@nexttylabs/echo 0.2.0

package/docs/plans/2026-01-02-user-login.md

@@ -0,0 +1,437 @@
+# User Login Implementation Plan
+
+> **For Claude:** REQUIRED SUB-SKILL: Use superpowers:executing-plans to implement this plan task-by-task.
+
+**Goal:** Add a login page and form that authenticate via better-auth email/password, support “remember me” (30-day session), and redirect logged-in users to `/dashboard`.
+
+**Architecture:** Use better-auth built-in `/api/auth/sign-in/email` endpoint and `auth.api.getSession` for server-side redirect. Client form validates input with a shared Zod schema and submits JSON to the auth endpoint. Session duration is configured in `lib/auth/config.ts`.
+
+**Tech Stack:** Next.js App Router, React 19, TypeScript, Tailwind, better-auth, Zod, Bun.
+
+---
+
+### Task 1: Add login validation schema (TDD)
+
+**Files:**
+- Modify: `lib/validations/auth.ts`
+- Create: `tests/lib/login-schema.test.ts`
+
+**Step 1: Write the failing test**
+
+`tests/lib/login-schema.test.ts`
+```ts
+import { describe, expect, it } from "bun:test";
+import { loginSchema } from "@/lib/validations/auth";
+
+describe("loginSchema", () => {
+  it("rejects empty email and password", () => {
+    const result = loginSchema.safeParse({ email: "", password: "" });
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      const messages = result.error.issues.map((issue) => issue.message);
+      expect(messages).toContain("请输入邮箱地址");
+      expect(messages).toContain("请输入密码");
+    }
+  });
+
+  it("accepts valid email and password", () => {
+    const result = loginSchema.safeParse({ email: "user@example.com", password: "Password123" });
+    expect(result.success).toBe(true);
+  });
+});
+```
+
+**Step 2: Run test to verify it fails**
+
+Run: `bun test tests/lib/login-schema.test.ts`
+Expected: FAIL because `loginSchema` is not defined.
+
+**Step 3: Write minimal implementation**
+
+`lib/validations/auth.ts`
+```ts
+export const loginSchema = z.object({
+  email: z
+    .string()
+    .min(1, "请输入邮箱地址")
+    .email("请输入有效的邮箱地址")
+    .max(255)
+    .toLowerCase(),
+  password: z.string().min(1, "请输入密码"),
+  rememberMe: z.boolean().optional(),
+});
+
+export type LoginInput = z.infer<typeof loginSchema>;
+```
+
+**Step 4: Run test to verify it passes**
+
+Run: `bun test tests/lib/login-schema.test.ts`
+Expected: PASS.
+
+**Step 5: Commit**
+
+```bash
+git add lib/validations/auth.ts tests/lib/login-schema.test.ts
+git commit -m "test: add login schema validation"
+```
+
+---
+
+### Task 2: Configure session expiry for remember-me
+
+**Files:**
+- Modify: `lib/auth/config.ts`
+
+**Step 1: Write the failing test**
+
+Create a simple configuration expectation test.
+
+`tests/lib/auth-config.test.ts`
+```ts
+import { describe, expect, it } from "bun:test";
+import { auth } from "@/lib/auth/config";
+
+describe("auth session config", () => {
+  it("uses 30-day session expiry", () => {
+    expect(auth.options.session?.expiresIn).toBe(60 * 60 * 24 * 30);
+  });
+});
+```
+
+**Step 2: Run test to verify it fails**
+
+Run: `bun test tests/lib/auth-config.test.ts`
+Expected: FAIL because `expiresIn` is undefined.
+
+**Step 3: Write minimal implementation**
+
+`lib/auth/config.ts`
+```ts
+  session: {
+    expiresIn: 60 * 60 * 24 * 30,
+  },
+```
+
+**Step 4: Run test to verify it passes**
+
+Run: `bun test tests/lib/auth-config.test.ts`
+Expected: PASS.
+
+**Step 5: Commit**
+
+```bash
+git add lib/auth/config.ts tests/lib/auth-config.test.ts
+git commit -m "feat: set remember-me session duration"
+```
+
+---
+
+### Task 3: Create login page (server component)
+
+**Files:**
+- Create: `app/(auth)/login/page.tsx`
+
+**Step 1: Write the failing test**
+
+Create a basic render test to ensure the page uses the LoginForm component.
+
+`tests/app/login-page.test.ts`
+```ts
+import { describe, expect, it } from "bun:test";
+import LoginPage from "@/app/(auth)/login/page";
+
+// This is a shallow check for export existence.
+// Actual redirect behavior is validated manually.
+
+describe("LoginPage", () => {
+  it("is a function", () => {
+    expect(typeof LoginPage).toBe("function");
+  });
+});
+```
+
+**Step 2: Run test to verify it fails**
+
+Run: `bun test tests/app/login-page.test.ts`
+Expected: FAIL because the file does not exist.
