@ameshkin/ticket-mate 0.1.20

package/public/lib/encryption.js

@@ -0,0 +1,65 @@
+/**
+ * Encryption utility for sensitive data at rest
+ * Uses AES-256-GCM for authenticated encryption
+ */
+import crypto from 'crypto';
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 16; // 128 bits
+const SALT_LENGTH = 64; // 512 bits
+const TAG_LENGTH = 16; // 128 bits
+const KEY_LENGTH = 32; // 256 bits
+const ITERATIONS = 100000; // PBKDF2 iterations
+/**
+ * Get encryption key from environment variable or generate a default
+ * In production, this should be a strong, randomly generated key stored securely
+ */
+function getEncryptionKey() {
+    const secret = process.env.ENCRYPTION_SECRET || process.env.NEXTAUTH_SECRET;
+    if (!secret) {
+        throw new Error('ENCRYPTION_SECRET or NEXTAUTH_SECRET must be set for token encryption');
+    }
+    // Derive a consistent key from the secret using PBKDF2
+    return crypto.pbkdf2Sync(secret, 'ticket-mate-token-encryption', ITERATIONS, KEY_LENGTH, 'sha256');
+}
+/**
+ * Encrypt a string value
+ * @param text - Plain text to encrypt
+ * @returns Encrypted string in format: iv:salt:tag:encryptedData (all base64)
+ */
+export function encrypt(text) {
+    const key = getEncryptionKey();
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const salt = crypto.randomBytes(SALT_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
+    let encrypted = cipher.update(text, 'utf8', 'base64');
+    encrypted += cipher.final('base64');
+    const tag = cipher.getAuthTag();
+    // Return format: iv:salt:tag:encryptedData
+    return [
+        iv.toString('base64'),
+        salt.toString('base64'),
+        tag.toString('base64'),
+        encrypted,
+    ].join(':');
+}
+/**
+ * Decrypt an encrypted string
+ * @param encryptedText - Encrypted string in format: iv:salt:tag:encryptedData
+ * @returns Decrypted plain text
+ */
+export function decrypt(encryptedText) {
+    const parts = encryptedText.split(':');
+    if (parts.length !== 4) {
+        throw new Error('Invalid encrypted data format');
+    }
+    const [ivBase64, _saltBase64, tagBase64, encrypted] = parts;
+    const key = getEncryptionKey();
+    const iv = Buffer.from(ivBase64, 'base64');
+    const tag = Buffer.from(tagBase64, 'base64');
+    const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(tag);
+    let decrypted = decipher.update(encrypted, 'base64', 'utf8');
+    decrypted += decipher.final('utf8');
+    return decrypted;
+}
+//# sourceMappingURL=encryption.js.map

package/public/lib/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/lib/encryption.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,WAAW;AACjC,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,WAAW;AACnC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,WAAW;AAClC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,oBAAoB;AAE/C;;;GAGG;AACH,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAE5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,8BAA8B,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,2CAA2C;IAC3C,OAAO;QACL,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,SAAS;KACV,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,aAAqB;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IAE5D,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/public/lib/env/baseUrl.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Base URL Helper
+ *
+ * Provides a single source of truth for the public base URL of the application.
+ * Used for webhooks, callbacks, and other external-facing URLs.
+ */
+/**
+ * Get the base URL for the application
+ *
+ * Priority order:
+ * 1. BASE_URL (server-side)
+ * 2. NEXT_PUBLIC_BASE_URL (client/server-side)
+ * 3. Default: http://localhost:4000 (development)
+ *
+ * @returns Normalized base URL
+ */
+export declare function getBaseUrl(): string;
+/**
+ * Get the webhook base URL
+ *
+ * If USE_NGROK_WEBHOOK_BASE is true and NGROK_BASE_URL is set,
+ * returns the ngrok URL for development testing.
+ * Otherwise, returns the standard base URL.
+ *
+ * @returns Webhook base URL
+ */
+export declare function getWebhookBaseUrl(): string;
+/**
+ * Get the full webhook URL for Jira
+ *
+ * @returns Full webhook URL (e.g., https://ticket-mate.app/api/webhooks/jira)
+ */
+export declare function getJiraWebhookUrl(): string;
+//# sourceMappingURL=baseUrl.d.ts.map

