@nexttylabs/echo 0.4.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (262) hide show
  1. package/CHANGELOG.md +27 -0
  2. package/app/(dashboard)/admin/feedback/[id]/edit/page.tsx +12 -6
  3. package/app/(dashboard)/admin/feedback/new/page.tsx +19 -17
  4. package/app/(dashboard)/admin/layout.tsx +16 -6
  5. package/app/(dashboard)/layout.tsx +4 -2
  6. package/app/(dashboard)/settings/api-keys/page.tsx +13 -3
  7. package/app/(dashboard)/settings/layout.tsx +25 -2
  8. package/app/(dashboard)/settings/organization/page.tsx +8 -9
  9. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  10. package/app/api/admin/backup/route.ts +22 -4
  11. package/app/api/auth/register/handler.ts +1 -2
  12. package/app/api/feedback/[id]/comments/[commentId]/route.ts +13 -4
  13. package/app/api/feedback/[id]/reclassify/route.ts +4 -4
  14. package/app/api/organizations/handler.ts +2 -4
  15. package/components/settings/settings-sidebar.tsx +4 -4
  16. package/hooks/use-organization.tsx +116 -0
  17. package/hooks/use-permissions.ts +24 -11
  18. package/lib/auth/config.ts +0 -7
  19. package/lib/auth/organization.ts +20 -0
  20. package/lib/auth/permissions.ts +10 -0
  21. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  22. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  23. package/lib/db/migrations/meta/_journal.json +2 -135
  24. package/lib/db/schema/auth.ts +0 -1
  25. package/lib/db/schema/index.ts +0 -1
  26. package/lib/portal/public-context.tsx +5 -0
  27. package/package.json +20 -1
  28. package/.changeset/README.md +0 -21
  29. package/.changeset/config.json +0 -11
  30. package/.changeset/cozy-ghosts-care.md +0 -5
  31. package/.changeset/sharp-lines-stand.md +0 -5
  32. package/.changeset/sour-doodles-eat.md +0 -5
  33. package/.changeset/tender-moose-shop.md +0 -5
  34. package/.github/pull_request_template.md +0 -13
  35. package/.github/workflows/ci.yml +0 -41
  36. package/.github/workflows/publish.yml +0 -44
  37. package/.github/workflows/release.yml +0 -73
  38. package/AGENTS.md +0 -92
  39. package/Dockerfile +0 -57
  40. package/Makefile +0 -77
  41. package/bun.lock +0 -2503
  42. package/components/portal/project-switcher.tsx +0 -20
  43. package/docker-compose.dev.yml +0 -26
  44. package/docker-compose.yml +0 -98
  45. package/docs/architecture.md +0 -259
  46. package/docs/component-inventory.md +0 -261
  47. package/docs/database-migrations.md +0 -76
  48. package/docs/development-guide.md +0 -209
  49. package/docs/e2e-user-flows.csv +0 -31
  50. package/docs/er-diagram-feedback.mmd +0 -138
  51. package/docs/er-diagram.mmd +0 -281
  52. package/docs/i18n-check-report.md +0 -296
  53. package/docs/index.md +0 -214
  54. package/docs/logic-chain.md +0 -94
  55. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  56. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  57. package/docs/plans/2026-01-02-user-login.md +0 -437
  58. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  59. package/docs/plans/2026-01-02-user-registration.md +0 -628
  60. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  61. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  62. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  63. package/docs/plans/2026-01-05-member-removal.md +0 -186
  64. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  65. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  66. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  67. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  68. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  69. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  70. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  71. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  72. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  73. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  74. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  75. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  76. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  77. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  78. package/docs/plans/2026-01-09-settings-center.md +0 -948
