ui-syncup 0.3.13 → 0.4.0-beta.2

package/.env.production

@@ -0,0 +1,139 @@
+# ============================================================================
+# UI SyncUp — Production Environment Template
+# ============================================================================
+# Copy this file to .env in the same directory as docker/compose.yml.
+# Fill in every placeholder before running docker compose up -d.
+# DO NOT commit this file with real secrets to version control.
+# ============================================================================
+
+# ============================================================================
+# Docker Compose Profiles
+# ============================================================================
+# Controls which infrastructure services are bundled.
+#
+# Options (comma-separated, no spaces):
+#   db      → postgres:15-alpine
+#   cache   → redis:7-alpine
+#   storage → minio + automatic bucket creation
+#
+# All bundled:    COMPOSE_PROFILES=db,cache,storage
+# All external:   COMPOSE_PROFILES=
+# On Coolify/Dokploy: set this in the platform's Environment Variables UI.
+COMPOSE_PROFILES=
+
+# Host port mapped to the app container (default: 3000)
+PORT=3000
+
+# ============================================================================
+# Application
+# ============================================================================
+NODE_ENV=production
+
+NEXT_PUBLIC_APP_URL={{APP_URL}}
+NEXT_PUBLIC_API_URL={{APP_URL}}/api
+
+# ============================================================================
+# Database
+# ============================================================================
+# Pooled connection for Drizzle ORM
+DATABASE_URL={{DATABASE_URL}}
+
+# Non-pooled direct connection — used exclusively by db:migrate on startup
+DIRECT_URL={{DIRECT_URL}}
+
+# --- Bundled Postgres (add 'db' to COMPOSE_PROFILES) ---
+# When using bundled Postgres, set DATABASE_URL and DIRECT_URL to:
+#   postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
+#
+# POSTGRES_USER=syncup
+# POSTGRES_PASSWORD={{POSTGRES_PASSWORD}}
+# POSTGRES_DB=ui_syncup
+
+# ============================================================================
+# Cache
+# ============================================================================
+# Bundled Redis (add 'cache' to COMPOSE_PROFILES): REDIS_URL=redis://redis:6379
+# External (Upstash, Redis Cloud, etc.):           REDIS_URL=rediss://...
+REDIS_URL={{REDIS_URL}}
+
+# ============================================================================
+# Storage (S3-compatible)
+# ============================================================================
+# External S3 / R2 / Backblaze: set your provider's endpoint and credentials.
+# Bundled MinIO (add 'storage' to COMPOSE_PROFILES): use http://minio:9000
+STORAGE_ENDPOINT={{STORAGE_ENDPOINT}}
+STORAGE_REGION={{STORAGE_REGION}}
