@nexttylabs/echo 0.3.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/CHANGELOG.md +25 -0
  2. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  3. package/app/api/admin/backup/route.ts +22 -4
  4. package/app/api/auth/register/handler.ts +1 -2
  5. package/lib/auth/config.ts +0 -7
  6. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  7. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  8. package/lib/db/migrations/meta/_journal.json +2 -135
  9. package/lib/db/schema/auth.ts +0 -1
  10. package/lib/db/schema/index.ts +0 -1
  11. package/lib/portal/public-context.tsx +5 -0
  12. package/package.json +20 -1
  13. package/.changeset/README.md +0 -21
  14. package/.changeset/config.json +0 -11
  15. package/.changeset/cozy-ghosts-care.md +0 -5
  16. package/.changeset/sharp-lines-stand.md +0 -5
  17. package/.changeset/sour-doodles-eat.md +0 -5
  18. package/.changeset/tender-moose-shop.md +0 -5
  19. package/.github/pull_request_template.md +0 -13
  20. package/.github/workflows/ci.yml +0 -41
  21. package/.github/workflows/publish.yml +0 -44
  22. package/.github/workflows/release.yml +0 -73
  23. package/AGENTS.md +0 -92
  24. package/Dockerfile +0 -57
  25. package/Makefile +0 -77
  26. package/app/api/internal/domain-lookup/route.ts +0 -67
  27. package/bun.lock +0 -2503
  28. package/components/portal/project-switcher.tsx +0 -20
  29. package/docker-compose.dev.yml +0 -26
  30. package/docker-compose.yml +0 -98
  31. package/docs/architecture.md +0 -259
  32. package/docs/component-inventory.md +0 -261
  33. package/docs/database-migrations.md +0 -76
  34. package/docs/development-guide.md +0 -209
  35. package/docs/e2e-user-flows.csv +0 -31
  36. package/docs/er-diagram-feedback.mmd +0 -138
  37. package/docs/er-diagram.mmd +0 -281
  38. package/docs/i18n-check-report.md +0 -296
  39. package/docs/index.md +0 -214
  40. package/docs/logic-chain.md +0 -94
  41. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  42. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  43. package/docs/plans/2026-01-02-user-login.md +0 -437
  44. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  45. package/docs/plans/2026-01-02-user-registration.md +0 -628
  46. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  47. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  48. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  49. package/docs/plans/2026-01-05-member-removal.md +0 -186
  50. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  51. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  52. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  53. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  54. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  55. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  56. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  57. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  58. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  59. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  60. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  61. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  62. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  63. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  64. package/docs/plans/2026-01-09-settings-center.md +0 -948
  65. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  66. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  67. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  68. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  69. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  70. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  71. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  72. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  73. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  74. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  75. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  76. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  77. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  78. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  79. package/docs/product_changes.md +0 -37
