@nexttylabs/echo 0.3.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/CHANGELOG.md +25 -0
  2. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  3. package/app/api/admin/backup/route.ts +22 -4
  4. package/app/api/auth/register/handler.ts +1 -2
  5. package/lib/auth/config.ts +0 -7
  6. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  7. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  8. package/lib/db/migrations/meta/_journal.json +2 -135
  9. package/lib/db/schema/auth.ts +0 -1
  10. package/lib/db/schema/index.ts +0 -1
  11. package/lib/portal/public-context.tsx +5 -0
  12. package/package.json +20 -1
  13. package/.changeset/README.md +0 -21
  14. package/.changeset/config.json +0 -11
  15. package/.changeset/cozy-ghosts-care.md +0 -5
  16. package/.changeset/sharp-lines-stand.md +0 -5
  17. package/.changeset/sour-doodles-eat.md +0 -5
  18. package/.changeset/tender-moose-shop.md +0 -5
  19. package/.github/pull_request_template.md +0 -13
  20. package/.github/workflows/ci.yml +0 -41
  21. package/.github/workflows/publish.yml +0 -44
  22. package/.github/workflows/release.yml +0 -73
  23. package/AGENTS.md +0 -92
  24. package/Dockerfile +0 -57
  25. package/Makefile +0 -77
  26. package/app/api/internal/domain-lookup/route.ts +0 -67
  27. package/bun.lock +0 -2503
  28. package/components/portal/project-switcher.tsx +0 -20
  29. package/docker-compose.dev.yml +0 -26
  30. package/docker-compose.yml +0 -98
  31. package/docs/architecture.md +0 -259
  32. package/docs/component-inventory.md +0 -261
  33. package/docs/database-migrations.md +0 -76
  34. package/docs/development-guide.md +0 -209
  35. package/docs/e2e-user-flows.csv +0 -31
  36. package/docs/er-diagram-feedback.mmd +0 -138
  37. package/docs/er-diagram.mmd +0 -281
  38. package/docs/i18n-check-report.md +0 -296
  39. package/docs/index.md +0 -214
  40. package/docs/logic-chain.md +0 -94
  41. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  42. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  43. package/docs/plans/2026-01-02-user-login.md +0 -437
  44. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  45. package/docs/plans/2026-01-02-user-registration.md +0 -628
  46. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  47. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  48. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  49. package/docs/plans/2026-01-05-member-removal.md +0 -186
  50. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  51. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  52. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  53. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  54. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  55. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  56. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  57. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  58. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  59. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  60. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  61. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  62. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  63. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  64. package/docs/plans/2026-01-09-settings-center.md +0 -948
  65. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  66. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  67. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  68. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  69. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  70. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  71. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  72. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  73. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  74. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  75. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  76. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  77. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  78. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  79. package/docs/product_changes.md +0 -37
  80. package/docs/project-overview.md +0 -159
  81. package/docs/project-scan-report.json +0 -104
  82. package/docs/route-role-visibility.md +0 -51
  83. package/docs/source-tree-analysis.md +0 -150
