appwrite Files

Appwrite 2.2 brings email policies to self-hosted installs, finishes the move of function and site executions to ClickHouse, surfaces the real reason a build failed, and folds in three weeks of fixes across auth, databases, functions, messaging and the installer. It ships with the 1.1.96 self-hosted Console. Upgrading from 2.1.0 is a single command and a short migration on the console database.

Highlights

• Email policies on self-hosted. PATCH /v1/project/policies/deny-disposable-email, deny-free-email, deny-aliased-email and deny-corporate-email, plus their entries in GET /v1/project/policies, now ship in the self-hosted API. The Console's Auth → Policies → Emails toggles work instead of returning 404. (#13641, fixes [#13618])
• Executions live in ClickHouse. Function and site executions are written to and read from ClickHouse only; the project database copy and the _APP_EXECUTIONS_DUAL_WRITE flag are gone, and execution timestamps are ISO-8601 again. (#13668, [#13686])
• Build failures say why. Orchestrator 2.2 reports the cause of a failed build (unrecognized archive, download returned 404, out of memory) and the message lands in the build logs instead of Build failed with exit code -1. Build durations are recorded as measured rather than capped at the timeout, and an artifact failure fails the build immediately. (#13603, [#13582], [#13674])
• Alphanumeric Twilio sender IDs. POST /v1/messaging/providers/twilio accepts a sender ID such as Appwrite in from, matching update, and _APP_SMS_FROM no longer mistakes a sender starting with MG for a Messaging Service SID. (#13626)
• Console 1.1.96, self-hosted build. Activity and realtime pages work on mobile, manual deployments on macOS can pick .tar.gz files, impersonation shows names for recent users, SMTP has a Resend quick setup, and /.well-known/change-password lets password managers deep-link to the password screen.

Fixes

Console

• Activity and realtime pages are usable on mobile. (appwrite/vibes#357, Console 1.1.96)
• The manual deployment file picker on macOS accepts .tar.gz archives. (appwrite/vibes#359, Console 1.1.96)
• The Twilio provider form describes the sender as a phone number or alphanumeric ID. (appwrite/vibes#344)
• Impersonation shows names for recent users and remembers new picks. (appwrite/vibes#348)

Auth and users

• OAuth2 and VCS redirect routes return JSON errors to SDK requests instead of the HTML error page. (#13625, fixes [#8090])
• A rate-limiter Redis socket shared across coroutines could crash an HTTP worker under concurrent requests. The limiter now leases its connection from a pool. (#13640)
• SMS team invitations keep & separators in the redirect URL so apps can read userId and secret. (#13646, fixes [#8607])
• Initials avatars for handle-style names such as @ItzNotABug render instead of a blank square. (#13662, fixes [#8042])

Databases and TablesDB

• Shrinking an encrypted string attribute below 150 characters on update is rejected, as it already was on create. (#13649)
• Clearing an optional attribute's default with default: null clears it in the stored schema, so new documents receive null. Point, Line and Polygon updates without default behave the same. (#13648, fixes [#9714])
• Loading relationships no longer exceeds the configured query-value limit. (#13610, utopia-php/database 7.3.9)
• GraphQL returns array attributes as arrays, and empty arrays as [], instead of objects with numeric keys. (#13627)

Functions and Sites

• Executions created with X-Appwrite-JWT receive that JWT in x-appwrite-user-jwt, synchronously and asynchronously. (#13647, fixes [#7247])
• Domain rules are repointed before a deployment is marked active, so a site never briefly serves "No active deployments" after activation. (#13658)

Messaging

• Msg91 providers created without a template ID stay disabled until one is configured. (#13663)

Installer and workers

• The MariaDB healthcheck no longer depends on the entrypoint-managed healthcheck user, which made upgrades from 1.x fail with "Failed to start containers". The service also restarts unless stopped. (#13652)
• Queue consumers stop taking new jobs as soon as SIGTERM arrives, so rolling restarts drain faster. (#13629, utopia-php/queue 2.2.4)

Under the hood

• Console notifications can name the team they belong to (teamId, teamInternalId and a _key_team index), applied by the V25 migration. (#13664)
• Shell commands in the builds worker, certificate issuance and migrations are built with Utopia\Command as argument arrays instead of concatenated strings. (#13616)
• Realtime error reporting runs on spans; the logError compatibility function is removed. (#13675, [#13679])
• Compose orchestrator 2.1.1 → 2.2.0, open-runtimes/sdk-for-php 2.0, autogravity 0.0.10, utopia-php/console 0.2, database 7.3.9, queue 2.2.4. (#13603, [#13610], [#13616], [#13629], [#13682], [#13683])
• E2E flake fixes for the Organization and Teams suites; CI pulls MinIO from quay.io. (#13654, [#13656], [#13657], [#13643])

Removed

• _APP_EXECUTIONS_DUAL_WRITE. Executions are ClickHouse only.
• _APP_MAINTENANCE_RETENTION_USAGE_HOURLY and the stats collection it pruned. Usage has been ClickHouse only since 2.0. (#13630)
• _APP_CONNECTIONS_DB_LOGS and the logs database. Nothing read it. (#13655)

Install

:::bash
docker run -it --rm \
    --volume /var/run/docker.sock:/var/run/docker.sock \
    --volume "$(pwd)"/appwrite:/usr/src/code/appwrite:rw \
    --entrypoint="install" \
    appwrite/appwrite:2.2.0

Upgrade

Upgrading from 2.1.0 uses the same command with --entrypoint="upgrade", then run the migration:

:::bash
cd appwrite
docker compose exec appwrite migrate

The migration adds two optional columns and one index to the console notifications collection and is quick. ClickHouse is now required for function and site executions; installs that ran 2.0.0 or 2.1.0 with dual write enabled already have their executions there, and executions that only ever existed in the project database are no longer listed. Remove _APP_EXECUTIONS_DUAL_WRITE, _APP_MAINTENANCE_RETENTION_USAGE_HOURLY and _APP_CONNECTIONS_DB_LOGS from your .env if you set them. Back up your data first.

Contributors

Thank you to everyone who contributed to 2.2.0:

@ChiragAgg5k @HarshMN2345 @lohanidamodar @loks0n @Meldiron @TorstenDittmann