  80. package/docs/project-overview.md +0 -159
  81. package/docs/project-scan-report.json +0 -104
  82. package/docs/route-role-visibility.md +0 -51
  83. package/docs/source-tree-analysis.md +0 -150
  84. package/docs/testing/delete-project-manual-tests.md +0 -18
  85. package/docs/user-story-tracking.md +0 -191
  86. package/eslint.config.mjs +0 -19
  87. package/lib/db/migrations/.gitkeep +0 -0
  88. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  89. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  90. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  91. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  92. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  93. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  94. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  95. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  96. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  97. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  98. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  99. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  100. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  101. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  102. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  103. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  104. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  105. package/lib/db/migrations/0016_github_integration.sql +0 -30
  106. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  107. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  108. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  109. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  110. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  111. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  112. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  113. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  114. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  115. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  116. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  117. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  118. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  119. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  120. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  121. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  122. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  123. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  124. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  125. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  126. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  127. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  128. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  129. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  130. package/lib/db/schema/projects.ts +0 -145
  131. package/lib/db/schema/user-profiles.ts +0 -31
  132. package/lib/validations/projects.ts +0 -49
  133. package/next-env.d.ts +0 -6
  134. package/playwright.config.ts +0 -44
  135. package/proxy.test.ts +0 -131
  136. package/proxy.ts +0 -190
  137. package/scripts/backup-db.sh +0 -57
  138. package/scripts/backup-db.ts +0 -24
  139. package/scripts/generate-openapi.ts +0 -22
  140. package/scripts/migration-helper.ts +0 -39
  141. package/scripts/pre-deploy.ts +0 -75
  142. package/scripts/restore-db.sh +0 -60
  143. package/scripts/rollback.ts +0 -72
  144. package/scripts/seed-tags.ts +0 -48
  145. package/tests/api/feedback-bulk.test.ts +0 -47
  146. package/tests/api/feedback-by-id.test.ts +0 -67
  147. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  148. package/tests/api/feedback-create.test.ts +0 -71
  149. package/tests/api/feedback-delete.test.ts +0 -160
  150. package/tests/api/feedback-filter.test.ts +0 -250
  151. package/tests/api/feedback-list.test.ts +0 -234
  152. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  153. package/tests/api/feedback-similar.test.ts +0 -46
