@xk2800/nextjs-template 0.7.1-beta.7 → 0.7.1-beta.8

package/components/dashboard/admin/broadcastActions.tsx

@@ -0,0 +1,148 @@
+'use client'
+
+import { useEffect, useState } from "react"
+import { useRouter } from "next/navigation"
+import { toast } from "sonner"
+import { Button } from "../../ui/button"
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogHeader,
+  DialogTitle,
+} from "../../ui/dialog"
+import ConfirmSendDialog from "./confirmSendDialog"
+
+interface Preview {
+  subject: string | null
+  from: string | null
+  previewText: string | null
+  html: string | null
+  text: string | null
+}
+
+export default function BroadcastActions({ id, name, status }: { id: string; name: string; status: string }) {
+  const router = useRouter()
+  const [open, setOpen] = useState(false)
+  const [preview, setPreview] = useState<Preview | null>(null)
+  const [loading, setLoading] = useState(false)
+  const [sending, setSending] = useState(false)
+  const [confirming, setConfirming] = useState(false)
+
+  const openPreview = async () => {
+    setOpen(true)
+    if (preview) return
+    setLoading(true)
+    try {
+      const response = await fetch(`/api/admin/marketing/${id}`)
+      const data = await response.json()
+      if (!response.ok) throw new Error(data.error || "Failed to load preview")
+      setPreview(data)
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to load preview")
+      setOpen(false)
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  const send = async () => {
+    setSending(true)
+    try {
+      const response = await fetch(`/api/admin/marketing/${id}`, { method: "POST" })
+      const data = await response.json()
+      if (!response.ok) throw new Error(data.error || "Failed to send broadcast")
+      toast.success("Broadcast sent")
+      setOpen(false)
+      router.refresh()
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to send broadcast")
+    } finally {
+      setSending(false)
+    }
+  }
+
+  // Resend has no push for broadcast status, so poll while it's queued and
+  // refresh the list once it moves on (e.g. to "sent").
+  // ponytail: stops after ~5 min; a broadcast scheduled for later stays
+  // "queued" until it goes out, so it's not worth polling that long.
+  useEffect(() => {
+    if (status !== "queued") return
+    let tries = 0
+    const timer = setInterval(async () => {
+      if (++tries > 100) return clearInterval(timer)
+      try {
+        const response = await fetch(`/api/admin/marketing/${id}`)
+        if (!response.ok) return
+        const data = await response.json()
+        if (data.status !== "queued") {
+          clearInterval(timer)
+          router.refresh()
+        }
+      } catch {
+        // network blip, try again next tick
+      }
+    }, 3000)
+    return () => clearInterval(timer)
+  }, [id, status, router])
+
+  const isDraft = status === "draft"
+
+  return (
+    <>
+      {status === "queued" && (
+        <span className="flex items-center gap-1.5 text-xs">
+          <span className="size-2 animate-pulse rounded-full bg-amber-500" />
+          Sending…
+        </span>
+      )}
+      <Button size="sm" variant="outline" onClick={openPreview}>Preview</Button>
+      {isDraft && (
+        <Button size="sm" disabled={sending} onClick={() => setConfirming(true)}>
+          {sending ? "Sending…" : "Send"}
+        </Button>
+      )}
+
+      <Dialog open={open} onOpenChange={setOpen}>
+        <DialogContent className="sm:max-w-2xl">
+          <DialogHeader>
+            <DialogTitle>{preview?.subject || name}</DialogTitle>
+            <DialogDescription>
+              {preview ? `From ${preview.from ?? "—"}${preview.previewText ? ` · ${preview.previewText}` : ""}` : "Loading…"}
+            </DialogDescription>
+          </DialogHeader>
+          {loading ? (
+            <div className="h-[60vh] animate-pulse rounded-md bg-muted" />
+          ) : preview?.html ? (
+            // sandbox="" — no scripts, no navigation out of the frame
+            <iframe
+              title="Email preview"
+              sandbox=""
+              srcDoc={preview.html}
+              className="h-[60vh] w-full rounded-md border bg-white"
+            />
+          ) : (
+            <pre className="h-[60vh] overflow-auto whitespace-pre-wrap rounded-md border p-4 text-sm">
+              {preview?.text ?? ""}
+            </pre>
+          )}
+          {isDraft && (
+            <div className="flex justify-end">
+              <Button disabled={sending || loading} onClick={() => setConfirming(true)}>
+                {sending ? "Sending…" : "Send now"}
+              </Button>
+            </div>
+          )}
+        </DialogContent>
+      </Dialog>
+
+      <ConfirmSendDialog
+        open={confirming}
+        onOpenChange={setConfirming}
+        subject={preview?.subject || name}
+        audience="its segment"
+        onConfirm={send}
+      />
+    </>
+  )
+}

package/components/dashboard/admin/confirmSendDialog.tsx

@@ -0,0 +1,44 @@
+'use client'
+
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from "../../ui/alert-dialog"
+
+export default function ConfirmSendDialog({
+  open,
+  onOpenChange,
+  subject,
+  audience,
+  onConfirm,
+}: {
+  open: boolean
+  onOpenChange: (open: boolean) => void
+  subject: string
+  audience: string
+  onConfirm: () => void
+}) {
+  return (
+    <AlertDialog open={open} onOpenChange={onOpenChange}>
+      <AlertDialogContent>
+        <AlertDialogHeader>
+          <AlertDialogTitle>Send this broadcast?</AlertDialogTitle>
+          <AlertDialogDescription>
+            &ldquo;{subject}&rdquo; goes to every subscribed contact in {audience} right away.
+            This can&apos;t be undone.
+          </AlertDialogDescription>
+        </AlertDialogHeader>
+        <AlertDialogFooter>
+          <AlertDialogCancel>Cancel</AlertDialogCancel>
+          <AlertDialogAction onClick={onConfirm}>Send now</AlertDialogAction>
+        </AlertDialogFooter>
+      </AlertDialogContent>
+    </AlertDialog>
+  )
+}

