@nexttylabs/echo 0.4.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (262) hide show
  1. package/CHANGELOG.md +27 -0
  2. package/app/(dashboard)/admin/feedback/[id]/edit/page.tsx +12 -6
  3. package/app/(dashboard)/admin/feedback/new/page.tsx +19 -17
  4. package/app/(dashboard)/admin/layout.tsx +16 -6
  5. package/app/(dashboard)/layout.tsx +4 -2
  6. package/app/(dashboard)/settings/api-keys/page.tsx +13 -3
  7. package/app/(dashboard)/settings/layout.tsx +25 -2
  8. package/app/(dashboard)/settings/organization/page.tsx +8 -9
  9. package/app/(public)/[organizationSlug]/roadmap/page.tsx +19 -1
  10. package/app/api/admin/backup/route.ts +22 -4
  11. package/app/api/auth/register/handler.ts +1 -2
  12. package/app/api/feedback/[id]/comments/[commentId]/route.ts +13 -4
  13. package/app/api/feedback/[id]/reclassify/route.ts +4 -4
  14. package/app/api/organizations/handler.ts +2 -4
  15. package/components/settings/settings-sidebar.tsx +4 -4
  16. package/hooks/use-organization.tsx +116 -0
  17. package/hooks/use-permissions.ts +24 -11
  18. package/lib/auth/config.ts +0 -7
  19. package/lib/auth/organization.ts +20 -0
  20. package/lib/auth/permissions.ts +10 -0
  21. package/lib/db/migrations/0000_needy_leech.sql +335 -0
  22. package/lib/db/migrations/meta/0000_snapshot.json +2186 -1
  23. package/lib/db/migrations/meta/_journal.json +2 -135
  24. package/lib/db/schema/auth.ts +0 -1
  25. package/lib/db/schema/index.ts +0 -1
  26. package/lib/portal/public-context.tsx +5 -0
  27. package/package.json +20 -1
  28. package/.changeset/README.md +0 -21
  29. package/.changeset/config.json +0 -11
  30. package/.changeset/cozy-ghosts-care.md +0 -5
  31. package/.changeset/sharp-lines-stand.md +0 -5
  32. package/.changeset/sour-doodles-eat.md +0 -5
  33. package/.changeset/tender-moose-shop.md +0 -5
  34. package/.github/pull_request_template.md +0 -13
  35. package/.github/workflows/ci.yml +0 -41
  36. package/.github/workflows/publish.yml +0 -44
  37. package/.github/workflows/release.yml +0 -73
  38. package/AGENTS.md +0 -92
  39. package/Dockerfile +0 -57
  40. package/Makefile +0 -77
  41. package/bun.lock +0 -2503
  42. package/components/portal/project-switcher.tsx +0 -20
  43. package/docker-compose.dev.yml +0 -26
  44. package/docker-compose.yml +0 -98
  45. package/docs/architecture.md +0 -259
  46. package/docs/component-inventory.md +0 -261
  47. package/docs/database-migrations.md +0 -76
  48. package/docs/development-guide.md +0 -209
  49. package/docs/e2e-user-flows.csv +0 -31
  50. package/docs/er-diagram-feedback.mmd +0 -138
  51. package/docs/er-diagram.mmd +0 -281
  52. package/docs/i18n-check-report.md +0 -296
  53. package/docs/index.md +0 -214
  54. package/docs/logic-chain.md +0 -94
  55. package/docs/plans/2026-01-02-database-migration-scripts.md +0 -496
  56. package/docs/plans/2026-01-02-user-login-design.md +0 -37
  57. package/docs/plans/2026-01-02-user-login.md +0 -437
  58. package/docs/plans/2026-01-02-user-registration-design.md +0 -47
  59. package/docs/plans/2026-01-02-user-registration.md +0 -628
  60. package/docs/plans/2026-01-03-roles-permissions-design.md +0 -20
  61. package/docs/plans/2026-01-03-roles-permissions.md +0 -266
  62. package/docs/plans/2026-01-05-authentication-middleware.md +0 -207
  63. package/docs/plans/2026-01-05-member-removal.md +0 -186
  64. package/docs/plans/2026-01-05-organization-creation.md +0 -374
  65. package/docs/plans/2026-01-05-rbac-middleware.md +0 -112
  66. package/docs/plans/2026-01-05-role-configuration.md +0 -441
  67. package/docs/plans/2026-01-06-file-upload-support.md +0 -804
  68. package/docs/plans/2026-01-06-permission-check-hook.md +0 -155
  69. package/docs/plans/2026-01-06-resource-ownership-check.md +0 -231
  70. package/docs/plans/2026-01-07-feedback-tracking-link.md +0 -459
  71. package/docs/plans/2026-01-09-logout-redirect-design.md +0 -52
  72. package/docs/plans/2026-01-09-phase2-3-plan.md +0 -654
  73. package/docs/plans/2026-01-09-portal-execution-plan.md +0 -408
  74. package/docs/plans/2026-01-09-project-delete-feature-design.md +0 -163
  75. package/docs/plans/2026-01-09-project-delete-implementation.md +0 -451
