Merge branch 'main' into fix/dashboard-getData-query-engine

Author: Mansi0905

.editorconfig

@@ -0,0 +1,31 @@
+# EditorConfig helps maintain consistent coding styles
+# across different editors and IDEs.
+# See https://editorconfig.org
+
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.{js,ts,jsx,tsx,mjs,cjs}]
+indent_size = 2
+
+[*.{json,json5}]
+indent_size = 2
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[*.css]
+indent_size = 2
+
+[*.{md,mdx}]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab

.env.example

@@ -1,55 +1,70 @@
 # ─────────────────────────────────────────────────────────────────────────────
 # urBackend — Environment Variables
-# Copy this file to .env and fill in your values before running docker-compose.
 # ─────────────────────────────────────────────────────────────────────────────
+# Copy this file before editing:
+# Linux/macOS: cp .env.example .env
+# PowerShell: Copy-Item .env.example .env
 
 # ── Server Ports ────────────────────────────────────────────────────────────
 PORT=1234          # For Admin Server (Dashboard)
 USER_PORT=1235     # For User Server (Public API)
 NODE_ENV=development
 
-
-# ── Database & Cache ──────────────────────────────────────────────────────────
+# ── Database & Cache ────────────────────────────────────────────────────────
 # When using docker-compose, these are automatically overridden to point to
 # internal service names (mongo, redis). You do NOT need to change these.
 MONGO_URL=mongodb://mongo:27017/urbackend
 REDIS_URL=redis://redis:6379
 
-# ── Authentication ────────────────────────────────────────────────────────────
+# ── Authentication ──────────────────────────────────────────────────────────
+# Generate random secrets for these values.
+# JWT_SECRET/API_KEY_SALT examples:
+#   openssl rand -base64 32
+#   node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
+#
+# ENCRYPTION_KEY must be 64 hex chars (32 bytes), examples:
+#   openssl rand -hex 32
+#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 JWT_SECRET=your_super_secret_jwt_key_min_32_chars
-ENCRYPTION_KEY=32_character_long_string_for_byod_creds
+ENCRYPTION_KEY=64_hex_characters_for_aes_256_gcm_key
 API_KEY_SALT=your_random_api_key_salt
 
 # Public API userAuth token config (optional; defaults shown)
 PUBLIC_AUTH_ACCESS_TOKEN_TTL=15m
 PUBLIC_AUTH_REFRESH_TOKEN_TTL_SECONDS=604800
 
-# ── External Storage (Supabase) ───────────────────────────────────────────────
+# ── External Storage (Supabase) ─────────────────────────────────────────────
 # Required for file upload/storage features.
+# Get from: https://app.supabase.com → Project Settings → API
 SUPABASE_URL=https://your-project.supabase.co
 SUPABASE_KEY=your-supabase-anon-key
 
-# ── Email (Resend) ────────────────────────────────────────────────────────────
+# ── Email (Resend) ──────────────────────────────────────────────────────────
 # Required for OTP / email verification flow.
+# Get from: https://resend.com/api-keys
 RESEND_API_KEY=re_your_resend_api_key
 EMAIL_FROM=onboarding@resend.dev
+
+# Get from: https://resend.com/webhooks → Create Endpoint
 RESEND_WEBHOOK_SECRET=whsec_your_resend_webhook_secret
 
-# ── Frontend ──────────────────────────────────────────────────────────────────
+# ── Frontend ────────────────────────────────────────────────────────────────
 FRONTEND_URL=http://localhost:5173
-
 PUBLIC_API_URL=https://api.ub.bitbros.in
 
-# ── Billing (Razorpay) ───────────────────────────────────────────────────────
+# ── Billing (Razorpay) ──────────────────────────────────────────────────────
 # Get from: https://dashboard.razorpay.com → Settings → API Keys
 RAZORPAY_KEY_ID=rzp_test_xxxxxxxxxxxx
 RAZORPAY_KEY_SECRET=xxxxxxxxxxxxxxxxxxxx
 
-# Create from: Razorpay Dashboard → Subscriptions → Plans → Create Plan
+# Create from: https://dashboard.razorpay.com → Subscriptions → Plans → Create Plan
 RAZORPAY_PLAN_ID=plan_xxxxxxxxxxxx
 
-# Set from: Razorpay Dashboard → Settings → Webhooks → Add Endpoint → copy secret
-RAZORPAY_KEY_ID=rzp_testx_xxxx
-RAZORPAY_KEY_SECRET=xxxx
-RAZORPAY_PLAN_ID=xxxx
-RAZORPAY_WEBHOOK_SECRET=xxxx
+# Get from: https://dashboard.razorpay.com → Settings → Webhooks → Add Endpoint
+RAZORPAY_WEBHOOK_SECRET=whsec_xxxxxxxxxxxx
+
+# ── Internal Microservices (AI & Python) ────────────────────────────────────
+# Required for AI Query Builder and Python microservice communication
+PYTHON_SERVICE_URL=http://localhost:8000
+INTERNAL_SECRET=generate_a_random_32_char_secret_here
+GROQ_API_KEY=gsk_your_groq_api_key_here

