@nexttylabs/echo 0.2.0

package/lib/services/api-keys.ts

@@ -0,0 +1,164 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { db } from "@/lib/db";
+import { apiKeys } from "@/lib/db/schema";
+import { eq, and } from "drizzle-orm";
+import { randomBytes, createHash } from "crypto";
+
+/**
+ * Generate API Key
+ * Format: echo_{orgId}_{random}
+ */
+export function generateApiKey(organizationId: string): string {
+  const random = randomBytes(32)
+    .toString("base64")
+    .replace(/[^a-zA-Z0-9]/g, "")
+    .toLowerCase()
+    .slice(0, 32);
+  return `echo_${organizationId.slice(0, 8)}_${random}`;
+}
+
+/**
+ * Hash API Key (SHA-256)
+ */
+export function hashApiKey(key: string): string {
+  return createHash("sha256").update(key).digest("hex");
+}
+
+/**
+ * Extract key prefix for display
+ */
+export function extractApiKeyPrefix(key: string): string {
+  return key.substring(0, 20);
+}
+
+/**
+ * Create API Key
+ */
+export async function createApiKey(
+  organizationId: string,
+  name: string,
+  expiresInDays?: number,
+) {
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  const rawKey = generateApiKey(organizationId);
+  const hashedKey = hashApiKey(rawKey);
+  const prefix = extractApiKeyPrefix(rawKey);
+
+  let expiresAt: Date | undefined;
+  if (expiresInDays) {
+    expiresAt = new Date();
+    expiresAt.setDate(expiresAt.getDate() + expiresInDays);
+  }
+
+  const [record] = await db
+    .insert(apiKeys)
+    .values({
+      organizationId,
+      name,
+      hashedKey,
+      prefix,
+    })
+    .returning();
+
+  return {
+    key: rawKey,
+    record,
+  };
+}
+
+/**
+ * List organization's API Keys
+ */
+export async function listApiKeys(organizationId: string) {
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  return db
+    .select()
+    .from(apiKeys)
+    .where(eq(apiKeys.organizationId, organizationId))
+    .orderBy(apiKeys.createdAt);
+}
+
+/**
+ * Delete API Key
+ */
+export async function deleteApiKey(
+  keyId: number,
+  organizationId: string,
+): Promise<void> {
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  await db
+    .delete(apiKeys)
+    .where(and(eq(apiKeys.keyId, keyId), eq(apiKeys.organizationId, organizationId)));
+}
+
+/**
+ * Toggle API Key disabled status
+ */
+export async function toggleApiKey(
+  keyId: number,
+  organizationId: string,
+  disabled: boolean,
+): Promise<void> {
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  await db
+    .update(apiKeys)
+    .set({ disabled })
+    .where(and(eq(apiKeys.keyId, keyId), eq(apiKeys.organizationId, organizationId)));
+}
+
+/**
+ * Verify API Key and return record if valid
+ */
+export async function verifyApiKey(key: string) {
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  const hashedKey = hashApiKey(key);
+
+  const keyRecord = await db
+    .select()
+    .from(apiKeys)
+    .where(eq(apiKeys.hashedKey, hashedKey))
+    .limit(1);
+
+  if (keyRecord.length === 0) {
+    return null;
+  }
+
+  const record = keyRecord[0];
+
+  if (record.disabled) {
+    return null;
+  }
+
+  return record;
+}