  84. package/docs/testing/delete-project-manual-tests.md +0 -18
  85. package/docs/user-story-tracking.md +0 -191
  86. package/eslint.config.mjs +0 -19
  87. package/lib/db/migrations/.gitkeep +0 -0
  88. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  89. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  90. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  91. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  92. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  93. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  94. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  95. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  96. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  97. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  98. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  99. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  100. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  101. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  102. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  103. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  104. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  105. package/lib/db/migrations/0016_github_integration.sql +0 -30
  106. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  107. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  108. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  109. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  110. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  111. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  112. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  113. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  114. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  115. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  116. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  117. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  118. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  119. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  120. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  121. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  122. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  123. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  124. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  125. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  126. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  127. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  128. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  129. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  130. package/lib/db/schema/projects.ts +0 -145
  131. package/lib/db/schema/user-profiles.ts +0 -31
  132. package/lib/validations/projects.ts +0 -49
  133. package/next-env.d.ts +0 -6
  134. package/playwright.config.ts +0 -44
  135. package/proxy.test.ts +0 -131
  136. package/proxy.ts +0 -190
  137. package/scripts/backup-db.sh +0 -57
  138. package/scripts/backup-db.ts +0 -24
  139. package/scripts/generate-openapi.ts +0 -22
  140. package/scripts/migration-helper.ts +0 -39
  141. package/scripts/pre-deploy.ts +0 -75
  142. package/scripts/restore-db.sh +0 -60
  143. package/scripts/rollback.ts +0 -72
  144. package/scripts/seed-tags.ts +0 -48
  145. package/tests/api/feedback-bulk.test.ts +0 -47
  146. package/tests/api/feedback-by-id.test.ts +0 -67
  147. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  148. package/tests/api/feedback-create.test.ts +0 -71
  149. package/tests/api/feedback-delete.test.ts +0 -160
  150. package/tests/api/feedback-filter.test.ts +0 -250
  151. package/tests/api/feedback-list.test.ts +0 -234
  152. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  153. package/tests/api/feedback-similar.test.ts +0 -46
  154. package/tests/api/feedback-sort.test.ts +0 -261
  155. package/tests/api/feedback-status-enum.test.ts +0 -49
  156. package/tests/api/feedback-status-filter.test.ts +0 -117
  157. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  158. package/tests/api/feedback.test.ts +0 -175
  159. package/tests/api/identify-jwt.test.ts +0 -25
  160. package/tests/api/invitation-accept.test.ts +0 -213
  161. package/tests/api/organization-invitations.test.ts +0 -186
  162. package/tests/api/organization-members-list.test.ts +0 -79