package/components/dashboard/admin/marketingEmailForm.tsx

@@ -0,0 +1,115 @@
+'use client'
+
+import { useState } from "react"
+import { useRouter } from "next/navigation"
+import { toast } from "sonner"
+import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "../../ui/card"
+import { Input } from "../../ui/input"
+import { Label } from "../../ui/label"
+import { Textarea } from "../../ui/textarea"
+import { Button } from "../../ui/button"
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "../../ui/select"
+import ConfirmSendDialog from "./confirmSendDialog"
+
+export default function MarketingEmailForm({ segments }: { segments: { id: string; name: string }[] }) {
+  const router = useRouter()
+  const [segmentId, setSegmentId] = useState(segments[0]?.id ?? "")
+  const [subject, setSubject] = useState("")
+  const [previewText, setPreviewText] = useState("")
+  const [body, setBody] = useState("")
+  const [pending, setPending] = useState<"draft" | "send" | null>(null)
+
+  const [confirming, setConfirming] = useState(false)
+  const segmentName = segments.find((s) => s.id === segmentId)?.name ?? "this segment"
+
+  const submit = async (send: boolean) => {
+    setPending(send ? "send" : "draft")
+    try {
+      const response = await fetch("/api/admin/marketing", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ segmentId, subject, previewText, body, send }),
+      })
+      const data = await response.json()
+      if (!response.ok) throw new Error(data.error || "Failed to create broadcast")
+
+      toast.success(send ? "Broadcast sent" : "Draft saved in Resend")
+      setSubject("")
+      setPreviewText("")
+      setBody("")
+      router.refresh()
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to create broadcast")
+    } finally {
+      setPending(null)
+    }
+  }
+
+  if (segments.length === 0) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>No segments yet</CardTitle>
+          <CardDescription>
+            Create a segment and add contacts in the Resend dashboard (Audience), then reload this page.
+          </CardDescription>
+        </CardHeader>
+      </Card>
+    )
+  }
+
+  const canSubmit = !!segmentId && !!subject.trim() && !!body.trim() && !pending
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>New broadcast</CardTitle>
+        <CardDescription>
+          Plain text. Blank lines start a new paragraph. An unsubscribe link is added automatically.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <div className="space-y-2">
+          <Label htmlFor="segment">Segment</Label>
+          <Select value={segmentId} onValueChange={setSegmentId}>
+            <SelectTrigger id="segment" className="w-full">
+              <SelectValue placeholder="Choose a segment" />
+            </SelectTrigger>
+            <SelectContent>
+              {segments.map((s) => (
+                <SelectItem key={s.id} value={s.id}>{s.name}</SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="subject">Subject</Label>
+          <Input id="subject" value={subject} maxLength={200} onChange={(e) => setSubject(e.target.value)} />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="preview">Preview text (optional)</Label>
+          <Input id="preview" value={previewText} maxLength={200} onChange={(e) => setPreviewText(e.target.value)} />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="body">Message</Label>
+          <Textarea id="body" rows={12} value={body} onChange={(e) => setBody(e.target.value)} />
+        </div>
+        <div className="flex flex-col gap-2 sm:flex-row sm:justify-end">
+          <Button variant="outline" disabled={!canSubmit} onClick={() => submit(false)}>
+            {pending === "draft" ? "Saving…" : "Save as draft"}
+          </Button>
+          <Button disabled={!canSubmit} onClick={() => setConfirming(true)}>
+            {pending === "send" ? "Sending…" : "Send now"}
+          </Button>
+        </div>
+        <ConfirmSendDialog
+          open={confirming}
+          onOpenChange={setConfirming}
+          subject={subject}
+          audience={`"${segmentName}"`}
+          onConfirm={() => submit(true)}
+        />
+      </CardContent>
+    </Card>
+  )
+}

package/components/dashboard/admin/marketingSection.tsx

@@ -0,0 +1,67 @@
+import { Suspense } from "react"
+import { getMarketingOverview } from "@xk2800/nextjs-template/marketing"
+import { formatDateTime } from "@xk2800/nextjs-template/lib/formatters"
+import { Skeleton } from "../../ui/skeleton"
+import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "../../ui/card"
+import { Badge } from "../../ui/badge"
+import MarketingEmailForm from "./marketingEmailForm"
+import BroadcastActions from "./broadcastActions"
+import SubscribersCard from "./subscribersCard"
+
+// Admin marketing email page body: compose form, recent broadcasts and
+// subscribers. `segmentId` picks the Subscribers segment (e.g. from
+// ?segment=); unknown or missing falls back to the first segment.
+export default async function MarketingSection({ segmentId }: { segmentId?: string }) {
+  const { segments, broadcasts, error } = await getMarketingOverview()
+
+  if (error) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Resend isn&apos;t reachable</CardTitle>
+          <CardDescription>
+            {error} Broadcasts need a <strong>full access</strong> API key (a sending-only key can&apos;t list segments).
+          </CardDescription>
+        </CardHeader>
+      </Card>
+    )
+  }
+
+  return (
+    <div className="space-y-6">
+      <MarketingEmailForm segments={segments} />
+
+      {broadcasts.length > 0 && (
+        <Card>
+          <CardHeader>
+            <CardTitle>Recent broadcasts</CardTitle>
+            <CardDescription>Open, click and unsubscribe stats are in the Resend dashboard</CardDescription>
+          </CardHeader>
+          <CardContent>
+            <ul className="divide-y">
+              {broadcasts.map((b) => (
+                <li key={b.id} className="flex flex-wrap items-center justify-between gap-x-4 gap-y-2 py-2 text-sm">
+                  <span className="truncate">{b.name || "(untitled)"}</span>
+                  <span className="flex shrink-0 items-center gap-2 text-muted-foreground">
+                    {formatDateTime(b.sent_at ?? b.created_at)}
+                    <Badge variant={b.status === "sent" ? "default" : "secondary"}>{b.status}</Badge>
+                    <BroadcastActions id={b.id} name={b.name || "(untitled)"} status={b.status} />
+                  </span>
+                </li>
+              ))}
+            </ul>
+          </CardContent>
+        </Card>
+      )}
+
+      {segments.length > 0 && (
+        <Suspense fallback={<Skeleton className="h-48 w-full" />}>
+          <SubscribersCard
+            segments={segments}
+            segmentId={segments.some((s) => s.id === segmentId) ? segmentId! : segments[0].id}
+          />
+        </Suspense>
+      )}
+    </div>
+  )
+}