.github/release-drafter.yml

@@ -0,0 +1,49 @@
+name-template: 'v$RESOLVED_VERSION'
+tag-template: 'v$RESOLVED_VERSION'
+
+version-resolver:
+  major:
+    labels:
+      - 'breaking'
+  minor:
+    labels:
+      - 'feature'
+      - 'enhancement'
+  patch:
+    labels:
+      - 'bug'
+      - 'chore'
+      - 'documentation'
+      - 'security'
+  default: patch
+
+categories:
+  - title: 'Added'
+    labels:
+      - 'feature'
+      - 'enhancement'
+  - title: 'Fixed'
+    labels:
+      - 'bug'
+  - title: 'Security'
+    labels:
+      - 'security'
+  - title: 'Breaking Changes'
+    labels:
+      - 'breaking'
+  - title: 'Documentation'
+    labels:
+      - 'documentation'
+  - title: 'Chore'
+    labels:
+      - 'chore'
+
+change-template: '- $TITLE @$AUTHOR (#$NUMBER)'
+change-title-escapes: '\<*_&'
+
+template: |
+  ## What's Changed
+
+  $CHANGES
+
+  **Full Changelog**: https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...v$RESOLVED_VERSION

.github/scripts/generate-changelog-entry.js

@@ -0,0 +1,111 @@
+const https = require("https");
+
+// Fail fast if GROQ_API_KEY is not set
+if (!process.env.GROQ_API_KEY) {
+  console.error("Error: GROQ_API_KEY environment variable is not set.");
+  process.exit(1);
+}
+
+const prSummary = process.argv[2] || "No PRs merged this week.";
+const prCount = process.argv[3] || "0";
+
+const TODAY = new Date().toISOString().slice(0, 10);
+const WEEK_START = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000)
+  .toISOString()
+  .slice(0, 10);
+
+const prompt = `You are a technical writer for urBackend, an open-source Backend-as-a-Service platform (auth, database, storage, mail, webhooks, RLS).
+
+Based on the following merged pull requests from the last 7 days, write a Mintlify changelog <Update> entry.
+
+Merged PRs (${prCount} total):
+${prSummary}
+
+Output ONLY the raw <Update> MDX block — no explanation, no markdown fences.
+Use this exact format (matching the existing changelog style):
+
+<Update label="${TODAY}" description="Week of ${WEEK_START}–${TODAY}" tags={["Feature", "Improvement", "Fix"]}>
+## New features
+
+**Feature name** — User-facing description.
+
+## Improvements
+
+**Improvement name** — Description.
+
+## Bug fixes
+
+- Fix description (#PR_NUMBER)
+</Update>
+
+Rules:
+- Only include sections (## New features / ## Improvements / ## Bug fixes) that have actual content.
+- Adjust the tags array to only include applicable tags from: "Feature", "Improvement", "Fix", "Security".
+- Write for developers using the platform, not the internal team.
+- Be concise and factual. Do not invent features not evidenced by the PRs.
+- If no PRs were merged, output: <Update label="${TODAY}" description="Week of ${WEEK_START}–${TODAY}" tags={[]}>No significant changes this week.</Update>`;
+
+const payload = JSON.stringify({
+  model: "openai/gpt-oss-120b",
+  messages: [{ role: "user", content: prompt }],
+  max_tokens: 1000,
+  temperature: 0.3,
+});
+
+const options = {
+  hostname: "api.groq.com",
+  path: "/openai/v1/chat/completions",
+  method: "POST",
+  headers: {
+    "Content-Type": "application/json",
+    Authorization: `Bearer ${process.env.GROQ_API_KEY}`,
+    "Content-Length": Buffer.byteLength(payload),
+  },
+};
+
+const req = https.request(options, (res) => {
+  let data = "";
+
+  res.on("data", (chunk) => {
+    data += chunk;
+  });
+
+  res.on("end", () => {
+    try {
+      const response = JSON.parse(data);
+
+      if (response.error) {
+        console.error("Groq API error:", response.error.message);
+        process.exit(1);
+      }
+
+      const content = response.choices?.[0]?.message?.content;
+
+      if (!content) {
+        console.error("No content in response:", JSON.stringify(response));
+        process.exit(1);
+      }
+
+      process.stdout.write(content.trim());
+    } catch (err) {
+      console.error("Failed to parse response:", err.message);
+      console.error("Raw response:", data);
+      process.exit(1);
+    }
+  });
+});
+
+// Prevent workflow from hanging indefinitely
+req.setTimeout(30000, () => {
+  console.error("Error: Groq API request timed out after 30 seconds.");
+  req.destroy();
+  process.exit(1);
+});
+
+req.on("error", (err) => {
+  console.error("Request failed:", err.message);
+  process.exit(1);
+});
+
+req.write(payload);
+req.end();

.github/workflows/release-drafter.yml

@@ -0,0 +1,18 @@
+name: Release Drafter
+
+on:
+  push:
+    branches:
+      - main
+      - master
+
+permissions:
+  contents: write
+
+jobs:
+  update_release_draft:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: release-drafter/release-drafter@6a93d829887aa2e0748befe2e808c66c0ec6e4c7
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}