@nexttylabs/echo 0.3.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/CHANGELOG.md +25 -0
  2. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  3. package/app/api/admin/backup/route.ts +22 -4
  4. package/app/api/auth/register/handler.ts +1 -2
  5. package/lib/auth/config.ts +0 -7
  6. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  7. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  8. package/lib/db/migrations/meta/_journal.json +2 -135
  9. package/lib/db/schema/auth.ts +0 -1
  10. package/lib/db/schema/index.ts +0 -1
  11. package/lib/portal/public-context.tsx +5 -0
  12. package/package.json +20 -1
  13. package/.changeset/README.md +0 -21
  14. package/.changeset/config.json +0 -11
  15. package/.changeset/cozy-ghosts-care.md +0 -5
  16. package/.changeset/sharp-lines-stand.md +0 -5
  17. package/.changeset/sour-doodles-eat.md +0 -5
  18. package/.changeset/tender-moose-shop.md +0 -5
  19. package/.github/pull_request_template.md +0 -13
  20. package/.github/workflows/ci.yml +0 -41
  21. package/.github/workflows/publish.yml +0 -44
  22. package/.github/workflows/release.yml +0 -73
  23. package/AGENTS.md +0 -92
  24. package/Dockerfile +0 -57
  25. package/Makefile +0 -77
  26. package/app/api/internal/domain-lookup/route.ts +0 -67
  27. package/bun.lock +0 -2503
  28. package/components/portal/project-switcher.tsx +0 -20
  29. package/docker-compose.dev.yml +0 -26
  30. package/docker-compose.yml +0 -98
  31. package/docs/architecture.md +0 -259
  32. package/docs/component-inventory.md +0 -261
  33. package/docs/database-migrations.md +0 -76
  34. package/docs/development-guide.md +0 -209
  35. package/docs/e2e-user-flows.csv +0 -31
  36. package/docs/er-diagram-feedback.mmd +0 -138
  37. package/docs/er-diagram.mmd +0 -281
  38. package/docs/i18n-check-report.md +0 -296
  39. package/docs/index.md +0 -214
  40. package/docs/logic-chain.md +0 -94
  41. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  42. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  43. package/docs/plans/2026-01-02-user-login.md +0 -437
  44. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  45. package/docs/plans/2026-01-02-user-registration.md +0 -628
  46. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  47. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  48. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  49. package/docs/plans/2026-01-05-member-removal.md +0 -186
  50. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  51. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  52. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  53. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  54. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  55. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  56. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  57. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  58. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  59. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  60. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  61. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  62. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  63. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  64. package/docs/plans/2026-01-09-settings-center.md +0 -948
  65. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  66. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  67. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  68. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  69. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  70. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  71. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  72. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  73. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  74. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  75. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  76. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  77. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  78. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  79. package/docs/product_changes.md +0 -37
  80. package/docs/project-overview.md +0 -159
  81. package/docs/project-scan-report.json +0 -104
  82. package/docs/route-role-visibility.md +0 -51
  83. package/docs/source-tree-analysis.md +0 -150
  84. package/docs/testing/delete-project-manual-tests.md +0 -18