  163. package/tests/api/organization-members.test.ts +0 -340
  164. package/tests/api/organizations.test.ts +0 -149
  165. package/tests/api/register.test.ts +0 -112
  166. package/tests/api/upload.test.ts +0 -103
  167. package/tests/api/vote.test.ts +0 -82
  168. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  169. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  170. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  171. package/tests/app/health-route-helpers.test.ts +0 -27
  172. package/tests/app/login-page.test.ts +0 -26
  173. package/tests/app/portal-page.test.ts +0 -29
  174. package/tests/app/project-portal-overview.test.tsx +0 -25
  175. package/tests/app/widget-page-import.test.ts +0 -25
  176. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  177. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  178. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  179. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  180. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  181. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  182. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  183. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  184. package/tests/components/feedback-list-controls.test.tsx +0 -204
  185. package/tests/components/feedback-list-item.test.tsx +0 -67
  186. package/tests/components/landing/hero.test.tsx +0 -46
  187. package/tests/components/layout/language-switcher.test.tsx +0 -25
  188. package/tests/components/layout/sidebar.test.tsx +0 -157
  189. package/tests/components/login-form.test.ts +0 -25
  190. package/tests/components/organization-form.test.ts +0 -32
  191. package/tests/components/organization-switcher.test.ts +0 -25
  192. package/tests/components/pagination.test.tsx +0 -43
  193. package/tests/components/portal-overview.test.tsx +0 -25
  194. package/tests/components/profile-form.test.tsx +0 -139
  195. package/tests/components/role-selector.test.ts +0 -31
  196. package/tests/components/status-chart.test.tsx +0 -90
  197. package/tests/e2e/auth.e2e.ts +0 -323
  198. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  199. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  200. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  201. package/tests/e2e/feedback-management.e2e.ts +0 -565
  202. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  203. package/tests/e2e/feedback-view.e2e.ts +0 -297
  204. package/tests/e2e/fixtures/test-data.ts +0 -235
  205. package/tests/e2e/health-check.e2e.ts +0 -230
  206. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  207. package/tests/e2e/helpers/test-utils.ts +0 -298
  208. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  209. package/tests/e2e/organization.e2e.ts +0 -292
  210. package/tests/e2e/permissions.e2e.ts +0 -424
  211. package/tests/e2e/project-widget.e2e.ts +0 -63
  212. package/tests/feedback/filters.test.ts +0 -29
  213. package/tests/hooks/use-permissions.test.ts +0 -52
  214. package/tests/lib/ai/classifier.test.ts +0 -104
  215. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  216. package/tests/lib/attachments-schema.test.ts +0 -30
  217. package/tests/lib/auth/session.test.ts +0 -49
  218. package/tests/lib/auth-client.test.ts +0 -37
  219. package/tests/lib/auth-config.test.ts +0 -26
  220. package/tests/lib/feedback-prefill.test.ts +0 -52
  221. package/tests/lib/feedback-processor.test.ts +0 -41
  222. package/tests/lib/feedback-schema.test.ts +0 -33
  223. package/tests/lib/file-validator.test.ts +0 -48
  224. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  225. package/tests/lib/invitations.test.ts +0 -35
  226. package/tests/lib/login-schema.test.ts +0 -36
  227. package/tests/lib/org-context.test.ts +0 -95
  228. package/tests/lib/organization-access.test.ts +0 -44
  229. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  230. package/tests/lib/permissions.test.ts +0 -88
  231. package/tests/lib/portal-analytics.test.ts +0 -25
  232. package/tests/lib/portal-contributors.test.ts +0 -25
  233. package/tests/lib/portal-copy.test.ts +0 -27
  234. package/tests/lib/portal-i18n.test.ts +0 -30
  235. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  236. package/tests/lib/portal-modules.test.ts +0 -25
  237. package/tests/lib/portal-seo.test.ts +0 -25
  238. package/tests/lib/portal-sharing.test.ts +0 -25