  79. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  80. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  81. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  82. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  83. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  84. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  85. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  86. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  87. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  88. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  89. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  90. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  91. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  92. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  93. package/docs/product_changes.md +0 -37
  94. package/docs/project-overview.md +0 -159
  95. package/docs/project-scan-report.json +0 -104
  96. package/docs/route-role-visibility.md +0 -51
  97. package/docs/source-tree-analysis.md +0 -150
  98. package/docs/testing/delete-project-manual-tests.md +0 -18
  99. package/docs/user-story-tracking.md +0 -191
  100. package/eslint.config.mjs +0 -19
  101. package/lib/db/migrations/.gitkeep +0 -0
  102. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  103. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  104. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  105. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  106. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  107. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  108. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  109. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  110. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  111. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  112. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  113. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  114. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  115. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  116. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  117. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  118. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  119. package/lib/db/migrations/0016_github_integration.sql +0 -30
  120. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  121. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  122. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  123. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  124. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  125. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  126. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  127. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  128. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  129. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  130. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  131. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  132. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  133. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  134. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  135. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  136. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  137. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  138. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  139. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  140. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  141. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  142. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  143. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  144. package/lib/db/schema/projects.ts +0 -145
  145. package/lib/db/schema/user-profiles.ts +0 -31
  146. package/lib/validations/projects.ts +0 -49