+STORAGE_ACCESS_KEY_ID={{STORAGE_ACCESS_KEY_ID}}
+STORAGE_SECRET_ACCESS_KEY={{STORAGE_SECRET_ACCESS_KEY}}
+
+# Per-bucket credential overrides (optional)
+# Use when each bucket has its own IAM user / access key.
+# Lookup order per bucket:
+#   1. STORAGE_ATTACHMENTS_ACCESS_KEY_ID / STORAGE_ATTACHMENTS_SECRET_ACCESS_KEY
+#   2. STORAGE_ACCESS_KEY_ID / STORAGE_SECRET_ACCESS_KEY  ← shared fallback
+#
+# STORAGE_ATTACHMENTS_ACCESS_KEY_ID={{STORAGE_ATTACHMENTS_ACCESS_KEY_ID}}
+# STORAGE_ATTACHMENTS_SECRET_ACCESS_KEY={{STORAGE_ATTACHMENTS_SECRET_ACCESS_KEY}}
+# STORAGE_MEDIA_ACCESS_KEY_ID={{STORAGE_MEDIA_ACCESS_KEY_ID}}
+# STORAGE_MEDIA_SECRET_ACCESS_KEY={{STORAGE_MEDIA_SECRET_ACCESS_KEY}}
+
+STORAGE_ATTACHMENTS_BUCKET=ui-syncup-attachments
+STORAGE_ATTACHMENTS_PUBLIC_URL={{APP_URL}}/storage/attachments
+
+STORAGE_MEDIA_BUCKET=ui-syncup-media
+STORAGE_MEDIA_PUBLIC_URL={{APP_URL}}/storage/media
+
+# --- Bundled MinIO (add 'storage' to COMPOSE_PROFILES) ---
+# Set to the same values as STORAGE_ACCESS_KEY_ID / STORAGE_SECRET_ACCESS_KEY.
+# MinIO uses these to bootstrap its admin account on first start.
+#
+# MINIO_ROOT_USER={{STORAGE_ACCESS_KEY_ID}}
+# MINIO_ROOT_PASSWORD={{STORAGE_SECRET_ACCESS_KEY}}
+
+# ============================================================================
+# Authentication (better-auth)
+# ============================================================================
+# Generate: openssl rand -hex 32
+BETTER_AUTH_SECRET={{BETTER_AUTH_SECRET}}
+BETTER_AUTH_URL={{APP_URL}}
+
+# ============================================================================
+# Email Service — configure ONE option
+# ============================================================================
+
+# Option A: Resend (cloud)
+# RESEND_API_KEY={{RESEND_API_KEY}}
+# RESEND_FROM_EMAIL={{RESEND_FROM_EMAIL}}
+
+# Option B: SMTP (self-hosted — Mailcow, Postfix, AWS SES, etc.)
+# When SMTP_HOST is set, all fields below are required.
+# SMTP_HOST={{SMTP_HOST}}
+# SMTP_PORT=587
+# SMTP_USER={{SMTP_USER}}
+# SMTP_PASSWORD={{SMTP_PASSWORD}}
+# SMTP_FROM_EMAIL={{SMTP_FROM_EMAIL}}
+# SMTP_SECURE=false
+
+# ============================================================================
+# Authentication — OAuth Providers (all optional)
+# ============================================================================
+
+# Google OAuth
+# GOOGLE_CLIENT_ID=
+# GOOGLE_CLIENT_SECRET=
+# GOOGLE_REDIRECT_URI={{APP_URL}}/api/auth/callback/google
+
+# Microsoft OAuth
+# MICROSOFT_CLIENT_ID=
+# MICROSOFT_CLIENT_SECRET=
+# MICROSOFT_TENANT_ID=common
+
+# Atlassian OAuth
+# ATLASSIAN_CLIENT_ID=
+# ATLASSIAN_CLIENT_SECRET=
+
+# ============================================================================
+# Feature Flags (optional)
+# ============================================================================
+# NEXT_PUBLIC_ENABLE_ANALYTICS=true
+# NEXT_PUBLIC_ENABLE_DEBUG=false

