@xk2800/nextjs-template 0.8.0-beta.4 → 0.8.0-beta.6

package/dist/api/feedback.js

@@ -20,6 +20,7 @@ var passkey = require('@better-auth/passkey');
 var api = require('better-auth/api');
 var uaParserJs = require('ua-parser-js');
 var geoip = require('geoip-lite');
+var crypto = require('crypto');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -210,6 +211,7 @@ __export(schema_exports, {
   activityLogs: () => activityLogs,
   authThrottle: () => authThrottle,
   deviceFingerprints: () => deviceFingerprints,
+  errorRefs: () => errorRefs,
   passkeys: () => passkeys,
   sessions: () => sessions,
   systemSettings: () => systemSettings,
@@ -392,6 +394,9 @@ var systemSettings = pgCore.pgTable("system_settings", {
   authEnableEmailPassword: pgCore.boolean("authEnableEmailPassword").notNull().default(true),
   authEnableOneTap: pgCore.boolean("authEnableOneTap").notNull().default(false),
   enableSessionRevocation: pgCore.boolean("enableSessionRevocation").notNull().default(true),
+  // Attach the error a user hit to feedback they send from it (see
+  // lib/feedback-route.ts). Off = only what the user typed is sent.
+  feedbackAttachErrors: pgCore.boolean("feedbackAttachErrors").notNull().default(true),
   updatedAt: pgCore.timestamp("updatedAt").notNull().defaultNow(),
   // Who last changed a setting. This row doesn't "belong" to that admin the
   // way sessions/activityLogs belong to their user, so deleting that admin's
@@ -400,6 +405,14 @@ var systemSettings = pgCore.pgTable("system_settings", {
 }, (table) => [
   pgCore.check("system_settings_singleton", drizzleOrm.sql`${table.id} = 'default'`)
 ]);
+var errorRefs = pgCore.pgTable("error_refs", {
+  ref: pgCore.text("ref").primaryKey(),
+  message: pgCore.text("message").notNull(),
+  detail: pgCore.text("detail").notNull(),
+  createdAt: pgCore.timestamp("createdAt").notNull().defaultNow()
+}, (table) => [
+  pgCore.index("error_refs_created_at_idx").on(table.createdAt)
+]);
 var envSchema = zod.z.object({
   NODE_ENV: zod.z.enum(["development", "production", "test"]).default("development"),
   PORT: zod.z.string().default("3000").transform(Number),
@@ -602,6 +615,7 @@ function fallbackSettings() {
     authEnableEmailPassword: config.AUTH_ENABLE_EMAIL_PASSWORD,
     authEnableOneTap: config.AUTH_ENABLE_ONE_TAP,
     enableSessionRevocation: config.ENABLE_SESSION_REVOCATION,
+    feedbackAttachErrors: true,
     updatedAt: /* @__PURE__ */ new Date(0),
     updatedBy: null
   };
@@ -1039,15 +1053,61 @@ var auth = new Proxy({}, {
     return Reflect.getOwnPropertyDescriptor(getDefaultAuth(), prop);
   }
 });
+var REF_ALPHABET = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
+var REF_PATTERN = /\(ref: ([2-9A-HJ-NP-Z]{6})\)/;
+var DETAIL_MAX_LENGTH = 8e3;
+var RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
+function describeError(error) {
+  if (error instanceof Error) return error.stack || `${error.name}: ${error.message}`;
+  try {
+    return JSON.stringify(error, null, 2);
+  } catch (e) {
+    return String(error);
+  }
+}
+function storeDetail(ref, message, error) {
+  const save = async () => {
+    try {
+      await db.insert(errorRefs).values({
+        ref,
+        message,
+        detail: describeError(error).slice(0, DETAIL_MAX_LENGTH)
+      });
+      await db.delete(errorRefs).where(drizzleOrm.lt(errorRefs.createdAt, new Date(Date.now() - RETENTION_MS)));
+    } catch (storeError) {
+      console.error(`[error ref ${ref}] could not store error detail`, storeError);
+    }
+  };
+  try {
+    server.after(save);
+  } catch (e) {
+    void save();
+  }
+}
+async function lookupErrorDetail(text2) {
+  var _a, _b;
+  const ref = (_a = text2.match(REF_PATTERN)) == null ? void 0 : _a[1];
+  if (!ref) return null;
+  const [row] = await db.select({ detail: errorRefs.detail }).from(errorRefs).where(drizzleOrm.eq(errorRefs.ref, ref)).limit(1);
+  return (_b = row == null ? void 0 : row.detail) != null ? _b : null;
+}
+function unexpectedErrorMessage(error, message = "Something went wrong. Please try again.") {
+  const ref = Array.from(crypto.randomBytes(6), (b) => REF_ALPHABET[b % REF_ALPHABET.length]).join("");
+  console.error(`[error ref ${ref}] ${message}`, error);
+  storeDetail(ref, message, error);
+  return `${message} (ref: ${ref})`;
+}
 
