Pin baileys to exact version 6.7.21

- Signal: Use base64Attachments field in signal-cli-rest-api
- WhatsApp: Implement Baileys attachment sending for images, videos, audio, and documents
- Both channels retrieve attachments from Zammad Store model
- Support multiple attachments per message

.nvmrc

@@ -1 +1 @@
-v20.2.0
+v22.18.0

apps/bridge-frontend/Dockerfile

@@ -34,10 +34,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update && \
     dumb-init
 RUN mkdir -p ${APP_DIR}
 WORKDIR ${APP_DIR}
-COPY --from=installer  ${APP_DIR}/node_modules/ ./node_modules/
+COPY --from=installer ${APP_DIR} ./
-COPY --from=installer  ${APP_DIR}/apps/bridge-frontend/ ./apps/bridge-frontend/
-COPY --from=installer  ${APP_DIR}/apps/bridge-migrations/ ./apps/bridge-migrations/
-COPY --from=installer ${APP_DIR}/package.json ./package.json
 RUN chown -R node:node ${APP_DIR}/
 WORKDIR ${APP_DIR}/apps/bridge-frontend/
 RUN chmod +x docker-entrypoint.sh

apps/bridge-frontend/README.md

@@ -1,36 +1,133 @@
-This is a [Next.js](https://nextjs.org/) project bootstrapped with [`create-next-app`](https://github.com/vercel/next.js/tree/canary/packages/create-next-app).
+# Bridge Frontend
 
-## Getting Started
+Frontend application for managing communication bridges between various messaging platforms and the CDR Link system.
 
-First, run the development server:
+## Overview
+
+Bridge Frontend provides a web interface for configuring and managing communication channels including Signal, WhatsApp, Facebook, and Voice integrations. It handles bot registration, webhook configuration, and channel settings.
+
+## Features
+
+- **Channel Management**: Configure Signal, WhatsApp, Facebook, and Voice channels
+- **Bot Registration**: Register and manage bots for each communication platform
+- **Webhook Configuration**: Set up webhooks for message routing
+- **Settings Management**: Configure channel-specific settings and behaviors
+- **User Authentication**: Secure access with NextAuth.js
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- PostgreSQL database
+- Running bridge-worker service
+
+### Setup
 
 ```bash
+# Install dependencies
+npm install
+
+# Run database migrations
+npm run migrate:latest
+
+# Run development server
 npm run dev
-# or
+
-yarn dev
+# Build for production
-# or
+npm run build
-pnpm dev
+
-# or
+# Start production server
-bun dev
+npm run start
 ```
 
-Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
+### Environment Variables
 
-You can start editing the page by modifying `app/page.tsx`. The page auto-updates as you edit the file.
+Required environment variables:
 
-This project uses [`next/font`](https://nextjs.org/docs/basic-features/font-optimization) to automatically optimize and load Inter, a custom Google Font.
+- `DATABASE_URL` - PostgreSQL connection string
+- `DATABASE_HOST` - Database host
+- `DATABASE_NAME` - Database name
+- `DATABASE_USER` - Database username
+- `DATABASE_PASSWORD` - Database password
+- `NEXTAUTH_URL` - Application URL
+- `NEXTAUTH_SECRET` - NextAuth.js secret
+- `GOOGLE_CLIENT_ID` - Google OAuth client ID
+- `GOOGLE_CLIENT_SECRET` - Google OAuth client secret
 
-## Learn More
+### Available Scripts
 
-To learn more about Next.js, take a look at the following resources:
+- `npm run dev` - Start development server
+- `npm run build` - Build for production
+- `npm run start` - Start production server
+- `npm run lint` - Run ESLint
+- `npm run migrate:latest` - Run all pending migrations
+- `npm run migrate:down` - Rollback last migration
+- `npm run migrate:up` - Run next migration
+- `npm run migrate:make` - Create new migration
 
-- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
+## Architecture
-- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
 
-You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js/) - your feedback and contributions are welcome!
+### Database Schema
 
-## Deploy on Vercel
+The application manages the following main entities:
 
-The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
+- **Bots**: Communication channel bot configurations
+- **Webhooks**: Webhook endpoints for external integrations
+- **Settings**: Channel-specific configuration settings
+- **Users**: User accounts with role-based permissions
 
-Check out our [Next.js deployment documentation](https://nextjs.org/docs/deployment) for more details.
+### API Routes
+
+- `/api/auth` - Authentication endpoints
+- `/api/[service]/bots` - Bot management for each service
+- `/api/[service]/webhooks` - Webhook configuration
+
+### Page Structure
+
+- `/` - Dashboard/home page
+- `/login` - Authentication page
+- `/[...segment]` - Dynamic routing for CRUD operations
+  - `@create` - Create new entities
+  - `@detail` - View entity details
+  - `@edit` - Edit existing entities
+
+## Integration
+
+### Database Access
+
+Uses Kysely ORM for type-safe database queries:
+
+```typescript
+import { db } from '@link-stack/database'
+
+const bots = await db
+  .selectFrom('bots')
+  .selectAll()
+  .execute()
+```
+
+### Authentication
+
+Integrated with NextAuth.js using database adapter:
+
+```typescript
+import { authOptions } from '@link-stack/auth'
+```
+
+## Docker Support
+
+```bash
+# Build image
+docker build -t link-stack/bridge-frontend .
+
+# Run with docker-compose
+docker-compose -f docker/compose/bridge.yml up
+```
+
+## Related Services
+
+- **bridge-worker**: Processes messages from configured channels
+- **bridge-whatsapp**: WhatsApp-specific integration service
+- **bridge-migrations**: Database schema management

apps/bridge-frontend/app/(main)/[...segment]/@create/page.tsx

@@ -1,10 +1,11 @@
 import { Create } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
 
   return <Create service={service} />;

apps/bridge-frontend/app/(main)/[...segment]/@detail/page.tsx

@@ -1,11 +1,12 @@
 import { db } from "@link-stack/bridge-common";
 import { serviceConfig, Detail } from "@link-stack/bridge-ui";
 
-type Props = {
+type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default async function Page({ params: { segment } }: Props) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
   const id = segment?.[1];
 

apps/bridge-frontend/app/(main)/[...segment]/@edit/page.tsx

@@ -2,10 +2,11 @@ import { db } from "@link-stack/bridge-common";
 import { serviceConfig, Edit } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default async function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
   const id = segment?.[1];
 

apps/bridge-frontend/app/(main)/[...segment]/page.tsx

@@ -2,12 +2,13 @@ import { db } from "@link-stack/bridge-common";
 import { serviceConfig, List } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: {
+  params: Promise<{
     segment: string[];
-  };
+  }>;
 };
 
-export default async function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
 
   if (!service) return null;

apps/bridge-frontend/app/layout.tsx

@@ -2,7 +2,7 @@ import type { Metadata } from "next";
 import { LicenseInfo } from "@mui/x-license";
 
 LicenseInfo.setLicenseKey(
-  "c787ac6613c5f2aa0494c4285fe3e9f2Tz04OTY1NyxFPTE3NDYzNDE0ODkwMDAsUz1wcm8sTE09c3Vic2NyaXB0aW9uLEtWPTI=",
+  "2a7dd73ee59e3e028b96b0d2adee1ad8Tz0xMTMwOTUsRT0xNzc5MDYyMzk5MDAwLFM9cHJvLExNPXN1YnNjcmlwdGlvbixQVj1pbml0aWFsLEtWPTI=",
 );
 
 export const metadata: Metadata = {

apps/bridge-frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@link-stack/bridge-frontend",
-  "version": "2.2.0",
+  "version": "3.2.0b5",
   "type": "module",
   "scripts": {
     "dev": "next dev",
@@ -13,28 +13,30 @@
     "migrate:down:one": "tsx database/migrate.ts down:one"
   },
   "dependencies": {
-    "@auth/kysely-adapter": "^1.5.2",
+    "@auth/kysely-adapter": "^1.10.0",
+    "@mui/icons-material": "^6",
+    "@mui/material": "^6",
+    "@mui/material-nextjs": "^6",
+    "@mui/x-license": "^7",
     "@link-stack/bridge-common": "*",
     "@link-stack/bridge-ui": "*",
-    "@link-stack/ui": "*",
+    "next": "15.5.9",
-    "@mui/icons-material": "^5",
+    "next-auth": "^4.24.11",
-    "@mui/material": "^5",
+    "react": "19.2.0",
-    "@mui/material-nextjs": "^5",
+    "react-dom": "19.2.0",
-    "@mui/x-license": "^7.18.0",
+    "sharp": "^0.34.4",
-    "next": "^14.2.23",
+    "tsx": "^4.20.6",
-    "next-auth": "^4.24.8",
+    "@link-stack/ui": "*"
-    "react": "18.3.1",
-    "react-dom": "18.3.1",
-    "sharp": "^0.33.5",
-    "tsx": "^4.19.1"
   },
   "devDependencies": {
     "@link-stack/eslint-config": "*",
     "@link-stack/typescript-config": "*",
-    "@types/node": "^22",
+    "@types/node": "^24",
-    "@types/pg": "^8.11.10",
+    "@types/pg": "^8.15.5",
-    "@types/react": "^18",
+    "@types/react": "^19",
-    "@types/react-dom": "^18",
+    "@types/react-dom": "^19",
+    "@link-stack/eslint-config": "*",
+    "@link-stack/typescript-config": "*",
     "typescript": "^5"
   }
 }

apps/bridge-frontend/public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /

apps/bridge-frontend/tsconfig.json

@@ -1,6 +1,10 @@
 {
   "compilerOptions": {
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -14,14 +18,24 @@
     "jsx": "preserve",
     "incremental": true,
     "paths": {
-      "@/*": ["./*"]
+      "@/*": [
+        "./*"
+      ]
     },
     "plugins": [
       {
         "name": "next"
       }
-    ]
+    ],
+    "target": "ES2017"
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "include": [
-  "exclude": ["node_modules"]
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
 }