  147. package/next-env.d.ts +0 -6
  148. package/playwright.config.ts +0 -44
  149. package/proxy.test.ts +0 -131
  150. package/proxy.ts +0 -116
  151. package/scripts/backup-db.sh +0 -57
  152. package/scripts/backup-db.ts +0 -24
  153. package/scripts/generate-openapi.ts +0 -22
  154. package/scripts/migration-helper.ts +0 -39
  155. package/scripts/pre-deploy.ts +0 -75
  156. package/scripts/restore-db.sh +0 -60
  157. package/scripts/rollback.ts +0 -72
  158. package/scripts/seed-tags.ts +0 -48
  159. package/tests/api/feedback-bulk.test.ts +0 -47
  160. package/tests/api/feedback-by-id.test.ts +0 -67
  161. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  162. package/tests/api/feedback-create.test.ts +0 -71
  163. package/tests/api/feedback-delete.test.ts +0 -160
  164. package/tests/api/feedback-filter.test.ts +0 -250
  165. package/tests/api/feedback-list.test.ts +0 -234
  166. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  167. package/tests/api/feedback-similar.test.ts +0 -46
  168. package/tests/api/feedback-sort.test.ts +0 -261
  169. package/tests/api/feedback-status-enum.test.ts +0 -49
  170. package/tests/api/feedback-status-filter.test.ts +0 -117
  171. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  172. package/tests/api/feedback.test.ts +0 -175
  173. package/tests/api/identify-jwt.test.ts +0 -25
  174. package/tests/api/invitation-accept.test.ts +0 -213
  175. package/tests/api/organization-invitations.test.ts +0 -186
  176. package/tests/api/organization-members-list.test.ts +0 -79
  177. package/tests/api/organization-members.test.ts +0 -340
  178. package/tests/api/organizations.test.ts +0 -149
  179. package/tests/api/register.test.ts +0 -112
  180. package/tests/api/upload.test.ts +0 -103
  181. package/tests/api/vote.test.ts +0 -82
  182. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  183. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  184. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  185. package/tests/app/health-route-helpers.test.ts +0 -27
  186. package/tests/app/login-page.test.ts +0 -26
  187. package/tests/app/portal-page.test.ts +0 -29
  188. package/tests/app/project-portal-overview.test.tsx +0 -25
  189. package/tests/app/widget-page-import.test.ts +0 -25
  190. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  191. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  192. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  193. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  194. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  195. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  196. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  197. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  198. package/tests/components/feedback-list-controls.test.tsx +0 -204
  199. package/tests/components/feedback-list-item.test.tsx +0 -67
  200. package/tests/components/landing/hero.test.tsx +0 -46
  201. package/tests/components/layout/language-switcher.test.tsx +0 -25
  202. package/tests/components/layout/sidebar.test.tsx +0 -157
  203. package/tests/components/login-form.test.ts +0 -25
  204. package/tests/components/organization-form.test.ts +0 -32
  205. package/tests/components/organization-switcher.test.ts +0 -25
  206. package/tests/components/pagination.test.tsx +0 -43
  207. package/tests/components/portal-overview.test.tsx +0 -25
  208. package/tests/components/profile-form.test.tsx +0 -139
  209. package/tests/components/role-selector.test.ts +0 -31
  210. package/tests/components/status-chart.test.tsx +0 -90
  211. package/tests/e2e/auth.e2e.ts +0 -323
  212. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  213. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  214. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  215. package/tests/e2e/feedback-management.e2e.ts +0 -565
  216. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  217. package/tests/e2e/feedback-view.e2e.ts +0 -297
  218. package/tests/e2e/fixtures/test-data.ts +0 -235