package/components/dashboard/admin/subscribersCard.tsx

@@ -0,0 +1,62 @@
+import Link from "next/link"
+import { listSegmentContacts, SEGMENT_CONTACTS_LIMIT as LIMIT, type MarketingSegment } from "@xk2800/nextjs-template/marketing"
+import { formatDateTime } from "@xk2800/nextjs-template/lib/formatters"
+import { Button } from "../../ui/button"
+import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "../../ui/card"
+import { Badge } from "../../ui/badge"
+
+export default async function SubscribersCard({
+  segments,
+  segmentId,
+}: {
+  segments: MarketingSegment[]
+  segmentId: string
+}) {
+  const { contacts, hasMore, error } = await listSegmentContacts(segmentId)
+  const subscribed = contacts.filter((c) => !c.unsubscribed).length
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Subscribers</CardTitle>
+        <CardDescription>
+          {error
+            ? `Couldn't load contacts: ${error}`
+            : `${subscribed} subscribed, ${contacts.length - subscribed} unsubscribed${hasMore ?` (first ${LIMIT} shown)` : ""}. Add or import contacts in Resend → Audience.`}
+        </CardDescription>
+        {segments.length > 1 && (
+          <div className="flex flex-wrap gap-2 pt-2">
+            {segments.map((s) => (
+              <Button key={s.id} asChild size="sm" variant={s.id === segmentId ? "default" : "outline"}>
+                <Link href={`?segment=${s.id}`} scroll={false}>{s.name}</Link>
+              </Button>
+            ))}
+          </div>
+        )}
+      </CardHeader>
+      {contacts.length > 0 && (
+        <CardContent>
+          <ul className="divide-y">
+            {contacts.map((c) => {
+              const name = [c.first_name, c.last_name].filter(Boolean).join(" ")
+              return (
+                <li key={c.id} className="flex flex-wrap items-center justify-between gap-x-4 gap-y-1 py-2 text-sm">
+                  <span className="min-w-0 truncate">
+                    {c.email}
+                    {name && <span className="text-muted-foreground"> · {name}</span>}
+                  </span>
+                  <span className="flex shrink-0 items-center gap-2 text-muted-foreground">
+                    {formatDateTime(c.created_at)}
+                    <Badge variant={c.unsubscribed ? "secondary" : "default"}>
+                      {c.unsubscribed ? "unsubscribed" : "subscribed"}
+                    </Badge>
+                  </span>
+                </li>
+              )
+            })}
+          </ul>
+        </CardContent>
+      )}
+    </Card>
+  )
+}

package/components/dashboard/marketingUpdatesCard.tsx

@@ -0,0 +1,62 @@
+'use client'
+
+import { useState } from "react"
+import { toast } from "sonner"
+import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "../ui/card"
+import { Switch } from "../ui/switch"
+import { Label } from "../ui/label"
+
+export default function MarketingUpdatesCard({
+  initialSubscribed,
+  emailVerified,
+}: {
+  initialSubscribed: boolean
+  emailVerified: boolean
+}) {
+  const [subscribed, setSubscribed] = useState(initialSubscribed)
+  const [saving, setSaving] = useState(false)
+
+  const toggle = async (next: boolean) => {
+    setSaving(true)
+    try {
+      const response = await fetch("/api/marketing/subscription", {
+        method: "PUT",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ subscribed: next }),
+      })
+      const data = await response.json()
+      if (!response.ok) throw new Error(data.error || "Failed to update subscription")
+      setSubscribed(next)
+      toast.success(next ? "Subscribed to product updates" : "Unsubscribed from product updates")
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to update subscription")
+    } finally {
+      setSaving(false)
+    }
+  }
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Email updates</CardTitle>
+        <CardDescription>
+          Occasional news about new features. You can turn this off here or with the link in any email.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-2">
+        <div className="flex items-center justify-between gap-4">
+          <Label htmlFor="marketing-updates">Send me product updates</Label>
+          <Switch
+            id="marketing-updates"
+            checked={subscribed}
+            disabled={saving || (!subscribed && !emailVerified)}
+            onCheckedChange={toggle}
+          />
+        </div>
+        {!subscribed && !emailVerified && (
+          <p className="text-sm text-muted-foreground">Verify your email address to subscribe.</p>
+        )}
+      </CardContent>
+    </Card>
+  )
+}

package/components/dashboard/marketingUpdatesSection.tsx

@@ -0,0 +1,10 @@
+import { isSubscribed, MARKETING_SEGMENT_ID } from "@xk2800/nextjs-template/marketing"
+import MarketingUpdatesCard from "./marketingUpdatesCard"
+
+// Dashboard opt-in for product updates. Renders nothing until
+// RESEND_MARKETING_SEGMENT_ID is set.
+export default async function MarketingUpdatesSection({ email, emailVerified }: { email: string; emailVerified: boolean }) {
+  if (!MARKETING_SEGMENT_ID) return null
+  const subscribed = await isSubscribed(email)
+  return <MarketingUpdatesCard initialSubscribed={subscribed} emailVerified={emailVerified} />
+}

package/dist/api/feedback.mjs

@@ -1,8 +1,9 @@
 import { lookupErrorDetail, unexpectedErrorMessage } from '../chunk-6MDQRT6U.mjs';
-import { auth, getResend, EMAIL_FROM } from '../chunk-6B45N7ZB.mjs';
+import { auth } from '../chunk-7QVIOQ47.mjs';
 import '../chunk-7F2POZM6.mjs';
 import '../chunk-6OAHCEDJ.mjs';
 import { getSystemSettings } from '../chunk-P2G23JMY.mjs';
+import { getResend, EMAIL_FROM } from '../chunk-OVKVD2HH.mjs';
 import '../chunk-ZJMFE5B2.mjs';
 import '../chunk-TR5XFBTD.mjs';
 import { config } from '../chunk-TKWNEKK6.mjs';

