Merge branch 'main' into dependabot/uv/services/apps/git_integration/aiohttp-3.13.3

Author: mbani01

.gitignore

@@ -198,7 +198,8 @@ services/libs/tinybird/.diff_tmp
 
 # claude code rules
 CLAUDE.md
+.claude
 
 # git integration test repositories & output
 services/apps/git_integration/src/test/repos/
-services/apps/git_integration/src/test/outputs/custom/
+services/apps/git_integration/src/test/outputs/custom/

backend/.env.dist.composed

@@ -11,6 +11,7 @@ CROWD_S3_HOST="s3"
 # Db settings
 CROWD_DB_READ_HOST="db"
 CROWD_DB_WRITE_HOST="db"
+INSIGHTS_DB_WRITE_HOST="db"
 
 # Product DB settings
 PRODUCT_DB_HOST=product

backend/.env.dist.local

@@ -38,6 +38,14 @@ CROWD_DB_USERNAME=postgres
 CROWD_DB_PASSWORD=example
 CROWD_DB_DATABASE=crowd-web
 
+INSIGHTS_DB_WRITE_HOST=localhost
+INSIGHTS_DB_USERNAME=postgres
+INSIGHTS_DB_PASSWORD=example
+INSIGHTS_DB_DATABASE=insights
+INSIGHTS_DB_PORT=5432
+INSIGHTS_DB_POOL_MAX=10
+INSIGHTS_DB_SSLMODE=disable
+
 # Product DB settings
 PRODUCT_DB_HOST=localhost
 PRODUCT_DB_PORT=5433
@@ -127,9 +135,6 @@ CROWD_ORGANIZATION_ENRICHMENT_API_KEY=
 CROWD_EAGLE_EYE_URL=
 CROWD_EAGLE_EYE_API_KEY=
 
-# Slack alerting settings
-CROWD_SLACK_ALERTING_URL=
-
 # Weekly emails settings
 CROWD_WEEKLY_EMAILS_ENABLED="true"
 
@@ -158,3 +163,7 @@ CROWD_GITHUB_IS_SNOWFLAKE_ENABLED=false
 
 # Tinybird
 CROWD_TINYBIRD_BASE_URL=http://localhost:7181/
+
+# Auth0
+CROWD_AUTH0_ISSUER_BASE_URL=
+CROWD_AUTH0_AUDIENCE=

backend/.eslintrc.js

@@ -12,6 +12,10 @@ module.exports = {
     'prefer-destructuring': ['error', { object: false, array: false }],
     'no-param-reassign': 0,
     'no-underscore-dangle': 0,
+    'no-unused-vars': [
+      'error',
+      { argsIgnorePattern: '^_', varsIgnorePattern: '^_', destructuredArrayIgnorePattern: '^_' },
+    ],
     '@typescript-eslint/naming-convention': [
       'error',
       {
@@ -46,6 +50,14 @@ module.exports = {
         'prefer-destructuring': ['error', { object: false, array: false }],
         'no-param-reassign': 0,
         'no-underscore-dangle': 0,
+        '@typescript-eslint/no-unused-vars': [
+          'error',
+          {
+            argsIgnorePattern: '^_',
+            varsIgnorePattern: '^_',
+            destructuredArrayIgnorePattern: '^_',
+          },
+        ],
         '@typescript-eslint/naming-convention': [
           'error',
           {

backend/config/custom-environment-variables.json

@@ -143,9 +143,6 @@
     "installationId": "GITHUB_TOKEN_INSTALLATION_ID",
     "privateKey": "GITHUB_TOKEN_PRIVATE_KEY"
   },
-  "slackAlerting": {
-    "url": "CROWD_SLACK_ALERTING_URL"
-  },
   "weeklyEmails": {
     "enabled": "CROWD_WEEKLY_EMAILS_ENABLED"
   },
@@ -156,7 +153,9 @@
   },
   "auth0": {
     "clientId": "CROWD_AUTH0_CLIENT_ID",
-    "jwks": "CROWD_AUTH0_JWKS"
+    "jwks": "CROWD_AUTH0_JWKS",
+    "issuerBaseURL": "CROWD_AUTH0_ISSUER_BASE_URL",
+    "audience": "CROWD_AUTH0_AUDIENCE"
   },
   "sso": {
     "crowdTenantId": "CROWD_SSO_CROWD_TENANT_ID",

backend/config/default.json

@@ -37,9 +37,6 @@
   "organizationEnrichment": {},
   "eagleEye": {},
   "githubToken": {},
-  "slackAlerting": {
-    "url": ""
-  },
   "auth0": {},
   "sso": {},
   "crowdAnalytics": {
@@ -52,5 +49,6 @@
   "gitlab": {},
   "jiraIssueReporter": {},
   "snowflake": {},
-  "nango": {}
+  "nango": {},
+  "linuxFoundation": {}
 }

backend/config/production.json

@@ -8,5 +8,8 @@
   },
   "slack": {
     "maxRetrospectInSeconds": 86400
+  },
+  "linuxFoundation": {
+    "collectionId": "1606ad11-c96d-4177-8147-8f990b76b35d"
   }
 }

backend/config/staging.json

@@ -1 +1,5 @@
-{}
+{
+  "linuxFoundation": {
+    "collectionId": "5ffc867e-067a-4018-82ca-dbbade2c95f3"
+  }
+}

backend/package.json

@@ -101,6 +101,7 @@
     "emoji-dictionary": "^1.0.11",
     "erlpack": "^0.1.4",
     "express": "4.17.1",
+    "express-oauth2-jwt-bearer": "^1.7.4",
     "express-rate-limit": "6.5.1",
     "fast-levenshtein": "^3.0.0",
     "formidable-serverless": "1.1.1",
@@ -137,7 +138,8 @@
     "uuid": "^9.0.0",
     "validator": "^13.7.0",
     "verify-github-webhook": "^1.0.1",
-    "zlib-sync": "^0.1.8"
+    "zlib-sync": "^0.1.8",
+    "zod": "^4.3.6"
   },
   "private": true,
   "devDependencies": {
@@ -149,6 +151,7 @@
     "@types/bunyan-format": "^0.2.5",
     "@types/config": "^3.3.0",
     "@types/cron": "^2.0.0",
+    "@types/express": "^4.17.17",
     "@types/html-to-text": "^8.1.1",
     "@types/node": "~18.0.4",
     "@types/sanitize-html": "^2.6.2",

backend/src/api/apiRateLimiter.ts

@@ -1,28 +1,15 @@
 import rateLimit from 'express-rate-limit'
 
-export function createRateLimiter({
-  max,
-  windowMs,
-  message,
-}: {
-  max: number
-  windowMs: number
-  message: string
-}) {
+import { RateLimitError } from '@crowd/common'
+
+export function createRateLimiter({ max, windowMs }: { max: number; windowMs: number }) {
   return rateLimit({
     max,
     windowMs,
-    message,
-    skip: (req) => {
-      if (req.method === 'OPTIONS') {
-        return true
-      }
-
-      if (req.originalUrl.endsWith('/import')) {
-        return true
-      }
-
-      return false
+    handler: (_req, res) => {
+      const err = new RateLimitError()
+      res.status(err.status).json(err.toJSON())
     },
+    skip: (req) => req.method === 'OPTIONS' || req.originalUrl.endsWith('/import'),
   })
 }