  219. package/tests/e2e/health-check.e2e.ts +0 -230
  220. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  221. package/tests/e2e/helpers/test-utils.ts +0 -298
  222. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  223. package/tests/e2e/organization.e2e.ts +0 -292
  224. package/tests/e2e/permissions.e2e.ts +0 -424
  225. package/tests/e2e/project-widget.e2e.ts +0 -63
  226. package/tests/feedback/filters.test.ts +0 -29
  227. package/tests/hooks/use-permissions.test.ts +0 -52
  228. package/tests/lib/ai/classifier.test.ts +0 -104
  229. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  230. package/tests/lib/attachments-schema.test.ts +0 -30
  231. package/tests/lib/auth/session.test.ts +0 -49
  232. package/tests/lib/auth-client.test.ts +0 -37
  233. package/tests/lib/auth-config.test.ts +0 -26
  234. package/tests/lib/feedback-prefill.test.ts +0 -52
  235. package/tests/lib/feedback-processor.test.ts +0 -41
  236. package/tests/lib/feedback-schema.test.ts +0 -33
  237. package/tests/lib/file-validator.test.ts +0 -48
  238. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  239. package/tests/lib/invitations.test.ts +0 -35
  240. package/tests/lib/login-schema.test.ts +0 -36
  241. package/tests/lib/org-context.test.ts +0 -95
  242. package/tests/lib/organization-access.test.ts +0 -44
  243. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  244. package/tests/lib/permissions.test.ts +0 -88
  245. package/tests/lib/portal-analytics.test.ts +0 -25
  246. package/tests/lib/portal-contributors.test.ts +0 -25
  247. package/tests/lib/portal-copy.test.ts +0 -27
  248. package/tests/lib/portal-i18n.test.ts +0 -30
  249. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  250. package/tests/lib/portal-modules.test.ts +0 -25
  251. package/tests/lib/portal-seo.test.ts +0 -25
  252. package/tests/lib/portal-sharing.test.ts +0 -25
  253. package/tests/lib/portal-sorting.test.ts +0 -25
  254. package/tests/lib/portal-theme.test.ts +0 -25
  255. package/tests/lib/rate-limit.test.ts +0 -142
  256. package/tests/lib/resolve-locale.test.ts +0 -34
  257. package/tests/lib/services/backup.test.ts +0 -145
  258. package/tests/lib/user-organizations.test.ts +0 -42
  259. package/tests/lib/user-role-schema.test.ts +0 -33
  260. package/tests/lib/user-schema.test.ts +0 -25
  261. package/tests/setup.ts +0 -74
  262. package/vercel.json +0 -4
@@ -1,145 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { relations } from "drizzle-orm";
19
- import {
20
- index,
21
- jsonb,
22
- pgTable,
23
- text,
24
- timestamp,
25
- unique,
26
- uuid,
27
- } from "drizzle-orm/pg-core";
28
- import { organizations } from "./organizations";
29
-
30
- export type WidgetConfig = {
31
- theme?: "light" | "dark" | "auto";
32
- primaryColor?: string;
33
- buttonText?: string;
34
- buttonPosition?: "bottom-right" | "bottom-left" | "top-right" | "top-left";
35
- fields?: {
36
- showType?: boolean;
37
- showPriority?: boolean;
38
- showDescription?: boolean;
39
- requireEmail?: boolean;
40
- };
41
- types?: string[];
42
- customCSS?: string;
43
- };
44
-
45
- export type PortalThemeConfig = {
46
- mode?: "light" | "dark" | "system";
47
- primaryColor?: string;
48
- accentColor?: string;
49
- borderRadius?: "none" | "sm" | "md" | "lg" | "full";
50
- fontFamily?: string;
51
- customCSS?: string;
52
- };
53
-
54
- export type PortalCopyConfig = {
55
- title?: string;
56
- description?: string;
57
- ctaLabel?: string;
58
- emptyStateMessage?: string;
59
- successMessage?: string;
60
- placeholders?: {
61
- titleInput?: string;
62
- descriptionInput?: string;
63
- };
64
- };
65
-
66
- export type PortalSeoConfig = {
67
- metaTitle?: string;
68
- metaDescription?: string;
69
- ogImage?: string;
70
- favicon?: string;
71
- noIndex?: boolean;
72
- };
73
-
74
- export type PortalSharingConfig = {
75
- enabled?: boolean;
76
- allowPublicVoting?: boolean;
77
- allowPublicComments?: boolean;
78
- showVoteCount?: boolean;
79
- showAuthor?: boolean;