package/dist/api/feedback.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../lib/feedback-route.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAaA,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EAC9B,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,CAAC,CAAA;AAAA;AAAA,EAEhC,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAA,GAAO,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAI,CAAA;AAAA,EAC1C,MAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA;AAAA,EAEnC,OAAO,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAI,EAAE,QAAA;AAC9B,CAAC,CAAA;AAGD,IAAM,WAAA,GAAc,CAAA;AAGpB,IAAM,UAAA,uBAAiB,GAAA,EAAoB;AAE3C,eAAsB,KAAK,OAAA,EAAsB;AA5BjD,EAAA,IAAA,EAAA;AA6BE,EAAA,MAAM,aAAa,MAAA,CAAO,4BAAA;AAC1B,EAAA,MAAM,UAAU,MAAA,CAAO,cAAA;AACvB,EAAA,IAAI,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC3B,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,8BAA6B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,EAAE,OAAA,EAAS,MAAM,OAAA,EAAQ,EAAG,CAAA;AACtE,EAAA,IAAI,EAAC,mCAAS,IAAA,CAAA,EAAM;AAClB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,SAAA,CAAU,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAC,CAAA;AAC9E,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,qCAAoC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC1F;AAEA,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,IAAI,GAAA,IAAA,CAAO,gBAAW,GAAA,CAAI,OAAA,CAAQ,KAAK,EAAE,CAAA,KAA9B,IAAA,GAAA,EAAA,GAAmC,CAAA,CAAA,GAAK,WAAA,EAAa;AAC9D,IAAA,OAAO,YAAA,CAAa,IAAA;AAAA,MAClB,EAAE,OAAO,mDAAA,EAAoD;AAAA,MAC7D,EAAE,QAAQ,GAAA;AAAI,KAChB;AAAA,EACF;AACA,EAAA,UAAA,CAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,EAAA,EAAI,GAAG,CAAA;AAEnC,EAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,KAAS,MAAA,CAAO,IAAA;AAEvC,EAAA,MAAM,YAAA,GACJ,MAAA,CAAO,IAAA,CAAK,KAAA,IAAA,CAAU,MAAM,mBAAkB,EAAG,oBAAA,GAC7C,MAAA,CAAO,IAAA,CAAK,KAAA,GACZ,MAAA;AAGN,EAAA,MAAM,eAAA,GAAkB,YAAA,GAAe,MAAM,iBAAA,CAAkB,YAAY,CAAA,GAAI,IAAA;AAC/E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AACjB,EAAA,MAAM,KAAA,GAAQ,IAAA,KAAS,KAAA,GAAQ,sBAAA,GAAkB,oBAAA;AACjD,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,SAAA;AAEvD,EAAA,MAAM,QAA4B,EAAC;AAEnC,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,MAAM,UAAA,EAAY;AAAA,QAChB,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA;AAAA,UAEjB,gBAAA,EAAkB,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,UAC9B,QAAQ,CAAC;AAAA,YACP,KAAA;AAAA,YACA,WAAA,EAAa,OAAA;AAAA,YACb,KAAA,EAAO,IAAA,KAAS,KAAA,GAAQ,QAAA,GAAW,OAAA;AAAA,YACnC,MAAA,EAAQ;AAAA,cACN,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,GAAG,IAAA,CAAK,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,CAAA,CAAA,CAAA,CAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,EAAE;AAAA,cACrE,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAO,IAAA,IAAQ,SAAA,EAAW,QAAQ,IAAA,EAAK;AAAA,cACvD,GAAI,YAAA,GAAe,CAAC,EAAE,MAAM,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,EAAC;AAAA,cAC9E,GAAI,eAAA,GACA,CAAC,EAAE,IAAA,EAAM,qBAAqB,KAAA,EAAO,OAAA,GAAU,eAAA,CAAgB,KAAA,CAAM,GAAG,GAAI,CAAA,GAAI,OAAA,EAAS,IACzF,EAAC;AAAA,cACL,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,UAAU,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA;AAAE,aACxD;AAAA,YACA,SAAA,EAAW,IAAI,IAAA,CAAK,GAAG,EAAE,WAAA;AAAY,WACtC;AAAA,SACF;AAAA,OACF,CAAA,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ;AACf,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,MACxE,CAAC;AAAA,KACH;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,WAAU,CACP,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,OAAO,IAAA,CAAK;AAAA,QACnC,IAAA,EAAM,UAAA;AAAA,QACN,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAAA,QAC1C,SAAS,IAAA,CAAK,KAAA;AAAA,QACd,OAAA,EAAS,IAAI,MAAA,CAAO,QAAQ,KAAK,KAAK,CAAA,MAAA,EAAS,KAAK,IAAI,CAAA,CAAA;AAAA,QACxD,IAAA,EAAM,GAAG,OAAO;;AAAA;AAAA,MAAA,EAAkB,IAAA,CAAK,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AAAA,MAAA,EAAY,IAAA,IAAQ,SAAS,CAAA,EAAG,YAAA,GAAe;AAAA,OAAA,EAAY,YAAY,CAAA,CAAA,GAAK,EAAE,CAAA,EAAG,eAAA,GAAkB;;AAAA;AAAA,EAA2B,eAAe,KAAK,EAAE;AAAA,YAAA,EAAiB,SAAS,CAAA;AAAA,OACzO,CAAC,CAAA,CACD,KAAK,CAAC,EAAE,OAAM,KAAM;AACnB,QAAA,IAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA,MAC1C,CAAC;AAAA,KACL;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA;AAC9C,EAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA,KAAM;AACrB,IAAA,IAAI,EAAE,MAAA,KAAW,UAAA,UAAoB,KAAA,CAAM,2BAAA,EAA6B,EAAE,MAAM,CAAA;AAAA,EAClF,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,WAAW,CAAA,EAAG;AAClD,IAAA,UAAA,CAAW,MAAA,CAAO,KAAK,EAAE,CAAA;AACzB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,2BAA0B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAChF;AACA,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,MAAM,CAAA;AAC5C;AAWA,eAAsB,cAAc,OAAA,EAAsB;AACxD,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,EAAe;AAC1C,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,aAAY,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAClE;AACA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,EAAE,OAAA,EAAS,MAAM,OAAA,EAAQ,EAAG,CAAA;AACtE,EAAA,IAAI,EAAC,mCAAS,IAAA,CAAA,EAAM;AAClB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACrE;AACA,EAAA,MAAM,OAAO,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAClD,EAAA,IAAI,QAAO,6BAAM,IAAA,CAAA,KAAS,QAAA,IAAY,KAAK,IAAA,CAAK,IAAA,OAAW,QAAA,EAAU;AACnE,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,0CAAyC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC/F;AACA,EAAA,IAAI,QAAO,6BAAM,IAAA,CAAA,KAAS,QAAA,IAAY,KAAK,IAAA,CAAK,IAAA,OAAW,QAAA,EAAU;AACnE,IAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,0EAA0E,CAAA;AAClG,IAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,KAAA,EAAO,sBAAA,CAAuB,KAAK,CAAA,EAAE,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,MAAM,CAAA;AAC5C","file":"feedback.mjs","sourcesContent":["import \"server-only\"\n// POST handler behind components/dashboard/feedbackDialog.tsx. Shipped as\n// `@xk2800/nextjs-template/api/feedback` so apps mount it with a one-line\n// app/api/feedback/route.ts: export { POST } from \"@xk2800/nextjs-template/api/feedback\"\nimport { NextRequest, NextResponse } from \"next/server\"\nimport { headers } from \"next/headers\"\nimport { z } from \"zod\"\nimport { auth } from \"../server/auth\"\nimport { config } from \"../config/env\"\nimport { getResend, EMAIL_FROM } from \"./resend\"\nimport { getSystemSettings } from \"./settings-queries\"\nimport { lookupErrorDetail, unexpectedErrorMessage } from \"./errors\"\n\nconst feedbackSchema = z.object({\n  type: z.enum([\"bug\", \"feedback\"]),\n  // Keep in sync with FEEDBACK_MAX_LENGTH in components/dashboard/feedbackDialog.tsx.