package/public/lib/env/baseUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.d.ts","sourceRoot":"","sources":["../../../src/lib/env/baseUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;;;;;GASG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAOnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAS1C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C"}

package/public/lib/env/baseUrl.js

@@ -0,0 +1,51 @@
+/**
+ * Base URL Helper
+ *
+ * Provides a single source of truth for the public base URL of the application.
+ * Used for webhooks, callbacks, and other external-facing URLs.
+ */
+function normalizeBase(url) {
+    return url.replace(/\/+$/, "");
+}
+/**
+ * Get the base URL for the application
+ *
+ * Priority order:
+ * 1. BASE_URL (server-side)
+ * 2. NEXT_PUBLIC_BASE_URL (client/server-side)
+ * 3. Default: http://localhost:4000 (development)
+ *
+ * @returns Normalized base URL
+ */
+export function getBaseUrl() {
+    const baseUrl = process.env.BASE_URL ||
+        process.env.NEXT_PUBLIC_BASE_URL ||
+        "http://localhost:4000";
+    return normalizeBase(baseUrl);
+}
+/**
+ * Get the webhook base URL
+ *
+ * If USE_NGROK_WEBHOOK_BASE is true and NGROK_BASE_URL is set,
+ * returns the ngrok URL for development testing.
+ * Otherwise, returns the standard base URL.
+ *
+ * @returns Webhook base URL
+ */
+export function getWebhookBaseUrl() {
+    if (process.env.USE_NGROK_WEBHOOK_BASE === "true" &&
+        process.env.NGROK_BASE_URL) {
+        return normalizeBase(process.env.NGROK_BASE_URL);
+    }
+    return getBaseUrl();
+}
+/**
+ * Get the full webhook URL for Jira
+ *
+ * @returns Full webhook URL (e.g., https://ticket-mate.app/api/webhooks/jira)
+ */
+export function getJiraWebhookUrl() {
+    const baseUrl = getWebhookBaseUrl();
+    return `${baseUrl}/api/webhooks/jira`;
+}
+//# sourceMappingURL=baseUrl.js.map

package/public/lib/env/baseUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../../src/lib/env/baseUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,uBAAuB,CAAC;IAE1B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IACE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,EAC1B,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,OAAO,GAAG,OAAO,oBAAoB,CAAC;AACxC,CAAC"}

package/public/lib/env/externalUrl.d.ts

@@ -0,0 +1,34 @@
+/**
+ * External Base URL Helper
+ *
+ * Provides a single source of truth for determining the external base URL
+ * used for webhooks and other external-facing endpoints.
+ */
+export interface ExternalUrlInfo {
+    baseUrl: string;
+    source: string;
+}
+/**
+ * Get the external base URL from environment variables
+ *
+ * Priority order:
+ * 1. NGROK_URL (explicit current dev tunnel)
+ * 2. NGROK_DEV_DOMAIN (dev domain from ngrok config)
+ * 3. DEV_URL (future dev environments)
+ * 4. DEV_DOMAIN (future dev environments, adds https://)
+ * 5. NEXT_PUBLIC_APP_URL (generic fallback)
+ * 6. APP_URL (generic fallback)
+ *
+ * @returns External URL info or null if no URL is configured
+ */
+export declare function getExternalBaseUrl(): ExternalUrlInfo | null;
+/**
+ * Get the full webhook URL
+ *
+ * @param path - Webhook path (default: "/api/webhooks/jira")
+ * @returns Full webhook URL or null if base URL is not configured
+ */
+export declare function getWebhookUrl(path?: string): ExternalUrlInfo & {
+    fullUrl: string;
+} | null;
+//# sourceMappingURL=externalUrl.d.ts.map

package/public/lib/env/externalUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalUrl.d.ts","sourceRoot":"","sources":["../../../src/lib/env/externalUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,IAAI,CA8B3D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAA6B,GAAG,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAW/G"}