  76. package/docs/plans/2026-01-09-project-edit-delete-design.md +0 -52
  77. package/docs/plans/2026-01-09-settings-center-design.md +0 -114
  78. package/docs/plans/2026-01-09-settings-center.md +0 -948
  79. package/docs/plans/2026-01-10-organization-only-design.md +0 -66
  80. package/docs/plans/2026-01-10-organization-only-implementation.md +0 -433
  81. package/docs/plans/2026-01-10-portal-settings-restructure-plan.md +0 -18
  82. package/docs/plans/2026-01-10-project-settings-tabs-design-implementation.md +0 -296
  83. package/docs/plans/2026-01-14-e2e-playwright-feedback.md +0 -173
  84. package/docs/plans/2026-01-15-feedback-management-org-context-design.md +0 -82
  85. package/docs/plans/2026-01-15-feedback-management-org-context-implementation-plan.md +0 -521
  86. package/docs/plans/2026-01-16-admin-feedback-filters-design.md +0 -75
  87. package/docs/plans/2026-01-16-admin-feedback-filters-implementation.md +0 -293
  88. package/docs/plans/2026-01-16-admin-feedback-route-consolidation.md +0 -180
  89. package/docs/plans/2026-01-16-e2e-test-fixes.md +0 -158
  90. package/docs/plans/2026-01-17-admin-feedback-filters.md +0 -214
  91. package/docs/plans/2026-01-17-admin-feedback-improvements.md +0 -453
  92. package/docs/plans/2026-01-18-changesets-design.md +0 -40
  93. package/docs/product_changes.md +0 -37
  94. package/docs/project-overview.md +0 -159
  95. package/docs/project-scan-report.json +0 -104
  96. package/docs/route-role-visibility.md +0 -51
  97. package/docs/source-tree-analysis.md +0 -150
  98. package/docs/testing/delete-project-manual-tests.md +0 -18
  99. package/docs/user-story-tracking.md +0 -191
  100. package/eslint.config.mjs +0 -19
  101. package/lib/db/migrations/.gitkeep +0 -0
  102. package/lib/db/migrations/0000_cynical_gladiator.sql +0 -53
  103. package/lib/db/migrations/0001_wandering_sunfire.sql +0 -27
  104. package/lib/db/migrations/0002_shallow_speedball.sql +0 -1
  105. package/lib/db/migrations/0003_add_org_description.sql +0 -1
  106. package/lib/db/migrations/0003_boring_wild_pack.sql +0 -13
  107. package/lib/db/migrations/0004_windy_tyrannus.sql +0 -27
  108. package/lib/db/migrations/0005_perpetual_doorman.sql +0 -5
  109. package/lib/db/migrations/0006_aberrant_captain_midlands.sql +0 -13
  110. package/lib/db/migrations/0007_clever_captain_cross.sql +0 -14
  111. package/lib/db/migrations/0008_sparkling_pandemic.sql +0 -2
  112. package/lib/db/migrations/0009_happy_black_tom.sql +0 -29
  113. package/lib/db/migrations/0010_kind_junta.sql +0 -8
  114. package/lib/db/migrations/0011_mute_squadron_supreme.sql +0 -25
  115. package/lib/db/migrations/0012_giant_power_man.sql +0 -24
  116. package/lib/db/migrations/0013_damp_titanium_man.sql +0 -17
  117. package/lib/db/migrations/0014_blue_alice.sql +0 -18
  118. package/lib/db/migrations/0015_webhook_tables.sql +0 -41
  119. package/lib/db/migrations/0016_github_integration.sql +0 -30
  120. package/lib/db/migrations/0016_overjoyed_ghost_rider.sql +0 -22
  121. package/lib/db/migrations/0017_slimy_inhumans.sql +0 -6
  122. package/lib/db/migrations/0018_same_spitfire.sql +0 -1
  123. package/lib/db/migrations/0019_jittery_loners.sql +0 -16
  124. package/lib/db/migrations/0019_remove_projects_add_org_settings.sql +0 -14
  125. package/lib/db/migrations/meta/0001_snapshot.json +0 -553
  126. package/lib/db/migrations/meta/0002_snapshot.json +0 -560
  127. package/lib/db/migrations/meta/0003_snapshot.json +0 -650
  128. package/lib/db/migrations/meta/0004_snapshot.json +0 -852
  129. package/lib/db/migrations/meta/0005_snapshot.json +0 -900
  130. package/lib/db/migrations/meta/0006_snapshot.json +0 -1011
  131. package/lib/db/migrations/meta/0007_snapshot.json +0 -1125
  132. package/lib/db/migrations/meta/0008_snapshot.json +0 -1146
  133. package/lib/db/migrations/meta/0009_snapshot.json +0 -1386
  134. package/lib/db/migrations/meta/0010_snapshot.json +0 -1419
  135. package/lib/db/migrations/meta/0011_snapshot.json +0 -1615
  136. package/lib/db/migrations/meta/0012_snapshot.json +0 -1805
  137. package/lib/db/migrations/meta/0013_snapshot.json +0 -1948
  138. package/lib/db/migrations/meta/0014_snapshot.json +0 -2082