package/lib/services/backup.ts

@@ -0,0 +1,173 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { execSync } from "child_process";
+import { readdirSync, statSync, unlinkSync, mkdirSync, existsSync } from "fs";
+import { join } from "path";
+import { logger } from "@/lib/logger";
+
+export interface BackupConfig {
+  backupDir: string;
+  retentionDays: number;
+  databaseUrl: string;
+}
+
+export interface BackupInfo {
+  file: string;
+  size: string;
+  date: Date;
+}
+
+export async function createBackup(config: BackupConfig): Promise<string> {
+  const { backupDir, databaseUrl } = config;
+  const timestamp = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
+  const backupFile = join(backupDir, `echo-${timestamp}.sql`);
+
+  logger.info({ backupFile }, "Creating database backup...");
+
+  if (!existsSync(backupDir)) {
+    mkdirSync(backupDir, { recursive: true });
+  }
+
+  try {
+    execSync(`pg_dump "${databaseUrl}" > "${backupFile}"`, {
+      stdio: "inherit",
+    });
+
+    execSync(`gzip "${backupFile}"`, {
+      stdio: "inherit",
+    });
+
+    const compressedFile = `${backupFile}.gz`;
+    const stats = statSync(compressedFile);
+
+    logger.info(
+      {
+        backupFile: compressedFile,
+        size: `${(stats.size / 1024 / 1024).toFixed(2)} MB`,
+      },
+      "Backup created successfully"
+    );
+
+    return compressedFile;
+  } catch (error) {
+    logger.error({ err: error }, "Backup failed");
+    throw error;
+  }
+}
+
+export async function cleanupOldBackups(config: BackupConfig): Promise<number> {
+  const { backupDir, retentionDays } = config;
+  const now = Date.now();
+  const maxAge = retentionDays * 24 * 60 * 60 * 1000;
+
+  let deletedCount = 0;
+
+  try {
+    if (!existsSync(backupDir)) {
+      return 0;
+    }
+
+    const files = readdirSync(backupDir);
+    const backupFiles = files.filter(
+      (f) => f.startsWith("echo-") && f.endsWith(".sql.gz")
+    );
+
+    for (const file of backupFiles) {
+      const filePath = join(backupDir, file);
+      const stats = statSync(filePath);
+      const age = now - stats.mtimeMs;
+
+      if (age > maxAge) {
+        unlinkSync(filePath);
+        deletedCount++;
+        logger.info(
+          { file, age: `${Math.floor(age / 86400000)} days` },
+          "Deleted old backup"
+        );
+      }
+    }
+
+    if (deletedCount > 0) {
+      logger.info({ deletedCount }, "Cleanup completed");
+    }
+
+    return deletedCount;
+  } catch (error) {
+    logger.error({ err: error }, "Cleanup failed");
+    return 0;
+  }
+}
+
+export async function listBackups(config: BackupConfig): Promise<BackupInfo[]> {
+  const { backupDir } = config;
+
+  try {
+    if (!existsSync(backupDir)) {
+      return [];
+    }
+
+    const files = readdirSync(backupDir);
+    const backupFiles = files.filter(
+      (f) => f.startsWith("echo-") && f.endsWith(".sql.gz")
+    );
+
+    return backupFiles
+      .map((file) => {
+        const filePath = join(backupDir, file);
+        const stats = statSync(filePath);
+        return {
+          file,
+          size: `${(stats.size / 1024 / 1024).toFixed(2)} MB`,
+          date: stats.mtime,
+        };
+      })
+      .sort((a, b) => b.date.getTime() - a.date.getTime());
+  } catch (error) {
+    logger.error({ err: error }, "Failed to list backups");
+    return [];
+  }
+}
+
+export async function backupDatabase(config: BackupConfig): Promise<void> {
+  logger.info("Starting backup process...");
+
+  try {
+    await createBackup(config);
+    await cleanupOldBackups(config);
+
+    const backups = await listBackups(config);
+    logger.info(
+      {
+        totalBackups: backups.length,
+        backups: backups.slice(0, 5),
+      },
+      "Backup process completed"
+    );
+  } catch (error) {
+    logger.error({ err: error }, "Backup process failed");
+    throw error;
+  }
+}
+
+export function getBackupConfig(): BackupConfig {
+  return {
+    backupDir: process.env.BACKUP_DIR || "./backups",
+    retentionDays: parseInt(process.env.BACKUP_RETENTION_DAYS || "30"),
+    databaseUrl: process.env.DATABASE_URL!,
+  };
+}

