@nexttylabs/echo 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (247) hide show
  1. package/CHANGELOG.md +13 -0
  2. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  3. package/app/api/admin/backup/route.ts +22 -4
  4. package/app/api/auth/register/handler.ts +1 -2
  5. package/lib/auth/config.ts +0 -7
  6. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  7. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  8. package/lib/db/migrations/meta/_journal.json +2 -135
  9. package/lib/db/schema/auth.ts +0 -1
  10. package/lib/db/schema/index.ts +0 -1
  11. package/lib/portal/public-context.tsx +5 -0
  12. package/package.json +20 -1
  13. package/.changeset/README.md +0 -21
  14. package/.changeset/config.json +0 -11
  15. package/.changeset/cozy-ghosts-care.md +0 -5
  16. package/.changeset/sharp-lines-stand.md +0 -5
  17. package/.changeset/sour-doodles-eat.md +0 -5
  18. package/.changeset/tender-moose-shop.md +0 -5
  19. package/.github/pull_request_template.md +0 -13
  20. package/.github/workflows/ci.yml +0 -41
  21. package/.github/workflows/publish.yml +0 -44
  22. package/.github/workflows/release.yml +0 -73
  23. package/AGENTS.md +0 -92
  24. package/Dockerfile +0 -57
  25. package/Makefile +0 -77
  26. package/bun.lock +0 -2503
  27. package/components/portal/project-switcher.tsx +0 -20
  28. package/docker-compose.dev.yml +0 -26
  29. package/docker-compose.yml +0 -98
  30. package/docs/architecture.md +0 -259
  31. package/docs/component-inventory.md +0 -261
  32. package/docs/database-migrations.md +0 -76
  33. package/docs/development-guide.md +0 -209
  34. package/docs/e2e-user-flows.csv +0 -31
  35. package/docs/er-diagram-feedback.mmd +0 -138
  36. package/docs/er-diagram.mmd +0 -281
  37. package/docs/i18n-check-report.md +0 -296
  38. package/docs/index.md +0 -214
  39. package/docs/logic-chain.md +0 -94
  40. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  41. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  42. package/docs/plans/2026-01-02-user-login.md +0 -437
  43. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  44. package/docs/plans/2026-01-02-user-registration.md +0 -628
  45. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  46. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  47. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  48. package/docs/plans/2026-01-05-member-removal.md +0 -186
  49. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  50. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  51. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  52. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  53. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  54. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  55. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  56. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  57. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  58. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  59. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  60. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  61. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  62. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  63. package/docs/plans/2026-01-09-settings-center.md +0 -948
  64. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  65. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  66. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  67. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  68. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  69. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  70. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  71. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  72. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  73. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  74. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  75. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  76. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  77. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  78. package/docs/product_changes.md +0 -37
  79. package/docs/project-overview.md +0 -159
  80. package/docs/project-scan-report.json +0 -104
  81. package/docs/route-role-visibility.md +0 -51
  82. package/docs/source-tree-analysis.md +0 -150
  83. package/docs/testing/delete-project-manual-tests.md +0 -18
  84. package/docs/user-story-tracking.md +0 -191
