Personal Workspace

A privacy-first, offline desktop productivity hub for Windows. Built with Tauri v2 (Rust backend) and Svelte 5 (TypeScript frontend), backed by SQLCipher-encrypted SQLite in WAL mode. Replaces 7+ separate tools with one unified app -- notes, tasks, bookmarks, snippets, calendar, analytics, and file management in a single window.

2,735 tests (2,209 Rust + 526 frontend) | 93.8% frontend line coverage | 66.5% Rust line coverage | 7-job CI pipeline | 14 E2E flows

Features

Cross-Module Capabilities

• Command Palette -- Ctrl+K opens a debounced FTS5 search with sequence-number stale-response discard, keyboard navigation, and ARIA combobox semantics.
• Entity Linking -- Type [[ in any markdown editor to get inline autocomplete. Links render as clickable references. Backlinks panel shows all incoming references.
• Cross-Module Drag-and-Drop -- Custom application/x-workspace-entity MIME type with JSON payload. Drag entities between modules; drop on calendar cells to set due dates; drop in editors to insert entity links.
• Import -- Markdown files, browser bookmarks (HTML), and CSV tasks can be imported into their respective modules.
• Undo/Redo -- Application-level operation reversal architecture.
• Theming -- Dark mode (default) and light mode support.

Tech Stack

Architecture

Svelte 5 Frontend
  Stores (.svelte.ts) --> cmd<T>() --> Tauri IPC (invoke)
       |                                       |
       v                                       v
+-----------------+                 +------------------------+
| Tauri Commands  |                 | Tauri Events           |
| (120+ handlers) |                 | (entity-changed, etc.) |
+-----------------+                 +------------------------+
       |                                       ^
       v                                       |
+-----------------+     publishes   +------------------------+
| Service Layer   | -------------> | EventBus (broadcast)    |
| (business logic)|                 |   FTS5 sync             |
+-----------------+                 |   Deferred indexer      |
       |                            |   Orphan cleanup        |
       v                            |   Frontend notifier     |
+-----------------+                 |   Backup monitor        |
| SQLCipher/SQLite|                 +------------------------+
| WAL, 4 conns    |
+-----------------+

Backend Layers

AppState (Tauri-managed shared state)

Frontend Architecture

Security

Database

SQLite in WAL mode with SQLCipher encryption and aggressive tuning:

Schema: 16 tables, 20+ indexes, 7+ triggers, FTS5 virtual table (external content pattern), entity_links table for bidirectional cross-references.

Maintenance:

• Startup: integrity check (100 pages), WAL checkpoint if WAL > 64 MB, seed defaults, weekly ANALYZE
• Runtime: 30-minute periodic WAL passive checkpoint, deferred FTS5 indexing (5s flush, max 50/batch)
• Backups: VACUUM INTO with integrity validation, 7-backup retention, configurable directory, pre-empty-trash backup
• Monitoring: per-table size via dbstat, bloat ratio (threshold 1.5x), 500 MB startup toast, 2 GB persistent banner
• Recovery: corruption dialog (Restore / Continue / Export), fallback dialog (Open Dir / Start Fresh), migration checksum mismatch handling

Getting Started

Prerequisites

Clone and Run

git clone <repository-url>
cd personal-workspace
npm install
npm run tauri dev

This starts the Vite dev server (hot reload on port 1420) and compiles the Rust backend. The first build downloads all Cargo dependencies and compiles SQLCipher, which may take several minutes.

Build for Production

npm run tauri build

Produces a Windows NSIS installer in src-tauri/target/release/bundle/nsis/. The installer is configured for per-user installation and includes an uninstall hook that offers to delete user data.

Development

Dev Server

npm run tauri dev          # Full app (Vite + Rust backend)
npm run dev                # Frontend only (Vite dev server on port 1420)

Linting

# Rust
cd src-tauri && cargo clippy --all-targets --all-features -- -D warnings
cd src-tauri && cargo fmt -- --check

# Frontend
npx tsc --noEmit
npx eslint . --max-warnings 0
npx svelte-check --tsconfig ./tsconfig.json

Testing

# Rust tests
cd src-tauri && cargo test

# Rust tests with coverage
cd src-tauri && cargo llvm-cov --all-features --lcov --output-path ../rust-lcov.info

# Frontend tests
npm run test

# Frontend tests with coverage
npm run test -- --coverage

# E2E tests (requires built app)
npm run test:e2e

# Full local CI pipeline
bash scripts/ci-check.sh

Useful Scripts

Testing

Test Infrastructure

• Rust: In-memory SQLite per test with full migrations applied, #[tokio::test] for async, factory functions with override-only-what-the-test-needs pattern
• Frontend: jsdom environment, @testing-library/svelte for component testing, Tauri IPC mocked at the invoke boundary, explicit assertions only (no snapshots)
• E2E: 13 Playwright spec files, 10 page objects, retry on flake, trace capture on failure