apps/bridge-migrations/README.md

@@ -0,0 +1,158 @@
+# Bridge Migrations
+
+Database migration management for the CDR Link bridge system.
+
+## Overview
+
+Bridge Migrations handles database schema versioning and migrations for all bridge-related tables using Kysely migration framework. It manages the database structure for authentication, messaging channels, webhooks, and settings.
+
+## Features
+
+- **Schema Versioning**: Track and apply database schema changes
+- **Up/Down Migrations**: Support for rolling forward and backward
+- **Type-Safe Migrations**: TypeScript-based migration files
+- **Migration History**: Track applied migrations in the database
+- **Multiple Migration Strategies**: Run all, run one, or rollback migrations
+
+## Migration Files
+
+Current migrations in order:
+
+1. **0001-add-next-auth.ts** - NextAuth.js authentication tables
+2. **0002-add-signal.ts** - Signal messenger integration
+3. **0003-add-whatsapp.ts** - WhatsApp integration
+4. **0004-add-voice.ts** - Voice/Twilio integration
+5. **0005-add-facebook.ts** - Facebook Messenger integration
+6. **0006-add-webhooks.ts** - Webhook configuration
+7. **0007-add-settings.ts** - Application settings
+8. **0008-add-user-role.ts** - User role management
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- PostgreSQL database
+- Database connection credentials
+
+### Setup
+
+```bash
+# Install dependencies
+npm install
+
+# Run all pending migrations
+npm run migrate:latest
+
+# Check migration status
+npm run migrate:list
+```
+
+### Environment Variables
+
+Required environment variables:
+
+- `DATABASE_URL` - PostgreSQL connection string
+- `DATABASE_HOST` - Database host
+- `DATABASE_NAME` - Database name
+- `DATABASE_USER` - Database username
+- `DATABASE_PASSWORD` - Database password
+
+### Available Scripts
+
+- `npm run migrate:latest` - Run all pending migrations
+- `npm run migrate:up` - Run next pending migration
+- `npm run migrate:down` - Rollback last migration
+- `npm run migrate:up:all` - Run all migrations (alias)
+- `npm run migrate:up:one` - Run one migration
+- `npm run migrate:down:all` - Rollback all migrations
+- `npm run migrate:down:one` - Rollback one migration
+- `npm run migrate:list` - List migration status
+- `npm run migrate:make <name>` - Create new migration file
+
+## Creating New Migrations
+
+To create a new migration:
+
+```bash
+npm run migrate:make add-new-feature
+```
+
+This creates a new timestamped migration file in the `migrations/` directory.
+
+Example migration structure:
+
+```typescript
+import { Kysely } from 'kysely'
+
+export async function up(db: Kysely<any>): Promise<void> {
+  await db.schema
+    .createTable('new_table')
+    .addColumn('id', 'serial', (col) => col.primaryKey())
+    .addColumn('name', 'varchar', (col) => col.notNull())
+    .addColumn('created_at', 'timestamp', (col) =>
+      col.defaultTo('now()').notNull()
+    )
+    .execute()
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await db.schema.dropTable('new_table').execute()
+}
+```
+
+## Database Schema
+
+### Core Tables
+
+- **users** - User accounts with roles
+- **accounts** - OAuth account connections
+- **sessions** - User sessions
+- **verification_tokens** - Email verification
+
+### Communication Tables
+
+- **bots** - Bot configurations for each service
+- **signal_messages** - Signal message history
+- **whatsapp_messages** - WhatsApp message history
+- **voice_messages** - Voice/call records
+- **facebook_messages** - Facebook message history
+
+### Configuration Tables
+
+- **webhooks** - External webhook endpoints
+- **settings** - Application settings
+
+## Best Practices
+
+1. **Test Migrations**: Always test migrations in development first
+2. **Backup Database**: Create backups before running migrations in production
+3. **Review Changes**: Review migration files before applying
+4. **Atomic Operations**: Keep migrations focused and atomic
+5. **Rollback Plan**: Ensure down() methods properly reverse changes
+
+## Troubleshooting
+
+### Common Issues
+
+1. **Migration Failed**: Check error logs and database permissions
+2. **Locked Migrations**: Check for concurrent migration processes
+3. **Missing Tables**: Ensure all previous migrations have run
+4. **Connection Issues**: Verify DATABASE_URL and network access
+
+### Recovery
+
+If migrations fail:
+
+1. Check migration history table
+2. Manually verify database state
+3. Run specific migrations as needed
+4. Use rollback if necessary
+
+## Integration
+
+Migrations are used by:
+- **bridge-frontend** - Requires migrated schema
+- **bridge-worker** - Depends on message tables
+- **bridge-whatsapp** - Uses bot configuration tables

apps/bridge-migrations/migrate.ts

@@ -10,6 +10,9 @@ import {
   CamelCasePlugin,
 } from "kysely";
 import pkg from "pg";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-migrations-migrate');
 const { Pool } = pkg;
 import * as dotenv from "dotenv";
 
@@ -72,17 +75,17 @@ export const migrate = async (arg: string) => {
 
   results?.forEach((it) => {
     if (it.status === "Success") {
-      console.log(
+      logger.info(
         `Migration "${it.migrationName} ${it.direction.toLowerCase()}" was executed successfully`,
       );
     } else if (it.status === "Error") {
-      console.error(`Failed to execute migration "${it.migrationName}"`);
+      logger.error(`Failed to execute migration "${it.migrationName}"`);
     }
   });
 
   if (error) {
-    console.error("Failed to migrate");
+    logger.error("Failed to migrate");
-    console.error(error);
+    logger.error(error);
     process.exit(1);
   }
 

apps/bridge-migrations/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@link-stack/bridge-migrations",
-  "version": "2.2.0",
+  "version": "3.2.0b5",
   "type": "module",
   "scripts": {
     "migrate:up:all": "tsx migrate.ts up:all",
@@ -9,14 +9,15 @@
     "migrate:down:one": "tsx migrate.ts down:one"
   },
   "dependencies": {
-    "dotenv": "^16.4.5",
+    "@link-stack/logger": "*",
-    "kysely": "0.26.1",
+    "dotenv": "^17.2.3",
-    "pg": "^8.13.0",
+    "kysely": "0.27.5",
-    "tsx": "^4.19.1"
+    "pg": "^8.16.3",
+    "tsx": "^4.20.6"
   },
   "devDependencies": {
-    "@types/node": "^22",
+    "@types/node": "^24",
-    "@types/pg": "^8.11.10",
+    "@types/pg": "^8.15.5",
     "@link-stack/eslint-config": "*",
     "@link-stack/typescript-config": "*",
     "typescript": "^5"

apps/bridge-whatsapp/README.md

@@ -0,0 +1,172 @@
+# Bridge WhatsApp
+
+WhatsApp integration service for the CDR Link communication bridge system.
+
+## Overview
+
+Bridge WhatsApp provides a REST API for sending and receiving WhatsApp messages using the Baileys library (WhatsApp Web API). It handles bot session management, message routing, and media processing for WhatsApp communication channels.
+
+## Features
+
+- **Bot Management**: Register and manage multiple WhatsApp bot sessions
+- **Message Handling**: Send and receive text messages with formatting
+- **Media Support**: Handle images, documents, audio, and video files
+- **QR Code Authentication**: Web-based WhatsApp authentication
+- **REST API**: Simple HTTP endpoints for integration
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- PostgreSQL database (for bot configuration)
+
+### Setup
+
+```bash
+# Install dependencies
+npm install
+
+# Build TypeScript
+npm run build
+
+# Run development server
+npm run dev
+
+# Start production server
+npm run start
+```
+
+### Environment Variables
+
+- `PORT` - Server port (default: 5000)
+- `DATABASE_URL` - PostgreSQL connection string (optional)
+- Additional WhatsApp-specific configuration as needed
+
+### Available Scripts
+
+- `npm run build` - Compile TypeScript
+- `npm run dev` - Development mode with auto-reload
+- `npm run start` - Start production server
+
+## API Endpoints
+
+### Bot Management
+
+- `POST /api/bots/:token` - Register/initialize a bot
+- `GET /api/bots/:token` - Get bot status and QR code
+
+### Messaging
+
+- `POST /api/bots/:token/send` - Send a message
+- `POST /api/bots/:token/receive` - Webhook for incoming messages
+
+### Request/Response Format
+
+#### Send Message
+
+```json
+{
+  "to": "1234567890@s.whatsapp.net",
+  "message": "Hello World",
+  "media": {
+    "url": "https://example.com/image.jpg",
+    "type": "image"
+  }
+}
+```
+
+#### Receive Message Webhook
+
+```json
+{
+  "from": "1234567890@s.whatsapp.net",
+  "message": "Hello",
+  "timestamp": "2024-01-01T00:00:00Z",
+  "media": {
+    "url": "https://...",
+    "type": "image",
+    "mimetype": "image/jpeg"
+  }
+}
+```
+
+## Architecture
+
+### Server Framework
+
+Built with Hapi.js for:
+
+- Route validation
+- Plugin architecture
+- Error handling
+- Request lifecycle
+
+### WhatsApp Integration
+
+Uses @whiskeysockets/baileys:
+
+- WhatsApp Web protocol
+- Multi-device support
+- Message encryption
+- Media handling
+
+### Session Management
+
+- File-based session storage
+- Automatic reconnection
+- QR code regeneration
+- Session cleanup
+
+## Media Handling
+
+Supported media types:
+
+- **Images**: JPEG, PNG, GIF
+- **Documents**: PDF, DOC, DOCX
+- **Audio**: MP3, OGG, WAV
+- **Video**: MP4, AVI
+
+Media is processed and uploaded before sending.
+
+## Error Handling
+
+- Connection errors trigger reconnection
+- Invalid sessions regenerate QR codes
+- API errors return appropriate HTTP status codes
+- Comprehensive logging for debugging
+
+## Security
+
+- Token-based bot authentication
+- Message validation
+- Rate limiting (configurable)
+- Secure session storage
+
+## Integration
+
+Designed to work with:
+
+- **bridge-worker**: Processes WhatsApp message jobs
+- **bridge-frontend**: Manages bot configuration
+- External webhooks for message routing
+
+## Docker Support
+
+```bash
+# Build image
+docker build -t link-stack/bridge-whatsapp .
+
+# Run container
+docker run -p 5000:5000 link-stack/bridge-whatsapp
+```
+
+## Testing
+
+While test configuration exists (jest.config.json), tests should be implemented for:
+
+- API endpoint validation
+- Message processing logic
+- Session management
+- Error scenarios

apps/bridge-whatsapp/package.json

@@ -1,26 +1,27 @@
 {
   "name": "@link-stack/bridge-whatsapp",
-  "version": "2.2.0",
+  "version": "3.2.0b5",
   "main": "build/main/index.js",
   "author": "Darren Clarke <darren@redaranj.com>",
   "license": "AGPL-3.0-or-later",
   "dependencies": {
     "@adiwajshing/keyed-db": "0.2.4",
-    "@hapi/hapi": "^21.3.10",
+    "@hapi/hapi": "^21.4.3",
     "@hapipal/schmervice": "^3.0.0",
     "@hapipal/toys": "^4.0.0",
-    "@whiskeysockets/baileys": "^6.7.8",
+    "@link-stack/logger": "*",
-    "hapi-pino": "^12.1.0",
+    "@whiskeysockets/baileys": "6.7.21",
-    "link-preview-js": "^3.0.5"
+    "hapi-pino": "^13.0.0",
+    "link-preview-js": "^3.1.0"
   },
   "devDependencies": {
     "@link-stack/eslint-config": "*",
     "@link-stack/jest-config": "*",
     "@link-stack/typescript-config": "*",
     "@types/node": "*",
-    "dotenv-cli": "^7.4.2",
+    "dotenv-cli": "^10.0.0",
-    "tsx": "^4.19.1",
+    "tsx": "^4.20.6",
-    "typescript": "^5.6.2"
+    "typescript": "^5.9.3"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",

apps/bridge-whatsapp/src/index.ts

@@ -9,6 +9,9 @@ import {
   SendMessageRoute,
   ReceiveMessageRoute,
 } from "./routes.js";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-whatsapp-index');
 
 const server = Hapi.server({ port: 5000 });
 