  154. package/tests/api/feedback-sort.test.ts +0 -261
  155. package/tests/api/feedback-status-enum.test.ts +0 -49
  156. package/tests/api/feedback-status-filter.test.ts +0 -117
  157. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  158. package/tests/api/feedback.test.ts +0 -175
  159. package/tests/api/identify-jwt.test.ts +0 -25
  160. package/tests/api/invitation-accept.test.ts +0 -213
  161. package/tests/api/organization-invitations.test.ts +0 -186
  162. package/tests/api/organization-members-list.test.ts +0 -79
  163. package/tests/api/organization-members.test.ts +0 -340
  164. package/tests/api/organizations.test.ts +0 -149
  165. package/tests/api/register.test.ts +0 -112
  166. package/tests/api/upload.test.ts +0 -103
  167. package/tests/api/vote.test.ts +0 -82
  168. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  169. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  170. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  171. package/tests/app/health-route-helpers.test.ts +0 -27
  172. package/tests/app/login-page.test.ts +0 -26
  173. package/tests/app/portal-page.test.ts +0 -29
  174. package/tests/app/project-portal-overview.test.tsx +0 -25
  175. package/tests/app/widget-page-import.test.ts +0 -25
  176. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  177. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  178. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  179. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  180. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  181. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  182. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  183. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  184. package/tests/components/feedback-list-controls.test.tsx +0 -204
  185. package/tests/components/feedback-list-item.test.tsx +0 -67
  186. package/tests/components/landing/hero.test.tsx +0 -46
  187. package/tests/components/layout/language-switcher.test.tsx +0 -25
  188. package/tests/components/layout/sidebar.test.tsx +0 -157
  189. package/tests/components/login-form.test.ts +0 -25
  190. package/tests/components/organization-form.test.ts +0 -32
  191. package/tests/components/organization-switcher.test.ts +0 -25
  192. package/tests/components/pagination.test.tsx +0 -43
  193. package/tests/components/portal-overview.test.tsx +0 -25
  194. package/tests/components/profile-form.test.tsx +0 -139
  195. package/tests/components/role-selector.test.ts +0 -31
  196. package/tests/components/status-chart.test.tsx +0 -90
  197. package/tests/e2e/auth.e2e.ts +0 -323
  198. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  199. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  200. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  201. package/tests/e2e/feedback-management.e2e.ts +0 -565
  202. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  203. package/tests/e2e/feedback-view.e2e.ts +0 -297
  204. package/tests/e2e/fixtures/test-data.ts +0 -235
  205. package/tests/e2e/health-check.e2e.ts +0 -230
  206. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  207. package/tests/e2e/helpers/test-utils.ts +0 -298
  208. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  209. package/tests/e2e/organization.e2e.ts +0 -292
  210. package/tests/e2e/permissions.e2e.ts +0 -424
  211. package/tests/e2e/project-widget.e2e.ts +0 -63
  212. package/tests/feedback/filters.test.ts +0 -29
  213. package/tests/hooks/use-permissions.test.ts +0 -52
  214. package/tests/lib/ai/classifier.test.ts +0 -104
  215. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  216. package/tests/lib/attachments-schema.test.ts +0 -30
  217. package/tests/lib/auth/session.test.ts +0 -49
  218. package/tests/lib/auth-client.test.ts +0 -37
  219. package/tests/lib/auth-config.test.ts +0 -26
  220. package/tests/lib/feedback-prefill.test.ts +0 -52
  221. package/tests/lib/feedback-processor.test.ts +0 -41
  222. package/tests/lib/feedback-schema.test.ts +0 -33
  223. package/tests/lib/file-validator.test.ts +0 -48
  224. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  225. package/tests/lib/invitations.test.ts +0 -35