+
+**Step 3: Write minimal implementation**
+
+`app/(auth)/login/page.tsx`
+```tsx
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { LoginForm } from "@/components/auth/login-form";
+import { auth } from "@/lib/auth/config";
+
+export default async function LoginPage() {
+  const session = await auth.api.getSession({ headers: await headers() });
+
+  if (session) {
+    redirect("/dashboard");
+  }
+
+  return (
+    <div className="min-h-screen bg-gradient-to-br from-slate-50 via-white to-slate-100 px-4 py-12">
+      <div className="mx-auto flex w-full max-w-md flex-col gap-6">
+        <div className="text-center">
+          <h1 className="text-3xl font-semibold tracking-tight text-slate-900">
+            Echo
+          </h1>
+          <p className="mt-2 text-sm text-slate-600">
+            登录以继续访问你的反馈和组织
+          </p>
+        </div>
+        <LoginForm />
+      </div>
+    </div>
+  );
+}
+```
+
+**Step 4: Run test to verify it passes**
+
+Run: `bun test tests/app/login-page.test.ts`
+Expected: PASS.
+
+**Step 5: Commit**
+
+```bash
+git add app/(auth)/login/page.tsx tests/app/login-page.test.ts
+git commit -m "feat: add login page"
+```
+
+---
+
+### Task 4: Create login form (client component)
+
+**Files:**
+- Create: `components/auth/login-form.tsx`
+
+**Step 1: Write the failing test**
+
+Test validation behavior and error messaging without a DOM by using the shared schema.
+
+`tests/components/login-form-validation.test.ts`
+```ts
+import { describe, expect, it } from "bun:test";
+import { loginSchema } from "@/lib/validations/auth";
+
+describe("LoginForm validation", () => {
+  it("rejects invalid email format", () => {
+    const result = loginSchema.safeParse({ email: "invalid", password: "pass" });
+    expect(result.success).toBe(false);
+  });
+});
+```
+
+**Step 2: Run test to verify it fails**
+
+Run: `bun test tests/components/login-form-validation.test.ts`
+Expected: FAIL because login form/schema not yet wired (schema exists but test file missing).
+
+**Step 3: Write minimal implementation**
+
+`components/auth/login-form.tsx`
+```tsx
+"use client";
+
+import { useState } from "react";
+import { useRouter } from "next/navigation";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { loginSchema, type LoginInput } from "@/lib/validations/auth";
+
+export function LoginForm() {
+  const router = useRouter();
+  const [isLoading, setIsLoading] = useState(false);
+  const [formError, setFormError] = useState<string | null>(null);
+  const [errors, setErrors] = useState<Record<string, string>>({});
+  const [formData, setFormData] = useState<LoginInput>({
+    email: "",
+    password: "",
+    rememberMe: false,
+  });
+
+  const handleChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    const { name, value, type, checked } = e.target;
+    setFormData((prev) => ({
+      ...prev,
+      [name]: type === "checkbox" ? checked : value,
+    }));
+    setErrors((prev) => ({ ...prev, [name]: "" }));
+    setFormError(null);
+  };
+
+  const validateForm = () => {
+    const result = loginSchema.safeParse(formData);
+    if (result.success) {
+      setErrors({});
+      return true;
+    }
+    const nextErrors: Record<string, string> = {};
+    for (const issue of result.error.issues) {
+      const key = issue.path?.[0];
+      if (typeof key === "string") {
+        nextErrors[key] = issue.message;
+      }
+    }
+    setErrors(nextErrors);
+    return false;
+  };
+
+  const handleSubmit = async (event: React.FormEvent) => {
+    event.preventDefault();
+    setFormError(null);
+
+    if (!validateForm()) {
+      return;
+    }
+
+    setIsLoading(true);
+
+    try {
+      const res = await fetch("/api/auth/sign-in/email", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          email: formData.email,
+          password: formData.password,
+          rememberMe: formData.rememberMe,
+        }),
+      });
+
+      const json = await res.json();
+
+      if (!res.ok) {
+        throw new Error(json?.message ?? "邮箱或密码错误");
+      }
+
+      router.push("/dashboard");
+    } catch {
+      setFormError("邮箱或密码错误");
+    } finally {
+      setIsLoading(false);
+    }
+  };
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>登录</CardTitle>
