feat: Add maxReviews field to Subscription model

.gitignore

@@ -42,3 +42,6 @@ package-lock.json
 
 # PDF
 *.pdf
+
+# Pem files
+*.pem

README.md

@@ -1,94 +1 @@
-# SaaS Boilerplate with Turborepo
-
-This is a modern SaaS boilerplate built with Turborepo, providing a scalable foundation for building your next SaaS application. It combines the power of Next.js, TypeScript, and other modern technologies to help you launch faster.
-
-## Features
-
-- 🚀 **Modern Stack**: Built with Next.js, TypeScript, and Turborepo
-- 🎨 **Beautiful UI**: Pre-configured with Tailwind CSS and modern UI components
-- 🔒 **Authentication**: Ready-to-use authentication system
-- 💳 **Payments**: Integrated payment processing capabilities
-- 📱 **Responsive**: Mobile-first design approach
-- 🔧 **Developer Experience**: Hot reloading, TypeScript, ESLint, and Prettier
-
-## What's inside?
-
-This Turborepo includes the following packages/apps:
-
-### Apps and Packages
-
-- `docs`: a [Next.js](https://nextjs.org/) app for documentation
-- `web`: the main [Next.js](https://nextjs.org/) SaaS application
-- `@repo/ui`: a shared React component library with pre-built UI components
-- `@repo/eslint-config`: `eslint` configurations (includes `eslint-config-next` and `eslint-config-prettier`)
-- `@repo/typescript-config`: `tsconfig.json`s used throughout the monorepo
-
-Each package/app is 100% [TypeScript](https://www.typescriptlang.org/).
-
-### Key Technologies
-
-- [Next.js](https://nextjs.org/) - React framework for production
-- [TypeScript](https://www.typescriptlang.org/) - Static type checking
-- [Tailwind CSS](https://tailwindcss.com/) - Utility-first CSS framework
-- [Turborepo](https://turbo.build/) - High-performance build system
-- [ESLint](https://eslint.org/) - Code linting
-- [Prettier](https://prettier.io) - Code formatting
-
-### Utilities
-
-This Turborepo has some additional tools already setup for you:
-
-- [TypeScript](https://www.typescriptlang.org/) for static type checking
-- [ESLint](https://eslint.org/) for code linting
-- [Prettier](https://prettier.io) for code formatting
-
-### Build
-
-To build all apps and packages, run the following command:
-
-```
-cd my-turborepo
-pnpm build
-```
-
-### Develop
-
-To develop all apps and packages, run the following command:
-
-```
-cd my-turborepo
-pnpm dev
-```
-
-### Remote Caching
-
-> [!TIP]
-> Vercel Remote Cache is free for all plans. Get started today at [vercel.com](https://vercel.com/signup?/signup?utm_source=remote-cache-sdk&utm_campaign=free_remote_cache).
-
-Turborepo can use a technique known as [Remote Caching](https://turbo.build/repo/docs/core-concepts/remote-caching) to share cache artifacts across machines, enabling you to share build caches with your team and CI/CD pipelines.
-
-By default, Turborepo will cache locally. To enable Remote Caching you will need an account with Vercel. If you don't have an account you can [create one](https://vercel.com/signup?utm_source=turborepo-examples), then enter the following commands:
-
-```
-cd my-turborepo
-npx turbo login
-```
-
-This will authenticate the Turborepo CLI with your [Vercel account](https://vercel.com/docs/concepts/personal-accounts/overview).
-
-Next, you can link your Turborepo to your Remote Cache by running the following command from the root of your Turborepo:
-
-```
-npx turbo link
-```
-
-## Useful Links
-
-Learn more about the power of Turborepo:
-
-- [Tasks](https://turbo.build/repo/docs/core-concepts/monorepos/running-tasks)
-- [Caching](https://turbo.build/repo/docs/core-concepts/caching)
-- [Remote Caching](https://turbo.build/repo/docs/core-concepts/remote-caching)
-- [Filtering](https://turbo.build/repo/docs/core-concepts/monorepos/filtering)
-- [Configuration Options](https://turbo.build/repo/docs/reference/configuration)
-- [CLI Usage](https://turbo.build/repo/docs/reference/command-line-reference)
+# Angry Beard Bot

apps/api/.env.example

@@ -18,3 +18,12 @@ SUPABASE_BUCKET_NAME=
 
 # Logger
 LOG_LEVEL=
+
+# Workflow
+WORKFLOW_URL=
+
+# Github
+GITHUB_APP_ID=
+GITHUB_PRIVATE_KEY=
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=