  85. package/docs/user-story-tracking.md +0 -191
  86. package/eslint.config.mjs +0 -19
  87. package/lib/db/migrations/.gitkeep +0 -0
  88. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  89. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  90. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  91. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  92. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  93. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  94. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  95. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  96. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  97. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  98. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  99. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  100. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  101. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  102. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  103. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  104. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  105. package/lib/db/migrations/0016_github_integration.sql +0 -30
  106. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  107. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  108. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  109. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  110. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  111. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  112. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  113. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  114. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  115. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  116. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  117. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  118. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  119. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  120. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  121. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  122. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  123. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  124. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  125. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  126. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  127. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  128. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  129. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  130. package/lib/db/schema/projects.ts +0 -145
  131. package/lib/db/schema/user-profiles.ts +0 -31
  132. package/lib/validations/projects.ts +0 -49
  133. package/next-env.d.ts +0 -6
  134. package/playwright.config.ts +0 -44
  135. package/proxy.test.ts +0 -131
  136. package/proxy.ts +0 -190
  137. package/scripts/backup-db.sh +0 -57
  138. package/scripts/backup-db.ts +0 -24
  139. package/scripts/generate-openapi.ts +0 -22
  140. package/scripts/migration-helper.ts +0 -39
  141. package/scripts/pre-deploy.ts +0 -75
  142. package/scripts/restore-db.sh +0 -60
  143. package/scripts/rollback.ts +0 -72
  144. package/scripts/seed-tags.ts +0 -48
  145. package/tests/api/feedback-bulk.test.ts +0 -47
  146. package/tests/api/feedback-by-id.test.ts +0 -67
  147. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  148. package/tests/api/feedback-create.test.ts +0 -71
  149. package/tests/api/feedback-delete.test.ts +0 -160
  150. package/tests/api/feedback-filter.test.ts +0 -250
  151. package/tests/api/feedback-list.test.ts +0 -234
  152. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  153. package/tests/api/feedback-similar.test.ts +0 -46
  154. package/tests/api/feedback-sort.test.ts +0 -261
  155. package/tests/api/feedback-status-enum.test.ts +0 -49
  156. package/tests/api/feedback-status-filter.test.ts +0 -117
  157. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  158. package/tests/api/feedback.test.ts +0 -175
  159. package/tests/api/identify-jwt.test.ts +0 -25
  160. package/tests/api/invitation-accept.test.ts +0 -213
  161. package/tests/api/organization-invitations.test.ts +0 -186
  162. package/tests/api/organization-members-list.test.ts +0 -79
  163. package/tests/api/organization-members.test.ts +0 -340