+        <CardDescription>输入邮箱和密码登录</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <form onSubmit={handleSubmit} className="space-y-4">
+          {formError ? (
+            <div className="rounded-md border border-destructive/30 bg-destructive/10 px-3 py-2 text-sm text-destructive">
+              {formError}
+            </div>
+          ) : null}
+
+          <div className="space-y-2">
+            <Label htmlFor="email">邮箱</Label>
+            <Input
+              id="email"
+              name="email"
+              type="email"
+              placeholder="you@example.com"
+              value={formData.email}
+              onChange={handleChange}
+              disabled={isLoading}
+              className={errors.email ? "border-destructive" : ""}
+            />
+            {errors.email ? (
+              <p className="text-sm text-destructive">{errors.email}</p>
+            ) : null}
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="password">密码</Label>
+            <Input
+              id="password"
+              name="password"
+              type="password"
+              value={formData.password}
+              onChange={handleChange}
+              disabled={isLoading}
+              className={errors.password ? "border-destructive" : ""}
+            />
+            {errors.password ? (
+              <p className="text-sm text-destructive">{errors.password}</p>
+            ) : null}
+          </div>
+
+          <div className="flex items-center justify-between">
+            <div className="flex items-center space-x-2">
+              <Checkbox
+                id="rememberMe"
+                name="rememberMe"
+                checked={formData.rememberMe}
+                onCheckedChange={(checked) =>
+                  setFormData((prev) => ({ ...prev, rememberMe: checked === true }))
+                }
+                disabled={isLoading}
+              />
+              <Label htmlFor="rememberMe" className="text-sm font-normal">
+                记住我
+              </Label>
+            </div>
+            <a className="text-sm text-primary hover:underline" href="/forgot-password">
+              忘记密码？
+            </a>
+          </div>
+
+          <Button type="submit" className="w-full" disabled={isLoading}>
+            {isLoading ? "登录中..." : "登录"}
+          </Button>
+
+          <p className="text-center text-sm text-muted-foreground">
+            还没有账户？
+            <a className="ml-1 text-primary hover:underline" href="/register">
+              注册
+            </a>
+          </p>
+        </form>
+      </CardContent>
+    </Card>
+  );
+}
+```
+
+**Step 4: Run test to verify it passes**
+
+Run: `bun test tests/components/login-form-validation.test.ts`
+Expected: PASS.
+
+**Step 5: Commit**
+
+```bash
+git add components/auth/login-form.tsx tests/components/login-form-validation.test.ts
+git commit -m "feat: add login form"
+```
+
+---
+
+### Task 5: Full verification
+
+**Step 1: Run lint**
+
+Run: `bun run lint`
+Expected: PASS.
+
+**Step 2: Run full test suite**
+
+Run: `bun test`
+Expected: PASS.
+
+**Step 3: Commit (if any changes)**
+
+```bash
+git add -A
+git commit -m "chore: verify login flow"
+```

package/docs/plans/2026-01-02-user-registration-design.md

@@ -0,0 +1,47 @@
+# 用户注册设计说明
+
+**日期:** 2026-01-02
+**范围:** Story 4.1 用户注册（认证域 + 业务域）
+
+## 目标
+为新用户提供注册入口，完成账号创建、默认组织创建与自动登录，并保持认证域与业务域解耦。
+
+## 架构与边界
+- **认证域（better-auth）**：用户/会话等授权表由 better-auth 的 Drizzle schema 提供与维护。
+- **业务域（自有表）**：组织与组织成员表独立维护；新增 `user_profiles` 保存姓名等扩展信息。
+- **迁移策略**：统一通过 drizzle-kit 生成并运行迁移（不手写 SQL）。
+
+## 数据模型
+- `auth_*`（better-auth 提供）：用户、会话等表结构由其 Drizzle schema 生成。
+- `user_profiles`
+  - `userId` 外键指向认证域用户表
+  - `name`（必填）及未来可扩展字段
+- `organizations`
+  - `name`, `slug`
+- `organization_members`
+  - `organizationId`, `userId`, `role`（注册时为 `admin`）
+
+## 注册流程
+1. 客户端提交姓名/邮箱/密码到 `POST /api/auth/register`。
+2. 服务端使用 Zod 校验（邮箱格式/密码强度/姓名）。
+3. 调用 better-auth 注册接口创建用户并建立会话。
+4. 同一事务内创建 `user_profiles`、默认组织与成员关系。
+5. 成功返回 201，前端跳转 `/dashboard`。
+
+## 错误处理
+- 校验失败：400 + 字段级错误。
+- 邮箱已存在：409。
+- 其他错误：500（通用错误提示）。
+
+## 前端
+- 页面：`app/(auth)/register/page.tsx`
+- 表单组件：`components/auth/register-form.tsx`
+- 客户端校验 + 服务端再次校验
+- 成功后提示 toast 并跳转仪表板
+
+## 测试范围
+- API：成功注册、邮箱重复、弱密码/无效邮箱。
+- 验证创建了 profile、组织与成员关系。
+
+## 待确认
+- better-auth Drizzle schema 的具体导出与命名（需以官方文档为准）。