  226. package/tests/lib/login-schema.test.ts +0 -36
  227. package/tests/lib/org-context.test.ts +0 -95
  228. package/tests/lib/organization-access.test.ts +0 -44
  229. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  230. package/tests/lib/permissions.test.ts +0 -88
  231. package/tests/lib/portal-analytics.test.ts +0 -25
  232. package/tests/lib/portal-contributors.test.ts +0 -25
  233. package/tests/lib/portal-copy.test.ts +0 -27
  234. package/tests/lib/portal-i18n.test.ts +0 -30
  235. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  236. package/tests/lib/portal-modules.test.ts +0 -25
  237. package/tests/lib/portal-seo.test.ts +0 -25
  238. package/tests/lib/portal-sharing.test.ts +0 -25
  239. package/tests/lib/portal-sorting.test.ts +0 -25
  240. package/tests/lib/portal-theme.test.ts +0 -25
  241. package/tests/lib/rate-limit.test.ts +0 -142
  242. package/tests/lib/resolve-locale.test.ts +0 -34
  243. package/tests/lib/services/backup.test.ts +0 -145
  244. package/tests/lib/user-organizations.test.ts +0 -42
  245. package/tests/lib/user-role-schema.test.ts +0 -33
  246. package/tests/lib/user-schema.test.ts +0 -25
  247. package/tests/setup.ts +0 -74
  248. package/vercel.json +0 -4
@@ -1,145 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { relations } from "drizzle-orm";
19
- import {
20
- index,
21
- jsonb,
22
- pgTable,
23
- text,
24
- timestamp,
25
- unique,
26
- uuid,
27
- } from "drizzle-orm/pg-core";
28
- import { organizations } from "./organizations";
29
-
30
- export type WidgetConfig = {
31
- theme?: "light" | "dark" | "auto";
32
- primaryColor?: string;
33
- buttonText?: string;
34
- buttonPosition?: "bottom-right" | "bottom-left" | "top-right" | "top-left";
35
- fields?: {
36
- showType?: boolean;
37
- showPriority?: boolean;
38
- showDescription?: boolean;
39
- requireEmail?: boolean;
40
- };
41
- types?: string[];
42
- customCSS?: string;
43
- };
44
-
45
- export type PortalThemeConfig = {
46
- mode?: "light" | "dark" | "system";
47
- primaryColor?: string;
48
- accentColor?: string;
49
- borderRadius?: "none" | "sm" | "md" | "lg" | "full";
50
- fontFamily?: string;
51
- customCSS?: string;
52
- };
53
-
54
- export type PortalCopyConfig = {
55
- title?: string;
56
- description?: string;
57
- ctaLabel?: string;
58
- emptyStateMessage?: string;
59
- successMessage?: string;
60
- placeholders?: {
61
- titleInput?: string;
62
- descriptionInput?: string;
63
- };
64
- };
65
-
66
- export type PortalSeoConfig = {
67
- metaTitle?: string;
68
- metaDescription?: string;
69
- ogImage?: string;
70
- favicon?: string;
71
- noIndex?: boolean;
72
- };
73
-
74
- export type PortalSharingConfig = {
75
- enabled?: boolean;
76
- allowPublicVoting?: boolean;
77
- allowPublicComments?: boolean;
78
- showVoteCount?: boolean;
79
- showAuthor?: boolean;
80
- socialSharing?: {
81
- twitter?: boolean;
82
- linkedin?: boolean;
83
- facebook?: boolean;
84
- };
85
- };
86
-
87
- export type PortalConfig = {
88
- theme?: PortalThemeConfig;
89
- copy?: PortalCopyConfig;
90
- seo?: PortalSeoConfig;
91
- sharing?: PortalSharingConfig;
92
- languages?: string[];
93
- defaultLanguage?: string;
94
- modules?: {
95
- feedback?: boolean;
96
- roadmap?: boolean;
97
- changelog?: boolean;
98
- help?: boolean;
99
- };
100
- };
101
-
102
- export const projects = pgTable(
103
- "projects",
104
- {
105
- projectId: uuid("projectId").defaultRandom().primaryKey(),
106
- organizationId: text("organizationId")
107
- .notNull()
108
- .references(() => organizations.id, { onDelete: "cascade" }),
109
- name: text("name").notNull(),
110
- slug: text("slug").notNull(),
111
- description: text("description"),
112
- widgetConfig: jsonb("widgetConfig").$type<WidgetConfig>(),
113
- portalConfig: jsonb("portalConfig").$type<PortalConfig>(),
114
- customDomain: text("customDomain"),
115
- createdAt: timestamp("createdAt").defaultNow().notNull(),
116
- updatedAt: timestamp("updatedAt")
117
- .defaultNow()
118
- .$onUpdate(() => new Date())
119
- .notNull(),
120
- },
121
- (table) => ({
122
- orgIdx: index("idx_projects_orgId").on(table.organizationId),