apps/api/docker/Dockerfile

@@ -0,0 +1,34 @@
+# Stage 1: Build
+FROM node:18-alpine AS builder
+
+# Create working directory
+WORKDIR /app
+
+# Copy dependency files
+COPY ../../yarn.lock ../../package.json ./
+
+# Install dependencies
+RUN yarn install
+
+# Copy rest of project
+COPY ../../ .
+
+# Build application
+RUN yarn build
+
+# Stage 2: Production
+FROM node:18-alpine
+
+WORKDIR /app
+
+# Copy only necessary files from build stage
+COPY --from=builder /app/package.json ./
+COPY --from=builder /app/yarn.lock ./
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/dist ./dist
+
+# Default Nest port
+EXPOSE 3000
+
+# Command to start app
+CMD ["node", "dist/main"]

apps/api/package.json

@@ -50,6 +50,7 @@
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "graphql": "^16.10.0",
+    "jsonwebtoken": "^9.0.2",
     "passport": "^0.7.0",
     "prisma": "^6.5.0",
     "reflect-metadata": "^0.2.0",
@@ -63,6 +64,7 @@
     "@nestjs/testing": "^10.0.0",
     "@types/express": "^5.0.0",
     "@types/jest": "^29.5.2",
+    "@types/jsonwebtoken": "^9.0.9",
     "@types/node": "^20.3.1",
     "@types/supertest": "^6.0.0",
     "@typescript-eslint/eslint-plugin": "^8.0.0",

apps/api/src/app.controller.ts

@@ -1,12 +1,20 @@
 import { Controller, Get } from '@nestjs/common';
 import { AppService } from './app.service';
+import { ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 
+@ApiTags('Health')
 @Controller()
 export class AppController {
   constructor(private readonly appService: AppService) {}
 
   @Get()
-  getHello(): string {
-    return this.appService.getHello();
+  @ApiOperation({ summary: 'Get API health status' })
+  @ApiResponse({
+    status: 200,
+    description: 'Returns OK if the API is healthy',
+    type: String,
+  })
+  async getHealth(): Promise<string> {
+    return this.appService.getHealth();
   }
 }

apps/api/src/app.module.ts

@@ -7,11 +7,14 @@ import { StripeModule } from './stripe/stripe.module';
 import { ConfigModule } from '@nestjs/config';
 import { SupabaseModule } from './supabase/supabase.module';
 import { AuthModule } from './auth/auth.module';
-import { GithubModule } from './github/github.module';
 import { RepositoryModule } from './repository/repository.module';
 import { PullRequestModule } from './pull-request/pull-request.module';
 import { UserModule } from './user/user.module';
 import { SubscriptionModule } from './subscription/subscription.module';
+import { ReviewModule } from './review/review.module';
+import { WorkflowModule } from './workflow/workflow.module';
+import { GithubModule } from './github/github.module';
+import { BotConfigModule } from './bot-config/bot-config.module';
 @Module({
   imports: [
     ConfigModule.forRoot({ isGlobal: true }),
@@ -24,6 +27,9 @@ import { SubscriptionModule } from './subscription/subscription.module';
     PullRequestModule,
     UserModule,
     SubscriptionModule,
+    ReviewModule,
+    WorkflowModule,
+    BotConfigModule,
   ],
   controllers: [AppController],
   providers: [AppService, PrismaService],

apps/api/src/app.service.ts

@@ -2,7 +2,7 @@ import { Injectable } from '@nestjs/common';
 
 @Injectable()
 export class AppService {
-  getHello(): string {
-    return 'Hello World!';
+  async getHealth(): Promise<string> {
+    return 'OK';
   }
 }

apps/api/src/auth/auth.controller.ts

@@ -1,8 +1,10 @@
 import { Controller, Post, Body, Get, Logger } from '@nestjs/common';
 import { SupabaseService } from '../supabase/supabase.service';
 import { ApiTags, ApiOperation, ApiResponse, ApiBody } from '@nestjs/swagger';
-import { GitHubUser } from './interface/github-user.interface';
+import { AuthRequest } from './interface/auth-request.interface';
 import { UserService } from 'src/user/user.service';
+import { Public } from './decorators/public.decorator';
+
 @ApiTags('Authentication')
 @Controller('auth')
 export class AuthController {
@@ -15,6 +17,7 @@ export class AuthController {
     this.logger = new Logger(AuthController.name);
   }
 
+  @Public()
   @Post('register')
   @ApiOperation({ summary: 'Register a new user' })
   @ApiBody({
@@ -35,6 +38,7 @@ export class AuthController {
     return { user };
   }
 
+  @Public()
   @Post('login')
   @ApiOperation({ summary: 'Login user' })
   @ApiBody({
@@ -65,32 +69,34 @@ export class AuthController {
     return { session };
   }
 
