECRET
       - _APP_EXECUTOR_HOST
       - _APP_LOGGING_CONFIG
-      - _APP_LOCKING_ENABLED
       - _APP_MAINTENANCE_INTERVAL
       - _APP_MAINTENANCE_RETENTION_EXECUTION
       - _APP_MAINTENANCE_RETENTION_CACHE
@@ -243,20 +242,19 @@ services:
       - _APP_EXPERIMENT_LOGGING_PROVIDER
       - _APP_EXPERIMENT_LOGGING_CONFIG
       - _APP_DATABASE_SHARED_TABLES
+      - _APP_DATABASE_SHARED_TABLES_V1
       - _APP_DATABASE_SHARED_NAMESPACE
       - _APP_FUNCTIONS_CREATION_ABUSE_LIMIT
       - _APP_CUSTOM_DOMAIN_DENY_LIST
       - _APP_TRUSTED_HEADERS
       - _APP_MIGRATION_HOST
-      - _TESTS_OAUTH2_GITHUB_CLIENT_ID
-      - _TESTS_OAUTH2_GITHUB_CLIENT_SECRET
     extra_hosts:
       - "host.docker.internal:host-gateway"
 
   appwrite-console:
     <<: *x-logging
     container_name: appwrite-console
-    image: appwrite/console:7.8.45
+    image: appwrite/console:7.8.26
     restart: unless-stopped
     networks:
       - appwrite
@@ -464,6 +462,7 @@ services:
       - _APP_EXECUTOR_SECRET
       - _APP_EXECUTOR_HOST
       - _APP_DATABASE_SHARED_TABLES
+      - _APP_DATABASE_SHARED_TABLES_V1
       - _APP_EMAIL_CERTIFICATES
       - _APP_MAINTENANCE_RETENTION_AUDIT
       - _APP_MAINTENANCE_RETENTION_AUDIT_CONSOLE
@@ -1289,7 +1288,6 @@ services:
     image: mongo:8.2.5
     container_name: appwrite-mongodb
     <<: *x-logging
-    restart: on-failure:3
     networks:
       - appwrite
     volumes:

docs/references/account/create-2fa-challenge.md

@@ -0,0 +1 @@
+Initialize an MFA challenge of the specified factor. The factor must be available on the account.

docs/references/account/delete-session-current.md

@@ -0,0 +1 @@
+Use this endpoint to log out the currently logged in user from their account. When successful this endpoint will delete the user session and remove the session secret cookie from the user client.

docs/references/console/variables.md

@@ -0,0 +1 @@
+Get all Environment Variables that are relevant for the console.

docs/references/documentsdb/get-collection-logs.md

@@ -0,0 +1 @@
+Get the collection activity logs list by its unique ID.

docs/references/documentsdb/get-document-logs.md

@@ -0,0 +1 @@
+Get the document activity logs list by its unique ID.

docs/references/documentsdb/list-attributes.md

@@ -0,0 +1 @@
+List attributes in the collection.

docs/references/functions/create-build.md

@@ -0,0 +1 @@
+Create a new build for an existing function deployment. This endpoint allows you to rebuild a deployment with the updated function configuration, including its entrypoint and build commands if they have been modified. The build process will be queued and executed asynchronously. The original deployment's code will be preserved and used for the new build.

docs/references/functions/create-deployment.md

@@ -0,0 +1,5 @@
+Create a new function code deployment. Use this endpoint to upload a new version of your code function. To execute your newly uploaded code, you'll need to update the function's deployment to use your new deployment UID.
+
+This endpoint accepts a tar.gz file compressed with your code. Make sure to include any dependencies your code has within the compressed file. You can learn more about code packaging in the [Appwrite Cloud Functions tutorial](https://appwrite.io/docs/functions).
+
+Use the "command" param to set the entrypoint used to execute your code.

docs/references/functions/create-execution.md

@@ -0,0 +1 @@
+Trigger a function execution. The returned object will return you the current execution status. You can ping the `Get Execution` endpoint to get updates on the current execution status. Once this endpoint is called, your function execution process will start asynchronously.

docs/references/functions/create-function.md

@@ -0,0 +1 @@
+Create a new function. You can pass a list of [permissions](https://appwrite.io/docs/permissions) to allow different project users or team with access to execute the function using the client API.

docs/references/functions/create-variable.md

@@ -0,0 +1 @@
+Create a new function environment variable. These variables can be accessed in the function at runtime as environment variables.

docs/references/functions/delete-deployment.md

@@ -0,0 +1 @@
+Delete a code deployment by its unique ID.

docs/references/functions/delete-execution.md

@@ -0,0 +1 @@
+Delete a function execution by its unique ID.

docs/references/functions/delete-function.md

@@ -0,0 +1 @@
+Delete a function by its unique ID.

docs/references/functions/delete-variable.md

@@ -0,0 +1 @@
+Delete a variable by its unique ID.

docs/references/functions/get-deployment-download.md

@@ -0,0 +1 @@
+Get a Deployment's contents by its unique ID. This endpoint supports range requests for partial or streaming file download.

docs/references/functions/get-deployment.md

@@ -0,0 +1 @@
+Get a code deployment by its unique ID.

docs/references/functions/get-execution.md

@@ -0,0 +1 @@
+Get a function execution log by its unique ID.