123
- slugOrgUnique: unique("unique_slug_org").on(table.slug, table.organizationId),
124
- customDomainUnique: unique("unique_custom_domain").on(table.customDomain),
125
- }),
126
- );
127
-
128
- export const projectsRelations = relations(projects, ({ one }) => ({
129
- organization: one(organizations, {
130
- fields: [projects.organizationId],
131
- references: [organizations.id],
132
- }),
133
- }));
134
-
135
- export type Project = typeof projects.$inferSelect;
136
- export type NewProject = typeof projects.$inferInsert;
137
-
138
- export function generateSlug(name: string): string {
139
- return name
140
- .toLowerCase()
141
- .trim()
142
- .replace(/[^\w\s-]/g, "")
143
- .replace(/[\s_-]+/g, "-")
144
- .replace(/^-+|-+$/g, "");
145
- }
@@ -1,31 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { pgTable, text, timestamp } from "drizzle-orm/pg-core";
19
- import { user } from "./auth";
20
-
21
- export const userProfiles = pgTable("user_profiles", {
22
- userId: text("user_id")
23
- .primaryKey()
24
- .references(() => user.id, { onDelete: "cascade" }),
25
- name: text("name").notNull(),
26
- createdAt: timestamp("created_at").defaultNow().notNull(),
27
- updatedAt: timestamp("updated_at")
28
- .defaultNow()
29
- .$onUpdate(() => new Date())
30
- .notNull(),
31
- });
@@ -1,49 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { z } from "zod";
19
-
20
- export const createProjectSchema = z.object({
21
- name: z.string().min(1, "Project name is required").max(100, "Name too long"),
22
- description: z.string().max(500, "Description too long").optional(),
23
- });
24
-
25
- export type CreateProjectInput = z.infer<typeof createProjectSchema>;
26
-
27
- export const widgetConfigSchema = z.object({
28
- theme: z.enum(["light", "dark", "auto"]),
29
- primaryColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/, "Invalid color format"),
30
- buttonText: z.string().min(1).max(50),
31
- buttonPosition: z.enum(["bottom-right", "bottom-left", "top-right", "top-left"]),
32
- fields: z.object({
33
- showType: z.boolean(),
34
- showPriority: z.boolean(),
35
- showDescription: z.boolean(),
36
- requireEmail: z.boolean(),
37
- }),
38
- types: z.array(z.enum(["bug", "feature", "issue", "other"])).min(1),
39
- customCSS: z.string().max(5000).optional(),
40
- });
41
-
42
- export const updateProjectSchema = z.object({
43
- name: z.string().min(1).max(100).optional(),
44
- description: z.string().max(500).optional(),
45
- widgetConfig: widgetConfigSchema.optional(),
46
- });
47
-
48
- export type WidgetConfig = z.infer<typeof widgetConfigSchema>;
49
- export type UpdateProjectInput = z.infer<typeof updateProjectSchema>;
package/next-env.d.ts DELETED
@@ -1,6 +0,0 @@
1
- /// <reference types="next" />
2
- /// <reference types="next/image-types/global" />
3
- import "./.next/types/routes.d.ts";
4
-
5
- // NOTE: This file should not be edited
6
- // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
@@ -1,44 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { defineConfig, devices } from "@playwright/test";
19
-
20
- export default defineConfig({
21
- workers: 1,
22
- testDir: "./tests/e2e",
23
- testMatch: "**/*.e2e.ts",
24
- timeout: 60_000,
25
- expect: { timeout: 10_000 },
26
- use: {
27
- baseURL: process.env.E2E_BASE_URL ?? "http://localhost:3000",
28
- trace: "retain-on-failure",
29
- screenshot: "only-on-failure",
30
- video: "retain-on-failure",
31
- },
32
- webServer: {
33
- command: "bun dev",
34
- url: "http://localhost:3000",
35
- reuseExistingServer: !process.env.CI,
36
- timeout: 120_000,
37
- },
38
- projects: [
39
- {
40
- name: "chromium",
41
- use: { ...devices["Desktop Chrome"] },
42
- },
43
- ],
44
- });
package/proxy.test.ts DELETED
@@ -1,131 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { afterAll, describe, it, expect, mock } from "bun:test";
19
- import { NextRequest } from "next/server";
20
- import { PERMISSIONS } from "@/lib/auth/permissions";
21
-
22
- const previousDatabaseUrl = process.env.DATABASE_URL;
23
- process.env.DATABASE_URL ??= "postgres://test";
24
-
25