80
- socialSharing?: {
81
- twitter?: boolean;
82
- linkedin?: boolean;
83
- facebook?: boolean;
84
- };
85
- };
86
-
87
- export type PortalConfig = {
88
- theme?: PortalThemeConfig;
89
- copy?: PortalCopyConfig;
90
- seo?: PortalSeoConfig;
91
- sharing?: PortalSharingConfig;
92
- languages?: string[];
93
- defaultLanguage?: string;
94
- modules?: {
95
- feedback?: boolean;
96
- roadmap?: boolean;
97
- changelog?: boolean;
98
- help?: boolean;
99
- };
100
- };
101
-
102
- export const projects = pgTable(
103
- "projects",
104
- {
105
- projectId: uuid("projectId").defaultRandom().primaryKey(),
106
- organizationId: text("organizationId")
107
- .notNull()
108
- .references(() => organizations.id, { onDelete: "cascade" }),
109
- name: text("name").notNull(),
110
- slug: text("slug").notNull(),
111
- description: text("description"),
112
- widgetConfig: jsonb("widgetConfig").$type<WidgetConfig>(),
113
- portalConfig: jsonb("portalConfig").$type<PortalConfig>(),
114
- customDomain: text("customDomain"),
115
- createdAt: timestamp("createdAt").defaultNow().notNull(),
116
- updatedAt: timestamp("updatedAt")
117
- .defaultNow()
118
- .$onUpdate(() => new Date())
119
- .notNull(),
120
- },
121
- (table) => ({
122
- orgIdx: index("idx_projects_orgId").on(table.organizationId),
123
- slugOrgUnique: unique("unique_slug_org").on(table.slug, table.organizationId),
124
- customDomainUnique: unique("unique_custom_domain").on(table.customDomain),
125
- }),
126
- );
127
-
128
- export const projectsRelations = relations(projects, ({ one }) => ({
129
- organization: one(organizations, {
130
- fields: [projects.organizationId],
131
- references: [organizations.id],
132
- }),
133
- }));
134
-
135
- export type Project = typeof projects.$inferSelect;
136
- export type NewProject = typeof projects.$inferInsert;
137
-
138
- export function generateSlug(name: string): string {
139
- return name
140
- .toLowerCase()
141
- .trim()
142
- .replace(/[^\w\s-]/g, "")
143
- .replace(/[\s_-]+/g, "-")
144
- .replace(/^-+|-+$/g, "");
145
- }
@@ -1,31 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { pgTable, text, timestamp } from "drizzle-orm/pg-core";
19
- import { user } from "./auth";
20
-
21
- export const userProfiles = pgTable("user_profiles", {
22
- userId: text("user_id")
23
- .primaryKey()
24
- .references(() => user.id, { onDelete: "cascade" }),
25
- name: text("name").notNull(),
26
- createdAt: timestamp("created_at").defaultNow().notNull(),
27
- updatedAt: timestamp("updated_at")
28
- .defaultNow()
29
- .$onUpdate(() => new Date())
30
- .notNull(),
31
- });
@@ -1,49 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { z } from "zod";
19
-
20
- export const createProjectSchema = z.object({
21
- name: z.string().min(1, "Project name is required").max(100, "Name too long"),
22
- description: z.string().max(500, "Description too long").optional(),
23
- });
24
-
25
- export type CreateProjectInput = z.infer<typeof createProjectSchema>;
26
-
27
- export const widgetConfigSchema = z.object({
28
- theme: z.enum(["light", "dark", "auto"]),
29
- primaryColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/, "Invalid color format"),
30
- buttonText: z.string().min(1).max(50),
31
- buttonPosition: z.enum(["bottom-right", "bottom-left", "top-right", "top-left"]),
32
- fields: z.object({
33
- showType: z.boolean(),
34
- showPriority: z.boolean(),
35
- showDescription: z.boolean(),
36
- requireEmail: z.boolean(),
37
- }),
38
- types: z.array(z.enum(["bug", "feature", "issue", "other"])).min(1),
39
- customCSS: z.string().max(5000).optional(),
40
- });
41
-
42
- export const updateProjectSchema = z.object({
43
- name: z.string().min(1).max(100).optional(),
44
- description: z.string().max(500).optional(),
45
- widgetConfig: widgetConfigSchema.optional(),
46
- });
47
-
48
- export type WidgetConfig = z.infer<typeof widgetConfigSchema>;
49
- export type UpdateProjectInput = z.infer<typeof updateProjectSchema>;
package/next-env.d.ts DELETED
@@ -1,6 +0,0 @@
1