  164. package/tests/api/organizations.test.ts +0 -149
  165. package/tests/api/register.test.ts +0 -112
  166. package/tests/api/upload.test.ts +0 -103
  167. package/tests/api/vote.test.ts +0 -82
  168. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  169. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  170. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  171. package/tests/app/health-route-helpers.test.ts +0 -27
  172. package/tests/app/login-page.test.ts +0 -26
  173. package/tests/app/portal-page.test.ts +0 -29
  174. package/tests/app/project-portal-overview.test.tsx +0 -25
  175. package/tests/app/widget-page-import.test.ts +0 -25
  176. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  177. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  178. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  179. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  180. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  181. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  182. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  183. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  184. package/tests/components/feedback-list-controls.test.tsx +0 -204
  185. package/tests/components/feedback-list-item.test.tsx +0 -67
  186. package/tests/components/landing/hero.test.tsx +0 -46
  187. package/tests/components/layout/language-switcher.test.tsx +0 -25
  188. package/tests/components/layout/sidebar.test.tsx +0 -157
  189. package/tests/components/login-form.test.ts +0 -25
  190. package/tests/components/organization-form.test.ts +0 -32
  191. package/tests/components/organization-switcher.test.ts +0 -25
  192. package/tests/components/pagination.test.tsx +0 -43
  193. package/tests/components/portal-overview.test.tsx +0 -25
  194. package/tests/components/profile-form.test.tsx +0 -139
  195. package/tests/components/role-selector.test.ts +0 -31
  196. package/tests/components/status-chart.test.tsx +0 -90
  197. package/tests/e2e/auth.e2e.ts +0 -323
  198. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  199. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  200. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  201. package/tests/e2e/feedback-management.e2e.ts +0 -565
  202. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  203. package/tests/e2e/feedback-view.e2e.ts +0 -297
  204. package/tests/e2e/fixtures/test-data.ts +0 -235
  205. package/tests/e2e/health-check.e2e.ts +0 -230
  206. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  207. package/tests/e2e/helpers/test-utils.ts +0 -298
  208. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  209. package/tests/e2e/organization.e2e.ts +0 -292
  210. package/tests/e2e/permissions.e2e.ts +0 -424
  211. package/tests/e2e/project-widget.e2e.ts +0 -63
  212. package/tests/feedback/filters.test.ts +0 -29
  213. package/tests/hooks/use-permissions.test.ts +0 -52
  214. package/tests/lib/ai/classifier.test.ts +0 -104
  215. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  216. package/tests/lib/attachments-schema.test.ts +0 -30
  217. package/tests/lib/auth/session.test.ts +0 -49
  218. package/tests/lib/auth-client.test.ts +0 -37
  219. package/tests/lib/auth-config.test.ts +0 -26
  220. package/tests/lib/feedback-prefill.test.ts +0 -52
  221. package/tests/lib/feedback-processor.test.ts +0 -41
  222. package/tests/lib/feedback-schema.test.ts +0 -33
  223. package/tests/lib/file-validator.test.ts +0 -48
  224. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  225. package/tests/lib/invitations.test.ts +0 -35
  226. package/tests/lib/login-schema.test.ts +0 -36
  227. package/tests/lib/org-context.test.ts +0 -95
  228. package/tests/lib/organization-access.test.ts +0 -44
  229. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  230. package/tests/lib/permissions.test.ts +0 -88
  231. package/tests/lib/portal-analytics.test.ts +0 -25
  232. package/tests/lib/portal-contributors.test.ts +0 -25
  233. package/tests/lib/portal-copy.test.ts +0 -27
  234. package/tests/lib/portal-i18n.test.ts +0 -30
  235. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  236. package/tests/lib/portal-modules.test.ts +0 -25
  237. package/tests/lib/portal-seo.test.ts +0 -25
  238. package/tests/lib/portal-sharing.test.ts +0 -25
  239. package/tests/lib/portal-sorting.test.ts +0 -25
  240. package/tests/lib/portal-theme.test.ts +0 -25
  241. package/tests/lib/rate-limit.test.ts +0 -142