  239. package/tests/lib/portal-sorting.test.ts +0 -25
  240. package/tests/lib/portal-theme.test.ts +0 -25
  241. package/tests/lib/rate-limit.test.ts +0 -142
  242. package/tests/lib/resolve-locale.test.ts +0 -34
  243. package/tests/lib/services/backup.test.ts +0 -145
  244. package/tests/lib/user-organizations.test.ts +0 -42
  245. package/tests/lib/user-role-schema.test.ts +0 -33
  246. package/tests/lib/user-schema.test.ts +0 -25
  247. package/tests/setup.ts +0 -74
  248. package/vercel.json +0 -4
@@ -1,95 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getOrgContext } from "@/lib/auth/org-context";
20
-
21
- const makeRequest = (options: {
22
- query?: Record<string, string>;
23
- headerOrgId?: string;
24
- cookieOrgId?: string;
25
- }) => {
26
- const url = new URL("https://example.com");
27
- if (options.query) {
28
- for (const [key, value] of Object.entries(options.query)) {
29
- url.searchParams.set(key, value);
30
- }
31
- }
32
-
33
- return {
34
- nextUrl: url,
35
- headers: new Headers(
36
- options.headerOrgId ? { "x-organization-id": options.headerOrgId } : undefined,
37
- ),
38
- cookies: {
39
- get: (name: string) =>
40
- name === "orgId" && options.cookieOrgId
41
- ? { value: options.cookieOrgId }
42
- : undefined,
43
- },
44
- } as const;
45
- };
46
-
47
- const makeDb = (hasMember: boolean) => ({
48
- select: () => ({
49
- from: () => ({
50
- where: () => ({
51
- limit: async () => (hasMember ? [{ role: "admin" }] : []),
52
- }),
53
- }),
54
- }),
55
- });
56
-
57
- describe("getOrgContext", () => {
58
- it("prefers query over header and cookie", async () => {
59
- const req = makeRequest({
60
- query: { organizationId: "org_query" },
61
- headerOrgId: "org_header",
62
- cookieOrgId: "org_cookie",
63
- });
64
- const context = await getOrgContext({
65
- request: req,
66
- db: makeDb(true),
67
- userId: "user_1",
68
- });
69
- expect(context.organizationId).toBe("org_query");
70
- expect(context.source).toBe("query");
71
- });
72
-
73
- it("throws when membership missing", async () => {
74
- const req = makeRequest({ cookieOrgId: "org_cookie" });
75
- await expect(
76
- getOrgContext({
77
- request: req,
78
- db: makeDb(false),
79
- userId: "user_1",
80
- requireMembership: true,
81
- }),
82
- ).rejects.toThrow("Access denied");
83
- });
84
-
85
- it("accepts explicit organization id", async () => {
86
- const req = makeRequest({});
87
- const context = await getOrgContext({
88
- request: req,
89
- db: makeDb(true),
90
- organizationId: "org_explicit",
91
- });
92
- expect(context.organizationId).toBe("org_explicit");
93
- expect(context.source).toBe("explicit");
94
- });
95
- });
@@ -1,44 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { assertOrganizationAccess } from "@/lib/auth/organization";
20
-
21
- const makeDb = (member: { role: string } | null) => ({
22
- select: () => ({
23
- from: () => ({
24
- where: () => ({
25
- limit: async () => (member ? [member] : []),
26
- }),
27
- }),
28
- }),
29
- });
30
-
31
- describe("assertOrganizationAccess", () => {
32
- it("returns member when user belongs to organization", async () => {
33
- const db = makeDb({ role: "admin" });
34
- const member = await assertOrganizationAccess(db, "user_1", "org_1");
35
- expect(member.role).toBe("admin");
36
- });
37
-
38
- it("throws when user is not a member", async () => {
39
- const db = makeDb(null);
40
- await expect(
41
- assertOrganizationAccess(db, "user_1", "org_1"),
42
- ).rejects.toThrow("Access denied");
43
- });
44
- });
@@ -1,41 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { organizationMemberRoleSchema } from "@/lib/validations/organizations";
20
-
21
- describe("organizationMemberRoleSchema", () => {
22
- it("accepts known organization roles", () => {
23
- expect(organizationMemberRoleSchema.safeParse("admin").success).toBe(true);
24
- expect(
25
- organizationMemberRoleSchema.safeParse("product_manager").success,
26
- ).toBe(true);
27
- expect(organizationMemberRoleSchema.safeParse("developer").success).toBe(
28
- true,
29
- );
30
- expect(
31
- organizationMemberRoleSchema.safeParse("customer_support").success,
32
- ).toBe(true);
33
- });
34
-
35
- it("rejects non-organization roles", () => {
36
- expect(organizationMemberRoleSchema.safeParse("customer").success).toBe(
37
- false,
38
- );
39
- expect(organizationMemberRoleSchema.safeParse("member").success).toBe(false);