\n  message: z.string().trim().min(1).max(2000),\n  page: z.string().max(300).optional(),\n  // The error the user reported from (FeedbackDialog's errorDetails).\n  error: z.string().max(2000).optional(),\n})\n\n// const COOLDOWN_MS = 30_000\nconst COOLDOWN_MS = 0\n// ponytail: in-memory, per instance; move to a DB/Redis counter if one user\n// spamming across instances ever matters.\nconst lastSentAt = new Map<string, number>()\n\nexport async function POST(request: NextRequest) {\n  const discordUrl = config.FEEDBACK_DISCORD_WEBHOOK_URL\n  const emailTo = config.FEEDBACK_EMAIL\n  if (!discordUrl && !emailTo) {\n    return NextResponse.json({ error: \"Feedback is not configured\" }, { status: 503 })\n  }\n\n  const session = await auth.api.getSession({ headers: await headers() })\n  if (!session?.user) {\n    return NextResponse.json({ error: \"Unauthorized\" }, { status: 401 })\n  }\n\n  const parsed = feedbackSchema.safeParse(await request.json().catch(() => null))\n  if (!parsed.success) {\n    return NextResponse.json({ error: \"Message must be 1-2000 characters\" }, { status: 400 })\n  }\n\n  const now = Date.now()\n  if (now - (lastSentAt.get(session.user.id) ?? 0) < COOLDOWN_MS) {\n    return NextResponse.json(\n      { error: \"Please wait a moment before sending more feedback\" },\n      { status: 429 }\n    )\n  }\n  lastSentAt.set(session.user.id, now)\n\n  const { type, message, page } = parsed.data\n  // Admin-controlled (System Settings → Feedback); off drops it entirely.\n  const errorDetails =\n    parsed.data.error && (await getSystemSettings()).feedbackAttachErrors\n      ? parsed.data.error\n      : undefined\n  // Technical detail stored under the error's ref (lib/errors.ts). Goes\n  // server → Discord/email only; the browser never sees it.\n  const technicalDetail = errorDetails ? await lookupErrorDetail(errorDetails) : null\n  const { user } = session\n  const title = type === \"bug\" ? \"🐞 Bug report\" : \"💬 Feedback\"\n  const userAgent = request.headers.get(\"user-agent\") || \"unknown\"\n\n  const sends: Promise<unknown>[] = []\n\n  if (discordUrl) {\n    sends.push(\n      fetch(discordUrl, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          username: config.APP_NAME,\n          // User text must never ping @everyone/@here/roles in the channel.\n          allowed_mentions: { parse: [] },\n          embeds: [{\n            title,\n            description: message,\n            color: type === \"bug\" ? 0xef4444 : 0x3b82f6,\n            fields: [\n              { name: \"User\", value: `${user.name} (${user.email})`.slice(0, 1024) },\n              { name: \"Page\", value: page || \"unknown\", inline: true },\n              ...(errorDetails ? [{ name: \"Error\", value: errorDetails.slice(0, 1024) }] : []),\n              ...(technicalDetail\n                ? [{ name: \"Technical details\", value: \"```\\n\" + technicalDetail.slice(0, 1000) + \"\\n```\" }]\n                : []),\n              { name: \"User agent\", value: userAgent.slice(0, 1024) },\n            ],\n            timestamp: new Date(now).toISOString(),\n          }],\n        }),\n      }).then((res) => {\n        if (!res.ok) throw new Error(`Discord webhook responded ${res.status}`)\n      })\n    )\n  }\n\n  if (emailTo) {\n    sends.push(\n      getResend()\n        .then((resend) => resend.emails.send({\n          from: EMAIL_FROM,\n          to: emailTo.split(\",\").map((s) => s.trim()),\n          replyTo: user.email,\n          subject: `[${config.APP_NAME}] ${title} from ${user.name}`,\n          text: `${message}\\n\\n---\\nUser: ${user.name} <${user.email}>\\nPage: ${page || \"unknown\"}${errorDetails ? `\\nError: ${errorDetails}` : \"\"}${technicalDetail ? `\\n\\nTechnical details:\\n${technicalDetail}` : \"\"}\\nUser agent: ${userAgent}`,\n        }))\n        .then(({ error }) => {\n          if (error) throw new Error(error.message)\n        })\n    )\n  }\n\n  const results = await Promise.allSettled(sends)\n  results.forEach((r) => {\n    if (r.status === \"rejected\") console.error(\"Feedback delivery failed:\", r.reason)\n  })\n\n  if (!results.some((r) => r.status === \"fulfilled\")) {\n    lastSentAt.delete(user.id)\n    return NextResponse.json({ error: \"Failed to send feedback\" }, { status: 502 })\n  }\n  return NextResponse.json({ success: true })\n}\n\n/**\n * Development-only endpoint behind FeedbackTestForm, for testing the\n * report-from-error flow. \"!error\" answers with a safe, user-facing error;\n * \"!crash\" simulates an unexpected failure, so the user gets a generic message\n * with an error ref and the technical detail only reaches the server log.\n * 404 outside development.\n * Mount with app/api/feedback/test/route.ts:\n *   export { testErrorPOST as POST } from \"@xk2800/nextjs-template/api/feedback\"\n */\nexport async function testErrorPOST(request: NextRequest) {\n  if (process.env.NODE_ENV !== \"development\") {\n    return NextResponse.json({ error: \"Not found\" }, { status: 404 })\n  }\n  const session = await auth.api.getSession({ headers: await headers() })\n  if (!session?.user) {\n    return NextResponse.json({ error: \"Unauthorized\" }, { status: 401 })\n  }\n  const body = await request.json().catch(() => null)\n  if (typeof body?.text === \"string\" && body.text.trim() === \"!error\") {\n    return NextResponse.json({ error: \"Test error from the feedback test form\" }, { status: 400 })\n  }\n  if (typeof body?.text === \"string\" && body.text.trim() === \"!crash\") {\n    const crash = new Error(\"Test crash: DB connection to postgres://admin:hunter2@db.internal failed\")\n    return NextResponse.json({ error: unexpectedErrorMessage(crash) }, { status: 500 })\n  }\n  return NextResponse.json({ success: true })\n}\n"]}