+  @Public()
   @Post('github')
   @ApiOperation({ summary: 'Register or update user with GitHub data' })
-  @ApiBody({ type: GitHubUser })
+  //@ApiBody({ type: AuthRequest as ObjectType<AuthRequest> })
   @ApiResponse({ status: 201, description: 'User successfully registered/updated' })
   @ApiResponse({ status: 400, description: 'Invalid input' })
-  async handleGithubAuth(@Body() githubUser: GitHubUser) {
-    this.logger.log(`Processing GitHub authentication for user: ${githubUser.email}`);
+  async handleGithubAuth(@Body() authRequest: AuthRequest) {
+    this.logger.log(`Processing GitHub authentication for user: ${JSON.stringify(authRequest, null, 2)}`);
 
     try {
-      if (!githubUser.email) {
+      if (!authRequest.user.email) {
         throw new Error('Email is required');
       }
 
-      const existingUser = await this.userService.getUserByEmail(githubUser.email);
+      const existingUser = await this.userService.getUserBySupabaseId(authRequest.user.id);
 
-      let user = existingUser;
+      let currentUser = existingUser;
 
       if (!existingUser) {
-        user = await this.userService.createUser({
-          email: githubUser.email,
-          name: githubUser.user_metadata.name,
-          githubId: githubUser.id,
-          providerId: githubUser.user_metadata.provider_id,
+        currentUser = await this.userService.createUser({
+          email: authRequest.user.email,
+          name: authRequest.user.user_metadata.name,
+          githubId: authRequest.user.id,
+          providerId: authRequest.user.user_metadata.provider_id,
+          supabaseId: authRequest.user.id,
         });
       }
-      return { user };
+      return { user: currentUser };
     } catch (error) {
       this.logger.error(`Error processing GitHub authentication: ${error.message}`);
       throw error;

apps/api/src/auth/auth.module.ts

@@ -3,9 +3,18 @@ import { AuthController } from './auth.controller';
 import { SupabaseService } from 'src/supabase/supabase.service';
 import { PrismaModule } from 'src/prisma/prisma.module';
 import { UserModule } from 'src/user/user.module';
+import { APP_GUARD } from '@nestjs/core';
+import { AuthGuard } from './guards/auth.guard';
+
 @Module({
   imports: [PrismaModule, UserModule],
-  providers: [SupabaseService],
+  providers: [
+    SupabaseService,
+    {
+      provide: APP_GUARD,
+      useClass: AuthGuard,
+    },
+  ],
   controllers: [AuthController],
 })
 export class AuthModule {}

apps/api/src/auth/decorators/public.decorator.ts

@@ -0,0 +1,4 @@
+import { SetMetadata } from '@nestjs/common';
+
+export const IS_PUBLIC_KEY = 'isPublic';
+export const Public = () => SetMetadata(IS_PUBLIC_KEY, true);

apps/api/src/auth/guards/auth.guard.ts

@@ -0,0 +1,56 @@
+import { Injectable, CanActivate, ExecutionContext, UnauthorizedException } from '@nestjs/common';
+import { SupabaseService } from '../../supabase/supabase.service';
+import { Reflector } from '@nestjs/core';
+import { IS_PUBLIC_KEY } from '../decorators/public.decorator';
+
+@Injectable()
+export class AuthGuard implements CanActivate {
+  constructor(
+    private supabaseService: SupabaseService,
+    private reflector: Reflector,
+  ) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    // Check if the route is marked as public
+    const isPublic = this.reflector.getAllAndOverride<boolean>(IS_PUBLIC_KEY, [context.getHandler(), context.getClass()]);
+
+    if (isPublic) {
+      return true;
+    }
+
+    const request = context.switchToHttp().getRequest();
+    const authHeader = request.headers.authorization;
+
+    if (!authHeader) {
+      throw new UnauthorizedException('No authorization header');
+    }
+
+    const [type, token] = authHeader.split(' ');
+
+    if (type !== 'Bearer') {
+      throw new UnauthorizedException('Invalid authorization type');
+    }
+
+    if (!token) {
+      throw new UnauthorizedException('No token provided');
+    }
+
+    try {
+      // Verify the token with Supabase
+      const {
+        data: { user },
+        error,
+      } = await this.supabaseService.client.auth.getUser(token);
+
+      if (error || !user) {
+        throw new UnauthorizedException('Invalid token');
+      }
+
+      // Attach the user to the request for later use
+      request.user = user;
+      return true;
+    } catch (error) {
+      throw new UnauthorizedException('Invalid token');
+    }
+  }
+}