- /// <reference types="next" />
2
- /// <reference types="next/image-types/global" />
3
- import "./.next/types/routes.d.ts";
4
-
5
- // NOTE: This file should not be edited
6
- // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
@@ -1,44 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { defineConfig, devices } from "@playwright/test";
19
-
20
- export default defineConfig({
21
- workers: 1,
22
- testDir: "./tests/e2e",
23
- testMatch: "**/*.e2e.ts",
24
- timeout: 60_000,
25
- expect: { timeout: 10_000 },
26
- use: {
27
- baseURL: process.env.E2E_BASE_URL ?? "http://localhost:3000",
28
- trace: "retain-on-failure",
29
- screenshot: "only-on-failure",
30
- video: "retain-on-failure",
31
- },
32
- webServer: {
33
- command: "bun dev",
34
- url: "http://localhost:3000",
35
- reuseExistingServer: !process.env.CI,
36
- timeout: 120_000,
37
- },
38
- projects: [
39
- {
40
- name: "chromium",
41
- use: { ...devices["Desktop Chrome"] },
42
- },
43
- ],
44
- });
package/proxy.test.ts DELETED
@@ -1,131 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { afterAll, describe, it, expect, mock } from "bun:test";
19
- import { NextRequest } from "next/server";
20
- import { PERMISSIONS } from "@/lib/auth/permissions";
21
-
22
- const previousDatabaseUrl = process.env.DATABASE_URL;
23
- process.env.DATABASE_URL ??= "postgres://test";
24
-
25
- mock.module("@/lib/auth/session", () => ({
26
- getServerSession: async (req: NextRequest) => {
27
- const isAuthed = req.headers.get("x-test-auth") === "1";
28
- if (!isAuthed) return null;
29
- const role = req.headers.get("x-test-role");
30
- return role ? { user: { id: "u_test", role } } : { user: { id: "u_test" } };
31
- },
32
- }));
33
-
34
- const { proxy } = await import("./proxy");
35
- const { requirePermission } = await import("@/lib/middleware/rbac");
36
-
37
- afterAll(() => {
38
- if (previousDatabaseUrl === undefined) {
39
- delete process.env.DATABASE_URL;
40
- } else {
41
- process.env.DATABASE_URL = previousDatabaseUrl;
42
- }
43
- });
44
-
45
- describe("proxy", () => {
46
- it("adds x-request-id to response", async () => {
47
- const req = new NextRequest("http://localhost/api/health");
48
- const res = await proxy(req);
49
- expect(res.headers.get("x-request-id")).toBeTruthy();
50
- });
51
- });
52
-
53
- describe("proxy auth", () => {
54
- it("redirects unauthenticated users from protected routes", async () => {
55
- const req = new NextRequest("http://localhost/dashboard");
56
- const res = await proxy(req);
57
- expect(res.headers.get("location")).toBe("http://localhost/login");
58
- });
59
-
60
- it("allows unauthenticated users on public routes", async () => {
61
- const req = new NextRequest("http://localhost/login");
62
- const res = await proxy(req);
63
- expect(res.headers.get("location")).toBeNull();
64
- });
65
-
66
- it("allows authenticated users on protected routes", async () => {
67
- const req = new NextRequest("http://localhost/dashboard", {
68
- headers: { "x-test-auth": "1" },
69
- });
70
- const res = await proxy(req);
71
- expect(res.headers.get("location")).toBeNull();
72
- });
73
- });
74
-
75
- describe("proxy locale cookie", () => {
76
- it("sets NEXT_LOCALE from Accept-Language when missing", async () => {
77
- const req = new NextRequest("http://localhost/dashboard", {
78
- headers: {
79
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
80
- },
81
- });
82
- const res = await proxy(req);
83
- expect(res.headers.get("set-cookie")).toContain("NEXT_LOCALE=zh-CN");
84
- });
85
-
86
- it("does not override existing NEXT_LOCALE cookie", async () => {
87
- const req = new NextRequest("http://localhost/login", {
88
- headers: {
89
- cookie: "NEXT_LOCALE=jp",
90
- "accept-language": "zh-CN,zh;q=0.9,en;q=0.8",
91
- },
92
- });
93
- const res = await proxy(req);
94
- expect(res.headers.get("set-cookie")).toBeNull();
95
- });
96
- });
97
-
98
- describe("rbac requirePermission", () => {
99
- it("returns 401 when session is missing", async () => {
100
- const req = new NextRequest("http://localhost/api/secure");