Test Categories

Coverage Thresholds

CI/CD Pipeline

Test Pipeline (test.yml)

Runs on every push and pull request to master. Seven jobs with concurrency cancellation:

Every job writes structured output to $GITHUB_STEP_SUMMARY with pass/fail tables and collapsible error details. All tool output is uploaded as 30-day-retention artifacts. Coverage reports are uploaded to Codecov with separate rust and frontend flags.

Release Pipeline (release.yml)

Triggered on v* tags. Four jobs:

1. Build -- Compile Tauri app for Windows, generate Rust and npm SBOMs (CycloneDX)
2. Code Sign -- Sign MSI and NSIS installers with Windows certificate via signtool
3. Changelog -- Generate changelog from conventional commits using git-cliff
4. Release -- Create GitHub Release with signed installers, changelog body, and pre-release detection (tags containing -)

Dependency Management

Dependabot configured for weekly updates (Monday 09:00 Asia/Jerusalem) across three ecosystems: Cargo, npm, and GitHub Actions.

Project Structure

personal-workspace/
|-- src-tauri/                       Rust backend (Tauri v2)
|   |-- src/
|   |   |-- commands/                IPC handlers (16 modules)
|   |   |-- services/                Business logic + background tasks
|   |   |   +-- subscribers/         EventBus subscribers (5)
|   |   |-- models/                  SQLite row structs
|   |   |-- plugins/                 EventBus, PluginRegistry
|   |   |-- db/                      Pool, WAL, ANALYZE, integrity
|   |   |-- error.rs                 AppError (14 variants)
|   |   |-- state.rs                 AppState, rate limiters
|   |   |-- validation.rs            Input validation
|   |   |-- sanitizer.rs             HTML sanitization (ammonia)
|   |   |-- logging.rs               Tracing, rotation, redaction
|   |   |-- lib.rs                   Startup/shutdown sequences
|   |   +-- main.rs                  Entry point
|   |-- tests/                       Integration tests
|   |-- migrations/                  SQLite schema migrations
|   +-- Cargo.toml
|-- src/                             Svelte 5 frontend
|   |-- lib/
|   |   |-- api/                     Typed IPC wrappers (cmd, cmdSafe)
|   |   |-- components/
|   |   |   |-- ui/                  27 reusable components
|   |   |   |-- layout/              8 layout components
|   |   |   +-- dialogs/             Recovery and confirmation dialogs
|   |   |-- modules/                 9 feature modules
|   |   |-- stores/                  Svelte 5 rune stores (class-based)
|   |   |-- utils/                   Router, shortcuts, DnD, toast, focus trap
|   |   |-- types/                   TypeScript type definitions
|   |   +-- __tests__/               Frontend test suites
|   +-- styles/                      CSS variables, global reset, themes
|-- e2e/                             Playwright E2E tests (14 flows)
|-- scripts/
|   |-- ci-check.sh                  Local CI pipeline runner
|   |-- collect-ci-report.sh         CI artifact report generator
|   +-- check-bundle-size.sh         Installer size advisory check
|-- specs/                           27 implementation specs (27,895 lines)
|-- .github/workflows/
|   |-- test.yml                     7-job test pipeline
|   |-- release.yml                  Build + sign + changelog + release
|   +-- dependabot.yml               Dependency updates (weekly)
|-- eslint.config.js                 ESLint v10 flat config
|-- vitest.config.ts                 Vitest + coverage config
|-- cliff.toml                       git-cliff changelog config
|-- rustfmt.toml                     Rust format edition pin
+-- IMPLEMENTATION_PLAN.md           11-phase build plan (all complete)

Development Status

All 11 phases are complete. The full implementation plan covers 334 items across the following phases:

See IMPLEMENTATION_PLAN.md for the full task-by-task breakdown.

License

Copyright (c) 2026 Dor Shacham. All rights reserved.

This software is proprietary. Unauthorized copying, modification, distribution, or use of this software, via any medium, is strictly prohibited.