- mock.module("@/lib/auth/session", () => ({
26
- getServerSession: async (req: NextRequest) => {
27
- const isAuthed = req.headers.get("x-test-auth") === "1";
28
- if (!isAuthed) return null;
29
- const role = req.headers.get("x-test-role");
30
- return role ? { user: { id: "u_test", role } } : { user: { id: "u_test" } };
31
- },
32
- }));
33
-
34
- const { proxy } = await import("./proxy");
35
- const { requirePermission } = await import("@/lib/middleware/rbac");
36
-
37
- afterAll(() => {
38
- if (previousDatabaseUrl === undefined) {
39
- delete process.env.DATABASE_URL;
40
- } else {
41
- process.env.DATABASE_URL = previousDatabaseUrl;
42
- }
43
- });
44
-
45
- describe("proxy", () => {
46
- it("adds x-request-id to response", async () => {
47
- const req = new NextRequest("http://localhost/api/health");
48
- const res = await proxy(req);
49
- expect(res.headers.get("x-request-id")).toBeTruthy();
50
- });
51
- });
52
-
53
- describe("proxy auth", () => {
54
- it("redirects unauthenticated users from protected routes", async () => {
55
- const req = new NextRequest("http://localhost/dashboard");
56
- const res = await proxy(req);
57
- expect(res.headers.get("location")).toBe("http://localhost/login");
58
- });
59
-
60
- it("allows unauthenticated users on public routes", async () => {
61
- const req = new NextRequest("http://localhost/login");
62
- const res = await proxy(req);
63
- expect(res.headers.get("location")).toBeNull();
64
- });
65
-
66
- it("allows authenticated users on protected routes", async () => {
67
- const req = new NextRequest("http://localhost/dashboard", {
68
- headers: { "x-test-auth": "1" },
69
- });
70
- const res = await proxy(req);
71
- expect(res.headers.get("location")).toBeNull();
72
- });
73
- });
74
-
75
- describe("proxy locale cookie", () => {
76
- it("sets NEXT_LOCALE from Accept-Language when missing", async () => {
77
- const req = new NextRequest("http://localhost/dashboard", {
78
- headers: {
79
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
80
- },
81
- });
82
- const res = await proxy(req);
83
- expect(res.headers.get("set-cookie")).toContain("NEXT_LOCALE=zh-CN");
84
- });
85
-
86
- it("does not override existing NEXT_LOCALE cookie", async () => {
87
- const req = new NextRequest("http://localhost/login", {
88
- headers: {
89
- cookie: "NEXT_LOCALE=jp",
90
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
91
- },
92
- });
93
- const res = await proxy(req);
94
- expect(res.headers.get("set-cookie")).toBeNull();
95
- });
96
- });
97
-
98
- describe("rbac requirePermission", () => {
99
- it("returns 401 when session is missing", async () => {
100
- const req = new NextRequest("http://localhost/api/secure");
101
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
102
- expect(res.status).toBe(401);
103
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
104
- });
105
-
106
- it("returns 401 when role is missing", async () => {
107
- const req = new NextRequest("http://localhost/api/secure", {
108
- headers: { "x-test-auth": "1" },
109
- });
110
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
111
- expect(res.status).toBe(401);
112
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
113
- });
114
-
115
- it("returns 403 when role lacks permission", async () => {
116
- const req = new NextRequest("http://localhost/api/secure", {
117
- headers: { "x-test-auth": "1", "x-test-role": "customer" },
118
- });
119
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
120
- expect(res.status).toBe(403);
121
- await expect(res.json()).resolves.toEqual({ error: "Forbidden" });
122
- });
123
-
124
- it("returns NextResponse.next when permission is allowed", async () => {
125
- const req = new NextRequest("http://localhost/api/secure", {
126
- headers: { "x-test-auth": "1", "x-test-role": "admin" },
127
- });
128
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
129
- expect(res.status).toBe(200);
130
- });
131
- });
package/proxy.ts DELETED
@@ -1,190 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { NextRequest, NextResponse } from "next/server";
19
- import {
20
- DEFAULT_LOCALE,
21
- LOCALE_COOKIE_NAME,