+{"version":3,"sources":["../../lib/feedback-route.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAaA,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EAC9B,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,CAAC,CAAA;AAAA;AAAA,EAEhC,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAA,GAAO,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAI,CAAA;AAAA,EAC1C,MAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA;AAAA,EAEnC,OAAO,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAI,EAAE,QAAA;AAC9B,CAAC,CAAA;AAGD,IAAM,WAAA,GAAc,CAAA;AAGpB,IAAM,UAAA,uBAAiB,GAAA,EAAoB;AAE3C,eAAsB,KAAK,OAAA,EAAsB;AA5BjD,EAAA,IAAA,EAAA;AA6BE,EAAA,MAAM,aAAa,MAAA,CAAO,4BAAA;AAC1B,EAAA,MAAM,UAAU,MAAA,CAAO,cAAA;AACvB,EAAA,IAAI,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC3B,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,8BAA6B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,EAAE,OAAA,EAAS,MAAM,OAAA,EAAQ,EAAG,CAAA;AACtE,EAAA,IAAI,EAAC,mCAAS,IAAA,CAAA,EAAM;AAClB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,SAAA,CAAU,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAC,CAAA;AAC9E,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,qCAAoC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC1F;AAEA,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,IAAI,GAAA,IAAA,CAAO,gBAAW,GAAA,CAAI,OAAA,CAAQ,KAAK,EAAE,CAAA,KAA9B,IAAA,GAAA,EAAA,GAAmC,CAAA,CAAA,GAAK,WAAA,EAAa;AAC9D,IAAA,OAAO,YAAA,CAAa,IAAA;AAAA,MAClB,EAAE,OAAO,mDAAA,EAAoD;AAAA,MAC7D,EAAE,QAAQ,GAAA;AAAI,KAChB;AAAA,EACF;AACA,EAAA,UAAA,CAAW,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,EAAA,EAAI,GAAG,CAAA;AAEnC,EAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,KAAS,MAAA,CAAO,IAAA;AAEvC,EAAA,MAAM,YAAA,GACJ,MAAA,CAAO,IAAA,CAAK,KAAA,IAAA,CAAU,MAAM,mBAAkB,EAAG,oBAAA,GAC7C,MAAA,CAAO,IAAA,CAAK,KAAA,GACZ,MAAA;AAGN,EAAA,MAAM,eAAA,GAAkB,YAAA,GAAe,MAAM,iBAAA,CAAkB,YAAY,CAAA,GAAI,IAAA;AAC/E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AACjB,EAAA,MAAM,KAAA,GAAQ,IAAA,KAAS,KAAA,GAAQ,sBAAA,GAAkB,oBAAA;AACjD,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,SAAA;AAEvD,EAAA,MAAM,QAA4B,EAAC;AAEnC,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,MAAM,UAAA,EAAY;AAAA,QAChB,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA;AAAA,UAEjB,gBAAA,EAAkB,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,UAC9B,QAAQ,CAAC;AAAA,YACP,KAAA;AAAA,YACA,WAAA,EAAa,OAAA;AAAA,YACb,KAAA,EAAO,IAAA,KAAS,KAAA,GAAQ,QAAA,GAAW,OAAA;AAAA,YACnC,MAAA,EAAQ;AAAA,cACN,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,GAAG,IAAA,CAAK,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,CAAA,CAAA,CAAA,CAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,EAAE;AAAA,cACrE,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAO,IAAA,IAAQ,SAAA,EAAW,QAAQ,IAAA,EAAK;AAAA,cACvD,GAAI,YAAA,GAAe,CAAC,EAAE,MAAM,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,EAAC;AAAA,cAC9E,GAAI,eAAA,GACA,CAAC,EAAE,IAAA,EAAM,qBAAqB,KAAA,EAAO,OAAA,GAAU,eAAA,CAAgB,KAAA,CAAM,GAAG,GAAI,CAAA,GAAI,OAAA,EAAS,IACzF,EAAC;AAAA,cACL,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,UAAU,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA;AAAE,aACxD;AAAA,YACA,SAAA,EAAW,IAAI,IAAA,CAAK,GAAG,EAAE,WAAA;AAAY,WACtC;AAAA,SACF;AAAA,OACF,CAAA,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ;AACf,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,MACxE,CAAC;AAAA,KACH;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,WAAU,CACP,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,OAAO,IAAA,CAAK;AAAA,QACnC,IAAA,EAAM,UAAA;AAAA,QACN,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAAA,QAC1C,SAAS,IAAA,CAAK,KAAA;AAAA,QACd,OAAA,EAAS,IAAI,MAAA,CAAO,QAAQ,KAAK,KAAK,CAAA,MAAA,EAAS,KAAK,IAAI,CAAA,CAAA;AAAA,QACxD,IAAA,EAAM,GAAG,OAAO;;AAAA;AAAA,MAAA,EAAkB,IAAA,CAAK,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AAAA,MAAA,EAAY,IAAA,IAAQ,SAAS,CAAA,EAAG,YAAA,GAAe;AAAA,OAAA,EAAY,YAAY,CAAA,CAAA,GAAK,EAAE,CAAA,EAAG,eAAA,GAAkB;;AAAA;AAAA,EAA2B,eAAe,KAAK,EAAE;AAAA,YAAA,EAAiB,SAAS,CAAA;AAAA,OACzO,CAAC,CAAA,CACD,KAAK,CAAC,EAAE,OAAM,KAAM;AACnB,QAAA,IAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA,MAC1C,CAAC;AAAA,KACL;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA;AAC9C,EAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA,KAAM;AACrB,IAAA,IAAI,EAAE,MAAA,KAAW,UAAA,UAAoB,KAAA,CAAM,2BAAA,EAA6B,EAAE,MAAM,CAAA;AAAA,EAClF,CAAC,CAAA;AAED,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,WAAW,CAAA,EAAG;AAClD,IAAA,UAAA,CAAW,MAAA,CAAO,KAAK,EAAE,CAAA;AACzB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,2BAA0B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAChF;AACA,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,MAAM,CAAA;AAC5C;AAWA,eAAsB,cAAc,OAAA,EAAsB;AACxD,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,EAAe;AAC1C,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,aAAY,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAClE;AACA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,EAAE,OAAA,EAAS,MAAM,OAAA,EAAQ,EAAG,CAAA;AACtE,EAAA,IAAI,EAAC,mCAAS,IAAA,CAAA,EAAM;AAClB,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACrE;AACA,EAAA,MAAM,OAAO,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAClD,EAAA,IAAI,QAAO,6BAAM,IAAA,CAAA,KAAS,QAAA,IAAY,KAAK,IAAA,CAAK,IAAA,OAAW,QAAA,EAAU;AACnE,IAAA,OAAO,YAAA,CAAa,KAAK,EAAE,KAAA,EAAO,0CAAyC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC/F;AACA,EAAA,IAAI,QAAO,6BAAM,IAAA,CAAA,KAAS,QAAA,IAAY,KAAK,IAAA,CAAK,IAAA,OAAW,QAAA,EAAU;AACnE,IAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,0EAA0E,CAAA;AAClG,IAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,KAAA,EAAO,sBAAA,CAAuB,KAAK,CAAA,EAAE,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,MAAM,CAAA;AAC5C","file":"feedback.mjs","sourcesContent":["import \"server-only\"\n// POST handler behind components/dashboard/feedbackDialog.tsx. Shipped as\n// `@xk2800/nextjs-template/api/feedback` so apps mount it with a one-line\n// app/api/feedback/route.ts: export { POST } from \"@xk2800/nextjs-template/api/feedback\"\nimport { NextRequest, NextResponse } from \"next/server\"\nimport { headers } from \"next/headers\"\nimport { z } from \"zod\"\nimport { auth } from \"../server/auth\"\nimport { config } from \"../config/env\"\nimport { getResend, EMAIL_FROM } from \"./resend\"\nimport { getSystemSettings } from \"./settings-queries\"\nimport { lookupErrorDetail, unexpectedErrorMessage } from \"./errors\"\n\nconst feedbackSchema = z.object({\n  type: z.enum([\"bug\", \"feedback\"]),\n  // Keep in sync with FEEDBACK_MAX_LENGTH in components/dashboard/feedbackDialog.tsx.