  85. package/eslint.config.mjs +0 -19
  86. package/lib/db/migrations/.gitkeep +0 -0
  87. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  88. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  89. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  90. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  91. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  92. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  93. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  94. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  95. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  96. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  97. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  98. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  99. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  100. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  101. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  102. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  103. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  104. package/lib/db/migrations/0016_github_integration.sql +0 -30
  105. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  106. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  107. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  108. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  109. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  110. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  111. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  112. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  113. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  114. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  115. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  116. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  117. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  118. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  119. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  120. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  121. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  122. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  123. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  124. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  125. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  126. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  127. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  128. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  129. package/lib/db/schema/projects.ts +0 -145
  130. package/lib/db/schema/user-profiles.ts +0 -31
  131. package/lib/validations/projects.ts +0 -49
  132. package/next-env.d.ts +0 -6
  133. package/playwright.config.ts +0 -44
  134. package/proxy.test.ts +0 -131
  135. package/proxy.ts +0 -116
  136. package/scripts/backup-db.sh +0 -57
  137. package/scripts/backup-db.ts +0 -24
  138. package/scripts/generate-openapi.ts +0 -22
  139. package/scripts/migration-helper.ts +0 -39
  140. package/scripts/pre-deploy.ts +0 -75
  141. package/scripts/restore-db.sh +0 -60
  142. package/scripts/rollback.ts +0 -72
  143. package/scripts/seed-tags.ts +0 -48
  144. package/tests/api/feedback-bulk.test.ts +0 -47
  145. package/tests/api/feedback-by-id.test.ts +0 -67
  146. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  147. package/tests/api/feedback-create.test.ts +0 -71
  148. package/tests/api/feedback-delete.test.ts +0 -160
  149. package/tests/api/feedback-filter.test.ts +0 -250
  150. package/tests/api/feedback-list.test.ts +0 -234
  151. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  152. package/tests/api/feedback-similar.test.ts +0 -46
  153. package/tests/api/feedback-sort.test.ts +0 -261
  154. package/tests/api/feedback-status-enum.test.ts +0 -49
  155. package/tests/api/feedback-status-filter.test.ts +0 -117
  156. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  157. package/tests/api/feedback.test.ts +0 -175
  158. package/tests/api/identify-jwt.test.ts +0 -25
  159. package/tests/api/invitation-accept.test.ts +0 -213
  160. package/tests/api/organization-invitations.test.ts +0 -186
  161. package/tests/api/organization-members-list.test.ts +0 -79
  162. package/tests/api/organization-members.test.ts +0 -340
  163. package/tests/api/organizations.test.ts +0 -149
  164. package/tests/api/register.test.ts +0 -112
  165. package/tests/api/upload.test.ts +0 -103