@@ -34,6 +37,6 @@ const main = async () => {
 };
 
 main().catch((err) => {
-  console.error(err);
+  logger.error(err);
   process.exit(1);
 });

apps/bridge-whatsapp/src/routes.ts

@@ -17,6 +17,7 @@ const getService = (request: Hapi.Request): WhatsappService => {
 interface MessageRequest {
   phoneNumber: string;
   message: string;
+  attachments?: Array<{ data: string; filename: string; mime_type: string }>;
 }
 
 export const SendMessageRoute = withDefaults({
@@ -26,11 +27,23 @@ export const SendMessageRoute = withDefaults({
     description: "Send a message",
     async handler(request: Hapi.Request, _h: Hapi.ResponseToolkit) {
       const { id } = request.params;
-      console.log({ payload: request.payload });
+      const { phoneNumber, message, attachments } =
-      const { phoneNumber, message } = request.payload as MessageRequest;
+        request.payload as MessageRequest;
       const whatsappService = getService(request);
-      await whatsappService.send(id, phoneNumber, message as string);
+      await whatsappService.send(
-      request.logger.info({ id }, "Sent a message at %s", new Date());
+        id,
+        phoneNumber,
+        message as string,
+        attachments,
+      );
+      request.logger.info(
+        {
+          id,
+          attachmentCount: attachments?.length || 0,
+        },
+        "Sent a message at %s",
+        new Date().toISOString(),
+      );
 
       return _h
         .response({
@@ -56,7 +69,7 @@ export const ReceiveMessageRoute = withDefaults({
       const date = new Date();
       const twoDaysAgo = new Date(date.getTime());
       twoDaysAgo.setDate(date.getDate() - 2);
-      request.logger.info({ id }, "Received messages at %s", new Date());
+      request.logger.info({ id }, "Received messages at %s", new Date().toISOString());
 
       return whatsappService.receive(id, twoDaysAgo);
     },

apps/bridge-whatsapp/src/service.ts

@@ -11,6 +11,9 @@ import makeWASocket, {
   useMultiFileAuthState,
 } from "@whiskeysockets/baileys";
 import fs from "fs";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger("bridge-whatsapp-service");
 
 export type AuthCompleteCallback = (error?: string) => void;
 
@@ -57,7 +60,7 @@ export default class WhatsappService extends Service {
       try {
         connection.end(null);
       } catch (error) {
-        console.log(error);
+        logger.error({ error }, "Connection reset error");
       }
     }
     this.connections = {};
@@ -92,27 +95,27 @@ export default class WhatsappService extends Service {
           isNewLogin,
         } = update;
         if (qr) {
-          console.log("got qr code");
+          logger.info("got qr code");
           const botDirectory = this.getBotDirectory(botID);
           const qrPath = `${botDirectory}/qr.txt`;
           fs.writeFileSync(qrPath, qr, "utf8");
         } else if (isNewLogin) {
-          console.log("got new login");
+          logger.info("got new login");
           const botDirectory = this.getBotDirectory(botID);
           const verifiedFile = `${botDirectory}/verified`;
           fs.writeFileSync(verifiedFile, "");
         } else if (connectionState === "open") {
-          console.log("opened connection");
+          logger.info("opened connection");
         } else if (connectionState === "close") {
-          console.log("connection closed due to ", lastDisconnect?.error);
+          logger.info({ lastDisconnect }, "connection closed");
           const disconnectStatusCode = (lastDisconnect?.error as any)?.output
             ?.statusCode;
           if (disconnectStatusCode === DisconnectReason.restartRequired) {
-            console.log("reconnecting after got new login");
+            logger.info("reconnecting after got new login");
             await this.createConnection(botID, server, options);
             authCompleteCallback?.();
           } else if (disconnectStatusCode !== DisconnectReason.loggedOut) {
-            console.log("reconnecting");
+            logger.info("reconnecting");
             await this.sleep(pause);
             pause *= 2;
             this.createConnection(botID, server, options);
@@ -121,12 +124,12 @@ export default class WhatsappService extends Service {
       }
 
       if (events["creds.update"]) {
-        console.log("creds update");
+        logger.info("creds update");
         await saveCreds();
       }
 
       if (events["messages.upsert"]) {
-        console.log("messages upsert");
+        logger.info("messages upsert");
         const upsert = events["messages.upsert"];
         const { messages } = upsert;
         if (messages) {
@@ -143,13 +146,16 @@ export default class WhatsappService extends Service {
 
     const baseDirectory = this.getBaseDirectory();
     const botIDs = fs.readdirSync(baseDirectory);
-    console.log({ botIDs });
+
     for await (const botID of botIDs) {
       const directory = this.getBotDirectory(botID);
       const verifiedFile = `${directory}/verified`;
       if (fs.existsSync(verifiedFile)) {
         const { version, isLatest } = await fetchLatestBaileysVersion();
-        console.log(`using WA v${version.join(".")}, isLatest: ${isLatest}`);
+        logger.info(
+          { version: version.join("."), isLatest },
+          "using WA version",
+        );
 
         await this.createConnection(botID, this.server, {
           browser: WhatsappService.browserDescription,
@@ -169,7 +175,13 @@ export default class WhatsappService extends Service {
       message,
       messageTimestamp,
     } = webMessageInfo;
-    console.log(webMessageInfo);
+    logger.info("Message type debug");
+    for (const key in message) {
+      logger.info(
+        { key, exists: !!message[key as keyof proto.IMessage] },
+        "Message field",
+      );
+    }
     const isValidMessage =
       message && remoteJid !== "status@broadcast" && !fromMe;
     if (isValidMessage) {
@@ -186,19 +198,22 @@ export default class WhatsappService extends Service {
       if (isMediaMessage) {
         if (audioMessage) {
           messageType = "audio";
-          filename = id + "." + audioMessage.mimetype?.split("/").pop();
+          const extension = audioMessage.mimetype?.split("/").pop() || "audio";
+          filename = `${id}.${extension}`;
           mimeType = audioMessage.mimetype;
         } else if (documentMessage) {
           messageType = "document";
-          filename = documentMessage.fileName;
+          filename = documentMessage.fileName || `${id}.bin`;
           mimeType = documentMessage.mimetype;
         } else if (imageMessage) {
           messageType = "image";
-          filename = id + "." + imageMessage.mimetype?.split("/").pop();
+          const extension = imageMessage.mimetype?.split("/").pop() || "jpg";
+          filename = `${id}.${extension}`;
           mimeType = imageMessage.mimetype;
         } else if (videoMessage) {
           messageType = "video";
-          filename = id + "." + videoMessage.mimetype?.split("/").pop();
+          const extension = videoMessage.mimetype?.split("/").pop() || "mp4";
+          filename = `${id}.${extension}`;
           mimeType = videoMessage.mimetype;
         }
 
@@ -293,12 +308,47 @@ export default class WhatsappService extends Service {
     botID: string,
     phoneNumber: string,
     message: string,
+    attachments?: Array<{ data: string; filename: string; mime_type: string }>,
   ): Promise<void> {
     const connection = this.connections[botID]?.socket;
     const recipient = `${phoneNumber.replace(/\D+/g, "")}@s.whatsapp.net`;
+
+    // Send text message if provided
+    if (message) {
       await connection.sendMessage(recipient, { text: message });
     }
 
+    // Send attachments if provided
+    if (attachments && attachments.length > 0) {
+      for (const attachment of attachments) {
+        const buffer = Buffer.from(attachment.data, "base64");
+
+        if (attachment.mime_type.startsWith("image/")) {
+          await connection.sendMessage(recipient, {
+            image: buffer,
+            caption: attachment.filename,
+          });
+        } else if (attachment.mime_type.startsWith("video/")) {
+          await connection.sendMessage(recipient, {
+            video: buffer,
+            caption: attachment.filename,
+          });
+        } else if (attachment.mime_type.startsWith("audio/")) {
+          await connection.sendMessage(recipient, {
+            audio: buffer,
+            mimetype: attachment.mime_type,
+          });
+        } else {
+          await connection.sendMessage(recipient, {
+            document: buffer,
+            fileName: attachment.filename,
+            mimetype: attachment.mime_type,
+          });
+        }
+      }
+    }
+  }
+
   async receive(
     botID: string,
     _lastReceivedDate: Date,

