@nexttylabs/echo 0.2.0

package/tests/api/feedback-bulk.test.ts

@@ -0,0 +1,47 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it, mock } from "bun:test";
+import { NextRequest } from "next/server";
+
+mock.module("@/lib/auth/config", () => ({
+  auth: {
+    api: {
+      getSession: mock(() => Promise.resolve({ user: { id: "u1" } })),
+    },
+  },
+}));
+
+mock.module("@/lib/auth/org-context", () => ({
+  getOrgContext: mock(() =>
+    Promise.resolve({ organizationId: "org_1", memberRole: "developer" }),
+  ),
+}));
+
+mock.module("@/lib/db", () => ({ db: null }));
+
+describe("POST /api/feedback/bulk", () => {
+  it("returns 500 when db is missing", async () => {
+    const { POST } = await import("@/app/api/feedback/bulk/route");
+    const req = new NextRequest("http://localhost/api/feedback/bulk", {
+      method: "POST",
+      body: JSON.stringify({ action: "delete", ids: [1] }),
+    });
+    const res = await POST(req);
+    expect(res.status).toBe(500);
+  });
+});

package/tests/api/feedback-by-id.test.ts

@@ -0,0 +1,67 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { buildGetFeedbackHandler } from "@/app/api/feedback/[id]/handler";
+
+type VoteItem = {
+  voteId: number;
+  visitorId: string | null;
+  userId: string | null;
+  createdAt: Date;
+  userName: string | null;
+  userEmail: string | null;
+};
+
+type FeedbackResult = {
+  feedback: Record<string, unknown>;
+  attachments: unknown[];
+  votes: {
+    count: number;
+    list: VoteItem[];
+    userVote: {
+      hasVoted: boolean;
+      voteId: number | null;
+    };
+  };
+} | { deleted: true } | null;
+
+const makeDeps = (row?: FeedbackResult) => ({
+  getFeedbackById: async () => row ?? null,
+});
+
+describe("GET /api/feedback/[id]", () => {
+  it("returns 400 for invalid id", async () => {
+    const handler = buildGetFeedbackHandler(makeDeps());
+    const res = await handler(
+      new Request("http://localhost/api/feedback/abc"),
+      { params: { id: "abc" } },
+    );
+
+    expect(res.status).toBe(400);
+  });
+
+  it("returns 404 when missing", async () => {
+    const handler = buildGetFeedbackHandler(makeDeps());
+    const res = await handler(
+      new Request("http://localhost/api/feedback/1"),
+      { params: { id: "1" } },
+    );
+
+    expect(res.status).toBe(404);
+  });
+});

package/tests/api/feedback-comments-route-import.test.ts

@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+
+describe("Feedback comments route module", () => {
+  it("imports without database type errors", async () => {
+    const mod = await import("@/app/api/feedback/[id]/comments/route");
+    expect(typeof mod.GET).toBe("function");
+    expect(typeof mod.POST).toBe("function");
+  });
+});

package/tests/api/feedback-create.test.ts

@@ -0,0 +1,71 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { buildCreateFeedbackHandler } from "@/app/api/feedback/handler";
+
+type InsertStub = {
+  insert: () => {
+    values: () => {
+      returning: () => Promise<unknown[]>;
+    };
+  };
+};
+
+const makeDb = () => ({
+  insert: () => ({
+    values: () => ({
+      returning: async () => [
+        {
+          feedbackId: 1,
+          title: "t",
+          description: "d",
+          type: "bug",
+          priority: "low",
+          status: "new",
+          organizationId: "org",
+          createdAt: new Date(),
+          updatedAt: new Date(),
+        },
+      ],
+    }),
+  }),
+});
+
+describe("POST /api/feedback", () => {
+  it("returns trackingUrl", async () => {
+    const handler = buildCreateFeedbackHandler({ db: makeDb() as InsertStub });
+    const res = await handler(
+      new Request("http://localhost/api/feedback", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-organization-id": "org",
+        },
+        body: JSON.stringify({
+          title: "t",
+          description: "d",
+          type: "bug",
+          priority: "low",
+        }),
+      }),
+    );
+
+    const json = await res.json();
+    expect(json.data.trackingUrl).toBe("/feedback/1");
+  });
+});

