@nexttylabs/echo 0.2.0

package/Makefile

@@ -0,0 +1,77 @@
+# Makefile
+
+.PHONY: help dev build up down restart logs db-migrate db-backup
+
+help:  ## Show this help message
+	@echo 'Usage: make [target]'
+	@echo ''
+	@echo 'Available targets:'
+	@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST)
+
+dev:  ## Start development environment
+	docker-compose -f docker-compose.dev.yml up -d
+	@echo "Development environment started!"
+	@echo "App: http://localhost:3000"
+	@echo "Database: postgresql://echo:echo@localhost:5432/echo_dev"
+
+build:  ## Build production images
+	docker-compose build
+
+up:  ## Start production environment
+	docker-compose up -d
+	@echo "Production environment started!"
+	@echo "App: http://localhost:3000"
+
+down:  ## Stop all containers
+	docker-compose down
+
+restart:  ## Restart all containers
+	docker-compose restart
+
+logs:  ## Show logs from all containers
+	docker-compose logs -f
+
+logs-app:  ## Show logs from app container
+	docker-compose logs -f app
+
+logs-db:  ## Show logs from database container
+	docker-compose logs -f postgres
+
+db-migrate:  ## Run database migrations
+	docker-compose exec app bunx drizzle-kit migrate
+
+db-backup:  ## Backup database (Docker)
+	@mkdir -p backups
+	docker-compose exec postgres pg_dump -U echo echo > backups/backup-$$(date +%Y%m%d-%H%M%S).sql
+	@echo "Backup completed!"
+
+db-restore:  ## Restore database (usage: make db-restore FILE=backups/backup.sql)
+	docker-compose exec -T postgres psql -U echo echo < $(FILE)
+
+backup:  ## Create database backup (local)
+	@echo "Creating backup..."
+	./scripts/backup-db.sh
+
+backup-ts:  ## Create database backup using TypeScript
+	bun run scripts/backup-db.ts
+
+restore:  ## Restore database (usage: make restore FILE=backups/echo-20240101-020000.sql.gz)
+	./scripts/restore-db.sh $(FILE)
+
+list-backups:  ## List all backups
+	@echo "Available backups:"
+	@ls -lh backups/echo-*.sql.gz 2>/dev/null || echo "No backups found"
+
+db-shell:  ## Open database shell
+	docker-compose exec postgres psql -U echo echo
+
+shell:  ## Open app container shell
+	docker-compose exec app sh
+
+clean:  ## Remove all containers, volumes, and images
+	docker-compose down -v --rmi all
+	@echo "Everything cleaned up!"
+
+dev-watch:  ## Start development with hot reload
+	@echo "Starting development server with hot reload..."
+	bun run dev