docs/references/functions/get-function-usage.md

@@ -0,0 +1 @@
+Get usage metrics and statistics for a for a specific function. View statistics including total deployments, builds, executions, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.

docs/references/functions/get-function.md

@@ -0,0 +1 @@
+Get a function by its unique ID.

docs/references/functions/get-functions-usage.md

@@ -0,0 +1 @@
+Get usage metrics and statistics for a for all functions. View statistics including total functions, deployments, builds, executions, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.

docs/references/functions/get-template.md

@@ -0,0 +1 @@
+Get a function template using ID. You can use template details in [createFunction](/docs/references/cloud/server-nodejs/functions#create) method.

docs/references/functions/get-variable.md

@@ -0,0 +1 @@
+Get a variable by its unique ID.

docs/references/functions/list-deployments.md

@@ -0,0 +1 @@
+Get a list of all the function's code deployments. You can use the query params to filter your results.

docs/references/functions/list-executions.md

@@ -0,0 +1 @@
+Get a list of all the current user function execution logs. You can use the query params to filter your results.

docs/references/functions/list-functions.md

@@ -0,0 +1 @@
+Get a list of all the project's functions. You can use the query params to filter your results.

docs/references/functions/list-runtimes.md

@@ -0,0 +1 @@
+Get a list of all runtimes that are currently active on your instance.

docs/references/functions/list-specifications.md

@@ -0,0 +1 @@
+List allowed function specifications for this instance.

docs/references/functions/list-templates.md

@@ -0,0 +1 @@
+List available function templates. You can use template details in [createFunction](/docs/references/cloud/server-nodejs/functions#create) method.

docs/references/functions/list-variables.md

@@ -0,0 +1 @@
+Get a list of all variables of a specific function.

docs/references/functions/update-deployment-build.md

@@ -0,0 +1 @@
+Cancel an ongoing function deployment build. If the build is already in progress, it will be stopped and marked as canceled. If the build hasn't started yet, it will be marked as canceled without executing. You cannot cancel builds that have already completed (status 'ready') or failed. The response includes the final build status and details.

docs/references/functions/update-function-deployment.md

@@ -0,0 +1 @@
+Update the function code deployment ID using the unique function ID. Use this endpoint to switch the code deployment that should be executed by the execution endpoint.

docs/references/functions/update-function.md

@@ -0,0 +1 @@
+Update function by its unique ID.

docs/references/functions/update-variable.md

@@ -0,0 +1 @@
+Update variable by its unique ID.

docs/references/health/get-queue-stats-usage-dump.md

@@ -0,0 +1 @@
+Get the number of projects containing metrics that are waiting to be processed in the Appwrite internal queue server.

docs/references/health/get-queue-tasks.md

@@ -0,0 +1 @@
+Get the number of tasks that are waiting to be processed in the Appwrite internal queue server.

docs/references/health/get-queue.md

@@ -0,0 +1 @@
+Check the Appwrite queue messaging servers are up and connection is successful.

docs/references/messaging/delete.md

@@ -0,0 +1 @@
+Delete a message by its unique ID.

docs/references/project/create-variable.md

@@ -0,0 +1 @@
+Create a new project variable. This variable will be accessible in all Appwrite Functions at runtime.

docs/references/project/delete-variable.md

@@ -0,0 +1 @@
+Delete a project variable by its unique ID. 

docs/references/project/get-variable.md

@@ -0,0 +1 @@
+Get a project variable by its unique ID.

docs/references/project/list-variables.md

@@ -0,0 +1 @@
+Get a list of all project variables. These variables will be accessible in all Appwrite Functions at runtime.

docs/references/project/update-variable.md

@@ -0,0 +1 @@
+Update project variable by its unique ID. This variable will be accessible in all Appwrite Functions at runtime.

docs/references/projects/create-key.md

@@ -0,0 +1 @@
+Create a new API key. It's recommended to have multiple API keys with strict scopes for separate functions within your project.

docs/references/projects/create-platform.md

@@ -0,0 +1 @@
+Create a new platform for your project. Use this endpoint to register a new platform where your users will run your application which will interact with the Appwrite API.

docs/references/projects/create-webhook.md

@@ -0,0 +1 @@
+Create a new webhook. Use this endpoint to configure a URL that will receive events from Appwrite when specific events occur. 

docs/references/projects/delete-key.md

@@ -0,0 +1 @@
+Delete a key by its unique ID. Once deleted, the key can no longer be used to authenticate API calls. 

docs/references/projects/delete-platform.md

@@ -0,0 +1 @@
+Delete a platform by its unique ID. This endpoint removes the platform and all its configurations from the project. 

docs/references/projects/delete-sms-template.md

@@ -0,0 +1 @@
+Reset a custom SMS template to its default value. This endpoint removes any custom message and restores the template to its original state. 

docs/references/projects/delete-webhook.md

@@ -0,0 +1 @@
+Delete a webhook by its unique ID. Once deleted, the webhook will no longer receive project events. 

docs/references/projects/get-key.md

@@ -0,0 +1 @@
+Get a key by its unique ID. This endpoint returns details about a specific API key in your project including it's scopes.

docs/references/projects/get-platform.md

@@ -0,0 +1 @@
+Get a platform by its unique ID. This endpoint returns the platform's details, including its name, type, and key configurations. 

docs/references/projects/get-sms-template.md

@@ -0,0 +1 @@
+Get a custom SMS template for the specified locale and type returning it's contents.