40
- });
41
- });
@@ -1,88 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import {
20
- PERMISSIONS,
21
- ROLE_PERMISSIONS,
22
- canSubmitOnBehalf,
23
- hasAllPermissions,
24
- hasPermission,
25
- } from "@/lib/auth/permissions";
26
-
27
- describe("permissions", () => {
28
- it("maps roles to expected permissions", () => {
29
- expect(ROLE_PERMISSIONS.admin).toEqual(
30
- expect.arrayContaining([
31
- PERMISSIONS.CREATE_FEEDBACK,
32
- PERMISSIONS.SUBMIT_ON_BEHALF,
33
- PERMISSIONS.DELETE_FEEDBACK,
34
- PERMISSIONS.MANAGE_ORG,
35
- ]),
36
- );
37
-
38
- expect(ROLE_PERMISSIONS.product_manager).toEqual(
39
- expect.arrayContaining([
40
- PERMISSIONS.CREATE_FEEDBACK,
41
- PERMISSIONS.SUBMIT_ON_BEHALF,
42
- PERMISSIONS.DELETE_FEEDBACK,
43
- ]),
44
- );
45
-
46
- expect(ROLE_PERMISSIONS.developer).toEqual(
47
- expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
48
- );
49
-
50
- expect(ROLE_PERMISSIONS.customer_support).toEqual(
51
- expect.arrayContaining([
52
- PERMISSIONS.CREATE_FEEDBACK,
53
- PERMISSIONS.SUBMIT_ON_BEHALF,
54
- ]),
55
- );
56
-
57
- expect(ROLE_PERMISSIONS.customer).toEqual(
58
- expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
59
- );
60
- });
61
-
62
- it("checks permissions by role", () => {
63
- expect(hasPermission("admin", PERMISSIONS.MANAGE_ORG)).toBe(true);
64
- expect(hasPermission("developer", PERMISSIONS.DELETE_FEEDBACK)).toBe(false);
65
- expect(hasPermission("customer", PERMISSIONS.CREATE_FEEDBACK)).toBe(true);
66
- });
67
-
68
- it("checks multiple permissions (all-of)", () => {
69
- expect(
70
- hasAllPermissions("admin", [
71
- PERMISSIONS.CREATE_FEEDBACK,
72
- PERMISSIONS.MANAGE_ORG,
73
- ]),
74
- ).toBe(true);
75
-
76
- expect(
77
- hasAllPermissions("developer", [
78
- PERMISSIONS.CREATE_FEEDBACK,
79
- PERMISSIONS.DELETE_FEEDBACK,
80
- ]),
81
- ).toBe(false);
82
- });
83
-
84
- it("checks submit-on-behalf permission", () => {
85
- expect(canSubmitOnBehalf("customer_support")).toBe(true);
86
- expect(canSubmitOnBehalf("customer")).toBe(false);
87
- });
88
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getEmptyPortalAnalytics } from "@/lib/portal/analytics";
20
-
21
- describe("portal analytics", () => {
22
- it("returns default analytics structure", () => {
23
- expect(getEmptyPortalAnalytics()).toHaveProperty("timeseries");
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getContributorLevel } from "@/lib/portal/contributors";
20
-
21
- describe("contributors", () => {
22
- it("returns level 1 by default", () => {
23
- expect(getContributorLevel({ votes: 0, comments: 0, accepted: 0 })).toBe(1);
24
- });
25
- });
@@ -1,27 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalCopy } from "@/lib/portal/portal-copy";
20
-
21
- describe("portal copy", () => {
22
- it("returns defaults", () => {
23
- const copy = getDefaultPortalCopy();
24
- expect(copy).toHaveProperty("title");
25
- expect(copy).toHaveProperty("ctaLabel");
26
- });
27
- });
@@ -1,30 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalI18n } from "@/lib/portal/i18n";
20
-
21
- describe("portal i18n", () => {
22
- it("returns default locale", () => {
23
- expect(getDefaultPortalI18n().defaultLocale).toBe("en");
24
- });
25
-
26
- it("includes supported locales", () => {
27
- const { supportedLocales } = getDefaultPortalI18n();
28
- expect(supportedLocales).toEqual(["en", "zh-CN", "jp"]);
29
- });
30
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultLeaderboardSettings } from "@/lib/portal/leaderboard-settings";
20
-
21
- describe("portal leaderboard settings", () => {
22
- it("defaults to visible", () => {
23
- expect(getDefaultLeaderboardSettings().enabled).toBe(true);
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalModules } from "@/lib/portal/modules";
20
-
21
- describe("portal modules", () => {
22
- it("enables feedback module by default", () => {
23
- expect(getDefaultPortalModules().feedback).toBe(true);
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalSeo } from "@/lib/portal/seo";
20
-
21
- describe("portal seo", () => {
22
- it("returns defaults", () => {
23
- expect(getDefaultPortalSeo()).toHaveProperty("title");
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getPortalShareMethods } from "@/lib/portal/sharing";
20
-
21
- describe("portal sharing", () => {
22
- it("lists share methods", () => {