apps/bridge-worker/README.md

@@ -0,0 +1,147 @@
+# Bridge Worker
+
+Background job processor for handling asynchronous tasks in the CDR Link communication bridge system.
+
+## Overview
+
+Bridge Worker uses Graphile Worker to process queued jobs for message handling, media conversion, webhook notifications, and scheduled tasks. It manages the flow of messages between various communication channels (Signal, WhatsApp, Facebook, Voice) and the Zammad ticketing system.
+
+## Features
+
+- **Message Processing**: Handle incoming/outgoing messages for all supported channels
+- **Media Conversion**: Convert audio/video files between formats
+- **Webhook Notifications**: Notify external systems of events
+- **Scheduled Tasks**: Cron-based job scheduling
+- **Job Queue Management**: Reliable job processing with retries
+- **Multi-Channel Support**: Signal, WhatsApp, Facebook, Voice (Twilio)
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- PostgreSQL database
+- Redis (for caching)
+- FFmpeg (for media conversion)
+
+### Setup
+
+```bash
+# Install dependencies
+npm install
+
+# Build TypeScript
+npm run build
+
+# Run development server with auto-reload
+npm run dev
+
+# Start production worker
+npm run start
+```
+
+### Environment Variables
+
+Required environment variables:
+
+- `DATABASE_URL` - PostgreSQL connection string
+- `GRAPHILE_WORKER_CONCURRENCY` - Number of concurrent jobs (default: 10)
+- `GRAPHILE_WORKER_POLL_INTERVAL` - Job poll interval in ms (default: 1000)
+- `ZAMMAD_URL` - Zammad instance URL
+- `ZAMMAD_API_TOKEN` - Zammad API token
+- `TWILIO_ACCOUNT_SID` - Twilio account SID
+- `TWILIO_AUTH_TOKEN` - Twilio auth token
+- `SIGNAL_CLI_URL` - Signal CLI REST API URL
+- `WHATSAPP_SERVICE_URL` - WhatsApp bridge service URL
+- `FACEBOOK_APP_SECRET` - Facebook app secret
+- `FACEBOOK_PAGE_ACCESS_TOKEN` - Facebook page token
+
+### Available Scripts
+
+- `npm run build` - Compile TypeScript
+- `npm run dev` - Development mode with watch
+- `npm run start` - Start production worker
+
+## Task Types
+
+### Signal Tasks
+- `receive-signal-message` - Process incoming Signal messages
+- `send-signal-message` - Send outgoing Signal messages
+- `fetch-signal-messages` - Fetch messages from Signal CLI
+
+### WhatsApp Tasks
+- `receive-whatsapp-message` - Process incoming WhatsApp messages
+- `send-whatsapp-message` - Send outgoing WhatsApp messages
+
+### Facebook Tasks
+- `receive-facebook-message` - Process incoming Facebook messages
+- `send-facebook-message` - Send outgoing Facebook messages
+
+### Voice Tasks
+- `receive-voice-message` - Process incoming voice calls/messages
+- `send-voice-message` - Send voice messages via Twilio
+- `twilio-recording` - Handle Twilio call recordings
+- `voice-line-audio-update` - Update voice line audio
+- `voice-line-delete` - Delete voice line
+- `voice-line-provider-update` - Update voice provider settings
+
+### Common Tasks
+- `notify-webhooks` - Send webhook notifications
+
+### Leafcutter Tasks
+- `import-leafcutter` - Import data to Leafcutter
+- `import-label-studio` - Import Label Studio annotations
+
+## Architecture
+
+### Job Processing
+
+Jobs are queued in PostgreSQL using Graphile Worker:
+
+```typescript
+await addJob('send-signal-message', {
+  to: '+1234567890',
+  message: 'Hello world'
+})
+```
+
+### Cron Schedule
+
+Scheduled tasks are configured in `crontab`:
+- Periodic message fetching
+- Cleanup tasks
+- Health checks
+
+### Error Handling
+
+- Automatic retries with exponential backoff
+- Dead letter queue for failed jobs
+- Comprehensive logging with winston
+
+## Media Handling
+
+Supports conversion between formats:
+- Audio: MP3, OGG, WAV, M4A
+- Uses fluent-ffmpeg for processing
+- Automatic format detection
+
+## Integration Points
+
+- **Zammad**: Creates/updates tickets via API
+- **Signal CLI**: REST API for Signal messaging
+- **WhatsApp Bridge**: HTTP API for WhatsApp
+- **Twilio**: Voice and SMS capabilities
+- **Facebook**: Graph API for Messenger
+
+## Docker Support
+
+```bash
+# Build image
+docker build -t link-stack/bridge-worker .
+
+# Run with docker-compose
+docker-compose -f docker/compose/bridge.yml up
+```
+
+The worker includes cron support via built-in crontab.

apps/bridge-worker/graphile.config.ts

@@ -4,8 +4,12 @@ import type {} from "graphile-worker";
 const preset: GraphileConfig.Preset = {
   worker: {
     connectionString: process.env.DATABASE_URL,
-    maxPoolSize: 10,
+    maxPoolSize: process.env.BRIDGE_WORKER_POOL_SIZE
-    pollInterval: 2000,
+      ? parseInt(process.env.BRIDGE_WORKER_POOL_SIZE, 10)
+      : 10,
+    pollInterval: process.env.BRIDGE_WORKER_POLL_INTERVAL
+      ? parseInt(process.env.BRIDGE_WORKER_POLL_INTERVAL, 10)
+      : 2000,
     fileExtensions: [".ts"],
   },
 };

apps/bridge-worker/index.ts

@@ -1,18 +1,27 @@
 import { run } from "graphile-worker";
+import { createLogger } from "@link-stack/logger";
 import * as path from "path";
 import { fileURLToPath } from "url";
 
+const logger = createLogger('bridge-worker');
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
 const startWorker = async () => {
-  console.log("Starting worker...");
+  logger.info("Starting worker...");
-  console.log(process.env);
+
   await run({
     connectionString: process.env.DATABASE_URL,
-    concurrency: 10,
     noHandleSignals: false,
-    pollInterval: 1000,
+    concurrency: process.env.BRIDGE_WORKER_CONCURRENCY
+      ? parseInt(process.env.BRIDGE_WORKER_CONCURRENCY, 10)
+      : 10,
+    maxPoolSize: process.env.BRIDGE_WORKER_POOL_SIZE
+      ? parseInt(process.env.BRIDGE_WORKER_POOL_SIZE, 10)
+      : 10,
+    pollInterval: process.env.BRIDGE_WORKER_POLL_INTERVAL
+      ? parseInt(process.env.BRIDGE_WORKER_POLL_INTERVAL, 10)
+      : 1000,
     taskDirectory: `${__dirname}/tasks`,
     crontabFile: `${__dirname}/crontab`,
   });
@@ -23,6 +32,6 @@ const main = async () => {
 };
 
 main().catch((err) => {
-  console.error(err);
+  logger.error({ error: err }, 'Worker failed to start');
   process.exit(1);
 });

apps/bridge-worker/lib/common.ts

@@ -3,6 +3,9 @@
 import Twilio from "twilio";
 import { CallInstance } from "twilio/lib/rest/api/v2010/account/call";
 import { Zammad, getOrCreateUser } from "./zammad.js";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-worker-common');
 
 type SavedVoiceProvider = any;
 
@@ -62,9 +65,8 @@ export const createZammadTicket = async (
       },
     });
   } catch (error: any) {
-    console.log(Object.keys(error));
     if (error.isBoom) {
-      console.log(error.output);
+      logger.error({ output: error.output }, 'Zammad ticket creation failed');
       throw new Error("Failed to create zamamd ticket");
     }
   }

apps/bridge-worker/lib/logger.ts

@@ -1,11 +0,0 @@
-//import { defState } from "@digiresilience/montar";
-//import { configureLogger } from "@digiresilience/bridge-common";
-// import config from "@digiresilience/bridge-config";
-
-//export const logger = defState("workerLogger", {
-//  start: async () => configureLogger(config),
-//});
-//export default logger;
-
-export const logger = {};
-export default logger;

apps/bridge-worker/lib/media-convert.ts

@@ -1,6 +1,9 @@
 import { Readable } from "stream";
 import ffmpeg from "fluent-ffmpeg";
 import * as R from "remeda";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-worker-media-convert');
 
 const requiredCodecs = ["mp3", "webm", "wav"];
 
@@ -25,7 +28,7 @@ const defaultAudioConvertOpts = {
  **/
 export const convert = (
   input: Buffer,
-  opts?: AudioConvertOpts
+  opts?: AudioConvertOpts,
 ): Promise<Buffer> => {
   const settings = { ...defaultAudioConvertOpts, ...opts };
   return new Promise((resolve, reject) => {
@@ -35,12 +38,8 @@ export const convert = (
       .audioCodec(settings.audioCodec)
       .audioBitrate(settings.bitrate)
       .toFormat(settings.format)
-      .on("error", (err, stdout, stderr) => {
+      .on("error", (err, _stdout, _stderr) => {
-        console.error(err.message);
+        logger.error({ error: err }, 'FFmpeg conversion error');
-        console.log("FFMPEG OUTPUT");
-        console.log(stdout);
-        console.log("FFMPEG ERROR");
-        console.log(stderr);
         reject(err);
       })
       .on("end", () => {
@@ -62,12 +61,16 @@ export const selfCheck = (): Promise<boolean> => {
   return new Promise((resolve) => {
     ffmpeg.getAvailableFormats((err, codecs) => {
       if (err) {
-        console.error("FFMPEG error:", err);
+        logger.error({ error: err }, 'FFMPEG error');
         resolve(false);
       }
 
-      const preds = R.map(requiredCodecs, (codec) => (available: any) =>
+      const preds = R.map(
-        available[codec] && available[codec].canDemux && available[codec].canMux
+        requiredCodecs,
+        (codec) => (available: any) =>
+          available[codec] &&
+          available[codec].canDemux &&
+          available[codec].canMux,
       );
 
       resolve(R.allPass(codecs, preds));
@@ -79,6 +82,6 @@ export const assertFfmpegAvailable = async (): Promise<void> => {
   const r = await selfCheck();
   if (!r)
     throw new Error(
-      `ffmpeg is not installed, could not be located, or does not support the required codecs: ${requiredCodecs}`
+      `ffmpeg is not installed, could not be located, or does not support the required codecs: ${requiredCodecs}`,
     );
 };

apps/bridge-worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@link-stack/bridge-worker",
-  "version": "2.2.0",
+  "version": "3.2.0b5",
   "type": "module",
   "main": "build/main/index.js",
   "author": "Darren Clarke <darren@redaranj.com>",
@@ -13,17 +13,18 @@
   "dependencies": {
     "@hapi/wreck": "^18.1.0",
     "@link-stack/bridge-common": "*",
+    "@link-stack/logger": "*",
     "@link-stack/signal-api": "*",
     "fluent-ffmpeg": "^2.1.3",
     "graphile-worker": "^0.16.6",
-    "remeda": "^2.14.0",
+    "remeda": "^2.32.0",
-    "twilio": "^5.3.2"
+    "twilio": "^5.10.2"
   },
   "devDependencies": {
-    "@types/fluent-ffmpeg": "^2.1.26",
+    "@types/fluent-ffmpeg": "^2.1.27",
-    "dotenv-cli": "^7.4.2",
+    "dotenv-cli": "^10.0.0",
     "@link-stack/eslint-config": "*",
     "@link-stack/typescript-config": "*",
-    "typescript": "^5.6.2"
+    "typescript": "^5.9.3"
   }
 }

apps/bridge-worker/tasks/common/notify-webhooks.ts

@@ -1,4 +1,7 @@
 import { db } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('notify-webhooks');
 
 export interface NotifyWebhooksOptions {
   backendId: string;
@@ -10,22 +13,59 @@ const notifyWebhooksTask = async (
 ): Promise<void> => {
   const { backendId, payload } = options;
   