  166. package/tests/api/vote.test.ts +0 -82
  167. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  168. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  169. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  170. package/tests/app/health-route-helpers.test.ts +0 -27
  171. package/tests/app/login-page.test.ts +0 -26
  172. package/tests/app/portal-page.test.ts +0 -29
  173. package/tests/app/project-portal-overview.test.tsx +0 -25
  174. package/tests/app/widget-page-import.test.ts +0 -25
  175. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  176. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  177. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  178. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  179. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  180. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  181. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  182. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  183. package/tests/components/feedback-list-controls.test.tsx +0 -204
  184. package/tests/components/feedback-list-item.test.tsx +0 -67
  185. package/tests/components/landing/hero.test.tsx +0 -46
  186. package/tests/components/layout/language-switcher.test.tsx +0 -25
  187. package/tests/components/layout/sidebar.test.tsx +0 -157
  188. package/tests/components/login-form.test.ts +0 -25
  189. package/tests/components/organization-form.test.ts +0 -32
  190. package/tests/components/organization-switcher.test.ts +0 -25
  191. package/tests/components/pagination.test.tsx +0 -43
  192. package/tests/components/portal-overview.test.tsx +0 -25
  193. package/tests/components/profile-form.test.tsx +0 -139
  194. package/tests/components/role-selector.test.ts +0 -31
  195. package/tests/components/status-chart.test.tsx +0 -90
  196. package/tests/e2e/auth.e2e.ts +0 -323
  197. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  198. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  199. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  200. package/tests/e2e/feedback-management.e2e.ts +0 -565
  201. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  202. package/tests/e2e/feedback-view.e2e.ts +0 -297
  203. package/tests/e2e/fixtures/test-data.ts +0 -235
  204. package/tests/e2e/health-check.e2e.ts +0 -230
  205. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  206. package/tests/e2e/helpers/test-utils.ts +0 -298
  207. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  208. package/tests/e2e/organization.e2e.ts +0 -292
  209. package/tests/e2e/permissions.e2e.ts +0 -424
  210. package/tests/e2e/project-widget.e2e.ts +0 -63
  211. package/tests/feedback/filters.test.ts +0 -29
  212. package/tests/hooks/use-permissions.test.ts +0 -52
  213. package/tests/lib/ai/classifier.test.ts +0 -104
  214. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  215. package/tests/lib/attachments-schema.test.ts +0 -30
  216. package/tests/lib/auth/session.test.ts +0 -49
  217. package/tests/lib/auth-client.test.ts +0 -37
  218. package/tests/lib/auth-config.test.ts +0 -26
  219. package/tests/lib/feedback-prefill.test.ts +0 -52
  220. package/tests/lib/feedback-processor.test.ts +0 -41
  221. package/tests/lib/feedback-schema.test.ts +0 -33
  222. package/tests/lib/file-validator.test.ts +0 -48
  223. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  224. package/tests/lib/invitations.test.ts +0 -35
  225. package/tests/lib/login-schema.test.ts +0 -36
  226. package/tests/lib/org-context.test.ts +0 -95
  227. package/tests/lib/organization-access.test.ts +0 -44
  228. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  229. package/tests/lib/permissions.test.ts +0 -88
  230. package/tests/lib/portal-analytics.test.ts +0 -25
  231. package/tests/lib/portal-contributors.test.ts +0 -25
  232. package/tests/lib/portal-copy.test.ts +0 -27
  233. package/tests/lib/portal-i18n.test.ts +0 -30
  234. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  235. package/tests/lib/portal-modules.test.ts +0 -25
  236. package/tests/lib/portal-seo.test.ts +0 -25
  237. package/tests/lib/portal-sharing.test.ts +0 -25
  238. package/tests/lib/portal-sorting.test.ts +0 -25
  239. package/tests/lib/portal-theme.test.ts +0 -25
  240. package/tests/lib/rate-limit.test.ts +0 -142
  241. package/tests/lib/resolve-locale.test.ts +0 -34
  242. package/tests/lib/services/backup.test.ts +0 -145