101
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
102
- expect(res.status).toBe(401);
103
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
104
- });
105
-
106
- it("returns 401 when role is missing", async () => {
107
- const req = new NextRequest("http://localhost/api/secure", {
108
- headers: { "x-test-auth": "1" },
109
- });
110
- const res = await requirePermission(PERMISSIONS.CREATE_FEEDBACK, req);
111
- expect(res.status).toBe(401);
112
- await expect(res.json()).resolves.toEqual({ error: "Unauthorized" });
113
- });
114
-
115
- it("returns 403 when role lacks permission", async () => {
116
- const req = new NextRequest("http://localhost/api/secure", {
117
- headers: { "x-test-auth": "1", "x-test-role": "customer" },
118
- });
119
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
120
- expect(res.status).toBe(403);
121
- await expect(res.json()).resolves.toEqual({ error: "Forbidden" });
122
- });
123
-
124
- it("returns NextResponse.next when permission is allowed", async () => {
125
- const req = new NextRequest("http://localhost/api/secure", {
126
- headers: { "x-test-auth": "1", "x-test-role": "admin" },
127
- });
128
- const res = await requirePermission(PERMISSIONS.MANAGE_ORG, req);
129
- expect(res.status).toBe(200);
130
- });
131
- });
package/proxy.ts DELETED
@@ -1,116 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { NextRequest, NextResponse } from "next/server";
19
- import {
20
- DEFAULT_LOCALE,
21
- LOCALE_COOKIE_NAME,
22
- getPreferredLocaleFromHeader,
23
- isSupportedLocale,
24
- } from "@/i18n/config";
25
-
26
- // Default session cookie name used by better-auth
27
- const SESSION_COOKIE_NAME = "better-auth.session_token";
28
-
29
- const publicRoutes = ["/login", "/register", "/invite", "/invite/", "/api/auth", "/widget", "/portal"];
30
- const protectedRoutes = ["/dashboard", "/feedback", "/settings"];
31
- const LOCALE_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
32
-
33
- function generateRequestId(): string {
34
- return crypto.randomUUID();
35
- }
36
-
37
- function isRouteMatch(pathname: string, routes: string[]) {
38
- return routes.some((route) => pathname === route || pathname.startsWith(route));
39
- }
40
-
41
- function shouldSetLocaleCookie(req: NextRequest, pathname: string) {
42
- if (req.method !== "GET") return false;
43
- if (pathname.startsWith("/api/") || pathname.startsWith("/_next/")) return false;
44
- if (pathname.includes(".")) return false;
45
- const existingLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
46
- return !existingLocale;
47
- }
48
-
49
- function resolveLocaleFromRequest(req: NextRequest): string {
50
- const cookieLocale = req.cookies.get(LOCALE_COOKIE_NAME)?.value;
51
- if (cookieLocale && isSupportedLocale(cookieLocale)) return cookieLocale;
52
- return getPreferredLocaleFromHeader(req.headers.get("accept-language")) || DEFAULT_LOCALE;
53
- }
54
-
55
- function maybeSetLocaleCookie(req: NextRequest, response: NextResponse, pathname: string) {
56
- if (!shouldSetLocaleCookie(req, pathname)) return;
57
- const locale = resolveLocaleFromRequest(req);
58
- response.cookies.set(LOCALE_COOKIE_NAME, locale, {
59
- path: "/",
60
- sameSite: "lax",
61
- secure: req.nextUrl.protocol === "https:",
62
- maxAge: LOCALE_COOKIE_MAX_AGE_SECONDS,
63
- });
64
- }
65
-
66
- // Helper to determine if request is authenticated for tests
67
- function isAuthenticated(req: NextRequest): boolean {
68
- // Real auth uses session cookie
69
- const sessionCookie = req.cookies.get(SESSION_COOKIE_NAME);
70
- if (sessionCookie?.value) return true;
71
- // Test auth can be simulated via custom header
72
- const testAuth = req.headers.get('x-test-auth');
73
- return testAuth === '1';
74
- }
75
-
76
- export async function proxy(req: NextRequest) {
77
- const startTime = Date.now();
78
- const reqId = req.headers.get("x-request-id") || generateRequestId();
79
-
80
- const requestHeaders = new Headers(req.headers);
81
- requestHeaders.set("x-request-id", reqId);