package/lib/services/email/templates.ts

@@ -0,0 +1,158 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+const statusLabels: Record<string, string> = {
+  new: "新接收",
+  "in-progress": "处理中",
+  planned: "已规划",
+  completed: "已完成",
+  closed: "已关闭",
+};
+
+const baseStyles = `
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }
+  .container { max-width: 600px; margin: 0 auto; padding: 20px; }
+  .header { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; padding: 30px; border-radius: 10px 10px 0 0; }
+  .content { background: #f9f9f9; padding: 30px; border-radius: 0 0 10px 10px; }
+  .status-badge { display: inline-block; padding: 5px 15px; border-radius: 20px; font-size: 14px; font-weight: bold; }
+  .status-new { background: #dbeafe; color: #1e40af; }
+  .status-in-progress { background: #fef3c7; color: #92400e; }
+  .status-planned { background: #e9d5ff; color: #6b21a8; }
+  .status-completed { background: #d1fae5; color: #065f46; }
+  .status-closed { background: #e5e7eb; color: #374151; }
+  .button { display: inline-block; background: #667eea; color: white; padding: 12px 30px; border-radius: 5px; text-decoration: none; font-weight: bold; }
+  .comment-box { background: white; padding: 15px; border-left: 4px solid #667eea; border-radius: 4px; margin: 20px 0; }
+`;
+
+interface StatusChangeEmailData {
+  feedbackTitle: string;
+  feedbackId: number;
+  oldStatus: string;
+  newStatus: string;
+  feedbackUrl: string;
+}
+
+export function generateStatusChangeEmail(
+  data: StatusChangeEmailData,
+): { subject: string; html: string } {
+  const subject = `反馈状态更新：${data.feedbackTitle}`;
+
+  const html = `
+    <!DOCTYPE html>
+    <html>
+      <head>
+        <meta charset="utf-8">
+        <style>${baseStyles}</style>
+      </head>
+      <body>
+        <div class="container">
+          <div class="header">
+            <h1>反馈状态更新</h1>
+          </div>
+          <div class="content">
+            <p>您好，</p>
+            <p>您提交的反馈状态已更新。</p>
+
+            <div style="background: white; padding: 20px; border-radius: 8px; margin: 20px 0;">
+              <h3 style="margin-top: 0;">${escapeHtml(data.feedbackTitle)}</h3>
+              <p style="color: #666;">
+                状态从
+                <span class="status-badge status-${data.oldStatus}">${statusLabels[data.oldStatus] || data.oldStatus}</span>
+                变更为
+                <span class="status-badge status-${data.newStatus}">${statusLabels[data.newStatus] || data.newStatus}</span>
+              </p>
+            </div>
+
+            <p style="text-align: center; margin: 30px 0;">
+              <a href="${data.feedbackUrl}" class="button">查看反馈详情</a>
+            </p>
+
+            <p style="font-size: 12px; color: #999; text-align: center;">
+              如果您不想收到此类通知，请前往设置页面调整通知偏好。
+            </p>
+          </div>
+        </div>
+      </body>
+    </html>
+  `;
+
+  return { subject, html };
+}
+
+interface NewCommentEmailData {
+  feedbackTitle: string;
+  feedbackId: number;
+  authorName: string;
+  commentContent: string;
+  feedbackUrl: string;
+}
+
+export function generateNewCommentEmail(
+  data: NewCommentEmailData,
+): { subject: string; html: string } {
+  const subject = `新评论：${data.feedbackTitle}`;
+
+  const html = `
+    <!DOCTYPE html>
+    <html>
+      <head>
+        <meta charset="utf-8">
+        <style>${baseStyles}</style>
+      </head>
+      <body>
+        <div class="container">
+          <div class="header">
+            <h1>新评论通知</h1>
+          </div>
+          <div class="content">
+            <p>您好，</p>
+            <p><strong>${escapeHtml(data.authorName)}</strong> 在您关注的反馈中发表了新评论。</p>
+
+            <div style="background: white; padding: 20px; border-radius: 8px; margin: 20px 0;">
+              <h3 style="margin-top: 0;">${escapeHtml(data.feedbackTitle)}</h3>
+            </div>
+
+            <div class="comment-box">
+              <p style="margin: 0;">${escapeHtml(data.commentContent)}</p>
+            </div>
+
+            <p style="text-align: center; margin: 30px 0;">
+              <a href="${data.feedbackUrl}" class="button">查看并回复</a>
+            </p>
+
+            <p style="font-size: 12px; color: #999; text-align: center;">
+              如果您不想收到此类通知，请前往设置页面调整通知偏好。
+            </p>
+          </div>
+        </div>
+      </body>
+    </html>
+  `;
+
+  return { subject, html };
+}
+
+function escapeHtml(text: string): string {
+  const map: Record<string, string> = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#039;",
+  };
+  return text.replace(/[&<>"']/g, (m) => map[m]);
+}

package/lib/services/email.ts

@@ -0,0 +1,68 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { Resend } from "resend";
+import { logger } from "@/lib/logger";
+
+const resend = process.env.RESEND_API_KEY
+  ? new Resend(process.env.RESEND_API_KEY)
+  : null;
+
+export type SendEmailPayload = {
+  to: string;
+  subject: string;
+  html: string;
+  text?: string;
+};
+
+export type SendEmailResult = {
+  success: boolean;
+  error?: string;
+};
+
+export async function sendEmail(
+  payload: SendEmailPayload,
+): Promise<SendEmailResult> {
+  const { to, subject, html, text } = payload;
+
+  if (process.env.NODE_ENV !== "test") {
+    logger.info({ to, subject }, "Email send requested");
+  }
+
+  if (!resend) {
+    if (process.env.NODE_ENV !== "test") {
+      logger.warn("RESEND_API_KEY not set, skipping email send");
+    }
+    return { success: true };
+  }
+
+  try {
+    await resend.emails.send({
+      from: process.env.RESEND_FROM_EMAIL || "noreply@echo.app",
+      to,
+      subject,
+      html,
+      text,
+    });
+
+    return { success: true };
+  } catch (error) {
+    const errorMsg = error instanceof Error ? error.message : "Unknown error";
+    logger.error({ error: errorMsg, to, subject }, "Failed to send email");
+    return { success: false, error: errorMsg };
+  }
+}