22
- getPreferredLocaleFromHeader,
23
- isSupportedLocale,
24
- } from "@/i18n/config";
25
-
26
- // Default session cookie name used by better-auth
27
- const SESSION_COOKIE_NAME = "better-auth.session_token";
28
-
29
- const publicRoutes = ["/login", "/register", "/invite", "/invite/", "/api/auth", "/widget", "/portal"];
30
- const protectedRoutes = ["/dashboard", "/feedback", "/settings"];
31
- const LOCALE_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
32
-
33
- // Primary app hosts (custom domains will not match these)
34
- const APP_HOSTS = new Set([
35
- "localhost",
36
- "localhost:3000",
37
- "127.0.0.1:3000",
38
- // Add production domains when deployed
39
- ]);
40
-
41
- // Simple in-memory cache for domain lookups
42
- const domainCache = new Map<string, { orgSlug: string; projectSlug: string } | null>();
43
- const CACHE_TTL = 60 * 1000; // 1 minute
44
- const cacheTimestamps = new Map<string, number>();
45
-
46
- function generateRequestId(): string {
47
- return crypto.randomUUID();
48
- }
49
-
50
- function isRouteMatch(pathname: string, routes: string[]) {
51
- return routes.some((route) => pathname === route || pathname.startsWith(route));
52
- }
53
-
54
- function shouldSetLocaleCookie(req: NextRequest, pathname: string) {
55
- if (req.method !== "GET") return false;
56
- if (pathname.startsWith("/api/") || pathname.startsWith("/_next/")) return false;
57
- if (pathname.includes(".")) return false;
58
- const existingLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
59
- return !existingLocale;
60
- }
61
-
62
- function resolveLocaleFromRequest(req: NextRequest): string {
63
- const cookieLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
64
- if (cookieLocale && isSupportedLocale(cookieLocale)) return cookieLocale;
65
- return getPreferredLocaleFromHeader(req.headers.get("accept-language")) || DEFAULT_LOCALE;
66
- }
67
-
68
- function maybeSetLocaleCookie(req: NextRequest, response: NextResponse, pathname: string) {
69
- if (!shouldSetLocaleCookie(req, pathname)) return;
70
- const locale = resolveLocaleFromRequest(req);
71
- response.cookies.set(LOCALE_COOKIE_NAME, locale, {
72
- path: "/",
73
- sameSite: "lax",
74
- secure: req.nextUrl.protocol === "https:",
75
- maxAge: LOCALE_COOKIE_MAX_AGE_SECONDS,
76
- });
77
- }
78
-
79
- // Helper to determine if request is authenticated for tests
80
- function isAuthenticated(req: NextRequest): boolean {
81
- // Real auth uses session cookie
82
- const sessionCookie = req.cookies.get(SESSION_COOKIE_NAME);
83
- if (sessionCookie?.value) return true;
84
- // Test auth can be simulated via custom header
85
- const testAuth = req.headers.get('x-test-auth');
86
- return testAuth === '1';
87
- }
88
-
89
- async function lookupCustomDomain(hostname: string, requestUrl: string): Promise<{ orgSlug: string; projectSlug: string } | null> {
90
- const now = Date.now();
91
- const cachedResult = domainCache.get(hostname);
92
- const cacheTime = cacheTimestamps.get(hostname);
93
-
94
- if (cachedResult !== undefined && cacheTime && now - cacheTime < CACHE_TTL) {
95
- return cachedResult;
96
- }
97
-
98
- try {
99
- const lookupUrl = new URL("/api/internal/domain-lookup", requestUrl);
100
- lookupUrl.searchParams.set("domain", hostname);
101
-
102
- const response = await fetch(lookupUrl, {
103
- headers: {
104
- "x-middleware-secret": process.env.MIDDLEWARE_SECRET || "",
105
- },
106
- });
107
-
108
- if (response.ok) {
109
- const data = await response.json();
110
- if (data.orgSlug && data.projectSlug) {
111
- const result = { orgSlug: data.orgSlug, projectSlug: data.projectSlug };
112
- domainCache.set(hostname, result);
113
- cacheTimestamps.set(hostname, now);
114
- return result;
115
- }
116
- }
117
-
118
- domainCache.set(hostname, null);
119
- cacheTimestamps.set(hostname, now);
120
- } catch (error) {
121
- console.error("Domain lookup failed:", error);
122
- }
123
-
124
- return null;
125
- }
126
-
127
- export async function proxy(req: NextRequest) {
128
- const startTime = Date.now();
129
- const reqId = req.headers.get("x-request-id") || generateRequestId();
130
-
131