23
- expect(getPortalShareMethods()).toEqual(["link", "widget", "embedded"]);
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalSorting } from "@/lib/portal/sorting";
20
-
21
- describe("portal sorting", () => {
22
- it("defaults to top", () => {
23
- expect(getDefaultPortalSorting().order).toBe("top");
24
- });
25
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { getDefaultPortalTheme } from "@/lib/portal/theme";
20
-
21
- describe("portal theme", () => {
22
- it("returns a default theme", () => {
23
- expect(getDefaultPortalTheme()).toHaveProperty("name");
24
- });
25
- });
@@ -1,142 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it, beforeEach } from 'bun:test';
19
- import { NextRequest } from 'next/server';
20
- import {
21
- rateLimit,
22
- clearMemoryStore,
23
- RateLimitConfig,
24
- } from '@/lib/middleware/rate-limit';
25
-
26
- function createMockRequest(url = 'http://localhost:3000/api/test'): NextRequest {
27
- return new NextRequest(url);
28
- }
29
-
30
- describe('Rate Limiter', () => {
31
- beforeEach(() => {
32
- clearMemoryStore();
33
- });
34
-
35
- it('should allow requests within limit', async () => {
36
- const config: RateLimitConfig = {
37
- windowMs: 10,
38
- maxRequests: 5,
39
- keyGenerator: () => 'test-key-1',
40
- };
41
-
42
- const req = createMockRequest();
43
-
44
- for (let i = 0; i < 5; i++) {
45
- const result = await rateLimit(req, config);
46
- expect(result.result.allowed).toBe(true);
47
- expect(result.response).toBeUndefined();
48
- }
49
- });
50
-
51
- it('should block requests exceeding limit', async () => {
52
- const config: RateLimitConfig = {
53
- windowMs: 10,
54
- maxRequests: 2,
55
- keyGenerator: () => 'test-key-2',
56
- };
57
-
58
- const req = createMockRequest();
59
-
60
- await rateLimit(req, config);
61
- await rateLimit(req, config);
62
-
63
- const result = await rateLimit(req, config);
64
- expect(result.result.allowed).toBe(false);
65
- expect(result.response).toBeDefined();
66
- expect(result.response!.status).toBe(429);
67
- });
68
-
69
- it('should return correct remaining count', async () => {
70
- const config: RateLimitConfig = {
71
- windowMs: 10,
72
- maxRequests: 5,
73
- keyGenerator: () => 'test-key-3',
74
- };
75
-
76
- const req = createMockRequest();
77
-
78
- const result1 = await rateLimit(req, config);
79
- expect(result1.result.remaining).toBe(4);
80
-
81
- const result2 = await rateLimit(req, config);
82
- expect(result2.result.remaining).toBe(3);
83
-
84
- const result3 = await rateLimit(req, config);
85
- expect(result3.result.remaining).toBe(2);
86
- });
87
-
88
- it('should include rate limit headers in 429 response', async () => {
89
- const config: RateLimitConfig = {
90
- windowMs: 60,
91
- maxRequests: 1,
92
- keyGenerator: () => 'test-key-4',
93
- };
94
-
95
- const req = createMockRequest();
96
-
97
- await rateLimit(req, config);
98
- const result = await rateLimit(req, config);
99
-
100
- expect(result.response).toBeDefined();
101
- expect(result.response!.headers.get('X-RateLimit-Limit')).toBe('1');
102
- expect(result.response!.headers.get('X-RateLimit-Remaining')).toBe('0');
103
- expect(result.response!.headers.get('X-RateLimit-Reset')).toBeTruthy();
104
- expect(result.response!.headers.get('Retry-After')).toBeTruthy();
105
- });
106
-
107
- it('should use different limits for different keys', async () => {
108
- let keyValue = 'key-a';
109
- const config: RateLimitConfig = {
110
- windowMs: 60,
111
- maxRequests: 2,
112
- keyGenerator: () => keyValue,
113
- };
114
-
115
- const req = createMockRequest();
116
-
117
- await rateLimit(req, config);
118
- await rateLimit(req, config);
119
- const resultA = await rateLimit(req, config);
120
- expect(resultA.result.allowed).toBe(false);
121
-
122
- keyValue = 'key-b';
123
- const resultB = await rateLimit(req, config);
124
- expect(resultB.result.allowed).toBe(true);
125
- });
126
-
127
- it('should support async key generator', async () => {
128
- const config: RateLimitConfig = {
129
- windowMs: 60,
130
- maxRequests: 2,
131
- keyGenerator: async () => {
132
- await new Promise((resolve) => setTimeout(resolve, 1));
133
- return 'async-key';
134
- },
135
- };
136
-
137
- const req = createMockRequest();
138
-
139
- const result = await rateLimit(req, config);
140
- expect(result.result.allowed).toBe(true);
141
- });
142
- });