  139. package/lib/db/migrations/meta/0015_snapshot.json +0 -2476
  140. package/lib/db/migrations/meta/0016_snapshot.json +0 -2633
  141. package/lib/db/migrations/meta/0017_snapshot.json +0 -2680
  142. package/lib/db/migrations/meta/0018_snapshot.json +0 -2686
  143. package/lib/db/migrations/meta/0019_snapshot.json +0 -2741
  144. package/lib/db/schema/projects.ts +0 -145
  145. package/lib/db/schema/user-profiles.ts +0 -31
  146. package/lib/validations/projects.ts +0 -49
  147. package/next-env.d.ts +0 -6
  148. package/playwright.config.ts +0 -44
  149. package/proxy.test.ts +0 -131
  150. package/proxy.ts +0 -116
  151. package/scripts/backup-db.sh +0 -57
  152. package/scripts/backup-db.ts +0 -24
  153. package/scripts/generate-openapi.ts +0 -22
  154. package/scripts/migration-helper.ts +0 -39
  155. package/scripts/pre-deploy.ts +0 -75
  156. package/scripts/restore-db.sh +0 -60
  157. package/scripts/rollback.ts +0 -72
  158. package/scripts/seed-tags.ts +0 -48
  159. package/tests/api/feedback-bulk.test.ts +0 -47
  160. package/tests/api/feedback-by-id.test.ts +0 -67
  161. package/tests/api/feedback-comments-route-import.test.ts +0 -26
  162. package/tests/api/feedback-create.test.ts +0 -71
  163. package/tests/api/feedback-delete.test.ts +0 -160
  164. package/tests/api/feedback-filter.test.ts +0 -250
  165. package/tests/api/feedback-list.test.ts +0 -234
  166. package/tests/api/feedback-route-assignee-condition.test.ts +0 -32
  167. package/tests/api/feedback-similar.test.ts +0 -46
  168. package/tests/api/feedback-sort.test.ts +0 -261
  169. package/tests/api/feedback-status-enum.test.ts +0 -49
  170. package/tests/api/feedback-status-filter.test.ts +0 -117
  171. package/tests/api/feedback-submit-on-behalf.test.ts +0 -269
  172. package/tests/api/feedback.test.ts +0 -175
  173. package/tests/api/identify-jwt.test.ts +0 -25
  174. package/tests/api/invitation-accept.test.ts +0 -213
  175. package/tests/api/organization-invitations.test.ts +0 -186
  176. package/tests/api/organization-members-list.test.ts +0 -79
  177. package/tests/api/organization-members.test.ts +0 -340
  178. package/tests/api/organizations.test.ts +0 -149
  179. package/tests/api/register.test.ts +0 -112
  180. package/tests/api/upload.test.ts +0 -103
  181. package/tests/api/vote.test.ts +0 -82
  182. package/tests/app/admin-feedback-detail-page.test.tsx +0 -25
  183. package/tests/app/admin-feedback-list-page.test.tsx +0 -25
  184. package/tests/app/admin-feedback-new-page.test.tsx +0 -25
  185. package/tests/app/health-route-helpers.test.ts +0 -27
  186. package/tests/app/login-page.test.ts +0 -26
  187. package/tests/app/portal-page.test.ts +0 -29
  188. package/tests/app/project-portal-overview.test.tsx +0 -25
  189. package/tests/app/widget-page-import.test.ts +0 -25
  190. package/tests/components/create-post-dialog-defaults.test.ts +0 -43
  191. package/tests/components/feedback/duplicate-suggestions-inline.test.tsx +0 -27
  192. package/tests/components/feedback/embedded-feedback-form.test.tsx +0 -96
  193. package/tests/components/feedback/feedback-detail.test.tsx +0 -25
  194. package/tests/components/feedback/feedback-stats.test.tsx +0 -49
  195. package/tests/components/feedback-bulk-actions.test.tsx +0 -39
  196. package/tests/components/feedback-i18n-keys.test.ts +0 -70
  197. package/tests/components/feedback-list-controls-compile.test.ts +0 -25
  198. package/tests/components/feedback-list-controls.test.tsx +0 -204
  199. package/tests/components/feedback-list-item.test.tsx +0 -67
  200. package/tests/components/landing/hero.test.tsx +0 -46
  201. package/tests/components/layout/language-switcher.test.tsx +0 -25
  202. package/tests/components/layout/sidebar.test.tsx +0 -157
  203. package/tests/components/login-form.test.ts +0 -25
  204. package/tests/components/organization-form.test.ts +0 -32
  205. package/tests/components/organization-switcher.test.ts +0 -25
  206. package/tests/components/pagination.test.tsx +0 -43
  207. package/tests/components/portal-overview.test.tsx +0 -25
  208. package/tests/components/profile-form.test.tsx +0 -139
  209. package/tests/components/role-selector.test.ts +0 -31
