@nexttylabs/echo 0.4.0 → 0.5.0

package/tests/lib/org-context.test.ts

@@ -1,95 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getOrgContext } from "@/lib/auth/org-context";
-
-const makeRequest = (options: {
-  query?: Record<string, string>;
-  headerOrgId?: string;
-  cookieOrgId?: string;
-}) => {
-  const url = new URL("https://example.com");
-  if (options.query) {
-    for (const [key, value] of Object.entries(options.query)) {
-      url.searchParams.set(key, value);
-    }
-  }
-
-  return {
-    nextUrl: url,
-    headers: new Headers(
-      options.headerOrgId ? { "x-organization-id": options.headerOrgId } : undefined,
-    ),
-    cookies: {
-      get: (name: string) =>
-        name === "orgId" && options.cookieOrgId
-          ? { value: options.cookieOrgId }
-          : undefined,
-    },
-  } as const;
-};
-
-const makeDb = (hasMember: boolean) => ({
-  select: () => ({
-    from: () => ({
-      where: () => ({
-        limit: async () => (hasMember ? [{ role: "admin" }] : []),
-      }),
-    }),
-  }),
-});
-
-describe("getOrgContext", () => {
-  it("prefers query over header and cookie", async () => {
-    const req = makeRequest({
-      query: { organizationId: "org_query" },
-      headerOrgId: "org_header",
-      cookieOrgId: "org_cookie",
-    });
-    const context = await getOrgContext({
-      request: req,
-      db: makeDb(true),
-      userId: "user_1",
-    });
-    expect(context.organizationId).toBe("org_query");
-    expect(context.source).toBe("query");
-  });
-
-  it("throws when membership missing", async () => {
-    const req = makeRequest({ cookieOrgId: "org_cookie" });
-    await expect(
-      getOrgContext({
-        request: req,
-        db: makeDb(false),
-        userId: "user_1",
-        requireMembership: true,
-      }),
-    ).rejects.toThrow("Access denied");
-  });
-
-  it("accepts explicit organization id", async () => {
-    const req = makeRequest({});
-    const context = await getOrgContext({
-      request: req,
-      db: makeDb(true),
-      organizationId: "org_explicit",
-    });
-    expect(context.organizationId).toBe("org_explicit");
-    expect(context.source).toBe("explicit");
-  });
-});

package/tests/lib/organization-access.test.ts

@@ -1,44 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { assertOrganizationAccess } from "@/lib/auth/organization";
-
-const makeDb = (member: { role: string } | null) => ({
-  select: () => ({
-    from: () => ({
-      where: () => ({
-        limit: async () => (member ? [member] : []),
-      }),
-    }),
-  }),
-});
-
-describe("assertOrganizationAccess", () => {
-  it("returns member when user belongs to organization", async () => {
-    const db = makeDb({ role: "admin" });
-    const member = await assertOrganizationAccess(db, "user_1", "org_1");
-    expect(member.role).toBe("admin");
-  });
-
-  it("throws when user is not a member", async () => {
-    const db = makeDb(null);
-    await expect(
-      assertOrganizationAccess(db, "user_1", "org_1"),
-    ).rejects.toThrow("Access denied");
-  });
-});

package/tests/lib/organization-member-role-schema.test.ts

@@ -1,41 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { organizationMemberRoleSchema } from "@/lib/validations/organizations";
-
-describe("organizationMemberRoleSchema", () => {
-  it("accepts known organization roles", () => {
-    expect(organizationMemberRoleSchema.safeParse("admin").success).toBe(true);
-    expect(
-      organizationMemberRoleSchema.safeParse("product_manager").success,
-    ).toBe(true);
-    expect(organizationMemberRoleSchema.safeParse("developer").success).toBe(
-      true,
-    );
-    expect(
-      organizationMemberRoleSchema.safeParse("customer_support").success,
-    ).toBe(true);
-  });
-
-  it("rejects non-organization roles", () => {
-    expect(organizationMemberRoleSchema.safeParse("customer").success).toBe(
-      false,
-    );
-    expect(organizationMemberRoleSchema.safeParse("member").success).toBe(false);
-  });
-});