  242. package/tests/lib/resolve-locale.test.ts +0 -34
  243. package/tests/lib/services/backup.test.ts +0 -145
  244. package/tests/lib/user-organizations.test.ts +0 -42
  245. package/tests/lib/user-role-schema.test.ts +0 -33
  246. package/tests/lib/user-schema.test.ts +0 -25
  247. package/tests/setup.ts +0 -74
  248. package/vercel.json +0 -4
@@ -1,175 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildCreateFeedbackHandler } from "@/app/api/feedback/handler";
20
- import { feedback } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildCreateFeedbackHandler>[0];
23
-
24
- type InsertReturn = {
25
- values: (values: Record<string, unknown>) => {
26
- returning: () => Promise<Array<Record<string, unknown>>>;
27
- };
28
- };
29
-
30
- const makeDeps = () => {
31
- let inserted: Record<string, unknown> | null = null;
32
-
33
- const insert = (table?: unknown) => ({
34
- values: (values: Record<string, unknown>) => {
35
- if (table === feedback) {
36
- inserted = values;
37
- }
38
- return {
39
- returning: async () => [
40
- {
41
- feedbackId: 1,
42
- ...values,
43
- status: values.status ?? "new",
44
- createdAt: new Date(),
45
- updatedAt: new Date(),
46
- },
47
- ],
48
- };
49
- },
50
- });
51
-
52
- const db: FakeDeps["db"] = {
53
- insert: insert as unknown as () => InsertReturn,
54
- };
55
-
56
- return {
57
- db,
58
- getInserted: () => inserted,
59
- } satisfies FakeDeps & { getInserted: () => Record<string, unknown> | null };
60
- };
61
-
62
- const makeDepsWithInsertError = () => {
63
- const insert = () => ({
64
- values: () => ({
65
- returning: async () => {
66
- throw new Error("DB failure");
67
- },
68
- }),
69
- });
70
-
71
- const db: FakeDeps["db"] = {
72
- insert: insert as unknown as () => InsertReturn,
73
- };
74
-
75
- return { db } satisfies FakeDeps;
76
- };
77
-
78
- describe("POST /api/feedback", () => {
79
- it("creates feedback when payload is valid", async () => {
80
- const deps = makeDeps();
81
- const handler = buildCreateFeedbackHandler(deps);
82
-
83
- const res = await handler(
84
- new Request("http://localhost/api/feedback", {
85
- method: "POST",
86
- headers: {
87
- "Content-Type": "application/json",
88
- "x-organization-id": "org_1",
89
- },
90
- body: JSON.stringify({
91
- title: "Great idea",
92
- description: "Please add dark mode",
93
- type: "feature",
94
- priority: "high",
95
- }),
96
- }),
97
- );
98
-
99
- const json = await res.json();
100
- expect(res.status).toBe(201);
101
- expect(json.data.feedbackId).toBe(1);
102
- expect(deps.getInserted()?.organizationId).toBe("org_1");
103
- });
104
-
105
- it("returns 400 when organization id is missing", async () => {
106
- const handler = buildCreateFeedbackHandler(makeDeps());
107
-
108
- const res = await handler(
109
- new Request("http://localhost/api/feedback", {
110
- method: "POST",
111
- headers: {
112
- "Content-Type": "application/json",
113
- },
114
- body: JSON.stringify({
115
- title: "Great idea",
116
- description: "Please add dark mode",
117
- type: "feature",
118
- priority: "high",
119
- }),
120
- }),
121
- );
122
-
123
- const json = await res.json();
124
- expect(res.status).toBe(400);
125
- expect(json.code).toBe("VALIDATION_ERROR");
126
- });
127
-
128
- it("returns 400 when payload is invalid", async () => {
129
- const handler = buildCreateFeedbackHandler(makeDeps());
130
-
131
- const res = await handler(
132
- new Request("http://localhost/api/feedback", {
133
- method: "POST",
134
- headers: {
135
- "Content-Type": "application/json",
136
- "x-organization-id": "org_1",
137
- },
138
- body: JSON.stringify({
139
- title: "",
140
- description: "x",
141
- type: "bug",
142
- priority: "high",
143
- }),
144
- }),
145
- );
146
-
147
- const json = await res.json();
148
- expect(res.status).toBe(400);
149
- expect(json.code).toBe("VALIDATION_ERROR");
150
- });
151
-
152
- it("returns 500 when database insert fails", async () => {
153
- const handler = buildCreateFeedbackHandler(makeDepsWithInsertError());
154
-
155
- const res = await handler(
156
- new Request("http://localhost/api/feedback", {
157
- method: "POST",
158
- headers: {
159
- "Content-Type": "application/json",
160
- "x-organization-id": "org_1",
161
- },
162
- body: JSON.stringify({
163
- title: "Great idea",
164
- description: "Please add dark mode",
165
- type: "feature",
166
- priority: "high",
167
- }),
168
- }),
169
- );
170