  210. package/tests/components/status-chart.test.tsx +0 -90
  211. package/tests/e2e/auth.e2e.ts +0 -323
  212. package/tests/e2e/feedback-actions.e2e.ts +0 -471
  213. package/tests/e2e/feedback-attachment.e2e.ts +0 -168
  214. package/tests/e2e/feedback-customer.e2e.ts +0 -226
  215. package/tests/e2e/feedback-management.e2e.ts +0 -565
  216. package/tests/e2e/feedback-submit.e2e.ts +0 -133
  217. package/tests/e2e/feedback-view.e2e.ts +0 -297
  218. package/tests/e2e/fixtures/test-data.ts +0 -235
  219. package/tests/e2e/health-check.e2e.ts +0 -230
  220. package/tests/e2e/helpers/test-utils-helpers.test.ts +0 -43
  221. package/tests/e2e/helpers/test-utils.ts +0 -298
  222. package/tests/e2e/integration-placeholders.e2e.ts +0 -199
  223. package/tests/e2e/organization.e2e.ts +0 -292
  224. package/tests/e2e/permissions.e2e.ts +0 -424
  225. package/tests/e2e/project-widget.e2e.ts +0 -63
  226. package/tests/feedback/filters.test.ts +0 -29
  227. package/tests/hooks/use-permissions.test.ts +0 -52
  228. package/tests/lib/ai/classifier.test.ts +0 -104
  229. package/tests/lib/ai/duplicate-detector.test.ts +0 -234
  230. package/tests/lib/attachments-schema.test.ts +0 -30
  231. package/tests/lib/auth/session.test.ts +0 -49
  232. package/tests/lib/auth-client.test.ts +0 -37
  233. package/tests/lib/auth-config.test.ts +0 -26
  234. package/tests/lib/feedback-prefill.test.ts +0 -52
  235. package/tests/lib/feedback-processor.test.ts +0 -41
  236. package/tests/lib/feedback-schema.test.ts +0 -33
  237. package/tests/lib/file-validator.test.ts +0 -48
  238. package/tests/lib/get-feedback-by-id.test.ts +0 -37
  239. package/tests/lib/invitations.test.ts +0 -35
  240. package/tests/lib/login-schema.test.ts +0 -36
  241. package/tests/lib/org-context.test.ts +0 -95
  242. package/tests/lib/organization-access.test.ts +0 -44
  243. package/tests/lib/organization-member-role-schema.test.ts +0 -41
  244. package/tests/lib/permissions.test.ts +0 -88
  245. package/tests/lib/portal-analytics.test.ts +0 -25
  246. package/tests/lib/portal-contributors.test.ts +0 -25
  247. package/tests/lib/portal-copy.test.ts +0 -27
  248. package/tests/lib/portal-i18n.test.ts +0 -30
  249. package/tests/lib/portal-leaderboard-settings.test.ts +0 -25
  250. package/tests/lib/portal-modules.test.ts +0 -25
  251. package/tests/lib/portal-seo.test.ts +0 -25
  252. package/tests/lib/portal-sharing.test.ts +0 -25
  253. package/tests/lib/portal-sorting.test.ts +0 -25
  254. package/tests/lib/portal-theme.test.ts +0 -25
  255. package/tests/lib/rate-limit.test.ts +0 -142
  256. package/tests/lib/resolve-locale.test.ts +0 -34
  257. package/tests/lib/services/backup.test.ts +0 -145
  258. package/tests/lib/user-organizations.test.ts +0 -42
  259. package/tests/lib/user-role-schema.test.ts +0 -33
  260. package/tests/lib/user-schema.test.ts +0 -25
  261. package/tests/setup.ts +0 -74
  262. package/vercel.json +0 -4
@@ -1,175 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildCreateFeedbackHandler } from "@/app/api/feedback/handler";
20
- import { feedback } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildCreateFeedbackHandler>[0];
23
-
24
- type InsertReturn = {
25
- values: (values: Record<string, unknown>) => {
26
- returning: () => Promise<Array<Record<string, unknown>>>;
27
- };
28
- };
29
-
30
- const makeDeps = () => {
31
- let inserted: Record<string, unknown> | null = null;
32
-
33
- const insert = (table?: unknown) => ({
34
- values: (values: Record<string, unknown>) => {
35
- if (table === feedback) {
36
- inserted = values;
37
- }
38
- return {
39
- returning: async () => [
40
- {
41
- feedbackId: 1,
42
- ...values,
43
- status: values.status ?? "new",
44
- createdAt: new Date(),
45
- updatedAt: new Date(),
46
- },
47
- ],
48
- };
49
- },
50
- });
51
-
52
- const db: FakeDeps["db"] = {
53
- insert: insert as unknown as () => InsertReturn,
54
- };
55
-
56
- return {
57
- db,
58
- getInserted: () => inserted,
59
- } satisfies FakeDeps & { getInserted: () => Record<string, unknown> | null };
60
- };
61
-
62
- const makeDepsWithInsertError = () => {
63
- const insert = () => ({
64
- values: () => ({
65
- returning: async () => {
66
- throw new Error("DB failure");