package/public/lib/env/externalUrl.js

@@ -0,0 +1,66 @@
+/**
+ * External Base URL Helper
+ *
+ * Provides a single source of truth for determining the external base URL
+ * used for webhooks and other external-facing endpoints.
+ */
+function normalizeBase(url) {
+    return url.replace(/\/+$/, "");
+}
+/**
+ * Get the external base URL from environment variables
+ *
+ * Priority order:
+ * 1. NGROK_URL (explicit current dev tunnel)
+ * 2. NGROK_DEV_DOMAIN (dev domain from ngrok config)
+ * 3. DEV_URL (future dev environments)
+ * 4. DEV_DOMAIN (future dev environments, adds https://)
+ * 5. NEXT_PUBLIC_APP_URL (generic fallback)
+ * 6. APP_URL (generic fallback)
+ *
+ * @returns External URL info or null if no URL is configured
+ */
+export function getExternalBaseUrl() {
+    const env = process.env;
+    // 1) Highest priority: NGROK_URL (explicit current dev tunnel)
+    if (env.NGROK_URL && env.NGROK_URL.trim()) {
+        return { baseUrl: normalizeBase(env.NGROK_URL.trim()), source: "NGROK_URL" };
+    }
+    // 2) NGROK_DEV_DOMAIN if present (already includes scheme in current setup)
+    if (env.NGROK_DEV_DOMAIN && env.NGROK_DEV_DOMAIN.trim()) {
+        return { baseUrl: normalizeBase(env.NGROK_DEV_DOMAIN.trim()), source: "NGROK_DEV_DOMAIN" };
+    }
+    // 3) DEV_URL or DEV_DOMAIN for future dev environments
+    if (env.DEV_URL && env.DEV_URL.trim()) {
+        return { baseUrl: normalizeBase(env.DEV_URL.trim()), source: "DEV_URL" };
+    }
+    if (env.DEV_DOMAIN && env.DEV_DOMAIN.trim()) {
+        return { baseUrl: normalizeBase(`https://${env.DEV_DOMAIN.trim()}`), source: "DEV_DOMAIN" };
+    }
+    // 4) NEXT_PUBLIC_APP_URL and APP_URL as generic fallbacks
+    if (env.NEXT_PUBLIC_APP_URL && env.NEXT_PUBLIC_APP_URL.trim()) {
+        return { baseUrl: normalizeBase(env.NEXT_PUBLIC_APP_URL.trim()), source: "NEXT_PUBLIC_APP_URL" };
+    }
+    if (env.APP_URL && env.APP_URL.trim()) {
+        return { baseUrl: normalizeBase(env.APP_URL.trim()), source: "APP_URL" };
+    }
+    return null;
+}
+/**
+ * Get the full webhook URL
+ *
+ * @param path - Webhook path (default: "/api/webhooks/jira")
+ * @returns Full webhook URL or null if base URL is not configured
+ */
+export function getWebhookUrl(path = "/api/webhooks/jira") {
+    const urlInfo = getExternalBaseUrl();
+    if (!urlInfo) {
+        return null;
+    }
+    const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+    return {
+        ...urlInfo,
+        fullUrl: `${urlInfo.baseUrl}${normalizedPath}`,
+    };
+}
+//# sourceMappingURL=externalUrl.js.map

package/public/lib/env/externalUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalUrl.js","sourceRoot":"","sources":["../../../src/lib/env/externalUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAOD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,+DAA+D;IAC/D,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/E,CAAC;IAED,4EAA4E;IAC5E,IAAI,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7F,CAAC;IAED,uDAAuD;IACvD,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC9F,CAAC;IAED,0DAA0D;IAC1D,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,oBAAoB;IAC/D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAChE,OAAO;QACL,GAAG,OAAO;QACV,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,cAAc,EAAE;KAC/C,CAAC;AACJ,CAAC"}