-
171
- const json = await res.json();
172
- expect(res.status).toBe(500);
173
- expect(json.code).toBe("INTERNAL_ERROR");
174
- });
175
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { parseJwtIdentity } from "@/lib/auth/jwt-identity";
20
-
21
- describe("parseJwtIdentity", () => {
22
- it("returns null when token is empty", () => {
23
- expect(parseJwtIdentity("")).toBe(null);
24
- });
25
- });
@@ -1,213 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildAcceptInvitationHandler } from "@/app/api/invitations/accept/handler";
20
- import { invitations, organizationMembers } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildAcceptInvitationHandler>[0];
23
-
24
- type SelectReturn<T> = {
25
- from: () => {
26
- where: () => {
27
- limit: (count: number) => Promise<T[]>;
28
- };
29
- };
30
- };
31
-
32
- type InsertReturn = {
33
- values: (values: Record<string, unknown>) => Promise<unknown>;
34
- };
35
-
36
- type UpdateReturn = {
37
- set: (values: Record<string, unknown>) => {
38
- where: () => Promise<unknown>;
39
- };
40
- };
41
-
42
- const now = new Date("2026-01-01T00:00:00.000Z");
43
-
44
- const makeDeps = () => {
45
- const auth: FakeDeps["auth"] = {
46
- api: {
47
- getSession: async () => ({ user: { id: "user_1" } }),
48
- },
49
- };
50
-
51
- let invitationRecord: {
52
- id: string;
53
- organizationId: string;
54
- email: string;
55
- role: string;
56
- token: string;
57
- expiresAt: Date;
58
- acceptedAt: Date | null;
59
- } | null = {
60
- id: "inv_1",
61
- organizationId: "org_1",
62
- email: "test@example.com",
63
- role: "member",
64
- token: "token_123",
65
- expiresAt: new Date("2026-01-10T00:00:00.000Z"),
66
- acceptedAt: null,
67
- };
68
-
69
- const select = () => ({
70
- from: () => ({
71
- where: () => ({
72
- limit: async () => (invitationRecord ? [invitationRecord] : []),
73
- }),
74
- }),
75
- });
76
-
77
- let insertedMember: Record<string, unknown> | null = null;
78
- let updatedInvitation: Record<string, unknown> | null = null;
79
-
80
- const insert = (table?: unknown) => ({
81
- values: async (values: Record<string, unknown>) => {
82
- if (table === organizationMembers) {
83
- insertedMember = values;
84
- }
85
- return {};
86
- },
87
- });
88
-
89
- const update = (table?: unknown) => ({
90
- set: (values: Record<string, unknown>) => {
91
- if (table === invitations) {
92
- updatedInvitation = values;
93
- }
94
- return {
95
- where: async () => ({}),
96
- };
97
- },
98
- });
99
-
100
- const db: FakeDeps["db"] = {
101
- select: select as unknown as () => SelectReturn<typeof invitationRecord>,
102
- transaction: async (fn) =>
103
- fn({
104
- insert: insert as unknown as () => InsertReturn,
105
- update: update as unknown as () => UpdateReturn,
106
- }),
107
- };
108
-
109
- return {
110
- auth,
111
- db,
112
- setInvitation: (next: typeof invitationRecord) => {
113
- invitationRecord = next;
114
- },
115
- getInsertedMember: () => insertedMember,
116
- getUpdatedInvitation: () => updatedInvitation,
117
- } satisfies FakeDeps & {
118
- setInvitation: (next: typeof invitationRecord) => void;
119
- getInsertedMember: () => Record<string, unknown> | null;
120
- getUpdatedInvitation: () => Record<string, unknown> | null;
121
- };
122
- };
123
-
124
- describe("POST /api/invitations/accept", () => {
125
- it("rejects unauthenticated requests", async () => {
126
- const deps = makeDeps();
127
- deps.auth.api.getSession = async () => null;
128
- const handler = buildAcceptInvitationHandler(deps);
129
- const res = await handler(
130
- new Request("http://localhost/api/invitations/accept", {
131
- method: "POST",
132
- body: JSON.stringify({ token: "token_123" }),
133
- }),
134
- );
135
- expect(res.status).toBe(401);
136
- });
137
-
138
- it("returns 404 for invalid token", async () => {
139
- const deps = makeDeps();
140
- deps.setInvitation(null);
141
- const handler = buildAcceptInvitationHandler(deps);
142
- const res = await handler(
143
- new Request("http://localhost/api/invitations/accept", {
144
- method: "POST",
145
- body: JSON.stringify({ token: "missing" }),
146
- }),
147
- );
148
- expect(res.status).toBe(404);
149
- });
150
-
151
- it("returns 410 for expired token", async () => {
152
- const deps = makeDeps();
153
- deps.setInvitation({
154
- id: "inv_1",
155
- organizationId: "org_1",
156
- email: "test@example.com",
157
- role: "member",
158
- token: "token_123",
159