\n  message: z.string().trim().min(1).max(2000),\n  page: z.string().max(300).optional(),\n  // The error the user reported from (FeedbackDialog's errorDetails).\n  error: z.string().max(2000).optional(),\n})\n\n// const COOLDOWN_MS = 30_000\nconst COOLDOWN_MS = 0\n// ponytail: in-memory, per instance; move to a DB/Redis counter if one user\n// spamming across instances ever matters.\nconst lastSentAt = new Map<string, number>()\n\nexport async function POST(request: NextRequest) {\n  const discordUrl = config.FEEDBACK_DISCORD_WEBHOOK_URL\n  const emailTo = config.FEEDBACK_EMAIL\n  if (!discordUrl && !emailTo) {\n    return NextResponse.json({ error: \"Feedback is not configured\" }, { status: 503 })\n  }\n\n  const session = await auth.api.getSession({ headers: await headers() })\n  if (!session?.user) {\n    return NextResponse.json({ error: \"Unauthorized\" }, { status: 401 })\n  }\n\n  const parsed = feedbackSchema.safeParse(await request.json().catch(() => null))\n  if (!parsed.success) {\n    return NextResponse.json({ error: \"Message must be 1-2000 characters\" }, { status: 400 })\n  }\n\n  const now = Date.now()\n  if (now - (lastSentAt.get(session.user.id) ?? 0) < COOLDOWN_MS) {\n    return NextResponse.json(\n      { error: \"Please wait a moment before sending more feedback\" },\n      { status: 429 }\n    )\n  }\n  lastSentAt.set(session.user.id, now)\n\n  const { type, message, page } = parsed.data\n  // Admin-controlled (System Settings → Feedback); off drops it entirely.\n  const errorDetails =\n    parsed.data.error && (await getSystemSettings()).feedbackAttachErrors\n      ? parsed.data.error\n      : undefined\n  // Technical detail stored under the error's ref (lib/errors.ts). Goes\n  // server → Discord/email only; the browser never sees it.\n  const technicalDetail = errorDetails ? await lookupErrorDetail(errorDetails) : null\n  const { user } = session\n  const title = type === \"bug\" ? \"🐞 Bug report\" : \"💬 Feedback\"\n  const userAgent = request.headers.get(\"user-agent\") || \"unknown\"\n\n  const sends: Promise<unknown>[] = []\n\n  if (discordUrl) {\n    sends.push(\n      fetch(discordUrl, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          username: config.APP_NAME,\n          // User text must never ping @everyone/@here/roles in the channel.\n          allowed_mentions: { parse: [] },\n          embeds: [{\n            title,\n            description: message,\n            color: type === \"bug\" ? 0xef4444 : 0x3b82f6,\n            fields: [\n              { name: \"User\", value: `${user.name} (${user.email})`.slice(0, 1024) },\n              { name: \"Page\", value: page || \"unknown\", inline: true },\n              ...(errorDetails ? [{ name: \"Error\", value: errorDetails.slice(0, 1024) }] : []),\n              ...(technicalDetail\n                ? [{ name: \"Technical details\", value: \"```\\n\" + technicalDetail.slice(0, 1000) + \"\\n```\" }]\n                : []),\n              { name: \"User agent\", value: userAgent.slice(0, 1024) },\n            ],\n            timestamp: new Date(now).toISOString(),\n          }],\n        }),\n      }).then((res) => {\n        if (!res.ok) throw new Error(`Discord webhook responded ${res.status}`)\n      })\n    )\n  }\n\n  if (emailTo) {\n    sends.push(\n      getResend()\n        .then((resend) => resend.emails.send({\n          from: EMAIL_FROM,\n          to: emailTo.split(\",\").map((s) => s.trim()),\n          replyTo: user.email,\n          subject: `[${config.APP_NAME}] ${title} from ${user.name}`,\n          text: `${message}\\n\\n---\\nUser: ${user.name} <${user.email}>\\nPage: ${page || \"unknown\"}${errorDetails ? `\\nError: ${errorDetails}` : \"\"}${technicalDetail ? `\\n\\nTechnical details:\\n${technicalDetail}` : \"\"}\\nUser agent: ${userAgent}`,\n        }))\n        .then(({ error }) => {\n          if (error) throw new Error(error.message)\n        })\n    )\n  }\n\n  const results = await Promise.allSettled(sends)\n  results.forEach((r) => {\n    if (r.status === \"rejected\") console.error(\"Feedback delivery failed:\", r.reason)\n  })\n\n  if (!results.some((r) => r.status === \"fulfilled\")) {\n    lastSentAt.delete(user.id)\n    return NextResponse.json({ error: \"Failed to send feedback\" }, { status: 502 })\n  }\n  return NextResponse.json({ success: true })\n}\n\n/**\n * Development-only endpoint behind FeedbackTestForm, for testing the\n * report-from-error flow. \"!error\" answers with a safe, user-facing error;\n * \"!crash\" simulates an unexpected failure, so the user gets a generic message\n * with an error ref and the technical detail only reaches the server log.\n * 404 outside development.\n * Mount with app/api/feedback/test/route.ts:\n *   export { testErrorPOST as POST } from \"@xk2800/nextjs-template/api/feedback\"\n */\nexport async function testErrorPOST(request: NextRequest) {\n  if (process.env.NODE_ENV !== \"development\") {\n    return NextResponse.json({ error: \"Not found\" }, { status: 404 })\n  }\n  const session = await auth.api.getSession({ headers: await headers() })\n  if (!session?.user) {\n    return NextResponse.json({ error: \"Unauthorized\" }, { status: 401 })\n  }\n  const body = await request.json().catch(() => null)\n  if (typeof body?.text === \"string\" && body.text.trim() === \"!error\") {\n    return NextResponse.json({ error: \"Test error from the feedback test form\" }, { status: 400 })\n  }\n  if (typeof body?.text === \"string\" && body.text.trim() === \"!crash\") {\n    const crash = new Error(\"Test crash: DB connection to postgres://admin:hunter2@db.internal failed\")\n    return NextResponse.json({ error: unexpectedErrorMessage(crash) }, { status: 500 })\n  }\n  return NextResponse.json({ success: true })\n}\n"]}