package/tests/lib/permissions.test.ts

@@ -1,88 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import {
-  PERMISSIONS,
-  ROLE_PERMISSIONS,
-  canSubmitOnBehalf,
-  hasAllPermissions,
-  hasPermission,
-} from "@/lib/auth/permissions";
-
-describe("permissions", () => {
-  it("maps roles to expected permissions", () => {
-    expect(ROLE_PERMISSIONS.admin).toEqual(
-      expect.arrayContaining([
-        PERMISSIONS.CREATE_FEEDBACK,
-        PERMISSIONS.SUBMIT_ON_BEHALF,
-        PERMISSIONS.DELETE_FEEDBACK,
-        PERMISSIONS.MANAGE_ORG,
-      ]),
-    );
-
-    expect(ROLE_PERMISSIONS.product_manager).toEqual(
-      expect.arrayContaining([
-        PERMISSIONS.CREATE_FEEDBACK,
-        PERMISSIONS.SUBMIT_ON_BEHALF,
-        PERMISSIONS.DELETE_FEEDBACK,
-      ]),
-    );
-
-    expect(ROLE_PERMISSIONS.developer).toEqual(
-      expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
-    );
-
-    expect(ROLE_PERMISSIONS.customer_support).toEqual(
-      expect.arrayContaining([
-        PERMISSIONS.CREATE_FEEDBACK,
-        PERMISSIONS.SUBMIT_ON_BEHALF,
-      ]),
-    );
-
-    expect(ROLE_PERMISSIONS.customer).toEqual(
-      expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
-    );
-  });
-
-  it("checks permissions by role", () => {
-    expect(hasPermission("admin", PERMISSIONS.MANAGE_ORG)).toBe(true);
-    expect(hasPermission("developer", PERMISSIONS.DELETE_FEEDBACK)).toBe(false);
-    expect(hasPermission("customer", PERMISSIONS.CREATE_FEEDBACK)).toBe(true);
-  });
-
-  it("checks multiple permissions (all-of)", () => {
-    expect(
-      hasAllPermissions("admin", [
-        PERMISSIONS.CREATE_FEEDBACK,
-        PERMISSIONS.MANAGE_ORG,
-      ]),
-    ).toBe(true);
-
-    expect(
-      hasAllPermissions("developer", [
-        PERMISSIONS.CREATE_FEEDBACK,
-        PERMISSIONS.DELETE_FEEDBACK,
-      ]),
-    ).toBe(false);
-  });
-
-  it("checks submit-on-behalf permission", () => {
-    expect(canSubmitOnBehalf("customer_support")).toBe(true);
-    expect(canSubmitOnBehalf("customer")).toBe(false);
-  });
-});

package/tests/lib/portal-analytics.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getEmptyPortalAnalytics } from "@/lib/portal/analytics";
-
-describe("portal analytics", () => {
-  it("returns default analytics structure", () => {
-    expect(getEmptyPortalAnalytics()).toHaveProperty("timeseries");
-  });
-});

package/tests/lib/portal-contributors.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getContributorLevel } from "@/lib/portal/contributors";
-
-describe("contributors", () => {
-  it("returns level 1 by default", () => {
-    expect(getContributorLevel({ votes: 0, comments: 0, accepted: 0 })).toBe(1);
-  });
-});

package/tests/lib/portal-copy.test.ts

@@ -1,27 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalCopy } from "@/lib/portal/portal-copy";
-
-describe("portal copy", () => {
-  it("returns defaults", () => {
-    const copy = getDefaultPortalCopy();
-    expect(copy).toHaveProperty("title");
-    expect(copy).toHaveProperty("ctaLabel");
-  });
-});

package/tests/lib/portal-i18n.test.ts

@@ -1,30 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalI18n } from "@/lib/portal/i18n";
-
-describe("portal i18n", () => {
-  it("returns default locale", () => {
-    expect(getDefaultPortalI18n().defaultLocale).toBe("en");
-  });
-
-  it("includes supported locales", () => {
-    const { supportedLocales } = getDefaultPortalI18n();
-    expect(supportedLocales).toEqual(["en", "zh-CN", "jp"]);
-  });
-});

package/tests/lib/portal-leaderboard-settings.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultLeaderboardSettings } from "@/lib/portal/leaderboard-settings";
-
-describe("portal leaderboard settings", () => {
-  it("defaults to visible", () => {
-    expect(getDefaultLeaderboardSettings().enabled).toBe(true);
-  });
-});

package/tests/lib/portal-modules.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalModules } from "@/lib/portal/modules";
-
-describe("portal modules", () => {
-  it("enables feedback module by default", () => {
-    expect(getDefaultPortalModules().feedback).toBe(true);
-  });
-});

package/tests/lib/portal-seo.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalSeo } from "@/lib/portal/seo";
-
-describe("portal seo", () => {
-  it("returns defaults", () => {
-    expect(getDefaultPortalSeo()).toHaveProperty("title");
-  });
-});

package/tests/lib/portal-sharing.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getPortalShareMethods } from "@/lib/portal/sharing";
-
-describe("portal sharing", () => {
-  it("lists share methods", () => {
-    expect(getPortalShareMethods()).toEqual(["link", "widget", "embedded"]);
-  });
-});