+  logger.debug({ 
+    backendId,
+    payloadKeys: Object.keys(payload),
+   }, 'Processing webhook notification');
+
   const webhooks = await db
     .selectFrom("Webhook")
     .selectAll()
     .where("backendId", "=", backendId)
     .execute();
 
+  logger.debug({  count: webhooks.length, backendId  }, 'Found webhooks');
+  
   for (const webhook of webhooks) {
     const { endpointUrl, httpMethod, headers } = webhook;
     const finalHeaders = { "Content-Type": "application/json", ...headers };
-    console.log({ endpointUrl, httpMethod, headers, finalHeaders });
+    const body = JSON.stringify(payload);
+    
+    logger.debug({ 
+      url: endpointUrl,
+      method: httpMethod,
+      bodyLength: body.length,
+      headerKeys: Object.keys(finalHeaders),
+     }, 'Sending webhook');
+    
+    try {
       const result = await fetch(endpointUrl, {
         method: httpMethod,
         headers: finalHeaders,
-      body: JSON.stringify(payload),
+        body,
       });
-    console.log(result);
+      
+      logger.debug({ 
+        url: endpointUrl,
+        status: result.status,
+        statusText: result.statusText,
+        ok: result.ok,
+       }, 'Webhook response');
+      
+      if (!result.ok) {
+        const responseText = await result.text();
+        logger.error({ 
+          url: endpointUrl,
+          status: result.status,
+          responseSample: responseText.substring(0, 500),
+         }, 'Webhook error response');
+      }
+    } catch (error) {
+      logger.error({ 
+        url: endpointUrl,
+        error: error instanceof Error ? error.message : error,
+       }, 'Webhook request failed');
+    }
   }
 };
 

apps/bridge-worker/tasks/facebook/send-facebook-message.ts

@@ -1,4 +1,7 @@
 import { db } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-worker-send-facebook-message');
 
 interface SendFacebookMessageTaskOptions {
   token: string;
@@ -31,9 +34,8 @@ const sendFacebookMessageTask = async (
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(outgoingMessage),
     });
-    console.log({ response });
   } catch (error) {
-    console.error({ error });
+    logger.error({ error });
     throw error;
   }
 };

apps/bridge-worker/tasks/fetch-signal-messages.ts

@@ -1,6 +1,9 @@
 import { db, getWorkerUtils } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
 import * as signalApi from "@link-stack/signal-api";
 
+const logger = createLogger('fetch-signal-messages');
+
 const { Configuration, MessagesApi, AttachmentsApi } = signalApi;
 const config = new Configuration({
   basePath: process.env.BRIDGE_SIGNAL_URL,
@@ -21,8 +24,23 @@ const fetchAttachments = async (attachments: any[] | undefined) => {
       const arrayBuffer = await blob.arrayBuffer();
       const base64Attachment = Buffer.from(arrayBuffer).toString("base64");
 
+      // Generate default filename if not provided by Signal API
+      let defaultFilename = name;
+      if (!defaultFilename) {
+        // Check if id already has an extension
+        const hasExtension = id.includes('.');
+        if (hasExtension) {
+          // ID already includes extension
+          defaultFilename = id;
+        } else {
+          // Add extension based on content type
+          const extension = contentType?.split('/')[1] || 'bin';
+          defaultFilename = `${id}.${extension}`;
+        }
+      }
+
       const formattedAttachment = {
-        filename: name,
+        filename: defaultFilename,
         mimeType: contentType,
         attachment: base64Attachment,
       };
@@ -46,21 +64,48 @@ const processMessage = async ({
   message: msg,
 }: ProcessMessageArgs): Promise<Record<string, any>[]> => {
   const { envelope } = msg;
-  console.log(envelope);
   const { source, sourceUuid, dataMessage } = envelope;
 
+  const isGroup = !!(
+    dataMessage?.groupV2 ||
+    dataMessage?.groupContext ||
+    dataMessage?.groupInfo
+  );
+
   if (!dataMessage) return [];
 
   const { attachments } = dataMessage;
   const rawTimestamp = dataMessage?.timestamp;
+
+  logger.debug({
+    sourceUuid,
+    source,
+    rawTimestamp,
+    hasGroupV2: !!dataMessage?.groupV2,
+    hasGroupContext: !!dataMessage?.groupContext,
+    hasGroupInfo: !!dataMessage?.groupInfo,
+    isGroup,
+    groupV2Id: dataMessage?.groupV2?.id,
+    groupContextType: dataMessage?.groupContext?.type,
+    groupInfoType: dataMessage?.groupInfo?.type,
+   }, 'Processing message');
   const timestamp = new Date(rawTimestamp);
 
   const formattedAttachments = await fetchAttachments(attachments);
   const primaryAttachment = formattedAttachments[0] ?? {};
   const additionalAttachments = formattedAttachments.slice(1);
+
+  const groupId =
+    dataMessage?.groupV2?.id ||
+    dataMessage?.groupContext?.id ||
+    dataMessage?.groupInfo?.groupId;
+  const toRecipient = groupId
+    ? `group.${Buffer.from(groupId).toString("base64")}`
+    : phoneNumber;
+
   const primaryMessage = {
     token: id,
-    to: phoneNumber,
+    to: toRecipient,
     from: source,
     messageId: `${sourceUuid}-${rawTimestamp}`,
     message: dataMessage?.message,
@@ -68,6 +113,7 @@ const processMessage = async ({
     attachment: primaryAttachment.attachment,
     filename: primaryAttachment.filename,
     mimeType: primaryAttachment.mimeType,
+    isGroup,
   };
   const formattedMessages = [primaryMessage];
 
@@ -119,15 +165,25 @@ const fetchSignalMessagesTask = async ({
       number: phoneNumber,
     });
 
+    logger.debug({  botId: id, phoneNumber  }, 'Fetching messages for bot');
+
     for (const message of messages) {
       const formattedMessages = await processMessage({
         id,
         phoneNumber,
         message,
       });
-      console.log({ formattedMessages });
       for (const formattedMessage of formattedMessages) {
         if (formattedMessage.to !== formattedMessage.from) {
+          logger.debug({
+            messageId: formattedMessage.messageId,
+            from: formattedMessage.from,
+            to: formattedMessage.to,
+            isGroup: formattedMessage.isGroup,
+            hasMessage: !!formattedMessage.message,
+            hasAttachment: !!formattedMessage.attachment,
+           }, 'Creating job for message');
+
           await worker.addJob(
             "signal/receive-signal-message",
             formattedMessage,

apps/bridge-worker/tasks/leafcutter/import-label-studio.ts

@@ -36,7 +36,6 @@ const getZammadTickets = async (
     { headers },
   );
   const tickets: any = await rawTickets.json();
-  console.log({ tickets });
   if (!tickets || tickets.length === 0) {
     return [shouldContinue, docs];
   }
@@ -49,22 +48,8 @@ const getZammadTickets = async (
     shouldContinue = true;
 
     if (source_closed_at <= minUpdatedTimestamp) {
-      console.log(`Skipping ticket`, {
-        source_id,
-        source_updated_at,
-        source_closed_at,
-        minUpdatedTimestamp,
-      });
       continue;
     }
-
-    console.log(`Processing ticket`, {
-      source_id,
-      source_updated_at,
-      source_closed_at,
-      minUpdatedTimestamp,
-    });
-
         const rawArticles = await fetch(
       `${zammadApiUrl}/ticket_articles/by_ticket/${source_id}`,
       { headers },
@@ -178,8 +163,6 @@ const sendToLabelStudio = async (tickets: FormattedZammadTicket[]) => {
       body: JSON.stringify([ticket]),
     });
     const importResult = await res.json();
-
-    console.log(JSON.stringify(importResult, undefined, 2));
   }
 };
  */
@@ -201,7 +184,6 @@ const importLabelStudioTask = async (): Promise<void> => {
       await sendToLabelStudio(tickets);
       const lastTicket = tickets.pop();
       const newLastTimestamp = lastTicket.data.source_closed_at;
-      console.log({ newLastTimestamp });
       await db.settings.upsert(settingName, {
         minUpdatedTimestamp: newLastTimestamp,
       });

apps/bridge-worker/tasks/leafcutter/import-leafcutter.ts

@@ -2,6 +2,9 @@
 /*
 import { URLSearchParams } from "url";
 import { withDb, AppDatabase } from "../../lib/db.js";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-worker-import-leafcutter');
 // import { loadConfig } from "@digiresilience/bridge-config";
 
 const config: any = {};
@@ -43,14 +46,11 @@ const getLabelStudioTickets = async (
     page_size: "50",
     page: `${page}`,
   });
-  console.log({ url: `${labelStudioApiUrl}/projects/1/tasks?${ticketsQuery}` });
   const res = await fetch(
     `${labelStudioApiUrl}/projects/1/tasks?${ticketsQuery}`,
     { headers },
   );
-  console.log({ res });
   const tasksResult: any = await res.json();
-  console.log({ tasksResult });
 
   return tasksResult;
 };
@@ -63,14 +63,11 @@ const fetchFromLabelStudio = async (
 
   for await (const page of pages) {
     const docs = await getLabelStudioTickets(page + 1);
-    console.log({ page, docs });
 
     if (docs && docs.length > 0) {
       for (const doc of docs) {
         const updatedAt = new Date(doc.updated_at);
-        console.log({ updatedAt, minUpdatedTimestamp });
         if (updatedAt > minUpdatedTimestamp) {
-          console.log(`Adding doc`, { doc });
           allDocs.push(doc);
         }
       }
@@ -79,7 +76,6 @@ const fetchFromLabelStudio = async (
     }
   }
 