67
- },
68
- }),
69
- });
70
-
71
- const db: FakeDeps["db"] = {
72
- insert: insert as unknown as () => InsertReturn,
73
- };
74
-
75
- return { db } satisfies FakeDeps;
76
- };
77
-
78
- describe("POST /api/feedback", () => {
79
- it("creates feedback when payload is valid", async () => {
80
- const deps = makeDeps();
81
- const handler = buildCreateFeedbackHandler(deps);
82
-
83
- const res = await handler(
84
- new Request("http://localhost/api/feedback", {
85
- method: "POST",
86
- headers: {
87
- "Content-Type": "application/json",
88
- "x-organization-id": "org_1",
89
- },
90
- body: JSON.stringify({
91
- title: "Great idea",
92
- description: "Please add dark mode",
93
- type: "feature",
94
- priority: "high",
95
- }),
96
- }),
97
- );
98
-
99
- const json = await res.json();
100
- expect(res.status).toBe(201);
101
- expect(json.data.feedbackId).toBe(1);
102
- expect(deps.getInserted()?.organizationId).toBe("org_1");
103
- });
104
-
105
- it("returns 400 when organization id is missing", async () => {
106
- const handler = buildCreateFeedbackHandler(makeDeps());
107
-
108
- const res = await handler(
109
- new Request("http://localhost/api/feedback", {
110
- method: "POST",
111
- headers: {
112
- "Content-Type": "application/json",
113
- },
114
- body: JSON.stringify({
115
- title: "Great idea",
116
- description: "Please add dark mode",
117
- type: "feature",
118
- priority: "high",
119
- }),
120
- }),
121
- );
122
-
123
- const json = await res.json();
124
- expect(res.status).toBe(400);
125
- expect(json.code).toBe("VALIDATION_ERROR");
126
- });
127
-
128
- it("returns 400 when payload is invalid", async () => {
129
- const handler = buildCreateFeedbackHandler(makeDeps());
130
-
131
- const res = await handler(
132
- new Request("http://localhost/api/feedback", {
133
- method: "POST",
134
- headers: {
135
- "Content-Type": "application/json",
136
- "x-organization-id": "org_1",
137
- },
138
- body: JSON.stringify({
139
- title: "",
140
- description: "x",
141
- type: "bug",
142
- priority: "high",
143
- }),
144
- }),
145
- );
146
-
147
- const json = await res.json();
148
- expect(res.status).toBe(400);
149
- expect(json.code).toBe("VALIDATION_ERROR");
150
- });
151
-
152
- it("returns 500 when database insert fails", async () => {
153
- const handler = buildCreateFeedbackHandler(makeDepsWithInsertError());
154
-
155
- const res = await handler(
156
- new Request("http://localhost/api/feedback", {
157
- method: "POST",
158
- headers: {
159
- "Content-Type": "application/json",
160
- "x-organization-id": "org_1",
161
- },
162
- body: JSON.stringify({
163
- title: "Great idea",
164
- description: "Please add dark mode",
165
- type: "feature",
166
- priority: "high",
167
- }),
168
- }),
169
- );
170
-
171
- const json = await res.json();
172
- expect(res.status).toBe(500);
173
- expect(json.code).toBe("INTERNAL_ERROR");
174
- });
175
- });
@@ -1,25 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { parseJwtIdentity } from "@/lib/auth/jwt-identity";
20
-
21
- describe("parseJwtIdentity", () => {
22
- it("returns null when token is empty", () => {
23
- expect(parseJwtIdentity("")).toBe(null);
24
- });
25
- });
@@ -1,213 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildAcceptInvitationHandler } from "@/app/api/invitations/accept/handler";
20
- import { invitations, organizationMembers } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildAcceptInvitationHandler>[0];
23
-
24
- type SelectReturn<T> = {
25
- from: () => {
26
- where: () => {
27
- limit: (count: number) => Promise<T[]>;
28
- };
29
- };
30
- };
31
-
32
- type InsertReturn = {
33
- values: (values: Record<string, unknown>) => Promise<unknown>;
34
- };
35
-
36
- type UpdateReturn = {
37
- set: (values: Record<string, unknown>) => {
38
- where: () => Promise<unknown>;
39
- };
40
- };
41
-
42
- const now = new Date("2026-01-01T00:00:00.000Z");
43
-
44
- const makeDeps = () => {
45
- const auth: FakeDeps["auth"] = {
46
- api: {
47
- getSession: async () => ({ user: { id: "user_1" } }),
48
- },
49
- };
50
-
51
- let invitationRecord: {
52
- id: string;
53
- organizationId: string;
54
- email: string;
55
- role: string;
56
- token: string;
57