package/.env.test

@@ -0,0 +1,58 @@
+# =============================================================================
+# Test Environment Variables
+# =============================================================================
+NODE_ENV=test
+
+# Application URLs
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+NEXT_PUBLIC_API_URL=http://localhost:3000/api
+
+# Database (test — local Supabase CLI or PostgreSQL)
+DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:54322/postgres
+DIRECT_URL=postgresql://postgres:postgres@127.0.0.1:54322/postgres
+
+# Supabase (test)
+SUPABASE_URL=https://test.supabase.co
+SUPABASE_ANON_KEY=test-anon-key-for-testing
+SUPABASE_SERVICE_ROLE_KEY=test-service-role-key-for-testing
+
+# Cache (test)
+REDIS_URL=redis://localhost:6379
+
+# Storage (test — stub values, no real bucket needed)
+STORAGE_ENDPOINT=http://127.0.0.1:9000
+STORAGE_REGION=us-east-1
+STORAGE_ACCESS_KEY_ID=test-access-key-id
+STORAGE_SECRET_ACCESS_KEY=test-secret-access-key
+# Per-bucket overrides: STORAGE_ATTACHMENTS_ACCESS_KEY_ID, STORAGE_ATTACHMENTS_SECRET_ACCESS_KEY,
+#                       STORAGE_MEDIA_ACCESS_KEY_ID, STORAGE_MEDIA_SECRET_ACCESS_KEY
+
+STORAGE_ATTACHMENTS_BUCKET=test-attachments
+STORAGE_ATTACHMENTS_PUBLIC_URL=http://127.0.0.1:9000/test-attachments
+
+STORAGE_MEDIA_BUCKET=test-media
+STORAGE_MEDIA_PUBLIC_URL=http://127.0.0.1:9000/test-media
+
+# Authentication (better-auth)
+BETTER_AUTH_SECRET=test-secret-key-with-at-least-32-characters-for-testing
+BETTER_AUTH_URL=http://localhost:3000
+
+# Email (test)
+RESEND_API_KEY=re_test_key_for_testing
+RESEND_FROM_EMAIL=test@example.com
+
+# OAuth (test — stub values)
+GOOGLE_CLIENT_ID=test-google-client-id
+GOOGLE_CLIENT_SECRET=test-google-client-secret
+GOOGLE_REDIRECT_URI=http://localhost:3000/api/auth/callback/google
+
+MICROSOFT_CLIENT_ID=test-microsoft-client-id
+MICROSOFT_CLIENT_SECRET=test-microsoft-client-secret
+MICROSOFT_TENANT_ID=common
+
+ATLASSIAN_CLIENT_ID=test-atlassian-client-id
+ATLASSIAN_CLIENT_SECRET=test-atlassian-client-secret
+
+# Feature Flags (test)
+NEXT_PUBLIC_ENABLE_ANALYTICS=false
+NEXT_PUBLIC_ENABLE_DEBUG=true

package/.gitattributes

@@ -0,0 +1,2 @@
+# Auto detect text files and perform LF normalization
+* text=auto

package/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,33 @@
+name: Bug Report
+description: Something isn't working as expected
+labels: ["bug"]
+body:
+  - type: input
+    id: version
+    attributes:
+      label: UI SyncUp Version
+      placeholder: "0.2.4"
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Steps to reproduce
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment (OS, Docker version, deploy method)

package/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,20 @@
+name: Feature Request
+description: Suggest an idea for UI SyncUp
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: What problem does this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives you have considered

package/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,23 @@
+## Summary
+
+<!-- What does this PR do? One paragraph. -->
+
+## Type of Change
+
+- [ ] Bug fix (`fix:`)
+- [ ] New feature (`feat:`)
+- [ ] Breaking change (`feat!:` / `BREAKING CHANGE:`)
+- [ ] Chore / maintenance (`chore:`, `ci:`, `docs:`)
+
+## Testing
+
+- [ ] `bun run lint` passes
+- [ ] `bun run typecheck` passes
+- [ ] `bun run test` passes
+- [ ] Tested manually (describe how below)
+
+## Checklist
+
+- [ ] Commit messages follow conventional commits format
+- [ ] No secrets or sensitive data included
+- [ ] Relevant docs updated (if applicable)

package/.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: PR Checks
+
+on:
+  pull_request:
+    branches: [main, develop]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+      - name: Run lint
+        run: bun run lint
+
+  typecheck:
+    name: Typecheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+      - name: Run typecheck
+        run: bun run typecheck
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+      - name: Run tests
+        run: bun run test
+
+  docker-smoke:
+    name: Docker Smoke Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build Docker image (no push)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

