@xk2800/nextjs-template 0.6.1-beta.3 → 0.7.0

package/dist/auth/helpers.js

@@ -211,6 +211,7 @@ __export(schema_exports, {
   activityLogs: () => activityLogs,
   authThrottle: () => authThrottle,
   deviceFingerprints: () => deviceFingerprints,
+  errorRefs: () => errorRefs,
   passkeys: () => passkeys,
   sessions: () => sessions,
   systemSettings: () => systemSettings,
@@ -230,7 +231,7 @@ var DEFAULT_MAINTENANCE_EXEMPT_PATHS = [
 ];
 
 // server/db/schema.ts
-var RoleEnum = pgCore.pgEnum("roles", ["user", "admin"]);
+var RoleEnum = pgCore.pgEnum("roles", ["user", "admin", "tester"]);
 var ActivityActionEnum = pgCore.pgEnum("activity_actions", [
   "login",
   "logout",
@@ -393,6 +394,9 @@ var systemSettings = pgCore.pgTable("system_settings", {
   authEnableEmailPassword: pgCore.boolean("authEnableEmailPassword").notNull().default(true),
   authEnableOneTap: pgCore.boolean("authEnableOneTap").notNull().default(false),
   enableSessionRevocation: pgCore.boolean("enableSessionRevocation").notNull().default(true),
+  // Attach the error a user hit to feedback they send from it (see
+  // lib/feedback-route.ts). Off = only what the user typed is sent.
+  feedbackAttachErrors: pgCore.boolean("feedbackAttachErrors").notNull().default(true),
   updatedAt: pgCore.timestamp("updatedAt").notNull().defaultNow(),
   // Who last changed a setting. This row doesn't "belong" to that admin the
   // way sessions/activityLogs belong to their user, so deleting that admin's
@@ -401,15 +405,31 @@ var systemSettings = pgCore.pgTable("system_settings", {
 }, (table) => [
   pgCore.check("system_settings_singleton", drizzleOrm.sql`${table.id} = 'default'`)
 ]);
+var errorRefs = pgCore.pgTable("error_refs", {
+  ref: pgCore.text("ref").primaryKey(),
+  message: pgCore.text("message").notNull(),
+  detail: pgCore.text("detail").notNull(),
+  createdAt: pgCore.timestamp("createdAt").notNull().defaultNow()
+}, (table) => [
+  pgCore.index("error_refs_created_at_idx").on(table.createdAt)
+]);
 var envSchema = zod.z.object({
   NODE_ENV: zod.z.enum(["development", "production", "test"]).default("development"),
   PORT: zod.z.string().default("3000").transform(Number),
   DATABASE_URL: zod.z.string().default(""),
   RESEND_API_KEY: zod.z.string().default(""),
+  // Sender for every transactional email. Must be on a domain verified in
+  // your Resend account.
+  EMAIL_FROM: zod.z.string().default("Acme <onboarding@xavierkhew.xyz>"),
   // Display name for this deployment — shown as the authenticator-app label
   // (2FA issuer) and the passkey relying-party name. Consuming projects set
   // this in their own .env; defaults to the template name.
   APP_NAME: zod.z.string().default("Next.js Template"),
+  // Where the dashboard feedback form delivers (app/api/feedback). Set either
+  // or both; with neither, the Feedback button is hidden. FEEDBACK_EMAIL takes
+  // a comma-separated list and sends through Resend (needs RESEND_API_KEY).
+  FEEDBACK_DISCORD_WEBHOOK_URL: zod.z.string().default(""),
+  FEEDBACK_EMAIL: zod.z.string().default(""),
   // Seed-only: the live value lives in the system_settings DB row (see
   // lib/settings-queries.ts) once it's been seeded on first read, and is
   // changed from the admin System Settings page, not by editing this var.
@@ -595,6 +615,7 @@ function fallbackSettings() {
     authEnableEmailPassword: config.AUTH_ENABLE_EMAIL_PASSWORD,
     authEnableOneTap: config.AUTH_ENABLE_ONE_TAP,
     enableSessionRevocation: config.ENABLE_SESSION_REVOCATION,
+    feedbackAttachErrors: true,
     updatedAt: /* @__PURE__ */ new Date(0),
     updatedBy: null
   };
@@ -635,7 +656,7 @@ async function getEffectiveAuthFlags() {
     oneTap: config.AUTH_ENABLE_ONE_TAP && settings.authEnableOneTap
   };
 }
-var EMAIL_FROM = "Acme <onboarding@xavierkhew.xyz>";
+var EMAIL_FROM = config.EMAIL_FROM;
 var resend;
 async function getResend() {
   if (!resend) {
@@ -787,7 +808,13 @@ function createAuth(overrides = {}) {
           input: false
           // Prevent users from setting their own role
         }
-      }
+      },
+      // Self-service "Delete account" (dashboard Settings → Danger zone).
+      // Credential users confirm with their password; OAuth-only users have
+      // no password, so better-auth instead requires a session younger than
+      // `freshAge` (default 1 day). Every user-owned table cascades on delete.
+      // Impersonation and last-admin guards live in hooks.before below.
+      deleteUser: { enabled: true }
     },
     // Advanced options
     advanced: {
@@ -891,6 +918,20 @@ function createAuth(overrides = {}) {
           }
           return;
         }
+        if (ctx.path === "/delete-user") {
+          const current2 = await api.getSessionFromCtx(ctx, { disableCookieCache: true });
+          if (!current2) return;
+          if (current2.session.impersonatedBy) {
+            throw new api.APIError("FORBIDDEN", { message: "Stop impersonating before deleting an account." });
+          }
+          if (current2.user.role === "admin") {
+            const [{ count }] = await db.select({ count: drizzleOrm.sql`count(*)` }).from(users).where(drizzleOrm.eq(users.role, "admin"));
+            if (Number(count) <= 1) {
+              throw new api.APIError("FORBIDDEN", { message: "You're the only admin. Promote another user to admin first." });
+            }
+          }
+          return;
+        }
         if (ctx.path !== "/admin/stop-impersonating") return;
         const current = await api.getSessionFromCtx(ctx, { disableCookieCache: true });
         if (current == null ? void 0 : current.session.impersonatedBy) {
@@ -1038,7 +1079,7 @@ function hasRole(userRole, requiredRole) {
   if (requiredRole === "admin") {
     return userRole === "admin";
   }
-  return userRole === "user" || userRole === "admin";
+  return userRole === "user" || userRole === "admin" || userRole === "tester";
 }
 async function requireRole(requiredRole) {
   const session = await requireAuth();