 // lib/feedback-route.ts
 var feedbackSchema = zod.z.object({
   type: zod.z.enum(["bug", "feedback"]),
   // Keep in sync with FEEDBACK_MAX_LENGTH in components/dashboard/feedbackDialog.tsx.
   message: zod.z.string().trim().min(1).max(2e3),
-  page: zod.z.string().max(300).optional()
+  page: zod.z.string().max(300).optional(),
+  // The error the user reported from (FeedbackDialog's errorDetails).
+  error: zod.z.string().max(2e3).optional()
 });
-var COOLDOWN_MS = 3e4;
+var COOLDOWN_MS = 0;
 var lastSentAt = /* @__PURE__ */ new Map();
 async function POST(request) {
   var _a;
@@ -1073,6 +1133,8 @@ async function POST(request) {
   }
   lastSentAt.set(session.user.id, now);
   const { type, message, page } = parsed.data;
+  const errorDetails = parsed.data.error && (await getSystemSettings()).feedbackAttachErrors ? parsed.data.error : void 0;
+  const technicalDetail = errorDetails ? await lookupErrorDetail(errorDetails) : null;
   const { user } = session;
   const title = type === "bug" ? "\u{1F41E} Bug report" : "\u{1F4AC} Feedback";
   const userAgent = request.headers.get("user-agent") || "unknown";
@@ -1093,6 +1155,8 @@ async function POST(request) {
             fields: [
               { name: "User", value: `${user.name} (${user.email})`.slice(0, 1024) },
               { name: "Page", value: page || "unknown", inline: true },
+              ...errorDetails ? [{ name: "Error", value: errorDetails.slice(0, 1024) }] : [],
+              ...technicalDetail ? [{ name: "Technical details", value: "```\n" + technicalDetail.slice(0, 1e3) + "\n```" }] : [],
               { name: "User agent", value: userAgent.slice(0, 1024) }
             ],
             timestamp: new Date(now).toISOString()
@@ -1114,7 +1178,11 @@ async function POST(request) {
 
 ---
 User: ${user.name} <${user.email}>
-Page: ${page || "unknown"}
+Page: ${page || "unknown"}${errorDetails ? `
+Error: ${errorDetails}` : ""}${technicalDetail ? `
+
+Technical details:
+${technicalDetail}` : ""}
 User agent: ${userAgent}`
       })).then(({ error }) => {
         if (error) throw new Error(error.message);
@@ -1131,7 +1199,26 @@ User agent: ${userAgent}`
   }
   return server.NextResponse.json({ success: true });
 }
+async function testErrorPOST(request) {
+  if (process.env.NODE_ENV !== "development") {
+    return server.NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+  const session = await auth.api.getSession({ headers: await headers.headers() });
+  if (!(session == null ? void 0 : session.user)) {
+    return server.NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const body = await request.json().catch(() => null);
+  if (typeof (body == null ? void 0 : body.text) === "string" && body.text.trim() === "!error") {
+    return server.NextResponse.json({ error: "Test error from the feedback test form" }, { status: 400 });
+  }
+  if (typeof (body == null ? void 0 : body.text) === "string" && body.text.trim() === "!crash") {
+    const crash = new Error("Test crash: DB connection to postgres://admin:hunter2@db.internal failed");
+    return server.NextResponse.json({ error: unexpectedErrorMessage(crash) }, { status: 500 });
+  }
+  return server.NextResponse.json({ success: true });
+}
 
 exports.POST = POST;
+exports.testErrorPOST = testErrorPOST;
 //# sourceMappingURL=feedback.js.map
 //# sourceMappingURL=feedback.js.map