82
-
83
- // Log request (Edge-compatible)
84
- console.log(`[${reqId}] ${req.method} ${req.nextUrl.pathname}`);
85
-
86
- const pathname = req.nextUrl.pathname;
87
-
88
- const isPublic = isRouteMatch(pathname, publicRoutes);
89
- const isProtected = isRouteMatch(pathname, protectedRoutes);
90
-
91
- let response = NextResponse.next({
92
- request: {
93
- headers: requestHeaders,
94
- },
95
- });
96
-
97
- if (isProtected && !isPublic) {
98
- // Optimistic check: only verify session cookie presence
99
- // Full session validation happens in page/layout components
100
- if (!isAuthenticated(req)) {
101
- response = NextResponse.redirect(new URL("/login", req.url));
102
- }
103
- }
104
-
105
- maybeSetLocaleCookie(req, response, pathname);
106
- response.headers.set("x-request-id", reqId);
107
-
108
- const duration = Date.now() - startTime;
109
- console.log(`[${reqId}] ${response.status} ${duration}ms`);
110
-
111
- return response;
112
- }
113
-
114
- export const config = {
115
- matcher: ["/api/:path*", "/((?!_next/static|_next/image|favicon.ico).*)"],
116
- };
@@ -1,57 +0,0 @@
1
- #!/bin/bash
2
- # scripts/backup-db.sh
3
-
4
- set -e
5
-
6
- # Configuration
7
- BACKUP_DIR="${BACKUP_DIR:-./backups}"
8
- RETENTION_DAYS=${RETENTION_DAYS:-30}
9
- TIMESTAMP=$(date +%Y%m%d-%H%M%S)
10
- BACKUP_FILE="$BACKUP_DIR/echo-$TIMESTAMP.sql"
11
- DATABASE_URL="${DATABASE_URL:-postgresql://echo:changeme@localhost:5432/echo}"
12
-
13
- # Colors
14
- RED='\033[0;31m'
15
- GREEN='\033[0;32m'
16
- YELLOW='\033[1;33m'
17
- NC='\033[0m'
18
-
19
- log_info() {
20
- echo -e "${GREEN}[INFO]${NC} $1"
21
- }
22
-
23
- log_warn() {
24
- echo -e "${YELLOW}[WARN]${NC} $1"
25
- }
26
-
27
- log_error() {
28
- echo -e "${RED}[ERROR]${NC} $1"
29
- }
30
-
31
- mkdir -p "$BACKUP_DIR"
32
-
33
- log_info "Starting database backup..."
34
- log_info "Backup file: $BACKUP_FILE"
35
-
36
- if pg_dump "$DATABASE_URL" > "$BACKUP_FILE"; then
37
- log_info "Backup completed successfully"
38
-
39
- gzip "$BACKUP_FILE"
40
- BACKUP_FILE="$BACKUP_FILE.gz"
41
- log_info "Backup compressed: $BACKUP_FILE"
42
-
43
- FILE_SIZE=$(du -h "$BACKUP_FILE" | cut -f1)
44
- log_info "Backup size: $FILE_SIZE"
45
-
46
- log_info "Cleaning up old backups (older than $RETENTION_DAYS days)..."
47
- DELETED=$(find "$BACKUP_DIR" -name "echo-*.sql.gz" -mtime +$RETENTION_DAYS -delete -print | wc -l)
48
- log_info "Deleted $DELETED old backup(s)"
49
-
50
- log_info "Current backups:"
51
- ls -lh "$BACKUP_DIR"/echo-*.sql.gz 2>/dev/null | awk '{print " " $9 " (" $5 ")"}' || echo " No backups found"
52
-
53
- log_info "Backup process completed!"
54
- else
55
- log_error "Backup failed!"
56
- exit 1
57
- fi
@@ -1,24 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { backupDatabase, getBackupConfig } from "@/lib/services/backup";
19
-
20
- const config = getBackupConfig();
21
-
22
- backupDatabase(config)
23
- .then(() => process.exit(0))
24
- .catch(() => process.exit(1));
@@ -1,22 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { generateOpenApiSpec } from '../lib/swagger/generate';
19
-
20
- generateOpenApiSpec()
21
- .then(() => console.log('OpenAPI spec generated at public/openapi.json'))
22
- .catch(console.error);
@@ -1,39 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { execSync } from "child_process";
19
- import { logger } from "@/lib/logger";
20
-
21
- export function generateMigration(name: string) {
22
- logger.info({ name }, "Generating migration");
23
- execSync("bun run db:generate", { stdio: "inherit" });
24
- }
25
-
26
- export function applyMigrations() {
27
- logger.info("Applying migrations...");
28
- execSync("bun run db:migrate", { stdio: "inherit" });
29
- }
30
-
31
- export function pushSchema() {
32
- logger.info("Pushing schema to database...");
33
- execSync("bun run db:push", { stdio: "inherit" });
34
- }
35
-
36
- export function checkSchema() {
37
- logger.info("Checking schema consistency...");
38
- execSync("bun run db:check", { stdio: "inherit" });
39
- }