package/dist/api/marketing.d.mts

@@ -0,0 +1,36 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+type IdParams = {
+    params: Promise<{
+        id: string;
+    }>;
+};
+declare function createBroadcastPOST(request: NextRequest): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    success: boolean;
+    id: string;
+    sent: boolean;
+}>>;
+declare function getBroadcastGET(_request: NextRequest, { params }: IdParams): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    subject: string | null;
+    from: string | null;
+    previewText: string | null;
+    html: string | null;
+    text: string | null;
+    status: "draft" | "sent" | "queued";
+}>>;
+declare function sendBroadcastPOST(_request: NextRequest, { params }: IdParams): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    success: boolean;
+}>>;
+declare function updateSubscriptionPUT(request: NextRequest): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    subscribed: boolean;
+}>>;
+
+export { createBroadcastPOST, getBroadcastGET, sendBroadcastPOST, updateSubscriptionPUT };

package/dist/api/marketing.d.ts

@@ -0,0 +1,36 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+type IdParams = {
+    params: Promise<{
+        id: string;
+    }>;
+};
+declare function createBroadcastPOST(request: NextRequest): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    success: boolean;
+    id: string;
+    sent: boolean;
+}>>;
+declare function getBroadcastGET(_request: NextRequest, { params }: IdParams): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    subject: string | null;
+    from: string | null;
+    previewText: string | null;
+    html: string | null;
+    text: string | null;
+    status: "draft" | "sent" | "queued";
+}>>;
+declare function sendBroadcastPOST(_request: NextRequest, { params }: IdParams): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    success: boolean;
+}>>;
+declare function updateSubscriptionPUT(request: NextRequest): Promise<NextResponse<{
+    error: string;
+}> | NextResponse<{
+    subscribed: boolean;
+}>>;
+
+export { createBroadcastPOST, getBroadcastGET, sendBroadcastPOST, updateSubscriptionPUT };