package/README.md

@@ -0,0 +1,198 @@
+# Echo
+
+<div align="center">
+
+![Echo Logo](public/logo-64.svg)
+
+**Open-source product feedback platform for modern teams.**
+
+Collect feedback, spot patterns, and ship what matters.
+
+[Live Demo](https://https://echo-khaki-eta.vercel.app/)  - [Feedback](https://github.com/nexttylabs/echo/issues)
+
+[![License: AGPL-3.0](https://img.shields.io/badge/License-AGPL--3.0-blue.svg)](https://www.gnu.org/licenses/agpl-3.0.en.html)
+[![GitHub stars](https://img.shields.io/github/stars/nexttylabs/echo.svg)](https://github.com/nexttylabs/echo/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/nexttylabs/echo.svg)](https://github.com/nexttylabs/echo/network)
+[![GitHub issues](https://img.shields.io/github/issues/nexttylabs/echo.svg)](https://github.com/nexttylabs/echo/issues)
+
+</div>
+
+## Why Echo
+
+Echo helps product teams centralize user feedback, identify themes, and make confident roadmap decisions without losing control of data or workflow.
+
+## Quickstart
+
+### Docker (recommended)
+
+```bash
+# Clone the repository
+git clone https://github.com/nexttylabs/echo.git
+cd echo
+
+# Copy environment variables
+cp .env.example .env
+
+# Start services
+docker-compose up -d
+```
+
+Visit http://localhost:3000
+
+### Local development
+
+```bash
+# Install dependencies
+bun install
+
+# Copy environment variables
+cp .env.example .env.local
+
+# Run database migrations
+bun run db:migrate
+
+# Start development server
+bun dev
+```
+
+Visit http://localhost:3000
+
+## Core workflow
+
+1. Create a project and customize your public feedback portal.
+2. Collect feedback (embedded portal, admin entry, or API).
+3. Triage, prioritize, and share progress with your users.
+
+## Features
+
+- **Feedback collection**: embedded portal, voting, attachments
+- **Management workflow**: statuses, filters, and prioritization
+- **AI assist**: basic auto-classification and duplicate hints
+- **Team collaboration**: invitations and role-based access control
+- **Self-hosting**: run on your infrastructure with Docker
+- **API-ready**: integrate with existing product workflows
+
+## Use cases
+
+- **Product teams**: prioritize roadmap decisions with data
+- **Support teams**: capture customer feedback and context
+- **Engineering teams**: track requests from idea to shipping
+
+## Tech stack
+
+- **Frontend**: Next.js 16 + React 19 + TypeScript
+- **UI**: Shadcn/ui + Tailwind CSS v4
+- **Backend**: Next.js API Routes
+- **Database**: PostgreSQL + Drizzle ORM
+- **Deployment**: Docker + Docker Compose
+- **Testing**: Playwright (E2E) + Vitest (Unit)
+
+## Project structure
+
+```
+echo/
+|-- app/                 # Next.js App Router
+|   |-- (auth)/          # Authentication pages
+|   |-- (dashboard)/     # Dashboard pages
+|   |-- api/             # API routes
+|   `-- portal/          # Public feedback portal
+|-- components/          # React components
+|   |-- ui/              # Shadcn/ui base components
+|   |-- forms/           # Form components
+|   `-- feedback/        # Feedback-related components
+|-- lib/                 # Utility functions and config
+|-- db/                  # Database schema and migrations
+|-- public/              # Static assets
+`-- docs/                # Project documentation
+```
+
+## Configuration
+
+Create a `.env` file and set the following values:
+
+```env
+# Database
+DATABASE_URL="postgresql://user:password@localhost:5432/echo"
+
+# Authentication
+BETTER_AUTH_SECRET="your-secret-key"
+BETTER_AUTH_URL="http://localhost:3000"
+
+# Email (optional)
+SMTP_HOST="smtp.gmail.com"
+SMTP_PORT=587
+SMTP_USER="your-email@gmail.com"
+SMTP_PASS="your-app-password"
+
+# AI (optional)
+OPENAI_API_KEY="your-openai-api-key"
+```
+
+## Database
+
+```bash
+# Generate migration files
+bun run db:generate
+
+# Run migrations
+bun run db:migrate
+
+# Reset database (development environment)
+bun run db:reset
+```
+
+## Testing
+
+```bash
+# Run unit tests
+bun test
+
+# Run E2E tests
+bun run test:e2e
+
+# Run tests with coverage
+bun run test:coverage
+```
+
+## Get involved
+
+- Join the conversation in our [Discord](https://discord.gg/echo)
+- Review or open [issues](https://github.com/nexttylabs/echo/issues)
+- Contribute via [pull requests](https://github.com/nexttylabs/echo/pulls)
+
+## Contributing
+
+We welcome contributions from the community.
+
+1. Fork the project
+2. Create a feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit your changes (`git commit -m 'Add amazing feature'`)
+4. Push to the branch (`git push origin feature/amazing-feature`)
+5. Open a Pull Request
+
+## Roadmap
+
+- **v1.0 (current)**: feedback collection, auth, Docker, basic AI classification
+- **v1.1 (planned)**: comments, email notifications, public roadmap
+- **v1.2 (future)**: advanced AI, white-labeling, SSO, mobile
+
+## License
+
+This project is licensed under the [GNU AGPL v3](LICENSE).
+
+## Acknowledgments
+
+- [Next.js](https://nextjs.org/) - React framework
+- [Shadcn/ui](https://ui.shadcn.com/) - UI components
+- [Drizzle ORM](https://orm.drizzle.team/) - TypeScript ORM
+- [Tailwind CSS](https://tailwindcss.com/) - Utility-first CSS
+
+---
+
+<div align="center">
+
+**[Star the repo](https://github.com/nexttylabs/echo) if Echo helps your team.**
+
+Made by the nexttylabs Team
+
+</div>