  243. package/tests/lib/user-organizations.test.ts +0 -42
  244. package/tests/lib/user-role-schema.test.ts +0 -33
  245. package/tests/lib/user-schema.test.ts +0 -25
  246. package/tests/setup.ts +0 -74
  247. package/vercel.json +0 -4
@@ -1,145 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { relations } from "drizzle-orm";
19
- import {
20
- index,
21
- jsonb,
22
- pgTable,
23
- text,
24
- timestamp,
25
- unique,
26
- uuid,
27
- } from "drizzle-orm/pg-core";
28
- import { organizations } from "./organizations";
29
-
30
- export type WidgetConfig = {
31
- theme?: "light" | "dark" | "auto";
32
- primaryColor?: string;
33
- buttonText?: string;
34
- buttonPosition?: "bottom-right" | "bottom-left" | "top-right" | "top-left";
35
- fields?: {
36
- showType?: boolean;
37
- showPriority?: boolean;
38
- showDescription?: boolean;
39
- requireEmail?: boolean;
40
- };
41
- types?: string[];
42
- customCSS?: string;
43
- };
44
-
45
- export type PortalThemeConfig = {
46
- mode?: "light" | "dark" | "system";
47
- primaryColor?: string;
48
- accentColor?: string;
49
- borderRadius?: "none" | "sm" | "md" | "lg" | "full";
50
- fontFamily?: string;
51
- customCSS?: string;
52
- };
53
-
54
- export type PortalCopyConfig = {
55
- title?: string;
56
- description?: string;
57
- ctaLabel?: string;
58
- emptyStateMessage?: string;
59
- successMessage?: string;
60
- placeholders?: {
61
- titleInput?: string;
62
- descriptionInput?: string;
63
- };
64
- };
65
-
66
- export type PortalSeoConfig = {
67
- metaTitle?: string;
68
- metaDescription?: string;
69
- ogImage?: string;
70
- favicon?: string;
71
- noIndex?: boolean;
72
- };
73
-
74
- export type PortalSharingConfig = {
75
- enabled?: boolean;
76
- allowPublicVoting?: boolean;
77
- allowPublicComments?: boolean;
78
- showVoteCount?: boolean;
79
- showAuthor?: boolean;
80
- socialSharing?: {
81
- twitter?: boolean;
82
- linkedin?: boolean;
83
- facebook?: boolean;
84
- };
85
- };
86
-
87
- export type PortalConfig = {
88
- theme?: PortalThemeConfig;
89
- copy?: PortalCopyConfig;
90
- seo?: PortalSeoConfig;
91
- sharing?: PortalSharingConfig;
92
- languages?: string[];
93
- defaultLanguage?: string;
94
- modules?: {
95
- feedback?: boolean;
96
- roadmap?: boolean;
97
- changelog?: boolean;
98
- help?: boolean;
99
- };
100
- };
101
-
102
- export const projects = pgTable(
103
- "projects",
104
- {
105
- projectId: uuid("projectId").defaultRandom().primaryKey(),
106
- organizationId: text("organizationId")
107
- .notNull()
108
- .references(() => organizations.id, { onDelete: "cascade" }),
109
- name: text("name").notNull(),
110
- slug: text("slug").notNull(),
111
- description: text("description"),
112
- widgetConfig: jsonb("widgetConfig").$type<WidgetConfig>(),
113
- portalConfig: jsonb("portalConfig").$type<PortalConfig>(),
114
- customDomain: text("customDomain"),
115
- createdAt: timestamp("createdAt").defaultNow().notNull(),
116
- updatedAt: timestamp("updatedAt")
117
- .defaultNow()
118
- .$onUpdate(() => new Date())
119
- .notNull(),
120
- },
121
- (table) => ({
122
- orgIdx: index("idx_projects_orgId").on(table.organizationId),
123
- slugOrgUnique: unique("unique_slug_org").on(table.slug, table.organizationId),
124
- customDomainUnique: unique("unique_custom_domain").on(table.customDomain),
125
- }),
126
- );
127
-
128
- export const projectsRelations = relations(projects, ({ one }) => ({
129
- organization: one(organizations, {
130
- fields: [projects.organizationId],
131
- references: [organizations.id],
132
- }),
133
- }));
134
-
135
- export type Project = typeof projects.$inferSelect;
136
- export type NewProject = typeof projects.$inferInsert;
137
-
138
- export function generateSlug(name: string): string {
139
- return name
140
- .toLowerCase()
141
- .trim()
142
- .replace(/[^\w\s-]/g, "")
143
- .replace(/[\s_-]+/g, "-")
144
- .replace(/^-+|-+$/g, "");
145
- }
@@ -1,31 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { pgTable, text, timestamp } from "drizzle-orm/pg-core";
19
- import { user } from "./auth";
20
-
21
- export const userProfiles = pgTable("user_profiles", {
22
- userId: text("user_id")
23
- .primaryKey()
24
- .references(() => user.id, { onDelete: "cascade" }),
25
- name: text("name").notNull(),
26
- createdAt: timestamp("created_at").defaultNow().notNull(),
27
- updatedAt: timestamp("updated_at")
28
- .defaultNow()
29
- .$onUpdate(() => new Date())
30
- .notNull(),
31
- });
@@ -1,49 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { z } from "zod";