package/tests/lib/portal-sorting.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalSorting } from "@/lib/portal/sorting";
-
-describe("portal sorting", () => {
-  it("defaults to top", () => {
-    expect(getDefaultPortalSorting().order).toBe("top");
-  });
-});

package/tests/lib/portal-theme.test.ts

@@ -1,25 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it } from "bun:test";
-import { getDefaultPortalTheme } from "@/lib/portal/theme";
-
-describe("portal theme", () => {
-  it("returns a default theme", () => {
-    expect(getDefaultPortalTheme()).toHaveProperty("name");
-  });
-});

package/tests/lib/rate-limit.test.ts

@@ -1,142 +0,0 @@
-/*
- * Copyright (c) 2026 Echo Team
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { describe, expect, it, beforeEach } from 'bun:test';
-import { NextRequest } from 'next/server';
-import {
-  rateLimit,
-  clearMemoryStore,
-  RateLimitConfig,
-} from '@/lib/middleware/rate-limit';
-
-function createMockRequest(url = 'http://localhost:3000/api/test'): NextRequest {
-  return new NextRequest(url);
-}
-
-describe('Rate Limiter', () => {
-  beforeEach(() => {
-    clearMemoryStore();
-  });
-
-  it('should allow requests within limit', async () => {
-    const config: RateLimitConfig = {
-      windowMs: 10,
-      maxRequests: 5,
-      keyGenerator: () => 'test-key-1',
-    };
-
-    const req = createMockRequest();
-
-    for (let i = 0; i < 5; i++) {
-      const result = await rateLimit(req, config);
-      expect(result.result.allowed).toBe(true);
-      expect(result.response).toBeUndefined();
-    }
-  });
-
-  it('should block requests exceeding limit', async () => {
-    const config: RateLimitConfig = {
-      windowMs: 10,
-      maxRequests: 2,
-      keyGenerator: () => 'test-key-2',
-    };
-
-    const req = createMockRequest();
-
-    await rateLimit(req, config);
-    await rateLimit(req, config);
-
-    const result = await rateLimit(req, config);
-    expect(result.result.allowed).toBe(false);
-    expect(result.response).toBeDefined();
-    expect(result.response!.status).toBe(429);
-  });
-
-  it('should return correct remaining count', async () => {
-    const config: RateLimitConfig = {
-      windowMs: 10,
-      maxRequests: 5,
-      keyGenerator: () => 'test-key-3',
-    };
-
-    const req = createMockRequest();
-
-    const result1 = await rateLimit(req, config);
-    expect(result1.result.remaining).toBe(4);
-
-    const result2 = await rateLimit(req, config);
-    expect(result2.result.remaining).toBe(3);
-
-    const result3 = await rateLimit(req, config);
-    expect(result3.result.remaining).toBe(2);
-  });
-
-  it('should include rate limit headers in 429 response', async () => {
-    const config: RateLimitConfig = {
-      windowMs: 60,
-      maxRequests: 1,
-      keyGenerator: () => 'test-key-4',
-    };
-
-    const req = createMockRequest();
-
-    await rateLimit(req, config);
-    const result = await rateLimit(req, config);
-
-    expect(result.response).toBeDefined();
-    expect(result.response!.headers.get('X-RateLimit-Limit')).toBe('1');
-    expect(result.response!.headers.get('X-RateLimit-Remaining')).toBe('0');
-    expect(result.response!.headers.get('X-RateLimit-Reset')).toBeTruthy();
-    expect(result.response!.headers.get('Retry-After')).toBeTruthy();
-  });
-
-  it('should use different limits for different keys', async () => {
-    let keyValue = 'key-a';
-    const config: RateLimitConfig = {
-      windowMs: 60,
-      maxRequests: 2,
-      keyGenerator: () => keyValue,
-    };
-
-    const req = createMockRequest();
-
-    await rateLimit(req, config);
-    await rateLimit(req, config);
-    const resultA = await rateLimit(req, config);
-    expect(resultA.result.allowed).toBe(false);
-
-    keyValue = 'key-b';
-    const resultB = await rateLimit(req, config);
-    expect(resultB.result.allowed).toBe(true);
-  });
-
-  it('should support async key generator', async () => {
-    const config: RateLimitConfig = {
-      windowMs: 60,
-      maxRequests: 2,
-      keyGenerator: async () => {
-        await new Promise((resolve) => setTimeout(resolve, 1));
-        return 'async-key';
-      },
-    };
-
-    const req = createMockRequest();
-
-    const result = await rateLimit(req, config);
-    expect(result.result.allowed).toBe(true);
-  });
-});