package/app/(auth)/login/page.tsx

@@ -0,0 +1,53 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { getTranslations } from "next-intl/server";
+import { LoginForm } from "@/components/auth/login-form";
+import { auth } from "@/lib/auth/config";
+
+export default async function LoginPage() {
+  let session = null;
+  try {
+    session = await auth.api.getSession({ headers: await headers() });
+  } catch {
+    // Invalid session cookie, continue to show login form
+  }
+
+  if (session) {
+    redirect("/dashboard");
+  }
+
+  const t = await getTranslations("auth.login");
+
+  return (
+    <div className="min-h-screen bg-gradient-to-br from-slate-50 via-white to-slate-100 px-4 py-12">
+      <div className="mx-auto flex w-full max-w-md flex-col gap-6">
+        <div className="text-center">
+          <h1 className="text-3xl font-semibold tracking-tight text-slate-900">
+            {t("pageTitle")}
+          </h1>
+          <p className="mt-2 text-sm text-slate-600">
+            {t("pageSubtitle")}
+          </p>
+        </div>
+        <LoginForm />
+      </div>
+    </div>
+  );
+}

package/app/(auth)/register/page.tsx

@@ -0,0 +1,48 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { getTranslations } from "next-intl/server";
+import { RegisterForm } from "@/components/auth/register-form";
+import { auth } from "@/lib/auth/config";
+
+export default async function RegisterPage() {
+  const session = await auth.api.getSession({ headers: await headers() });
+
+  if (session) {
+    redirect("/dashboard");
+  }
+
+  const t = await getTranslations("auth.register");
+
+  return (
+    <div className="min-h-screen bg-gradient-to-br from-slate-50 via-white to-slate-100 px-4 py-12">
+      <div className="mx-auto flex w-full max-w-md flex-col gap-6">
+        <div className="text-center">
+          <h1 className="text-3xl font-semibold tracking-tight text-slate-900">
+            {t("pageTitle")}
+          </h1>
+          <p className="mt-2 text-sm text-slate-600">
+            {t("pageSubtitle")}
+          </p>
+        </div>
+        <RegisterForm />
+      </div>
+    </div>
+  );
+}

package/app/(auth)/sign-in/page.tsx

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { redirect } from "next/navigation";
+
+export default function SignInRedirectPage() {
+  redirect("/login");
+}

package/app/(dashboard)/admin/feedback/[id]/edit/page.tsx

@@ -0,0 +1,103 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { cookies, headers } from "next/headers";
+import { notFound, redirect } from "next/navigation";
+import { and, eq } from "drizzle-orm";
+import { auth } from "@/lib/auth/config";
+import { db } from "@/lib/db";
+import { feedback } from "@/lib/db/schema";
+import { FeedbackEditForm } from "@/components/feedback/feedback-edit-form";
+import { canEditFeedback, type UserRole } from "@/lib/auth/permissions";
+import { getOrgContext } from "@/lib/auth/org-context";
+import { getRequestUrl } from "@/lib/http/get-request-url";
+
+interface PageProps {
+  params: Promise<{ id: string }>;
+}
+
+export default async function FeedbackEditPage({ params }: PageProps) {
+  const headerList = await headers();
+  const cookieStore = await cookies();
+  const session = await auth.api.getSession({ headers: headerList });
+
+  if (!session?.user) {
+    redirect("/login");
+  }
+
+  const userRole = (session.user as { role?: string }).role as UserRole | undefined;
+  if (!userRole || !canEditFeedback(userRole)) {
+    redirect("/admin/feedback");
+  }
+
+  const { id } = await params;
+  const feedbackId = parseInt(id);
+
+  if (isNaN(feedbackId)) {
+    notFound();
+  }
+
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  let organizationId: string | null = null;
+  try {
+    const url = getRequestUrl(
+      headerList,
+      `/admin/feedback/${feedbackId}/edit`,
+    );
+    const context = await getOrgContext({
+      request: { nextUrl: url, headers: headerList, cookies: cookieStore },
+      db,
+      userId: session.user.id,
+      requireMembership: true,
+    });
+    organizationId = context.organizationId;
+  } catch {
+    notFound();
+  }
+
+  const [row] = await db
+    .select({
+      title: feedback.title,
+      description: feedback.description,
+      deletedAt: feedback.deletedAt,
+    })
+    .from(feedback)
+    .where(
+      and(
+        eq(feedback.feedbackId, feedbackId),
+        eq(feedback.organizationId, organizationId ?? ""),
+      ),
+    )
+    .limit(1);
+
+  if (!row || row.deletedAt !== null) {
+    notFound();
+  }
+
+  return (
+    <div className="container mx-auto py-8 px-4">
+      <FeedbackEditForm
+        feedbackId={feedbackId}
+        initialTitle={row.title}
+        initialDescription={row.description}
+      />
+    </div>
+  );
+}