19
-
20
- export const createProjectSchema = z.object({
21
- name: z.string().min(1, "Project name is required").max(100, "Name too long"),
22
- description: z.string().max(500, "Description too long").optional(),
23
- });
24
-
25
- export type CreateProjectInput = z.infer<typeof createProjectSchema>;
26
-
27
- export const widgetConfigSchema = z.object({
28
- theme: z.enum(["light", "dark", "auto"]),
29
- primaryColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/, "Invalid color format"),
30
- buttonText: z.string().min(1).max(50),
31
- buttonPosition: z.enum(["bottom-right", "bottom-left", "top-right", "top-left"]),
32
- fields: z.object({
33
- showType: z.boolean(),
34
- showPriority: z.boolean(),
35
- showDescription: z.boolean(),
36
- requireEmail: z.boolean(),
37
- }),
38
- types: z.array(z.enum(["bug", "feature", "issue", "other"])).min(1),
39
- customCSS: z.string().max(5000).optional(),
40
- });
41
-
42
- export const updateProjectSchema = z.object({
43
- name: z.string().min(1).max(100).optional(),
44
- description: z.string().max(500).optional(),
45
- widgetConfig: widgetConfigSchema.optional(),
46
- });
47
-
48
- export type WidgetConfig = z.infer<typeof widgetConfigSchema>;
49
- export type UpdateProjectInput = z.infer<typeof updateProjectSchema>;
package/next-env.d.ts DELETED
@@ -1,6 +0,0 @@
1
- /// <reference types="next" />
2
- /// <reference types="next/image-types/global" />
3
- import "./.next/types/routes.d.ts";
4
-
5
- // NOTE: This file should not be edited
6
- // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
@@ -1,44 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { defineConfig, devices } from "@playwright/test";
19
-
20
- export default defineConfig({
21
- workers: 1,
22
- testDir: "./tests/e2e",
23
- testMatch: "**/*.e2e.ts",
24
- timeout: 60_000,
25
- expect: { timeout: 10_000 },
26
- use: {
27
- baseURL: process.env.E2E_BASE_URL ?? "http://localhost:3000",
28
- trace: "retain-on-failure",
29
- screenshot: "only-on-failure",
30
- video: "retain-on-failure",
31
- },
32
- webServer: {
33
- command: "bun dev",
34
- url: "http://localhost:3000",
35
- reuseExistingServer: !process.env.CI,
36
- timeout: 120_000,
37
- },
38
- projects: [
39
- {
40
- name: "chromium",
41
- use: { ...devices["Desktop Chrome"] },
42
- },
43
- ],
44
- });
package/proxy.test.ts DELETED
@@ -1,131 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { afterAll, describe, it, expect, mock } from "bun:test";
19
- import { NextRequest } from "next/server";
20
- import { PERMISSIONS } from "@/lib/auth/permissions";
21
-
22
- const previousDatabaseUrl = process.env.DATABASE_URL;
23
- process.env.DATABASE_URL ??= "postgres://test";
24
-
25
- mock.module("@/lib/auth/session", () => ({
26
- getServerSession: async (req: NextRequest) => {
27
- const isAuthed = req.headers.get("x-test-auth") === "1";
28
- if (!isAuthed) return null;
29
- const role = req.headers.get("x-test-role");
30
- return role ? { user: { id: "u_test", role } } : { user: { id: "u_test" } };
31
- },
32
- }));
33
-
34
- const { proxy } = await import("./proxy");
35
- const { requirePermission } = await import("@/lib/middleware/rbac");
36
-
37
- afterAll(() => {
38
- if (previousDatabaseUrl === undefined) {
39
- delete process.env.DATABASE_URL;
40
- } else {
41
- process.env.DATABASE_URL = previousDatabaseUrl;
42
- }
43
- });
44
-
45
- describe("proxy", () => {
46
- it("adds x-request-id to response", async () => {
47
- const req = new NextRequest("http://localhost/api/health");
48
- const res = await proxy(req);
49
- expect(res.headers.get("x-request-id")).toBeTruthy();
50
- });
51
- });
52
-
53
- describe("proxy auth", () => {
54
- it("redirects unauthenticated users from protected routes", async () => {
55
- const req = new NextRequest("http://localhost/dashboard");
56
- const res = await proxy(req);
57
- expect(res.headers.get("location")).toBe("http://localhost/login");
58
- });
59
-
60
- it("allows unauthenticated users on public routes", async () => {
61
- const req = new NextRequest("http://localhost/login");
62
- const res = await proxy(req);
63
- expect(res.headers.get("location")).toBeNull();
64
- });
65
-
66
- it("allows authenticated users on protected routes", async () => {
67
- const req = new NextRequest("http://localhost/dashboard", {
68
- headers: { "x-test-auth": "1" },
69
- });
70
- const res = await proxy(req);
71
- expect(res.headers.get("location")).toBeNull();
