immich-app/immich

Feature surface is primarily ~45 Nest controllers registered in controllers/index.ts covering assets, albums, sharing, people/faces, search, libraries, jobs, sync, auth, and admin management. Background processing is expressed as JobName jobs on QueueName queues (thumbnails, metadata, video conversion, face detection/recognition, smart search, OCR, duplicates, library scan, backups, notifications, workflows). Auth supports password login, OAuth/OIDC with backchannel logout, API keys, sessions, PIN codes, and shared-link access. A WASM plugin system (extism) plus user-defined workflows are newer extension-oriented features.

• Asset upload/download/thumbnails: AssetMediaController exposes POST /assets (multipart, Permission.AssetUpload, sharedLink allowed, optional x-immich-checksum sha1 dedupe header), GET /assets/:id/original, and GET /assets/:id/thumbnail.
  server/src/controllers/asset-media.controller.ts#L43-140server/src/dtos/asset-media.dto.ts
• Albums, partner sharing, shared links, stacks, and activities each have dedicated controllers and services (album, partner, shared-link, stack, activity) wired through controllers/index.ts.
  server/src/controllers/index.tsserver/src/controllers/album.controller.tsserver/src/controllers/shared-link.controller.ts
• Search features split into metadata search and smart (CLIP) search via SearchController + SearchRepository backed by pgvector/VectorChord embeddings produced by the ML service.
  server/src/controllers/search.controller.tsserver/src/repositories/search.repository.tsserver/src/repositories/machine-learning.repository.ts#L40-44
• People/facial recognition is a job pipeline: JobName.AssetDetectFaces and FacialRecognition run on QueueName.FaceDetection/FacialRecognition and call the ML service's facial-recognition detection+recognition pipeline.
  server/src/enum.ts#L815-835server/src/services/person.service.tsserver/src/repositories/machine-learning.repository.ts#L61-74
• Video features include transcoding (fluent-ffmpeg in media.repository.ts, transcoding.service.ts) and HLS session-based streaming coordinated through Hls* events in the EventMap and hls.service.ts.
  server/src/repositories/media.repository.ts#L423-450server/src/services/hls.service.tsserver/src/repositories/event.repository.ts#L98-104
• External libraries support filesystem watching via chokidar and scanning jobs (LibrarySyncAssets/LibrarySyncFiles/LibraryScanQueueAll); watching is locked to a single microservice instance via a database lock.
  server/src/services/library.service.ts#L41-85server/src/enum.ts#L877-885
• Auth features: password login with bcrypt + constant-time dummy-hash compare, OAuth/OIDC with backchannel logout token validation, API keys, sessions with lock/invalidate, and PIN code setup/reset/change.
  server/src/services/auth.service.ts#L60-180server/src/controllers/oauth.controller.tsserver/src/controllers/api-key.controller.ts
• Admin surface: user-admin.controller, system-config.controller, job.controller/queue.controller for pausing/resuming/cleaning BullMQ queues, database-backup.controller, integrity-admin.controller, and notification-admin.controller.
  server/src/controllers/index.tsserver/src/services/queue.service.ts#L106-135
• Delta sync for offline-capable clients is implemented by sync.controller.ts + sync.service.ts + sync-checkpoint.repository.ts (SyncCheckpointRepository), which mobile uses to reconcile local drift DB state.
  server/src/controllers/sync.controller.tsserver/src/services/sync.service.tsserver/src/repositories/sync-checkpoint.repository.tsmobile/pubspec.yaml
• Notifications and email: notification.service.ts + email.repository.ts render react-email templates from server/src/emails and send via nodemailer; jobs like NotifyUserSignup/NotifyAlbumInvite/NotifyAlbumUpdate run on the notifications queue.
  server/src/services/notification.service.tsserver/src/enum.ts#L891-895server/package.json#L64-65
• A WASM plugin system loads plugins through @extism/extism with a generic-pool of plugin instances in PluginRepository; exposure is gated by env vars IMMICH_PLUGINS_INSTALL_FOLDER and IMMICH_ALLOW_EXTERNAL_PLUGINS, with a @immich/plugin-sdk workspace package for authors.
  server/src/repositories/plugin.repository.ts#L1-45server/src/dtos/env.dto.tspackages/plugin-sdk/package.jsonserver/src/services/plugin.service.ts
• Workflows (user automation) exist end-to-end: workflow.controller.ts, workflow.repository.ts, utils/workflow.ts (isMethodCompatible for plugin methods), QueueName.Workflow, and a web /workflows route.
  server/src/services/plugin.service.ts#L30-35server/src/utils/workflow.tsserver/src/enum.ts#L832
• Web routes cover photos, albums, favorites, archive, locked folder, map, memories, people, places, partners, search, sharing, shared-links, tags, trash, user-settings, utilities, workflows, plus admin and auth route groups.
  web/src/routes/(user)/photosweb/src/routes/auth/login/+page.svelte
• Memories, timeline buckets, map clustering, trash auto-empty, duplicate detection, and OCR are first-class jobs/controllers (memory.controller, timeline.controller, map.controller, trash.controller, duplicate.controller, ocr.service).
  server/src/controllers/index.tsserver/src/services/ocr.service.tsserver/src/enum.ts#L826-834