package/tests/api/feedback-delete.test.ts

@@ -0,0 +1,160 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { buildGetFeedbackHandler } from "@/app/api/feedback/[id]/handler";
+
+type VoteItem = {
+  voteId: number;
+  visitorId: string | null;
+  userId: string | null;
+  createdAt: Date;
+  userName: string | null;
+  userEmail: string | null;
+};
+
+type FeedbackResult = {
+  feedback: Record<string, unknown>;
+  attachments: unknown[];
+  votes: {
+    count: number;
+    list: VoteItem[];
+    userVote: {
+      hasVoted: boolean;
+      voteId: number | null;
+    };
+  };
+} | { deleted: true } | null;
+
+const makeDeps = (row?: FeedbackResult) => ({
+  getFeedbackById: async () => row ?? null,
+});
+
+describe("DELETE /api/feedback/[id]", () => {
+  describe("GET handler - deleted feedback", () => {
+    it("returns 404 for deleted feedback", async () => {
+      const handler = buildGetFeedbackHandler(
+        makeDeps({ deleted: true }),
+      );
+      const res = await handler(
+        new Request("http://localhost/api/feedback/1"),
+        { params: { id: "1" } },
+      );
+
+      expect(res.status).toBe(404);
+      const body = await res.json();
+      expect(body.code).toBe("DELETED");
+      expect(body.error).toBe("Feedback has been deleted");
+    });
+
+    it("returns feedback data when not deleted", async () => {
+      const mockFeedback = {
+        feedback: {
+          feedbackId: 1,
+          title: "Test feedback",
+          description: "Test description",
+          type: "bug",
+          priority: "medium",
+          status: "new",
+        },
+        attachments: [],
+        votes: { count: 0, list: [], userVote: { hasVoted: false, voteId: null } },
+      };
+
+      const handler = buildGetFeedbackHandler(makeDeps(mockFeedback));
+      const res = await handler(
+        new Request("http://localhost/api/feedback/1"),
+        { params: { id: "1" } },
+      );
+
+      expect(res.status).toBe(200);
+      const body = await res.json();
+      expect(body.data.feedbackId).toBe(1);
+      expect(body.data.title).toBe("Test feedback");
+    });
+  });
+});
+
+describe("Soft delete permissions", () => {
+  it("should have DELETE_FEEDBACK permission for admin", async () => {
+    const { ROLE_PERMISSIONS, PERMISSIONS } = await import(
+      "@/lib/auth/permissions"
+    );
+    expect(ROLE_PERMISSIONS.admin).toContain(PERMISSIONS.DELETE_FEEDBACK);
+  });
+
+  it("should have DELETE_FEEDBACK permission for product_manager", async () => {
+    const { ROLE_PERMISSIONS, PERMISSIONS } = await import(
+      "@/lib/auth/permissions"
+    );
+    expect(ROLE_PERMISSIONS.product_manager).toContain(
+      PERMISSIONS.DELETE_FEEDBACK,
+    );
+  });
+
+  it("should NOT have DELETE_FEEDBACK permission for developer", async () => {
+    const { ROLE_PERMISSIONS, PERMISSIONS } = await import(
+      "@/lib/auth/permissions"
+    );
+    expect(ROLE_PERMISSIONS.developer).not.toContain(
+      PERMISSIONS.DELETE_FEEDBACK,
+    );
+  });
+
+  it("should NOT have DELETE_FEEDBACK permission for customer_support", async () => {
+    const { ROLE_PERMISSIONS, PERMISSIONS } = await import(
+      "@/lib/auth/permissions"
+    );
+    expect(ROLE_PERMISSIONS.customer_support).not.toContain(
+      PERMISSIONS.DELETE_FEEDBACK,
+    );
+  });
+
+  it("should NOT have DELETE_FEEDBACK permission for customer", async () => {
+    const { ROLE_PERMISSIONS, PERMISSIONS } = await import(
+      "@/lib/auth/permissions"
+    );
+    expect(ROLE_PERMISSIONS.customer).not.toContain(PERMISSIONS.DELETE_FEEDBACK);
+  });
+});
+
+describe("canDeleteFeedback helper", () => {
+  it("returns true for admin", async () => {
+    const { canDeleteFeedback } = await import("@/lib/auth/permissions");
+    expect(canDeleteFeedback("admin")).toBe(true);
+  });
+
+  it("returns true for product_manager", async () => {
+    const { canDeleteFeedback } = await import("@/lib/auth/permissions");
+    expect(canDeleteFeedback("product_manager")).toBe(true);
+  });
+
+  it("returns false for developer", async () => {
+    const { canDeleteFeedback } = await import("@/lib/auth/permissions");
+    expect(canDeleteFeedback("developer")).toBe(false);
+  });
+
+  it("returns false for customer_support", async () => {
+    const { canDeleteFeedback } = await import("@/lib/auth/permissions");
+    expect(canDeleteFeedback("customer_support")).toBe(false);
+  });
+
+  it("returns false for customer", async () => {
+    const { canDeleteFeedback } = await import("@/lib/auth/permissions");
+    expect(canDeleteFeedback("customer")).toBe(false);
+  });
+});