72
- });
73
- });
74
-
75
- describe("proxy locale cookie", () => {
76
- it("sets NEXT_LOCALE from Accept-Language when missing", async () => {
77
- const req = new NextRequest("http://localhost/dashboard", {
78
- headers: {
79
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
80
- },
81
- });
82
- const res = await proxy(req);
83
- expect(res.headers.get("set-cookie")).toContain("NEXT_LOCALE=zh-CN");
84
- });
85
-
86
- it("does not override existing NEXT_LOCALE cookie", async () => {
87
- const req = new NextRequest("http://localhost/login", {
88
- headers: {
89
- cookie: "NEXT_LOCALE=jp",
90
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
91
- },
92
- });
93
- const res = await proxy(req);
94
- expect(res.headers.get("set-cookie")).toBeNull();
95
- });
96
- });
97
-
98
- describe("rbac requirePermission", () => {
99
- it("returns 401 when session is missing", async () => {
100
- const req = new NextRequest("http://localhost/api/secure");
101
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
102
- expect(res.status).toBe(401);
103
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
104
- });
105
-
106
- it("returns 401 when role is missing", async () => {
107
- const req = new NextRequest("http://localhost/api/secure", {
108
- headers: { "x-test-auth": "1" },
109
- });
110
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
111
- expect(res.status).toBe(401);
112
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
113
- });
114
-
115
- it("returns 403 when role lacks permission", async () => {
116
- const req = new NextRequest("http://localhost/api/secure", {
117
- headers: { "x-test-auth": "1", "x-test-role": "customer" },
118
- });
119
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
120
- expect(res.status).toBe(403);
121
- await expect(res.json()).resolves.toEqual({ error: "Forbidden" });
122
- });
123
-
124
- it("returns NextResponse.next when permission is allowed", async () => {
125
- const req = new NextRequest("http://localhost/api/secure", {
126
- headers: { "x-test-auth": "1", "x-test-role": "admin" },
127
- });
128
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
129
- expect(res.status).toBe(200);
130
- });
131
- });
package/proxy.ts DELETED
@@ -1,116 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { NextRequest, NextResponse } from "next/server";
19
- import {
20
- DEFAULT_LOCALE,
21
- LOCALE_COOKIE_NAME,
22
- getPreferredLocaleFromHeader,
23
- isSupportedLocale,
24
- } from "@/i18n/config";
25
-
26
- // Default session cookie name used by better-auth
27
- const SESSION_COOKIE_NAME = "better-auth.session_token";
28
-
29
- const publicRoutes = ["/login", "/register", "/invite", "/invite/", "/api/auth", "/widget", "/portal"];
30
- const protectedRoutes = ["/dashboard", "/feedback", "/settings"];
31
- const LOCALE_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
32
-
33
- function generateRequestId(): string {
34
- return crypto.randomUUID();
35
- }
36
-
37
- function isRouteMatch(pathname: string, routes: string[]) {
38
- return routes.some((route) => pathname === route || pathname.startsWith(route));
39
- }
40
-
41
- function shouldSetLocaleCookie(req: NextRequest, pathname: string) {
42
- if (req.method !== "GET") return false;
43
- if (pathname.startsWith("/api/") || pathname.startsWith("/_next/")) return false;
44
- if (pathname.includes(".")) return false;
45
- const existingLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
46
- return !existingLocale;
47
- }
48
-
49
- function resolveLocaleFromRequest(req: NextRequest): string {
50
- const cookieLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
51
- if (cookieLocale && isSupportedLocale(cookieLocale)) return cookieLocale;
52
- return getPreferredLocaleFromHeader(req.headers.get("accept-language")) || DEFAULT_LOCALE;
53
- }
54
-
55
- function maybeSetLocaleCookie(req: NextRequest, response: NextResponse, pathname: string) {
56
- if (!shouldSetLocaleCookie(req, pathname)) return;
57
- const locale = resolveLocaleFromRequest(req);
58
- response.cookies.set(LOCALE_COOKIE_NAME, locale, {
59
- path: "/",
60
- sameSite: "lax",
61
- secure: req.nextUrl.protocol === "https:",
62
- maxAge: LOCALE_COOKIE_MAX_AGE_SECONDS,
63
- });
64
- }
65
-
66
- // Helper to determine if request is authenticated for tests
67
- function isAuthenticated(req: NextRequest): boolean {
68
- // Real auth uses session cookie
69
- const sessionCookie = req.cookies.get(SESSION_COOKIE_NAME);
70