-  console.log({ allDocs });
   return allDocs;
 };
 
@@ -93,9 +89,7 @@ const sendToLeafcutter = async (tickets: LabelStudioTicket[]) => {
     },
   } = config;
 
-  console.log({ tickets });
   const filteredTickets = tickets.filter((ticket) => ticket.is_labeled);
-  console.log({ filteredTickets });
   const finalTickets: LeafcutterTicket[] = filteredTickets.map((ticket) => {
     const {
       id,
@@ -131,8 +125,7 @@ const sendToLeafcutter = async (tickets: LabelStudioTicket[]) => {
     };
   });
 
-  console.log("Sending to Leafcutter");
+  logger.info("Sending to Leafcutter");
-  console.log({ finalTickets });
 
   const result = await fetch(opensearchApiUrl, {
     method: "POST",
@@ -157,15 +150,7 @@ const importLeafcutterTask = async (): Promise<void> => {
       ? new Date(res.value.minUpdatedTimestamp as string)
       : new Date("2023-03-01");
     const newLastTimestamp = new Date();
-    console.log({
-      contributorName,
-      settingName,
-      res,
-      startTimestamp,
-      newLastTimestamp,
-    });
     const tickets = await fetchFromLabelStudio(startTimestamp);
-    console.log({ tickets });
     await sendToLeafcutter(tickets);
     await db.settings.upsert(settingName, {
       minUpdatedTimestamp: newLastTimestamp,

apps/bridge-worker/tasks/signal/receive-signal-message.ts

@@ -1,4 +1,9 @@
 import { db, getWorkerUtils } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
+import * as signalApi from "@link-stack/signal-api";
+const { Configuration, GroupsApi } = signalApi;
+
+const logger = createLogger('bridge-worker-receive-signal-message');
 
 interface ReceiveSignalMessageTaskOptions {
   token: string;
@@ -10,6 +15,7 @@ interface ReceiveSignalMessageTaskOptions {
   attachment?: string;
   filename?: string;
   mimeType?: string;
+  isGroup?: boolean;
 }
 
 const receiveSignalMessageTask = async ({
@@ -22,8 +28,17 @@ const receiveSignalMessageTask = async ({
   attachment,
   filename,
   mimeType,
+  isGroup,
 }: ReceiveSignalMessageTaskOptions): Promise<void> => {
-  console.log({ token, to, from });
+  logger.debug({
+    messageId,
+    from,
+    to,
+    isGroup,
+    hasMessage: !!message,
+    hasAttachment: !!attachment,
+    token,
+  }, 'Processing incoming message');
   const worker = await getWorkerUtils();
   const row = await db
     .selectFrom("SignalBot")
@@ -32,8 +47,170 @@ const receiveSignalMessageTask = async ({
     .executeTakeFirstOrThrow();
 
   const backendId = row.id;
-  const payload = {
+  let finalTo = to;
+  let createdInternalId: string | undefined;
+
+  // Check if auto-group creation is enabled and this is NOT already a group message
+  const enableAutoGroups = process.env.BRIDGE_SIGNAL_AUTO_GROUPS === "true";
+
+  logger.debug({
+    enableAutoGroups,
+    isGroup,
+    shouldCreateGroup: enableAutoGroups && !isGroup && from && to,
+  }, 'Auto-groups config');
+
+  // If this is already a group message and auto-groups is enabled,
+  // use group provided in 'to'
+  if (enableAutoGroups && isGroup && to) {
+    // Signal sends the internal ID (base64) in group messages
+    // We should NOT add "group." prefix - that's for sending messages, not receiving
+    logger.debug('Message is from existing group with internal ID');
+
+    finalTo = to;
+  } else if (enableAutoGroups && !isGroup && from && to) {
+    try {
+      const config = new Configuration({
+        basePath: process.env.BRIDGE_SIGNAL_URL,
+      });
+      const groupsClient = new GroupsApi(config);
+
+      // Always create a new group for direct messages to the helpdesk
+      // This ensures each conversation gets its own group/ticket
+      logger.info({ from }, 'Creating new group for user');
+
+      // Include timestamp to make each group unique
+      const timestamp = new Date()
+        .toISOString()
+        .replace(/[:.]/g, "-")
+        .substring(0, 19);
+      const groupName = `Support: ${from} (${timestamp})`;
+
+      // Create new group for this conversation
+      const createGroupResponse = await groupsClient.v1GroupsNumberPost({
+        number: row.phoneNumber,
+        data: {
+          name: groupName,
+          members: [from],
+          description: "Private support conversation",
+        },
+      });
+
+      logger.debug({ createGroupResponse }, 'Group creation response from Signal API');
+
+      if (createGroupResponse.id) {
+        // The createGroupResponse.id already contains the full group identifier (group.BASE64)
+        finalTo = createGroupResponse.id;
+
+        // Fetch the group details to get the actual internalId
+        // The base64 part of the ID is NOT the same as the internalId!
+        try {
+          logger.debug('Fetching group details to get internalId');
+          const groups = await groupsClient.v1GroupsNumberGet({
+            number: row.phoneNumber,
+          });
+
+          logger.debug({ groupsSample: groups.slice(0, 3) }, 'Groups for bot');
+
+          const createdGroup = groups.find((g) => g.id === finalTo);
+          if (createdGroup) {
+            logger.debug({ createdGroup }, 'Found created group details');
+          }
+
+          if (createdGroup && createdGroup.internalId) {
+            createdInternalId = createdGroup.internalId;
+            logger.debug({ createdInternalId }, 'Got actual internalId');
+          } else {
+            // Fallback: extract base64 part from ID
+            if (finalTo.startsWith("group.")) {
+              createdInternalId = finalTo.substring(6);
+            }
+          }
+        } catch (fetchError) {
+          logger.debug('Could not fetch group details, using ID base64 part');
+          // Fallback: extract base64 part from ID
+          if (finalTo.startsWith("group.")) {
+            createdInternalId = finalTo.substring(6);
+          }
+        }
+
+        logger.debug({
+          fullGroupId: finalTo,
+          internalId: createdInternalId,
+        }, 'Group created successfully');
+        logger.debug({
+          groupId: finalTo,
+          internalId: createdInternalId,
+          groupName,
+          forPhoneNumber: from,
+          botNumber: row.phoneNumber,
+          response: createGroupResponse,
+        }, 'Created new Signal group');
+      }
+
+      // Now handle notifications and message forwarding for both new and existing groups
+      if (finalTo && finalTo.startsWith("group.")) {
+        // Forward the user's initial message to the group using quote feature
+        try {
+          logger.debug('Forwarding initial message to group using quote feature');
+
+          const attributionMessage = `Message from ${from}:\n"${message}"\n\n---\nSupport team: Your request has been received. An agent will respond shortly.`;
+
+          await worker.addJob("signal/send-signal-message", {
+            token: row.token,
+            to: finalTo,
+            message: attributionMessage,
+            conversationId: null,
+            quoteMessage: message,
+            quoteAuthor: from,
+            quoteTimestamp: Date.parse(sentAt),
+          });
+
+          logger.debug({ finalTo }, 'Successfully forwarded initial message to group');
+        } catch (forwardError) {
+          logger.error({ error: forwardError }, 'Error forwarding message to group');
+        }
+
+        // Send a response to the original DM informing about the group
+        try {
+          logger.debug('Sending group notification to original DM');
+
+          const dmNotification = `Hello! A private support group has been created for your conversation.\n\nGroup name: ${groupName}\n\nPlease look for the new group in your Signal app to continue the conversation. Our support team will respond there shortly.\n\nThank you for contacting support!`;
+
+          await worker.addJob("signal/send-signal-message", {
+            token: row.token,
+            to: from,
+            message: dmNotification,
+            conversationId: null,
+          });
+
+          logger.debug('Successfully sent group notification to user DM');
+        } catch (dmError) {
+          logger.error({ error: dmError }, 'Error sending DM notification');
+        }
+      }
+    } catch (error: any) {
+      // Check if error is because group already exists
+      const errorMessage =
+        error?.response?.data?.error || error?.message || error;
+      const isAlreadyExists =
+        errorMessage?.toString().toLowerCase().includes("already") ||
+        errorMessage?.toString().toLowerCase().includes("exists");
+
+      if (isAlreadyExists) {
+        logger.debug({ from }, 'Group might already exist, continuing with original recipient');
+      } else {
+        logger.error({
+          error: errorMessage,
+          from,
           to,
+          botNumber: row.phoneNumber,
+        }, 'Error creating Signal group');
+      }
+    }
+  }
+
+  const payload = {
+    to: finalTo,
     from,
     message_id: messageId,
     sent_at: sentAt,
@@ -41,6 +218,7 @@ const receiveSignalMessageTask = async ({
     attachment,
     filename,
     mime_type: mimeType,
+    is_group: finalTo.startsWith("group"),
   };
 
   await worker.addJob("common/notify-webhooks", { backendId, payload });

apps/bridge-worker/tasks/signal/send-signal-message.ts

@@ -1,19 +1,44 @@
-import { db } from "@link-stack/bridge-common";
+import { db, getWorkerUtils } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
 import * as signalApi from "@link-stack/signal-api";
-const { Configuration, MessagesApi } = signalApi;
+const { Configuration, MessagesApi, GroupsApi } = signalApi;
+
+const logger = createLogger("bridge-worker-send-signal-message");
 
 interface SendSignalMessageTaskOptions {
   token: string;
   to: string;
   message: any;
+  conversationId?: string; // Zammad ticket/conversation ID for callback
+  quoteMessage?: string; // Optional: message text to quote
+  quoteAuthor?: string; // Optional: author of quoted message (phone number)
+  quoteTimestamp?: number; // Optional: timestamp of quoted message in milliseconds
+  attachments?: Array<{
+    data: string; // base64
+    filename: string;
+    mime_type: string;
+  }>;
 }
 
 const sendSignalMessageTask = async ({
   token,
   to,
   message,
+  conversationId,
+  quoteMessage,
+  quoteAuthor,
+  quoteTimestamp,
+  attachments,
 }: SendSignalMessageTaskOptions): Promise<void> => {
-  console.log({ token, to });
+  logger.debug(
+    {
+      token,
+      to,
+      conversationId,
+      messageLength: message?.length,
+    },
+    "Processing outgoing message",
+  );
   const bot = await db
     .selectFrom("SignalBot")
     .selectAll()
@@ -25,18 +50,208 @@ const sendSignalMessageTask = async ({
     basePath: process.env.BRIDGE_SIGNAL_URL,
   });
   const messagesClient = new MessagesApi(config);
+  const groupsClient = new GroupsApi(config);
+  const worker = await getWorkerUtils();
+
+  let finalTo = to;
+  let groupCreated = false;
 