- expiresAt: Date;
58
- acceptedAt: Date | null;
59
- } | null = {
60
- id: "inv_1",
61
- organizationId: "org_1",
62
- email: "test@example.com",
63
- role: "member",
64
- token: "token_123",
65
- expiresAt: new Date("2026-01-10T00:00:00.000Z"),
66
- acceptedAt: null,
67
- };
68
-
69
- const select = () => ({
70
- from: () => ({
71
- where: () => ({
72
- limit: async () => (invitationRecord ? [invitationRecord] : []),
73
- }),
74
- }),
75
- });
76
-
77
- let insertedMember: Record<string, unknown> | null = null;
78
- let updatedInvitation: Record<string, unknown> | null = null;
79
-
80
- const insert = (table?: unknown) => ({
81
- values: async (values: Record<string, unknown>) => {
82
- if (table === organizationMembers) {
83
- insertedMember = values;
84
- }
85
- return {};
86
- },
87
- });
88
-
89
- const update = (table?: unknown) => ({
90
- set: (values: Record<string, unknown>) => {
91
- if (table === invitations) {
92
- updatedInvitation = values;
93
- }
94
- return {
95
- where: async () => ({}),
96
- };
97
- },
98
- });
99
-
100
- const db: FakeDeps["db"] = {
101
- select: select as unknown as () => SelectReturn<typeof invitationRecord>,
102
- transaction: async (fn) =>
103
- fn({
104
- insert: insert as unknown as () => InsertReturn,
105
- update: update as unknown as () => UpdateReturn,
106
- }),
107
- };
108
-
109
- return {
110
- auth,
111
- db,
112
- setInvitation: (next: typeof invitationRecord) => {
113
- invitationRecord = next;
114
- },
115
- getInsertedMember: () => insertedMember,
116
- getUpdatedInvitation: () => updatedInvitation,
117
- } satisfies FakeDeps & {
118
- setInvitation: (next: typeof invitationRecord) => void;
119
- getInsertedMember: () => Record<string, unknown> | null;
120
- getUpdatedInvitation: () => Record<string, unknown> | null;
121
- };
122
- };
123
-
124
- describe("POST /api/invitations/accept", () => {
125
- it("rejects unauthenticated requests", async () => {
126
- const deps = makeDeps();
127
- deps.auth.api.getSession = async () => null;
128
- const handler = buildAcceptInvitationHandler(deps);
129
- const res = await handler(
130
- new Request("http://localhost/api/invitations/accept", {
131
- method: "POST",
132
- body: JSON.stringify({ token: "token_123" }),
133
- }),
134
- );
135
- expect(res.status).toBe(401);
136
- });
137
-
138
- it("returns 404 for invalid token", async () => {
139
- const deps = makeDeps();
140
- deps.setInvitation(null);
141
- const handler = buildAcceptInvitationHandler(deps);
142
- const res = await handler(
143
- new Request("http://localhost/api/invitations/accept", {
144
- method: "POST",
145
- body: JSON.stringify({ token: "missing" }),
146
- }),
147
- );
148
- expect(res.status).toBe(404);
149
- });
150
-
151
- it("returns 410 for expired token", async () => {
152
- const deps = makeDeps();
153
- deps.setInvitation({
154
- id: "inv_1",
155
- organizationId: "org_1",
156
- email: "test@example.com",
157
- role: "member",
158
- token: "token_123",
159
- expiresAt: new Date("2025-12-01T00:00:00.000Z"),
160
- acceptedAt: null,
161
- });
162
- const handler = buildAcceptInvitationHandler(deps, () => now);
163
- const res = await handler(
164
- new Request("http://localhost/api/invitations/accept", {
165
- method: "POST",
166
- body: JSON.stringify({ token: "token_123" }),
167
- }),
168
- );
169
- expect(res.status).toBe(410);
170
- const json = await res.json();
171
- expect(json.error).toBe("邀请已过期");
172
- });
173
-
174
- it("returns 409 for already accepted invitations", async () => {
175
- const deps = makeDeps();
176
- deps.setInvitation({
177
- id: "inv_1",
178
- organizationId: "org_1",
179
- email: "test@example.com",
180
- role: "member",
181
- token: "token_123",
182
- expiresAt: new Date("2026-01-10T00:00:00.000Z"),
183
- acceptedAt: new Date("2026-01-02T00:00:00.000Z"),
184
- });
185
- const handler = buildAcceptInvitationHandler(deps, () => now);
186
- const res = await handler(
187
- new Request("http://localhost/api/invitations/accept", {
188
- method: "POST",
189
- body: JSON.stringify({ token: "token_123" }),
190
- }),
191
- );
192
- expect(res.status).toBe(409);
193
- });
194
-
195
- it("adds member and marks accepted", async () => {
196