package/public/lib/env/server.d.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+declare const serverEnvSchema: z.ZodObject<{
+    NODE_ENV: z.ZodEnum<["development", "production", "test"]>;
+    NEXTAUTH_URL: z.ZodString;
+    NEXTAUTH_SECRET: z.ZodString;
+    ATLASSIAN_CLIENT_ID: z.ZodString;
+    ATLASSIAN_CLIENT_SECRET: z.ZodString;
+    RESEND_API_KEY: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    ATLASSIAN_CLIENT_ID: string;
+    ATLASSIAN_CLIENT_SECRET: string;
+    NEXTAUTH_SECRET: string;
+    NEXTAUTH_URL: string;
+    NODE_ENV: "development" | "production" | "test";
+    RESEND_API_KEY?: string | undefined;
+}, {
+    ATLASSIAN_CLIENT_ID: string;
+    ATLASSIAN_CLIENT_SECRET: string;
+    NEXTAUTH_SECRET: string;
+    NEXTAUTH_URL: string;
+    NODE_ENV: "development" | "production" | "test";
+    RESEND_API_KEY?: string | undefined;
+}>;
+export declare const env: z.infer<typeof serverEnvSchema>;
+export {};
+//# sourceMappingURL=server.d.ts.map

package/public/lib/env/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/lib/env/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;EASnB,CAAC;AA+CH,eAAO,MAAM,GAAG,EAA6B,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/public/lib/env/server.js

@@ -0,0 +1,45 @@
+import { z } from "zod";
+const serverEnvSchema = z.object({
+    NODE_ENV: z.enum(["development", "production", "test"]),
+    NEXTAUTH_URL: z.string().url(),
+    NEXTAUTH_SECRET: z.string().min(1),
+    ATLASSIAN_CLIENT_ID: z.string().min(1),
+    ATLASSIAN_CLIENT_SECRET: z.string().min(1),
+    // Optional in dev, required in prod? or just warn if missing.
+    // User asked to throw if missing in production.
+    RESEND_API_KEY: z.string().optional(),
+});
+const processEnv = {
+    NODE_ENV: process.env.NODE_ENV,
+    NEXTAUTH_URL: process.env.NEXTAUTH_URL,
+    NEXTAUTH_SECRET: process.env.NEXTAUTH_SECRET,
+    ATLASSIAN_CLIENT_ID: process.env.ATLASSIAN_CLIENT_ID,
+    ATLASSIAN_CLIENT_SECRET: process.env.ATLASSIAN_CLIENT_SECRET,
+    RESEND_API_KEY: process.env.RESEND_API_KEY,
+};
+// Validate
+const parsed = serverEnvSchema.safeParse(processEnv);
+if (!parsed.success) {
+    console.error("❌ Invalid environment variables:", parsed.error.flatten().fieldErrors);
+    // Throw in production/critical paths
+    if (process.env.NODE_ENV === "production") {
+        // Check specifically for required prod keys
+        const requiredInProd = [
+            "NEXTAUTH_URL",
+            "NEXTAUTH_SECRET",
+            "ATLASSIAN_CLIENT_ID",
+            "ATLASSIAN_CLIENT_SECRET",
+            "RESEND_API_KEY",
+        ];
+        const missing = requiredInProd.filter((key) => !process.env[key]);
+        if (missing.length > 0) {
+            throw new Error(`❌ Missing required production environment variables: ${missing.join(", ")}`);
+        }
+        // Check localhost in production URL
+        if (process.env.NEXTAUTH_URL?.includes("localhost")) {
+            throw new Error("❌ NEXTAUTH_URL cannot contain 'localhost' in production");
+        }
+    }
+}
+export const env = process.env;
+//# sourceMappingURL=server.js.map

package/public/lib/env/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/lib/env/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,8DAA8D;IAC9D,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG;IACjB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;IAC9B,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;IACtC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IAC5C,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;IACpD,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;IAC5D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;CAC3C,CAAC;AAEF,WAAW;AACX,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,KAAK,CACX,kCAAkC,EAClC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,CACnC,CAAC;IACF,qCAAqC;IACrC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,4CAA4C;QAC5C,MAAM,cAAc,GAAG;YACrB,cAAc;YACd,iBAAiB;YACjB,qBAAqB;YACrB,yBAAyB;YACzB,gBAAgB;SACjB,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,wDAAwD,OAAO,CAAC,IAAI,CAClE,IAAI,CACL,EAAE,CACJ,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAiD,CAAC"}