   try {
-    const response = await messagesClient.v2SendPost({
+    // Check if 'to' is a group ID (UUID format, group.base64 format, or base64) vs phone number
+    const isUUID =
+      /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(
+        to,
+      );
+    const isGroupPrefix = to.startsWith("group.");
+    const isBase64 = /^[A-Za-z0-9+/]+=*$/.test(to) && to.length > 20; // Base64 internal_id
+    const isGroupId = isUUID || isGroupPrefix || isBase64;
+    const enableAutoGroups = process.env.BRIDGE_SIGNAL_AUTO_GROUPS === "true";
+
+    logger.debug(
+      {
+        to,
+        isGroupId,
+        enableAutoGroups,
+        shouldCreateGroup:
+          enableAutoGroups && !isGroupId && to && conversationId,
+      },
+      "Recipient analysis",
+    );
+
+    // If sending to a phone number and auto-groups is enabled, create a group first
+    if (enableAutoGroups && !isGroupId && to && conversationId) {
+      try {
+        const groupName = `DPN Support Request: ${conversationId}`;
+        const createGroupResponse = await groupsClient.v1GroupsNumberPost({
+          number: bot.phoneNumber,
           data: {
-        number,
+            name: groupName,
-        recipients: [to],
+            members: [to],
-        message,
+            description: "Private support conversation",
           },
         });
-    console.log({ response });
+
-  } catch (error) {
+        if (createGroupResponse.id) {
-    console.error({ error });
+          // The createGroupResponse.id already contains the full group identifier (group.BASE64)
+          finalTo = createGroupResponse.id;
+          groupCreated = true;
+
+          // Fetch the group details to get the actual internalId
+          let internalId: string | undefined;
+          try {
+            const groups = await groupsClient.v1GroupsNumberGet({
+              number: bot.phoneNumber,
+            });
+
+            const createdGroup = groups.find((g) => g.id === finalTo);
+            if (createdGroup && createdGroup.internalId) {
+              internalId = createdGroup.internalId;
+              logger.debug({ internalId }, "Got actual internalId");
+            } else {
+              // Fallback: extract base64 part from ID
+              if (finalTo.startsWith("group.")) {
+                internalId = finalTo.substring(6);
+              }
+            }
+          } catch (fetchError) {
+            logger.debug("Could not fetch group details, using ID base64 part");
+            // Fallback: extract base64 part from ID
+            if (finalTo.startsWith("group.")) {
+              internalId = finalTo.substring(6);
+            }
+          }
+          logger.debug(
+            {
+              groupId: finalTo,
+              internalId,
+              groupName,
+              conversationId,
+              originalRecipient: to,
+              botNumber: bot.phoneNumber,
+            },
+            "Created new Signal group",
+          );
+
+          // Notify Zammad about the new group ID via webhook
+          await worker.addJob("common/notify-webhooks", {
+            backendId: bot.id,
+            payload: {
+              event: "group_created",
+              conversation_id: conversationId,
+              original_recipient: to,
+              group_id: finalTo,
+              internal_group_id: internalId,
+              timestamp: new Date().toISOString(),
+            },
+          });
+        }
+      } catch (groupError) {
+        logger.error(
+          {
+            error:
+              groupError instanceof Error ? groupError.message : groupError,
+            to,
+            conversationId,
+          },
+          "Error creating Signal group",
+        );
+        // Continue with original recipient if group creation fails
+      }
+    }
+
+    logger.debug(
+      {
+        fromNumber: number,
+        toRecipient: finalTo,
+        originalTo: to,
+        recipientChanged: to !== finalTo,
+        groupCreated,
+        isGroupRecipient: finalTo.startsWith("group."),
+      },
+      "Sending message via API",
+    );
+
+    // Build the message data with optional quote parameters
+    const messageData: signalApi.ApiSendMessageV2 = {
+      number,
+      recipients: [finalTo],
+      message,
+    };
+
+    logger.debug(
+      {
+        number,
+        recipients: [finalTo],
+        message: message.substring(0, 50) + "...",
+        hasQuoteParams: !!(quoteMessage && quoteAuthor && quoteTimestamp),
+      },
+      "Message data being sent",
+    );
+
+    // Add quote parameters if all are provided
+    if (quoteMessage && quoteAuthor && quoteTimestamp) {
+      messageData.quoteTimestamp = quoteTimestamp;
+      messageData.quoteAuthor = quoteAuthor;
+      messageData.quoteMessage = quoteMessage;
+
+      logger.debug(
+        {
+          quoteAuthor,
+          quoteMessage: quoteMessage.substring(0, 50) + "...",
+          quoteTimestamp,
+        },
+        "Including quote in message",
+      );
+    }
+
+    // Add attachments if provided
+    if (attachments && attachments.length > 0) {
+      messageData.base64Attachments = attachments.map((att) => att.data);
+      logger.debug(
+        {
+          attachmentCount: attachments.length,
+          attachmentNames: attachments.map((att) => att.filename),
+        },
+        "Including attachments in message",
+      );
+    }
+
+    const response = await messagesClient.v2SendPost({
+      data: messageData,
+    });
+
+    logger.debug(
+      {
+        to: finalTo,
+        groupCreated,
+        response: response?.timestamp || "no timestamp",
+      },
+      "Message sent successfully",
+    );
+  } catch (error: any) {
+    // Try to get the actual error message from the response
+    if (error.response) {
+      try {
+        const errorBody = await error.response.text();
+        logger.error(
+          {
+            status: error.response.status,
+            statusText: error.response.statusText,
+            body: errorBody,
+            sentTo: finalTo,
+            messageDetails: {
+              fromNumber: number,
+              toRecipients: [finalTo],
+              hasQuote: !!quoteMessage,
+            },
+          },
+          "Signal API error",
+        );
+      } catch (e) {
+        logger.error("Could not parse error response");
+      }
+    }
+    logger.error({ error }, "Full error details");
     throw error;
   }
 };

apps/bridge-worker/tasks/voice/twilio-recording.ts

@@ -3,6 +3,9 @@ import { withDb, AppDatabase } from "../../lib/db.js";
 import { twilioClientFor } from "../../lib/common.js";
 import { CallInstance } from "twilio/lib/rest/api/v2010/account/call";
 import workerUtils from "../../lib/utils.js";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('bridge-worker-twilio-recording');
 
 interface WebhookPayload {
   startTime: string;
@@ -20,7 +23,7 @@ const getTwilioRecording = async (url: string) => {
     const { payload } = await Wreck.get(url);
     return { recording: payload as Buffer };
   } catch (error: any) {
-    console.error(error.output);
+    logger.error(error.output);
     return { error: error.output };
   }
 };

apps/bridge-worker/tasks/whatsapp/receive-whatsapp-message.ts

@@ -23,8 +23,6 @@ const receiveWhatsappMessageTask = async ({
   filename,
   mimeType,
 }: ReceiveWhatsappMessageTaskOptions): Promise<void> => {
-  console.log({ token, to, from });
-
   const worker = await getWorkerUtils();
   const row = await db
     .selectFrom("WhatsappBot")

apps/bridge-worker/tasks/whatsapp/send-whatsapp-message.ts

@@ -1,15 +1,24 @@
 import { db } from "@link-stack/bridge-common";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger("bridge-worker-send-whatsapp-message");
 
 interface SendWhatsappMessageTaskOptions {
   token: string;
   to: string;
   message: any;
+  attachments?: Array<{
+    data: string;
+    filename: string;
+    mime_type: string;
+  }>;
 }
 
 const sendWhatsappMessageTask = async ({
   message,
   to,
   token,
+  attachments,
 }: SendWhatsappMessageTaskOptions): Promise<void> => {
   const bot = await db
     .selectFrom("WhatsappBot")
@@ -18,16 +27,40 @@ const sendWhatsappMessageTask = async ({
     .executeTakeFirstOrThrow();
 
   const url = `${process.env.BRIDGE_WHATSAPP_URL}/api/bots/${bot.id}/send`;
-  const params = { message, phoneNumber: to };
+  const params: any = { message, phoneNumber: to };
+
+  if (attachments && attachments.length > 0) {
+    params.attachments = attachments;
+    logger.debug(
+      {
+        attachmentCount: attachments.length,
+        attachmentNames: attachments.map((att) => att.filename),
+      },
+      "Sending WhatsApp message with attachments",
+    );
+  }
+
   try {
     const result = await fetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(params),
     });
-    console.log({ result });
+
+    if (!result.ok) {
+      const errorText = await result.text();
+      logger.error(
+        {
+          status: result.status,
+          errorText,
+          url,
+        },
+        "WhatsApp send failed",
+      );
+      throw new Error(`Failed to send message: ${result.status}`);
+    }
   } catch (error) {
-    console.error({ error });
+    logger.error({ error });
     throw new Error("Failed to send message");
   }
 };

apps/leafcutter/Dockerfile

@@ -38,9 +38,7 @@ RUN chown -R node ${APP_DIR}/
 
 USER node
 WORKDIR ${APP_DIR}
-COPY --from=installer  ${APP_DIR}/node_modules/ ./node_modules/
+COPY --from=installer ${APP_DIR} ./
-COPY --from=installer  ${APP_DIR}/apps/leafcutter/ ./apps/leafcutter/
-COPY --from=installer ${APP_DIR}/package.json ./package.json
 USER root
 WORKDIR ${APP_DIR}/apps/leafcutter/
 RUN chmod +x docker-entrypoint.sh

apps/leafcutter/README.md

@@ -1,32 +1,195 @@
-This is a [Next.js](https://nextjs.org/) project bootstrapped with [`create-next-app`](https://github.com/vercel/next.js/tree/canary/packages/create-next-app).
+# Leafcutter
 
-## Getting Started
+Data visualization and analytics platform for the CDR Link ecosystem.
 