- const deps = makeDeps();
197
- const handler = buildAcceptInvitationHandler(deps, () => now);
198
- const res = await handler(
199
- new Request("http://localhost/api/invitations/accept", {
200
- method: "POST",
201
- body: JSON.stringify({ token: "token_123" }),
202
- }),
203
- );
204
- expect(res.status).toBe(200);
205
- const member = deps.getInsertedMember();
206
- expect(member?.organizationId).toBe("org_1");
207
- expect(member?.userId).toBe("user_1");
208
- expect(member?.role).toBe("member");
209
-
210
- const updated = deps.getUpdatedInvitation();
211
- expect(updated?.acceptedAt).toEqual(now);
212
- });
213
- });
@@ -1,186 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { describe, expect, it } from "bun:test";
19
- import { buildCreateInvitationHandler } from "@/app/api/organizations/[orgId]/invitations/handler";
20
- import { invitations } from "@/lib/db/schema";
21
-
22
- type FakeDeps = Parameters<typeof buildCreateInvitationHandler>[0];
23
-
24
- type SelectReturn = {
25
- from: () => {
26
- where: () => {
27
- limit: (count: number) => Promise<Array<{ role: string }>>;
28
- };
29
- };
30
- };
31
-
32
- type InsertReturn = {
33
- values: (values: Record<string, unknown>) => {
34
- returning: () => Promise<Array<{ id: string }>>;
35
- };
36
- };
37
-
38
- const makeDeps = () => {
39
- const auth: FakeDeps["auth"] = {
40
- api: {
41
- getSession: async () => ({ user: { id: "user_1", role: "admin" } }),
42
- },
43
- };
44
-
45
- const select = () => ({
46
- from: () => ({
47
- where: () => ({
48
- limit: async () => [{ role: "admin" }],
49
- }),
50
- }),
51
- });
52
-
53
- let invitationValues: Record<string, unknown> | null = null;
54
- let sentEmail: { to: string; subject: string; html: string } | null = null;
55
-
56
- const insert = (table?: unknown) => ({
57
- values: (values: Record<string, unknown>) => {
58
- if (table === invitations) {
59
- invitationValues = values;
60
- }
61
- return {
62
- returning: async () => [{ id: "inv_1" }],
63
- };
64
- },
65
- });
66
-
67
- const db: FakeDeps["db"] = {
68
- select: select as unknown as () => SelectReturn,
69
- insert: insert as unknown as () => InsertReturn,
70
- };
71
-
72
- const email: FakeDeps["email"] = {
73
- sendEmail: async (payload) => {
74
- sentEmail = payload;
75
- },
76
- };
77
-
78
- return {
79
- auth,
80
- db,
81
- email,
82
- getInvitationValues: () => invitationValues,
83
- getSentEmail: () => sentEmail,
84
- } satisfies FakeDeps & {
85
- getInvitationValues: () => Record<string, unknown> | null;
86
- getSentEmail: () => { to: string; subject: string; html: string } | null;
87
- };
88
- };
89
-
90
- const makeDepsWithRole = (role: string | null) => {
91
- const deps = makeDeps();
92
- const select = () => ({
93
- from: () => ({
94
- where: () => ({
95
- limit: async () => (role ? [{ role }] : []),
96
- }),
97
- }),
98
- });
99
- deps.db.select = select as unknown as () => SelectReturn;
100
- return deps;
101
- };
102
-
103
- describe("POST /api/organizations/:orgId/invitations", () => {
104
- it("rejects unauthenticated requests", async () => {
105
- const deps = makeDeps();
106
- deps.auth.api.getSession = async () => null;
107
- const handler = buildCreateInvitationHandler(deps);
108
- const res = await handler(
109
- new Request("http://localhost/api/organizations/org_1/invitations", { method: "POST" }),
110
- { params: { orgId: "org_1" } },
111
- );
112
- expect(res.status).toBe(401);
113
- });
114
-
115
- it("rejects non-admin members", async () => {
116
- const deps = makeDepsWithRole("member");
117
- const handler = buildCreateInvitationHandler(deps);
118
- const res = await handler(
119
- new Request("http://localhost/api/organizations/org_1/invitations", {
120
- method: "POST",
121
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
122
- }),
123
- { params: { orgId: "org_1" } },
124
- );
125
- expect(res.status).toBe(403);
126
- });
127
-
128
- it("rejects non-members", async () => {
129
- const deps = makeDepsWithRole(null);
130
- const handler = buildCreateInvitationHandler(deps);
131
- const res = await handler(
132
- new Request("http://localhost/api/organizations/org_1/invitations", {
133
- method: "POST",
134