package/public/lib/env.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Centralized Environment Variable Helper
+ *
+ * Provides safe access to environment variables with clear error messages.
+ * Never crashes during build - only fails at runtime when actually needed.
+ */
+/**
+ * Get an environment variable, returning undefined if not set
+ * Safe to use during build time
+ */
+export declare function getEnv(key: string): string | undefined;
+/**
+ * Get an environment variable with a default value
+ * Safe to use during build time
+ */
+export declare function getEnvWithDefault(key: string, defaultValue: string): string;
+/**
+ * Require an environment variable - throws only at runtime
+ * Use this in API routes and server actions that truly need the variable
+ *
+ * @throws Error if variable is missing
+ */
+export declare function requireEnv(key: string): string;
+/**
+ * Check if an environment variable exists (boolean check only)
+ * Safe to use during build time
+ */
+export declare function hasEnv(key: string): boolean;
+/**
+ * Get NEXTAUTH_URL safely
+ * Returns undefined if not set (build-time safe)
+ */
+export declare function getNextAuthUrl(): string | undefined;
+/**
+ * Get DATABASE_URL safely
+ * Returns undefined if not set (build-time safe)
+ */
+export declare function getDatabaseUrl(): string | undefined;
+/**
+ * Require DATABASE_URL - throws only at runtime
+ * Use this in API routes that require database access
+ *
+ * @throws Error if DATABASE_URL is missing
+ */
+export declare function requireDatabaseUrl(): string;
+/**
+ * Check if database is available
+ * Safe to use during build time
+ */
+export declare function hasDatabase(): boolean;
+/**
+ * Get Vercel environment info
+ */
+export declare function getVercelEnv(): {
+    env: string | undefined;
+    url: string | undefined;
+    commitSha: string | undefined;
+};
+/**
+ * Check if we're in a Vercel environment
+ */
+export declare function isVercel(): boolean;
+/**
+ * Check if we're in production (custom domain on Vercel)
+ */
+export declare function isProduction(): boolean;
+/**
+ * Check if we're in preview (Vercel preview deployment)
+ */
+export declare function isPreview(): boolean;
+/**
+ * Check if we're in development (local)
+ */
+export declare function isDevelopment(): boolean;
+//# sourceMappingURL=env.d.ts.map

package/public/lib/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAS9C;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAMA;AAED;;GAEG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CAElC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAGtC;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAGnC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/public/lib/env.js

@@ -0,0 +1,108 @@
+/**
+ * Centralized Environment Variable Helper
+ *
+ * Provides safe access to environment variables with clear error messages.
+ * Never crashes during build - only fails at runtime when actually needed.
+ */
+/**
+ * Get an environment variable, returning undefined if not set
+ * Safe to use during build time
+ */
+export function getEnv(key) {
+    return process.env[key];
+}
+/**
+ * Get an environment variable with a default value
+ * Safe to use during build time
+ */
+export function getEnvWithDefault(key, defaultValue) {
+    return process.env[key] ?? defaultValue;
+}
+/**
+ * Require an environment variable - throws only at runtime
+ * Use this in API routes and server actions that truly need the variable
+ *
+ * @throws Error if variable is missing
+ */
+export function requireEnv(key) {
+    const value = process.env[key];
+    if (!value) {
+        throw new Error(`Missing required environment variable: ${key}. ` +
+            `This is required for this operation to work.`);
+    }
+    return value;
+}
+/**
+ * Check if an environment variable exists (boolean check only)
+ * Safe to use during build time
+ */
+export function hasEnv(key) {
+    return !!process.env[key];
+}
+/**
+ * Get NEXTAUTH_URL safely
+ * Returns undefined if not set (build-time safe)
+ */
+export function getNextAuthUrl() {
+    return getEnv('NEXTAUTH_URL');
+}
+/**
+ * Get DATABASE_URL safely
+ * Returns undefined if not set (build-time safe)
+ */
+export function getDatabaseUrl() {
+    return getEnv('DATABASE_URL');
+}
+/**
+ * Require DATABASE_URL - throws only at runtime
+ * Use this in API routes that require database access
+ *
+ * @throws Error if DATABASE_URL is missing
+ */
+export function requireDatabaseUrl() {
+    return requireEnv('DATABASE_URL');
+}
+/**
+ * Check if database is available
+ * Safe to use during build time
+ */
+export function hasDatabase() {
+    return hasEnv('DATABASE_URL');
+}
+/**
+ * Get Vercel environment info
+ */
+export function getVercelEnv() {
+    return {
+        env: getEnv('VERCEL_ENV'),
+        url: getEnv('VERCEL_URL'),
+        commitSha: getEnv('VERCEL_GIT_COMMIT_SHA'),
+    };
+}
+/**
+ * Check if we're in a Vercel environment
+ */
+export function isVercel() {
+    return hasEnv('VERCEL');
+}
+/**
+ * Check if we're in production (custom domain on Vercel)
+ */
+export function isProduction() {
+    const vercelEnv = getEnv('VERCEL_ENV');
+    return vercelEnv === 'production';
+}
+/**
+ * Check if we're in preview (Vercel preview deployment)
+ */
+export function isPreview() {
+    const vercelEnv = getEnv('VERCEL_ENV');
+    return vercelEnv === 'preview';
+}
+/**
+ * Check if we're in development (local)
+ */
+export function isDevelopment() {
+    return process.env.NODE_ENV === 'development' && !isVercel();
+}
+//# sourceMappingURL=env.js.map