package/.github/workflows/release.yml

@@ -0,0 +1,174 @@
+name: Release
+
+on:
+  push:
+    branches: [main, develop]
+
+concurrency:
+  group: release-${{ github.ref_name }}
+  cancel-in-progress: false
+
+jobs:
+  quality:
+    name: Quality Gate
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Lint
+        run: bun run lint
+
+      - name: Typecheck
+        run: bun run typecheck
+
+      # Skip test for now
+      # - name: Test
+      #   run: bun run test
+
+  release:
+    name: Semantic Release
+    needs: [quality]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+    outputs:
+      new_release_published: ${{ steps.semantic.outputs.new_release_published }}
+      new_release_version: ${{ steps.semantic.outputs.new_release_version }}
+      new_release_git_tag: ${{ steps.semantic.outputs.new_release_git_tag }}
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install root dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Install CLI dependencies
+        working-directory: ./cli
+        run: bun install --frozen-lockfile
+
+      - name: Build CLI
+        working-directory: ./cli
+        run: bun run build
+
+      - name: Run semantic-release
+        id: semantic
+        uses: cycjimmy/semantic-release-action@16ca923e6ccbb50770c415a0ccd43709a8c5f7a4 # v4
+        with:
+          extra_plugins: |
+            @semantic-release/changelog
+            @semantic-release/git
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+  docker-prerelease:
+    name: Build & Push Docker Image (pre-release)
+    runs-on: ubuntu-latest
+    needs: release
+    if: needs.release.outputs.new_release_published == 'true' && contains(needs.release.outputs.new_release_version, '-')
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          ref: ${{ needs.release.outputs.new_release_git_tag }}
+          persist-credentials: false
+
+      - name: Set up QEMU (for ARM cross-compilation)
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+
+      - name: Log in to GHCR
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push pre-release image
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/bykhd/ui-syncup:beta
+            ghcr.io/bykhd/ui-syncup:v${{ needs.release.outputs.new_release_version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  docker:
+    name: Build & Push Docker Image
+    runs-on: ubuntu-latest
+    needs: release
+    if: needs.release.outputs.new_release_published == 'true' && !contains(needs.release.outputs.new_release_version, '-')
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          ref: ${{ needs.release.outputs.new_release_git_tag }}
+          persist-credentials: false
+
+      - name: Set up QEMU (for ARM cross-compilation)
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+
+      - name: Log in to GHCR
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Compute Docker tags
+        id: docker_tags
+        run: |
+          TAG="v${{ needs.release.outputs.new_release_version }}"
+          MAJOR="${TAG%%.*}"
+          MINOR="${TAG%.*}"
+          TAGS="ghcr.io/bykhd/ui-syncup:${TAG}
+          ghcr.io/bykhd/ui-syncup:latest
+          ghcr.io/bykhd/ui-syncup:${MINOR}
+          ghcr.io/bykhd/ui-syncup:${MAJOR}"
+          echo "tags<<EOF" >> "$GITHUB_OUTPUT"
+          echo "$TAGS" >> "$GITHUB_OUTPUT"
+          echo "EOF" >> "$GITHUB_OUTPUT"
+
+      - name: Build and push multi-arch image
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker_tags.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

package/.nvmrc

@@ -0,0 +1 @@
+v20.17.0

package/.releaserc.json

@@ -0,0 +1,18 @@
+{
+  "branches": [
+    "main",
+    { "name": "develop", "prerelease": "beta" }
+  ],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    ["@semantic-release/changelog", { "changelogFile": "CHANGELOG.md" }],
+    ["@semantic-release/npm", { "pkgRoot": "." }],
+    ["@semantic-release/npm", { "pkgRoot": "./cli" }],
+    ["@semantic-release/git", {
+      "assets": ["CHANGELOG.md", "package.json", "cli/package.json"],
+      "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
+    }],
+    "@semantic-release/github"
+  ]
+}

package/.vercelignore

@@ -0,0 +1,73 @@
+# Dependencies
+node_modules
+.pnp
+.pnp.js
+
+# Testing
+coverage
+*.lcov
+.nyc_output
+tests
+__tests__
+*.test.ts
+*.test.tsx
+*.spec.ts
+*.spec.tsx
+vitest.config.ts
+vitest.setup.ts
+playwright.config.ts
+
+# Development files
+.git
+.gitignore
+.eslintcache
+.stylelintcache
+.vscode
+.idea
+*.swp
+*.swo
+*~
+
+# Documentation
+*.md
+!README.md
+docs
+.github
+
+# Local environment files
+.env.local
+.env*.local
+
+# Build artifacts
+.next
+out
+dist
+build
+
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Database
+.data
+*.db
+*.sqlite
+
+# Docker
+docker-compose.yml
+Dockerfile
+.dockerignore
+
+# Misc
+.temp
+.cache
+.parcel-cache
+tsconfig.tsbuildinfo