- expiresAt: new Date("2025-12-01T00:00:00.000Z"),
160
- acceptedAt: null,
161
- });
162
- const handler = buildAcceptInvitationHandler(deps, () => now);
163
- const res = await handler(
164
- new Request("http://localhost/api/invitations/accept", {
165
- method: "POST",
166
- body: JSON.stringify({ token: "token_123" }),
167
- }),
168
- );
169
- expect(res.status).toBe(410);
170
- const json = await res.json();
171
- expect(json.error).toBe("邀请已过期");
172
- });
173
-
174
- it("returns 409 for already accepted invitations", async () => {
175
- const deps = makeDeps();
176
- deps.setInvitation({
177
- id: "inv_1",
178
- organizationId: "org_1",
179
- email: "test@example.com",
180
- role: "member",
181
- token: "token_123",
182
- expiresAt: new Date("2026-01-10T00:00:00.000Z"),
183
- acceptedAt: new Date("2026-01-02T00:00:00.000Z"),
184
- });
185
- const handler = buildAcceptInvitationHandler(deps, () => now);
186
- const res = await handler(
187
- new Request("http://localhost/api/invitations/accept", {
188
- method: "POST",
189
- body: JSON.stringify({ token: "token_123" }),
190
- }),
191
- );
192
- expect(res.status).toBe(409);
193
- });
194
-
195
- it("adds member and marks accepted", async () => {
196
- const deps = makeDeps();
197
- const handler = buildAcceptInvitationHandler(deps, () => now);
198
- const res = await handler(
199
- new Request("http://localhost/api/invitations/accept", {
200
- method: "POST",
201
- body: JSON.stringify({ token: "token_123" }),
202
- }),
203
- );
204
- expect(res.status).toBe(200);
205
- const member = deps.getInsertedMember();
206
- expect(member?.organizationId).toBe("org_1");
207
- expect(member?.userId).toBe("user_1");
208
- expect(member?.role).toBe("member");
209
-
210
- const updated = deps.getUpdatedInvitation();
211
- expect(updated?.acceptedAt).toEqual(now);
212
- });
213
- });
@@ -1,186 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildCreateInvitationHandler } from "@/app/api/organizations/[orgId]/invitations/handler";
20
- import { invitations } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildCreateInvitationHandler>[0];
23
-
24
- type SelectReturn = {
25
- from: () => {
26
- where: () => {
27
- limit: (count: number) => Promise<Array<{ role: string }>>;
28
- };
29
- };
30
- };
31
-
32
- type InsertReturn = {
33
- values: (values: Record<string, unknown>) => {
34
- returning: () => Promise<Array<{ id: string }>>;
35
- };
36
- };
37
-
38
- const makeDeps = () => {
39
- const auth: FakeDeps["auth"] = {
40
- api: {
41
- getSession: async () => ({ user: { id: "user_1", role: "admin" } }),
42
- },
43
- };
44
-
45
- const select = () => ({
46
- from: () => ({
47
- where: () => ({
48
- limit: async () => [{ role: "admin" }],
49
- }),
50
- }),
51
- });
52
-
53
- let invitationValues: Record<string, unknown> | null = null;
54
- let sentEmail: { to: string; subject: string; html: string } | null = null;
55
-
56
- const insert = (table?: unknown) => ({
57
- values: (values: Record<string, unknown>) => {
58
- if (table === invitations) {
59
- invitationValues = values;
60
- }
61
- return {
62
- returning: async () => [{ id: "inv_1" }],
63
- };
64
- },
65
- });
66
-
67
- const db: FakeDeps["db"] = {
68
- select: select as unknown as () => SelectReturn,
69
- insert: insert as unknown as () => InsertReturn,
70
- };
71
-
72
- const email: FakeDeps["email"] = {
73
- sendEmail: async (payload) => {
74
- sentEmail = payload;
75
- },
76
- };
77
-
78
- return {
79
- auth,
80
- db,
81
- email,
82
- getInvitationValues: () => invitationValues,
83
- getSentEmail: () => sentEmail,
84
- } satisfies FakeDeps & {
85
- getInvitationValues: () => Record<string, unknown> | null;
86
- getSentEmail: () => { to: string; subject: string; html: string } | null;
87
- };
88
- };
89
-
90
- const makeDepsWithRole = (role: string | null) => {
91
- const deps = makeDeps();
92
- const select = () => ({
93
- from: () => ({
94
- where: () => ({
95
- limit: async () => (role ? [{ role }] : []),
96
- }),
97
- }),
98
- });
99
- deps.db.select = select as unknown as () => SelectReturn;
100
- return deps;
101
- };
102
-
103
- describe("POST /api/organizations/:orgId/invitations", () => {
104
- it("rejects unauthenticated requests", async () => {
105
- const deps = makeDeps();
106
- deps.auth.api.getSession = async () => null;
107
- const handler = buildCreateInvitationHandler(deps);
108
- const res = await handler(
109