package/public/lib/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,YAAoB;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,IAAI;YACjD,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAK1B,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,uBAAuB,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,SAAS,KAAK,YAAY,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,SAAS,KAAK,SAAS,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC"}

package/public/lib/events/jira-connect-events.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Jira Connect Event Logging
+ * Structured event logging for Jira OAuth connection flow
+ */
+export type JiraConnectEventType = 'jira.connect.start' | 'jira.connect.callback.success' | 'jira.connect.callback.failed';
+export interface JiraConnectEventMetadata {
+    atlassianCallbackUrlResolved?: string;
+    nextAuthUrlResolved?: string;
+    cloudId?: string;
+    jiraBaseUrl?: string;
+    scope?: string;
+    expiresAt?: Date;
+    errorClass?: string;
+    errorMessage?: string;
+    remediationHint?: string;
+    [key: string]: unknown;
+}
+export interface LogJiraConnectEventParams {
+    eventType: JiraConnectEventType;
+    userId: string;
+    metadata: JiraConnectEventMetadata;
+}
+/**
+ * Log a Jira connect event
+ */
+export declare function logJiraConnectEvent(params: LogJiraConnectEventParams): Promise<void>;
+/**
+ * Get remediation hint based on error
+ */
+export declare function getRemediationHint(error: Error): string;
+/**
+ * Get latest connect event for a user
+ */
+export declare function getLatestConnectEvent(userId: string): Promise<{
+    eventType: string;
+    timestamp: Date;
+    metadata: JiraConnectEventMetadata;
+} | null>;
+/**
+ * Get connect event history for a user
+ */
+export declare function getConnectEventHistory(userId: string, limit?: number): Promise<Array<{
+    eventType: string;
+    timestamp: Date;
+    metadata: JiraConnectEventMetadata;
+}>>;
+//# sourceMappingURL=jira-connect-events.d.ts.map

package/public/lib/events/jira-connect-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jira-connect-events.d.ts","sourceRoot":"","sources":["../../../src/lib/events/jira-connect-events.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,oBAAoB,GAC1B,oBAAoB,GACpB,+BAA+B,GAC/B,8BAA8B,CAAC;AAErC,MAAM,WAAW,wBAAwB;IAErC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,IAAI,CAAC;IAGjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACtC,SAAS,EAAE,oBAAoB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,wBAAwB,CAAC;CACtC;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB1F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAwBvD;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,wBAAwB,CAAC;CACtC,GAAG,IAAI,CAAC,CAuBR;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,wBAAwB,CAAC;CACtC,CAAC,CAAC,CAsBF"}