package/app/(dashboard)/admin/feedback/[id]/page.tsx

@@ -0,0 +1,154 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { cookies, headers } from "next/headers";
+import { notFound, redirect } from "next/navigation";
+import { auth } from "@/lib/auth/config";
+import { db } from "@/lib/db";
+import { getFeedbackById } from "@/lib/feedback/get-feedback-by-id";
+import { FeedbackDetailView } from "@/components/feedback/feedback-detail-view";
+import { InternalNotes } from "@/components/comment/internal-notes";
+import { PublicComments } from "@/components/comment/public-comments";
+import { canDeleteFeedback, canEditFeedback, canUpdateFeedbackStatus, type UserRole } from "@/lib/auth/permissions";
+import { getOrgContext } from "@/lib/auth/org-context";
+import { getRequestUrl } from "@/lib/http/get-request-url";
+
+interface PageProps {
+  params: Promise<{ id: string }>;
+}
+
+export default async function FeedbackDetailPage({ params }: PageProps) {
+  const headerList = await headers();
+  const cookieStore = await cookies();
+  const session = await auth.api.getSession({ headers: headerList });
+
+  if (!session?.user) {
+    redirect("/login");
+  }
+
+  const { id } = await params;
+  const feedbackId = parseInt(id);
+
+  if (isNaN(feedbackId)) {
+    notFound();
+  }
+
+  if (!db) {
+    throw new Error("Database not configured");
+  }
+
+  let memberRole: UserRole | null = null;
+  let organizationId: string | null = null;
+  try {
+    const url = getRequestUrl(headerList, `/admin/feedback/${feedbackId}`);
+    const context = await getOrgContext({
+      request: { nextUrl: url, headers: headerList, cookies: cookieStore },
+      db,
+      userId: session.user.id,
+      requireMembership: true,
+    });
+    memberRole = (context.memberRole as UserRole) ?? null;
+    organizationId = context.organizationId;
+  } catch {
+    notFound();
+  }
+
+  const result = await getFeedbackById(db, feedbackId, {
+    userId: session.user.id,
+  });
+
+  if (!result || "deleted" in result) {
+    notFound();
+  }
+
+  if (!organizationId || result.feedback.organizationId !== organizationId) {
+    notFound();
+  }
+
+  const canEdit = !!memberRole && canEditFeedback(memberRole);
+  const canDelete = !!memberRole && canDeleteFeedback(memberRole);
+  const canUpdateStatus = !!memberRole && canUpdateFeedbackStatus(memberRole);
+
+  return (
+    <div className="container mx-auto py-8 px-4">
+      <FeedbackDetailView
+        feedback={{
+          feedbackId: result.feedback.feedbackId,
+          title: result.feedback.title,
+          description: result.feedback.description,
+          type: result.feedback.type,
+          priority: result.feedback.priority,
+          status: result.feedback.status,
+          createdAt: result.feedback.createdAt.toISOString(),
+          updatedAt: result.feedback.updatedAt.toISOString(),
+          submittedOnBehalf: result.feedback.submittedOnBehalf,
+          customerInfo: result.feedback.customerInfo as {
+            name: string;
+            email: string;
+            phone?: string;
+          } | null,
+          attachments: result.attachments.map((a) => ({
+            attachmentId: a.attachmentId,
+            fileName: a.fileName,
+            filePath: a.filePath,
+            fileSize: a.fileSize,
+            mimeType: a.mimeType,
+            createdAt: a.createdAt.toISOString(),
+          })),
+          votes: {
+            count: result.votes.count,
+            list: result.votes.list.map((v) => ({
+              voteId: v.voteId,
+              visitorId: v.visitorId,
+              userId: v.userId,
+              userName: v.userName,
+              userEmail: v.userEmail,
+              createdAt: v.createdAt.toISOString(),
+            })),
+            userVote: result.votes.userVote,
+          },
+          statusHistory: result.statusHistory.map((h) => ({
+            historyId: h.historyId,
+            oldStatus: h.oldStatus,
+            newStatus: h.newStatus,
+            changedBy: h.changedBy,
+            changedAt: h.changedAt.toISOString(),
+            comment: h.comment,
+          })),
+        }}
+        canEdit={canEdit}
+        canDelete={canDelete}
+        canUpdateStatus={canUpdateStatus}
+      >
+        {/* Comments section in main content area */}
+        <PublicComments
+          feedbackId={feedbackId}
+          isAuthenticated={true}
+          organizationId={organizationId}
+        />
+
+        {memberRole && (
+          <InternalNotes
+            feedbackId={feedbackId}
+            canDelete={memberRole === "admin"}
+            currentUserId={session.user.id}
+          />
+        )}
+      </FeedbackDetailView>
+    </div>
+  );
+}