- if (sessionCookie?.value) return true;
71
- // Test auth can be simulated via custom header
72
- const testAuth = req.headers.get('x-test-auth');
73
- return testAuth === '1';
74
- }
75
-
76
- export async function proxy(req: NextRequest) {
77
- const startTime = Date.now();
78
- const reqId = req.headers.get("x-request-id") || generateRequestId();
79
-
80
- const requestHeaders = new Headers(req.headers);
81
- requestHeaders.set("x-request-id", reqId);
82
-
83
- // Log request (Edge-compatible)
84
- console.log(`[${reqId}] ${req.method} ${req.nextUrl.pathname}`);
85
-
86
- const pathname = req.nextUrl.pathname;
87
-
88
- const isPublic = isRouteMatch(pathname, publicRoutes);
89
- const isProtected = isRouteMatch(pathname, protectedRoutes);
90
-
91
- let response = NextResponse.next({
92
- request: {
93
- headers: requestHeaders,
94
- },
95
- });
96
-
97
- if (isProtected && !isPublic) {
98
- // Optimistic check: only verify session cookie presence
99
- // Full session validation happens in page/layout components
100
- if (!isAuthenticated(req)) {
101
- response = NextResponse.redirect(new URL("/login", req.url));
102
- }
103
- }
104
-
105
- maybeSetLocaleCookie(req, response, pathname);
106
- response.headers.set("x-request-id", reqId);
107
-
108
- const duration = Date.now() - startTime;
109
- console.log(`[${reqId}] ${response.status} ${duration}ms`);
110
-
111
- return response;
112
- }
113
-
114
- export const config = {
115
- matcher: ["/api/:path*", "/((?!_next/static|_next/image|favicon.ico).*)"],
116
- };
@@ -1,57 +0,0 @@
1
- #!/bin/bash
2
- # scripts/backup-db.sh
3
-
4
- set -e
5
-
6
- # Configuration
7
- BACKUP_DIR="${BACKUP_DIR:-./backups}"
8
- RETENTION_DAYS=${RETENTION_DAYS:-30}
9
- TIMESTAMP=$(date +%Y%m%d-%H%M%S)
10
- BACKUP_FILE="$BACKUP_DIR/echo-$TIMESTAMP.sql"
11
- DATABASE_URL="${DATABASE_URL:-postgresql://echo:changeme@localhost:5432/echo}"
12
-
13
- # Colors
14
- RED='\033[0;31m'
15
- GREEN='\033[0;32m'
16
- YELLOW='\033[1;33m'
17
- NC='\033[0m'
18
-
19
- log_info() {
20
- echo -e "${GREEN}[INFO]${NC} $1"
21
- }
22
-
23
- log_warn() {
24
- echo -e "${YELLOW}[WARN]${NC} $1"
25
- }
26
-
27
- log_error() {
28
- echo -e "${RED}[ERROR]${NC} $1"
29
- }
30
-
31
- mkdir -p "$BACKUP_DIR"
32
-
33
- log_info "Starting database backup..."
34
- log_info "Backup file: $BACKUP_FILE"
35
-
36
- if pg_dump "$DATABASE_URL" > "$BACKUP_FILE"; then
37
- log_info "Backup completed successfully"
38
-
39
- gzip "$BACKUP_FILE"
40
- BACKUP_FILE="$BACKUP_FILE.gz"
41
- log_info "Backup compressed: $BACKUP_FILE"
42
-
43
- FILE_SIZE=$(du -h "$BACKUP_FILE" | cut -f1)
44
- log_info "Backup size: $FILE_SIZE"
45
-
46
- log_info "Cleaning up old backups (older than $RETENTION_DAYS days)..."
47
- DELETED=$(find "$BACKUP_DIR" -name "echo-*.sql.gz" -mtime +$RETENTION_DAYS -delete -print | wc -l)
48
- log_info "Deleted $DELETED old backup(s)"
49
-
50
- log_info "Current backups:"
51
- ls -lh "$BACKUP_DIR"/echo-*.sql.gz 2>/dev/null | awk '{print " " $9 " (" $5 ")"}' || echo " No backups found"
52
-
53
- log_info "Backup process completed!"
54
- else
55
- log_error "Backup failed!"
56
- exit 1
57
- fi
@@ -1,24 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { backupDatabase, getBackupConfig } from "@/lib/services/backup";
19
-
20
- const config = getBackupConfig();
21
-
22
- backupDatabase(config)
23
- .then(() => process.exit(0))
24
- .catch(() => process.exit(1));
@@ -1,22 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { generateOpenApiSpec } from '../lib/swagger/generate';
19
-
20
- generateOpenApiSpec()
21
- .then(() => console.log('OpenAPI spec generated at public/openapi.json'))
22
- .catch(console.error);
@@ -1,39 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { execSync } from "child_process";
19
- import { logger } from "@/lib/logger";
20
-
21
- export function generateMigration(name: string) {
22
- logger.info({ name }, "Generating migration");
23
- execSync("bun run db:generate", { stdio: "inherit" });
24
- }
25
-
26
- export function applyMigrations() {
27
- logger.info("Applying migrations...");
28
- execSync("bun run db:migrate", { stdio: "inherit" });
29
- }
30
-
31
- export function pushSchema() {
32
- logger.info("Pushing schema to database...");
33
- execSync("bun run db:push", { stdio: "inherit" });
34
- }
35
-
36
- export function checkSchema() {
37
- logger.info("Checking schema consistency...");
38
- execSync("bun run db:check", { stdio: "inherit" });
39
- }