Feedback System

server/handleFeedback.js

@@ -0,0 +1,162 @@
+import path from 'path';
+import crypto from 'crypto';
+import { saveEncryptedJson, loadEncryptedJson } from './cryptoUtils.js';
+
+const DATA_DIR = '/data';
+const TICKETS_FILE = path.join(DATA_DIR, 'feedback_tickets.json');
+const FEEDBACK_AAD = 'feedback_tickets_v1';
+
+const MAX_TITLE_LENGTH = 100;
+const MAX_BODY_LENGTH = 10000;
+
+function generateTicketId() {
+  return `tkt_${Date.now()}_${crypto.randomBytes(4).toString('hex')}`;
+}
+
+function sanitizeString(value, maxLength) {
+  if (typeof value !== 'string') return '';
+  return value.trim().slice(0, maxLength);
+}
+
+async function loadTickets() {
+  const data = await loadEncryptedJson(TICKETS_FILE, FEEDBACK_AAD);
+  if (!data || !Array.isArray(data.tickets)) return { tickets: [] };
+  return data;
+}
+
+async function saveTickets(data) {
+  await saveEncryptedJson(TICKETS_FILE, data, FEEDBACK_AAD);
+}
+
+export function registerFeedbackRoutes(app, { requireAdminTurnstile, verifyLimiter, logAdminEvent, ADMIN_TOKEN, getRequestIp }) {
+
+  // POST /api/feedback/submit — public, no auth required
+  app.post('/api/feedback/submit', async (req, res) => {
+    try {
+      const type = req.body?.type === 'improvement' ? 'improvement' : 'issue';
+      const environment = type === 'issue'
+        ? (req.body?.environment === 'beta' ? 'beta' : 'production')
+        : null;
+
+      const title = sanitizeString(req.body?.title, MAX_TITLE_LENGTH);
+      const body = sanitizeString(req.body?.body, MAX_BODY_LENGTH);
+
+      if (!title) {
+        return res.status(400).json({ error: 'feedback:title_required', message: 'A title is required.' });
+      }
+      if (!body) {
+        return res.status(400).json({ error: 'feedback:body_required', message: 'A description is required.' });
+      }
+
+      const ticket = {
+        id: generateTicketId(),
+        type,
+        environment,
+        title,
+        body,
+        status: 'open',
+        submittedAt: new Date().toISOString(),
+        resolvedAt: null,
+        ip: getRequestIp(req),
+        userAgent: (req.headers['user-agent'] || '').slice(0, 200),
+      };
+
+      const data = await loadTickets();
+      data.tickets.push(ticket);
+      await saveTickets(data);
+
+      console.log(`[FEEDBACK] New ${type} ticket submitted: "${title.slice(0, 60)}" id=${ticket.id}`);
+
+      return res.json({ success: true, id: ticket.id });
+    } catch (err) {
+      console.error('feedback submit error', err);
+      return res.status(500).json({ error: 'feedback:server_error', message: 'Failed to submit ticket.' });
+    }
+  });
+
+  // GET /admin/feedback — list tickets, requires admin auth + turnstile
+  app.get('/admin/feedback', requireAdminTurnstile, verifyLimiter, async (req, res) => {
+    const token = req.query.token;
+    if (token !== ADMIN_TOKEN) {
+      logAdminEvent(req, 'feedback_list_denied', { reason: 'bad_token' });
+      return res.status(403).json({ error: 'Forbidden' });
+    }
+
+    try {
+      const data = await loadTickets();
+      const tickets = data.tickets.map(t => ({
+        id: t.id,
+        type: t.type,
+        environment: t.environment,
+        title: t.title,
+        body: t.body,
+        status: t.status,
+        submittedAt: t.submittedAt,
+        resolvedAt: t.resolvedAt,
+      }));
+      logAdminEvent(req, 'feedback_list_view', { count: tickets.length });
+      return res.json({ tickets });
+    } catch (err) {
+      console.error('feedback list error', err);
+      return res.status(500).json({ error: 'feedback:server_error' });
+    }
+  });
+
+  // POST /admin/feedback/:id/resolve — mark a ticket resolved
+  app.post('/admin/feedback/:id/resolve', requireAdminTurnstile, verifyLimiter, async (req, res) => {
+    const token = req.body?.token || req.query.token;
+    if (token !== ADMIN_TOKEN) {
+      logAdminEvent(req, 'feedback_resolve_denied', { reason: 'bad_token', ticketId: req.params.id });
+      return res.status(403).json({ error: 'Forbidden' });
+    }
+
+    try {
+      const data = await loadTickets();
+      const ticket = data.tickets.find(t => t.id === req.params.id);
+      if (!ticket) {
+        return res.status(404).json({ error: 'feedback:not_found' });
+      }
+
+      ticket.status = 'resolved';
+      ticket.resolvedAt = new Date().toISOString();
+      await saveTickets(data);
+
+      logAdminEvent(req, 'feedback_resolved', { ticketId: ticket.id, title: ticket.title.slice(0, 60) });
+      return res.json({ success: true, ticket: {
+        id: ticket.id, status: ticket.status, resolvedAt: ticket.resolvedAt
+      }});
+    } catch (err) {
+      console.error('feedback resolve error', err);
+      return res.status(500).json({ error: 'feedback:server_error' });
+    }
+  });
+
+  // POST /admin/feedback/:id/reopen — reopen a resolved ticket
+  app.post('/admin/feedback/:id/reopen', requireAdminTurnstile, verifyLimiter, async (req, res) => {
+    const token = req.body?.token || req.query.token;
+    if (token !== ADMIN_TOKEN) {
+      logAdminEvent(req, 'feedback_reopen_denied', { reason: 'bad_token', ticketId: req.params.id });
+      return res.status(403).json({ error: 'Forbidden' });
+    }
+
+    try {
+      const data = await loadTickets();
+      const ticket = data.tickets.find(t => t.id === req.params.id);
+      if (!ticket) {
+        return res.status(404).json({ error: 'feedback:not_found' });
+      }
+
+      ticket.status = 'open';
+      ticket.resolvedAt = null;
+      await saveTickets(data);
+
+      logAdminEvent(req, 'feedback_reopened', { ticketId: ticket.id });
+      return res.json({ success: true, ticket: {
+        id: ticket.id, status: ticket.status, resolvedAt: ticket.resolvedAt
+      }});
+    } catch (err) {
+      console.error('feedback reopen error', err);
+      return res.status(500).json({ error: 'feedback:server_error' });
+    }
+  });
+}

server/index.js

@@ -33,6 +33,15 @@ let latestSHA = null;
 const ADMIN_TOKEN = process.env.ADMIN_TOKEN || 'supersecret';
 const TURNSTILE_SITE_KEY = process.env.TURNSTILE_SITE_KEY || '0x4AAAAAAC1ZXKIhZ9Kdz8j9';
 const MAX_TEXT_UPLOAD_BYTES = 100 * 1024;
+
+registerFeedbackRoutes(app, {
+  requireAdminTurnstile,
+  verifyLimiter,
+  logAdminEvent,
+  ADMIN_TOKEN,
+  getRequestIp,
+});
+
 const LOCAL_UI_DIR = [
   process.env.UI_LOCAL_PATH,
   path.resolve(__dirname, '..', '..', 'InferencePort-Pages'),