package/tests/api/feedback-filter.test.ts

@@ -0,0 +1,250 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it, mock, beforeEach } from "bun:test";
+import { NextRequest } from "next/server";
+
+const mockFeedbackData = [
+  {
+    feedbackId: 1,
+    title: "Bug Report",
+    description: "Description 1",
+    type: "bug",
+    priority: "high",
+    status: "new",
+    organizationId: "org_1",
+    createdAt: new Date("2024-01-01"),
+    updatedAt: new Date("2024-01-01"),
+  },
+  {
+    feedbackId: 2,
+    title: "Feature Request",
+    description: "Description 2",
+    type: "feature",
+    priority: "medium",
+    status: "in-progress",
+    organizationId: "org_1",
+    createdAt: new Date("2024-01-02"),
+    updatedAt: new Date("2024-01-02"),
+  },
+  {
+    feedbackId: 3,
+    title: "Another Bug",
+    description: "Description 3",
+    type: "bug",
+    priority: "low",
+    status: "new",
+    organizationId: "org_1",
+    createdAt: new Date("2024-01-03"),
+    updatedAt: new Date("2024-01-03"),
+  },
+];
+
+const createMockDb = (data = mockFeedbackData, total = data.length) => ({
+  select: mock(() => ({
+    from: mock(() => ({
+      where: mock(() => {
+        const result = [{ value: total }];
+        const adminRows = [{ role: "admin" }];
+        return {
+          orderBy: mock(() => ({
+            limit: mock(() => ({
+              offset: mock(() => Promise.resolve(data)),
+            })),
+          })),
+          limit: mock(() => ({
+            then: (resolve: (value: typeof adminRows) => void) =>
+              Promise.resolve(adminRows).then(resolve),
+          })),
+          then: (resolve: (value: typeof result) => void) =>
+            Promise.resolve(result).then(resolve),
+          [Symbol.iterator]: () => result[Symbol.iterator](),
+        };
+      }),
+    })),
+  })),
+});
+
+mock.module("@/lib/auth/config", () => ({
+  auth: {
+    api: {
+      getSession: mock(() => Promise.resolve({ user: { id: "user_1" } })),
+    },
+    options: {
+      session: {
+        expiresIn: 60 * 60 * 24 * 30,
+      },
+    },
+  },
+}));
+
+
+
+mock.module("next/headers", () => ({
+  headers: () => Promise.resolve(new Headers()),
+  cookies: () => Promise.resolve({ get: () => undefined }),
+}));
+
+describe("GET /api/feedback - Filters", () => {
+  beforeEach(() => {
+    mock.restore();
+  });
+
+  it("should filter by status", async () => {
+    const filteredData = mockFeedbackData.filter((f) => f.status === "new");
+    const mockDb = createMockDb(filteredData, filteredData.length);
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?status=new&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.data.length).toBe(filteredData.length);
+  });
+
+  it("should filter by type", async () => {
+    const filteredData = mockFeedbackData.filter((f) => f.type === "bug");
+    const mockDb = createMockDb(filteredData, filteredData.length);
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?type=bug&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.data.length).toBe(filteredData.length);
+  });
+
+  it("should filter by priority", async () => {
+    const filteredData = mockFeedbackData.filter((f) => f.priority === "high");
+    const mockDb = createMockDb(filteredData, filteredData.length);
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?priority=high&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.data.length).toBe(filteredData.length);
+  });
+
+  it("should filter by multiple conditions (AND logic)", async () => {
+    const filteredData = mockFeedbackData.filter(
+      (f) => f.status === "new" && f.type === "bug",
+    );
+    const mockDb = createMockDb(filteredData, filteredData.length);
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?status=new&type=bug&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.data.length).toBe(filteredData.length);
+  });
+
+  it("should ignore 'all' filter value", async () => {
+    const mockDb = createMockDb();
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?status=all&type=all&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.data.length).toBe(mockFeedbackData.length);
+  });
+
+  it("should combine filters with pagination", async () => {
+    const mockDb = createMockDb();
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?status=new&page=1&pageSize=10&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    const data = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(data.page).toBe(1);
+    expect(data.pageSize).toBe(10);
+  });
+
+  it("should accept hasVotes filters", async () => {
+    const mockDb = createMockDb();
+
+    mock.module("@/lib/db", () => ({
+      db: mockDb,
+    }));
+
+    const { GET } = await import("@/app/api/feedback/route");
+
+    const req = new NextRequest(
+      "http://localhost:3000/api/feedback?hasVotes=true&organizationId=org_1",
+    );
+
+    const response = await GET(req);
+    expect(response.status).toBe(200);
+  });
+});