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
135
- }),
136
- { params: { orgId: "org_1" } },
137
- );
138
- expect(res.status).toBe(403);
139
- });
140
-
141
- it("creates invitation and sends email", async () => {
142
- const deps = makeDeps();
143
- const handler = buildCreateInvitationHandler(deps);
144
- const originalUrl = process.env.NEXT_PUBLIC_APP_URL;
145
- process.env.NEXT_PUBLIC_APP_URL = "http://app.test";
146
-
147
- try {
148
- const res = await handler(
149
- new Request("http://localhost/api/organizations/org_1/invitations", {
150
- method: "POST",
151
- body: JSON.stringify({ email: "test@example.com", role: "member" }),
152
- }),
153
- { params: { orgId: "org_1" } },
154
- );
155
-
156
- expect(res.status).toBe(201);
157
- const invitationValues = deps.getInvitationValues();
158
- expect(invitationValues?.organizationId).toBe("org_1");
159
- expect(invitationValues?.email).toBe("test@example.com");
160
- expect(invitationValues?.role).toBe("member");
161
- expect(typeof invitationValues?.token).toBe("string");
162
- expect(invitationValues?.token).toBeDefined();
163
-
164
- const sentEmail = deps.getSentEmail();
165
- expect(sentEmail?.to).toBe("test@example.com");
166
- expect(sentEmail?.subject).toBe("加入组织的邀请");
167
- expect(sentEmail?.html).toContain("http://app.test/invite/");
168
- expect(sentEmail?.html).toContain(String(invitationValues?.token));
169
- } finally {
170
- process.env.NEXT_PUBLIC_APP_URL = originalUrl;
171
- }
172
- });
173
-
174
- it("returns 400 on invalid body", async () => {
175
- const deps = makeDeps();
176
- const handler = buildCreateInvitationHandler(deps);
177
- const res = await handler(
178
- new Request("http://localhost/api/organizations/org_1/invitations", {
179
- method: "POST",
180
- body: JSON.stringify({ email: "not-an-email", role: "" }),
181
- }),
182
- { params: { orgId: "org_1" } },
183
- );
184
- expect(res.status).toBe(400);
185
- });
186
- });
@@ -1,79 +0,0 @@
1
- /*
2
- * Copyright (c) 2026 Echo Team
3
- *
4
- * This program is free software: you can redistribute it and/or modify
5
- * it under the terms of the GNU Affero General Public License as published by
6
- * the Free Software Foundation, either version 3 of the License, or
7
- * (at your option) any later version.
8
- *
9
- * This program is distributed in the hope that it will be useful,
10
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
11
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
- * GNU Affero General Public License for more details.
13
- *
14
- * You should have received a copy of the GNU Affero General Public License
15
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
16
- */
17
-
18
- import { afterEach, describe, expect, it, mock } from "bun:test";
19
- import { NextRequest } from "next/server";
20
-
21
- afterEach(() => {
22
- mock.restore();
23
- });
24
-
25
- describe("GET /api/organizations/[orgId]/members", () => {
26
- it("returns members with displayName", async () => {
27
- const memberRow = {
28
- userId: "user_1",
29
- displayName: "Ada",
30
- email: "ada@example.com",
31
- avatarUrl: null,
32
- };
33
- const mockDb = {
34
- select: (fields?: unknown) => {
35
- if (fields) {
36
- return {
37
- from: () => ({
38
- innerJoin: () => ({
39
- where: async () => [memberRow],
40
- }),
41
- }),
42
- };
43
- }
44
-
45
- return {
46
- from: () => ({
47
- where: () => ({
48
- limit: async () => [{ role: "admin" }],
49
- }),
50
- }),
51
- };
52
- },
53
- };
54
-
55
- mock.module("@/lib/auth/config", () => ({
56
- auth: {
57
- api: {
58
- getSession: mock(() => Promise.resolve({ user: { id: "user_1" } })),
59
- },
60
- },
61
- }));
62
-
63
- mock.module("@/lib/db", () => ({ db: mockDb }));
64
- const { GET } = await import(
65
- "@/app/api/organizations/[orgId]/members/route"
66
- );
67
- const req = new NextRequest(
68
- "http://localhost:3000/api/organizations/org_1/members",
69
- );
70
- const res = await GET(req, {
71
- params: Promise.resolve({ orgId: "org_1" }),
72
- });
73
-
74
- expect(res.status).toBe(200);
75
- const json = await res.json();
76
- expect(json.data[0]).toHaveProperty("userId");
77
- expect(json.data[0]).toHaveProperty("displayName");
78
- });
79
- });