@xk2800/nextjs-template 0.7.1-beta.0 → 0.7.1-beta.10

package/dist/api/feedback.js

@@ -210,6 +210,7 @@ __export(schema_exports, {
   accounts: () => accounts,
   activityLogs: () => activityLogs,
   authThrottle: () => authThrottle,
+  consentLog: () => consentLog,
   deviceFingerprints: () => deviceFingerprints,
   errorRefs: () => errorRefs,
   passkeys: () => passkeys,
@@ -364,10 +365,32 @@ var deviceFingerprints = pgCore.pgTable("device_fingerprint", {
   userAgent: pgCore.text("userAgent"),
   country: pgCore.text("country"),
   city: pgCore.text("city"),
+  // Latest FingerprintJS signals for this device (lib/device-fingerprint.ts
+  // getDeviceSignals(): accessibility signals dropped, large values hashed),
+  // shown on the admin user page. Null for rows from before this column.
+  components: pgCore.jsonb("components").$type(),
   createdAt: pgCore.timestamp("createdAt").notNull().defaultNow()
 }, (table) => [
   pgCore.unique("device_fingerprint_user_visitor").on(table.userId, table.visitorId)
 ]);
+var consentLog = pgCore.pgTable("consent_log", {
+  id: pgCore.text("id").notNull().primaryKey().$defaultFn(() => cuid2.createId()),
+  userId: pgCore.text("userId").notNull().references(() => users.id, { onDelete: "cascade" }),
+  // The cookie_consent value: "all", "necessary" or a comma list of purposes.
+  choice: pgCore.text("choice").notNull(),
+  // CONSENT_VERSION (lib/cookie-names.ts) at the time — which banner/policy
+  // wording the user agreed to.
+  version: pgCore.integer("version").notNull(),
+  // id of the user's record this one follows ("" for their first). Unique per
+  // user, so concurrent posts from several tabs that all saw the same latest
+  // record can't each insert a duplicate — one wins, the rest conflict. Works
+  // without transactions (neon-http has none). Null on rows from before it.
+  previousId: pgCore.text("previousId"),
+  createdAt: pgCore.timestamp("createdAt").notNull().defaultNow()
+}, (table) => [
+  pgCore.index("consent_log_user_idx").on(table.userId, table.createdAt),
+  pgCore.unique("consent_log_chain").on(table.userId, table.previousId)
+]);
 var authThrottle = pgCore.pgTable("auth_throttle", {
   fingerprint: pgCore.text("fingerprint").notNull().primaryKey(),
   count: pgCore.integer("count").notNull().default(0),
@@ -397,6 +420,13 @@ var systemSettings = pgCore.pgTable("system_settings", {
   // Attach the error a user hit to feedback they send from it (see
   // lib/feedback-route.ts). Off = only what the user typed is sent.
   feedbackAttachErrors: pgCore.boolean("feedbackAttachErrors").notNull().default(true),
+  // GDPR/ePrivacy consent mode. On: cookie banner, FingerprintJS and One Tap
+  // only after "Accept all", device record erased on withdrawal. Off (no EU/UK
+  // users): no banner, treated as consented. Null = follow
+  // NEXT_PUBLIC_COOKIE_BANNER (nullable so migrating never flips a deployed
+  // banner on or off). proxy.ts mirrors the effective value into the
+  // consent_required cookie for the client (lib/cookie-consent.ts).
+  consentRequired: pgCore.boolean("consentRequired"),
   updatedAt: pgCore.timestamp("updatedAt").notNull().defaultNow(),
   // Who last changed a setting. This row doesn't "belong" to that admin the
   // way sessions/activityLogs belong to their user, so deleting that admin's
@@ -418,6 +448,12 @@ var envSchema = zod.z.object({
   PORT: zod.z.string().default("3000").transform(Number),
   DATABASE_URL: zod.z.string().default(""),
   RESEND_API_KEY: zod.z.string().default(""),
+  // Full access key for marketing broadcasts (admin Marketing email page).
+  // Blank = use RESEND_API_KEY.
+  RESEND_BROADCAST_API_KEY: zod.z.string().default(""),
+  // Resend segment users join from the dashboard "Email updates" toggle.
+  // Blank = toggle hidden.
+  RESEND_MARKETING_SEGMENT_ID: zod.z.string().default(""),
   // Sender for every transactional email. Must be on a domain verified in
   // your Resend account.
   EMAIL_FROM: zod.z.string().default("Acme <onboarding@xavierkhew.xyz>"),
@@ -557,6 +593,7 @@ var DEVICE_FINGERPRINT_HEADER = "x-device-fingerprint";
 var WINDOW_MS = 15 * 60 * 1e3;
 var MAX = 10;
 var MAX_IP = MAX * 3;
+var RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
 function isOverLimit(row, now, max = MAX) {
   if (!row) return false;
   if (now - row.windowStart.getTime() >= WINDOW_MS) return false;
@@ -594,6 +631,18 @@ async function recordDeviceAttempt(fingerprint, meta) {
   } catch (error) {
     console.error("auth-throttle write failed", error);
   }
+  await pruneStaleRows(now);
+}
+var PRUNE_EVERY_MS = 60 * 60 * 1e3;
+var lastPrune = 0;
+async function pruneStaleRows(now = /* @__PURE__ */ new Date()) {
+  if (now.getTime() - lastPrune < PRUNE_EVERY_MS) return;
+  lastPrune = now.getTime();
+  try {
+    await db.delete(authThrottle).where(drizzleOrm.lt(authThrottle.lastAttemptAt, new Date(now.getTime() - RETENTION_MS)));
+  } catch (error) {
+    console.error("auth-throttle prune failed", error);
+  }
 }
 async function clearDeviceThrottle(fingerprint) {
   try {
@@ -616,6 +665,7 @@ function fallbackSettings() {
     authEnableOneTap: config.AUTH_ENABLE_ONE_TAP,
     enableSessionRevocation: config.ENABLE_SESSION_REVOCATION,
     feedbackAttachErrors: true,
+    consentRequired: null,
     updatedAt: /* @__PURE__ */ new Date(0),
     updatedBy: null
   };
@@ -665,6 +715,7 @@ async function getResend() {
   }
   return resend;
 }
+config.RESEND_BROADCAST_API_KEY || config.RESEND_API_KEY;
 
 // server/auth.ts
 async function logFailedLogin(ctx) {
@@ -1056,7 +1107,7 @@ var auth = new Proxy({}, {
 var REF_ALPHABET = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
 var REF_PATTERN = /\(ref: ([2-9A-HJ-NP-Z]{6})\)/;
 var DETAIL_MAX_LENGTH = 8e3;
-var RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
+var RETENTION_MS2 = 30 * 24 * 60 * 60 * 1e3;
 function describeError(error) {
   if (error instanceof Error) return error.stack || `${error.name}: ${error.message}`;
   try {
@@ -1073,7 +1124,7 @@ function storeDetail(ref, message, error) {
         message,
         detail: describeError(error).slice(0, DETAIL_MAX_LENGTH)
       });
-      await db.delete(errorRefs).where(drizzleOrm.lt(errorRefs.createdAt, new Date(Date.now() - RETENTION_MS)));
+      await db.delete(errorRefs).where(drizzleOrm.lt(errorRefs.createdAt, new Date(Date.now() - RETENTION_MS2)));
     } catch (storeError) {
       console.error(`[error ref ${ref}] could not store error detail`, storeError);
     }