- new Request("http://localhost/api/organizations/org_1/invitations", { method: "POST" }),
110
- { params: { orgId: "org_1" } },
111
- );
112
- expect(res.status).toBe(401);
113
- });
114
-
115
- it("rejects non-admin members", async () => {
116
- const deps = makeDepsWithRole("member");
117
- const handler = buildCreateInvitationHandler(deps);
118
- const res = await handler(
119
- new Request("http://localhost/api/organizations/org_1/invitations", {
120
- method: "POST",
121
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
122
- }),
123
- { params: { orgId: "org_1" } },
124
- );
125
- expect(res.status).toBe(403);
126
- });
127
-
128
- it("rejects non-members", async () => {
129
- const deps = makeDepsWithRole(null);
130
- const handler = buildCreateInvitationHandler(deps);
131
- const res = await handler(
132
- new Request("http://localhost/api/organizations/org_1/invitations", {
133
- method: "POST",
134
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
135
- }),
136
- { params: { orgId: "org_1" } },
137
- );
138
- expect(res.status).toBe(403);
139
- });
140
-
141
- it("creates invitation and sends email", async () => {
142
- const deps = makeDeps();
143
- const handler = buildCreateInvitationHandler(deps);
144
- const originalUrl = process.env.NEXT_PUBLIC_APP_URL;
145
- process.env.NEXT_PUBLIC_APP_URL = "http://app.test";
146
-
147
- try {
148
- const res = await handler(
149
- new Request("http://localhost/api/organizations/org_1/invitations", {
150
- method: "POST",
151
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
152
- }),
153
- { params: { orgId: "org_1" } },
154
- );
155
-
156
- expect(res.status).toBe(201);
157
- const invitationValues = deps.getInvitationValues();
158
- expect(invitationValues?.organizationId).toBe("org_1");
159
- expect(invitationValues?.email).toBe("test@example.com");
160
- expect(invitationValues?.role).toBe("member");
161
- expect(typeof invitationValues?.token).toBe("string");
162
- expect(invitationValues?.token).toBeDefined();
163
-
164
- const sentEmail = deps.getSentEmail();
165
- expect(sentEmail?.to).toBe("test@example.com");
166
- expect(sentEmail?.subject).toBe("加入组织的邀请");
167
- expect(sentEmail?.html).toContain("http://app.test/invite/");
168
- expect(sentEmail?.html).toContain(String(invitationValues?.token));
169
- } finally {
170
- process.env.NEXT_PUBLIC_APP_URL = originalUrl;
171
- }
172
- });
173
-
174
- it("returns 400 on invalid body", async () => {
175
- const deps = makeDeps();
176
- const handler = buildCreateInvitationHandler(deps);
177
- const res = await handler(
178
- new Request("http://localhost/api/organizations/org_1/invitations", {
179
- method: "POST",
180
- body: JSON.stringify({ email: "not-an-email", role: "" }),
181
- }),
182
- { params: { orgId: "org_1" } },
183
- );
184
- expect(res.status).toBe(400);
185
- });
186
- });
@@ -1,79 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { afterEach, describe, expect, it, mock } from "bun:test";
19
- import { NextRequest } from "next/server";
20
-
21
- afterEach(() => {
22
- mock.restore();
23
- });
24
-
25
- describe("GET /api/organizations/[orgId]/members", () => {
26
- it("returns members with displayName", async () => {
27
- const memberRow = {
28
- userId: "user_1",
29
- displayName: "Ada",
30
- email: "ada@example.com",
31
- avatarUrl: null,
32
- };
33
- const mockDb = {
34
- select: (fields?: unknown) => {
35
- if (fields) {
36
- return {
37
- from: () => ({
38
- innerJoin: () => ({
39
- where: async () => [memberRow],
40
- }),
41
- }),
42
- };
43
- }
44
-
45
- return {
46
- from: () => ({
47
- where: () => ({
48
- limit: async () => [{ role: "admin" }],
49
- }),
50
- }),
51
- };
52
- },
53
- };
54
-
55
- mock.module("@/lib/auth/config", () => ({
56
- auth: {
57
- api: {
58
- getSession: mock(() => Promise.resolve({ user: { id: "user_1" } })),
59
- },
60
- },
61
- }));
62
-
63
- mock.module("@/lib/db", () => ({ db: mockDb }));
64
- const { GET } = await import(
65
- "@/app/api/organizations/[orgId]/members/route"
66
- );
67
- const req = new NextRequest(
68
- "http://localhost:3000/api/organizations/org_1/members",
69
- );
70
- const res = await GET(req, {
71
- params: Promise.resolve({ orgId: "org_1" }),
72
- });
73
-
74
- expect(res.status).toBe(200);
75
- const json = await res.json();
76
- expect(json.data[0]).toHaveProperty("userId");
77
- expect(json.data[0]).toHaveProperty("displayName");
78
- });
79
- });