- const requestHeaders = new Headers(req.headers);
132
- requestHeaders.set("x-request-id", reqId);
133
-
134
- // Log request (Edge-compatible)
135
- console.log(`[${reqId}] ${req.method} ${req.nextUrl.pathname}`);
136
-
137
- const pathname = req.nextUrl.pathname;
138
- const hostname = req.headers.get("host") || "";
139
- const hostnameWithoutPort = hostname.split(":")[0];
140
-
141
- // Custom domain routing - check if this is a custom domain request
142
- if (!APP_HOSTS.has(hostname) && !APP_HOSTS.has(hostnameWithoutPort)) {
143
- // Skip API routes and static assets
144
- if (!pathname.startsWith("/api/") && !pathname.startsWith("/_next/") && !pathname.includes(".")) {
145
- const domainInfo = await lookupCustomDomain(hostname, req.url);
146
- if (domainInfo) {
147
- const url = req.nextUrl.clone();
148
- url.pathname = `/portal/${domainInfo.orgSlug}/${domainInfo.projectSlug}${pathname === "/" ? "" : pathname}`;
149
-
150
- const response = NextResponse.rewrite(url, {
151
- request: { headers: requestHeaders },
152
- });
153
- maybeSetLocaleCookie(req, response, pathname);
154
- response.headers.set("x-request-id", reqId);
155
- const duration = Date.now() - startTime;
156
- console.log(`[${reqId}] ${response.status} ${duration}ms (rewrite)`);
157
- return response;
158
- }
159
- }
160
- }
161
-
162
- const isPublic = isRouteMatch(pathname, publicRoutes);
163
- const isProtected = isRouteMatch(pathname, protectedRoutes);
164
-
165
- let response = NextResponse.next({
166
- request: {
167
- headers: requestHeaders,
168
- },
169
- });
170
-
171
- if (isProtected && !isPublic) {
172
- // Optimistic check: only verify session cookie presence
173
- // Full session validation happens in page/layout components
174
- if (!isAuthenticated(req)) {
175
- response = NextResponse.redirect(new URL("/login", req.url));
176
- }
177
- }
178
-
179
- maybeSetLocaleCookie(req, response, pathname);
180
- response.headers.set("x-request-id", reqId);
181
-
182
- const duration = Date.now() - startTime;
183
- console.log(`[${reqId}] ${response.status} ${duration}ms`);
184
-
185
- return response;
186
- }
187
-
188
- export const config = {
189
- matcher: ["/api/:path*", "/((?!_next/static|_next/image|favicon.ico).*)"],
190
- };
@@ -1,57 +0,0 @@
1
- #!/bin/bash
2
- # scripts/backup-db.sh
3
-
4
- set -e
5
-
6
- # Configuration
7
- BACKUP_DIR="${BACKUP_DIR:-./backups}"
8
- RETENTION_DAYS=${RETENTION_DAYS:-30}
9
- TIMESTAMP=$(date +%Y%m%d-%H%M%S)
10
- BACKUP_FILE="$BACKUP_DIR/echo-$TIMESTAMP.sql"
11
- DATABASE_URL="${DATABASE_URL:-postgresql://echo:changeme@localhost:5432/echo}"
12
-
13
- # Colors
14
- RED='\033[0;31m'
15
- GREEN='\033[0;32m'
16
- YELLOW='\033[1;33m'
17
- NC='\033[0m'
18
-
19
- log_info() {
20
- echo -e "${GREEN}[INFO]${NC} $1"
21
- }
22
-
23
- log_warn() {
24
- echo -e "${YELLOW}[WARN]${NC} $1"
25
- }
26
-
27
- log_error() {
28
- echo -e "${RED}[ERROR]${NC} $1"
29
- }
30
-
31
- mkdir -p "$BACKUP_DIR"
32
-
33
- log_info "Starting database backup..."
34
- log_info "Backup file: $BACKUP_FILE"
35
-
36
- if pg_dump "$DATABASE_URL" > "$BACKUP_FILE"; then
37
- log_info "Backup completed successfully"
38
-
39
- gzip "$BACKUP_FILE"
40
- BACKUP_FILE="$BACKUP_FILE.gz"
41
- log_info "Backup compressed: $BACKUP_FILE"
42
-
43
- FILE_SIZE=$(du -h "$BACKUP_FILE" | cut -f1)
44
- log_info "Backup size: $FILE_SIZE"
45
-
46
- log_info "Cleaning up old backups (older than $RETENTION_DAYS days)..."
47
- DELETED=$(find "$BACKUP_DIR" -name "echo-*.sql.gz" -mtime +$RETENTION_DAYS -delete -print | wc -l)
48
- log_info "Deleted $DELETED old backup(s)"
49
-
50
- log_info "Current backups:"
51
- ls -lh "$BACKUP_DIR"/echo-*.sql.gz 2>/dev/null | awk '{print " " $9 " (" $5 ")"}' || echo " No backups found"
52
-
53
- log_info "Backup process completed!"
54
- else
55
- log_error "Backup failed!"
56
- exit 1
57
- fi
@@ -1,24 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { backupDatabase, getBackupConfig } from "@/lib/services/backup";
19
-
20
- const config = getBackupConfig();
21
-
22
- backupDatabase(config)
23
- .then(() => process.exit(0))
24
- .catch(() => process.exit(1));