-First, run the development server:
+## Overview
+
+Leafcutter provides powerful data visualization capabilities with multiple chart types, trend analysis, and OpenSearch integration. It enables users to create, save, and share custom visualizations of their data with support for multiple languages.
+
+## Features
+
+- **Multiple Visualization Types**:
+  - Vertical/Horizontal Bar Charts (including stacked)
+  - Line Charts (including stacked)
+  - Pie/Donut Charts
+  - Data Tables
+  - Metrics Display
+  - Tag Clouds
+
+- **Data Management**:
+  - Create and save custom searches
+  - User-specific visualizations
+  - Trend analysis and insights
+  - OpenSearch integration for data queries
+
+- **User Experience**:
+  - Internationalization (English, French)
+  - Responsive design
+  - Export capabilities
+  - Preview mode for sharing
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- OpenSearch instance
+- PostgreSQL database (for user data)
+
+### Setup
 
 ```bash
+# Install dependencies
+npm install
+
+# Run development server (port 3001)
 npm run dev
+
+# Build for production
+npm run build
+
+# Start production server
+npm run start
 ```
 
-Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
+### Environment Variables
 
-You can start editing the page by modifying `pages/index.js`. The page auto-updates as you edit the file.
+Required environment variables:
 
-[API routes](https://nextjs.org/docs/api-routes/introduction) can be accessed on [http://localhost:3000/api/hello](http://localhost:3000/api/hello). This endpoint can be edited in `pages/api/hello.js`.
+- `OPENSEARCH_URL` - OpenSearch endpoint
+- `OPENSEARCH_USERNAME` - OpenSearch username
+- `OPENSEARCH_PASSWORD` - OpenSearch password
+- `DATABASE_URL` - PostgreSQL connection
+- `NEXTAUTH_URL` - Application URL
+- `NEXTAUTH_SECRET` - NextAuth.js secret
+- `GOOGLE_CLIENT_ID` - Google OAuth client ID
+- `GOOGLE_CLIENT_SECRET` - Google OAuth client secret
 
-The `pages/api` directory is mapped to `/api/*`. Files in this directory are treated as [API routes](https://nextjs.org/docs/api-routes/introduction) instead of React pages.
+### Available Scripts
 
-## Learn More
+- `npm run dev` - Development server on port 3001
+- `npm run build` - Build for production
+- `npm run start` - Start production server
+- `npm run lint` - Run ESLint
+- `npm run export` - Export static site
+- `npm run aws:*` - AWS deployment utilities
+- `npm run kubectl:*` - Kubernetes utilities
 
-To learn more about Next.js, take a look at the following resources:
+## Architecture
 
-- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
+### Page Structure
-- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
 
-You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js/) - your feedback and contributions are welcome!
+- `/` - Home dashboard
+- `/create` - Create new visualizations
+- `/visualizations/[id]` - View/edit visualizations
+- `/preview/[id]` - Public preview mode
+- `/trends` - Trend analysis
+- `/about` - About page
+- `/faq` - Frequently asked questions
+- `/setup` - Initial setup wizard
 
-## Deploy on Vercel
+### API Routes
 
-The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
+- `/api/searches/*` - Search management
+- `/api/visualizations/*` - Visualization CRUD
+- `/api/trends/*` - Trend data
+- `/api/upload` - File upload handling
+- `/api/link/auth` - Link authentication
 
-Check out our [Next.js deployment documentation](https://nextjs.org/docs/deployment) for more details.
+### Visualization Configuration
+
+Each visualization type has a JSON configuration in `_config/visualizations/`:
+- Chart options
+- Data mapping
+- Styling preferences
+- Aggregation settings
+
+### Data Flow
+
+1. User creates search query
+2. Query sent to OpenSearch
+3. Results processed and aggregated
+4. Data rendered in chosen visualization
+5. Visualization saved to PostgreSQL
+
+## Internationalization
+
+Supported languages:
+- English (`_locales/en.json`)
+- French (`_locales/fr.json`)
+
+Language selection available in the UI with automatic persistence.
+
+## OpenSearch Integration
+
+### Query Structure
+
+Leafcutter translates user inputs into OpenSearch queries:
+- Full-text search
+- Field filtering
+- Date ranges
+- Aggregations
+
+### Index Management
+
+Works with OpenSearch indices for:
+- Document storage
+- Real-time analytics
+- Historical data
+
+## Visualization Types
+
+### Bar Charts
+- Vertical and horizontal orientations
+- Stacked variants for multi-series data
+- Customizable colors and labels
+
+### Line Charts
+- Time series visualization
+- Multiple series support
+- Trend analysis
+
+### Pie/Donut Charts
+- Proportional data display
+- Interactive legends
+- Percentage calculations
+
+### Data Tables
+- Sortable columns
+- Pagination
+- Export functionality
+
+### Metrics
+- Single value display
+- Comparison indicators
+- Real-time updates
+
+### Tag Clouds
+- Word frequency visualization
+- Interactive filtering
+- Size-based importance
+
+## Security
+
+- Authentication via NextAuth.js
+- User-scoped data access
+- Secure OpenSearch queries
+- Input validation
+
+## Docker Support
+
+```bash
+# Build image
+docker build -t link-stack/leafcutter .
+
+# Run with docker-compose
+docker-compose -f docker/compose/leafcutter.yml up
+```
+
+## Deployment
+
+Includes utilities for:
+- AWS deployment (S3, CloudFront)
+- Kubernetes deployment
+- Static site export

apps/leafcutter/app/(main)/about/page.tsx

@@ -1,5 +1,10 @@
+import { Suspense } from "react";
 import { About } from "@link-stack/leafcutter-ui";
 
 export default function Page() {
-  return <About />;
+  return (
+    <Suspense>
+      <About />
+    </Suspense>
+  );
 }

apps/leafcutter/app/(main)/faq/page.tsx

@@ -1,5 +1,12 @@
+import { Suspense } from "react";
 import { FAQ } from "@link-stack/leafcutter-ui";
 
-export default function Page() {
+export const dynamic = "force-dynamic";
-  return <FAQ />;
+
+export default async function Page() {
+  return (
+    <Suspense>
+      <FAQ />
+    </Suspense>
+  );
 }

apps/leafcutter/app/(main)/layout.tsx

@@ -2,6 +2,8 @@ import { ReactNode } from "react";
 import "app/_styles/global.css";
 import { InternalLayout } from "../_components/InternalLayout";
 
+export const dynamic = "force-dynamic";
+
 type LayoutProps = {
   children: ReactNode;
 };

apps/leafcutter/app/(main)/preview/[...visualizationID]/page.tsx

@@ -69,19 +69,17 @@ export const getServerSideProps: GetServerSideProps = async (
       });
     });
   }
-  console.log({ query });
   const dataResponse = await client.search({
     index: "demo_data",
     size: 200,
     body: { query },
   });
-  console.log({ dataResponse });
   res.props.data = dataResponse.body.hits.hits.map((hit) => ({
     id: hit._id,
     ...hit._source,
   }));
-  console.log({ data: res.props.data });
+
-  console.log(res.props.data[0]);
+
 
   return res;
 };

apps/leafcutter/app/(main)/setup/_components/Setup.tsx

@@ -13,7 +13,7 @@ export const Setup: FC = () => {
   } = useLeafcutterContext();
   const router = useRouter();
   useLayoutEffect(() => {
-    setTimeout(() => router.push("/"), 4000);
+    setTimeout(() => router.push("/"), 2000);
   }, [router]);
 
   return (

apps/leafcutter/app/(main)/setup/page.tsx

@@ -1,5 +1,10 @@
+import { Suspense } from "react";
 import { Setup } from "./_components/Setup";
 
 export default function Page() {
-  return <Setup />;
+  return (
+    <Suspense>
+      <Setup />
+    </Suspense>
+  );
 }

apps/leafcutter/app/(main)/visualizations/[...visualizationID]/page.tsx

@@ -22,9 +22,9 @@ const getVisualization = async (visualizationID: string) => {
   );
   const hit = hits[0];
   const visualization = {
-    id: hit._id.split(":")[1],
+    id: hit?._id.split(":")[1],
-    title: hit._source.visualization.title,
+    title: hit?._source?.visualization.title,
-    description: hit._source.visualization.description,
+    description: hit?._source?.visualization.description,
     url: `/app/visualize?security_tenant=global#/edit/${
       hit._id.split(":")[1]
     }?embed=true`,
@@ -34,12 +34,13 @@ const getVisualization = async (visualizationID: string) => {
 };
 
 type PageProps = {
-  params: {
+  params: Promise<{
     visualizationID: string;
-  };
+  }>;
 };
 
-export default async function Page({ params: { visualizationID } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { visualizationID } = await params;
   const visualization = await getVisualization(visualizationID);
 
   return <VisualizationDetail {...visualization} editing={false} />;

apps/leafcutter/app/_components/MultiProvider.tsx

@@ -15,7 +15,7 @@ import fr from "@link-stack/leafcutter-ui/locales/fr.json";
 import { LicenseInfo } from "@mui/x-license";
 
 LicenseInfo.setLicenseKey(
-  "c787ac6613c5f2aa0494c4285fe3e9f2Tz04OTY1NyxFPTE3NDYzNDE0ODkwMDAsUz1wcm8sTE09c3Vic2NyaXB0aW9uLEtWPTI=",
+  "2a7dd73ee59e3e028b96b0d2adee1ad8Tz0xMTMwOTUsRT0xNzc5MDYyMzk5MDAwLFM9cHJvLExNPXN1YnNjcmlwdGlvbixQVj1pbml0aWFsLEtWPTI=",
 );
 
 const messages: any = { en, fr };

apps/leafcutter/app/_components/Sidebar.tsx

@@ -48,7 +48,6 @@ const MenuItem = ({
   return (
     <Link href={href} passHref>
       <ListItem
-        button
         sx={{
           paddingLeft: "62px",
           backgroundColor: selected ? leafcutterLightBlue : "transparent",

apps/leafcutter/app/_lib/auth.ts

@@ -3,6 +3,9 @@ import Google from "next-auth/providers/google";
 import Apple from "next-auth/providers/apple";
 import Credentials from "next-auth/providers/credentials";
 import { checkAuth } from "./opensearch";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('leafcutter-auth');
 
 export const authOptions: NextAuthOptions = {
   pages: {
@@ -22,20 +25,17 @@ export const authOptions: NextAuthOptions = {
     Credentials({
       name: "Link",
       credentials: {
-        authToken: { label: "AuthToken", type: "text", },
+        authToken: { label: "AuthToken", type: "text" },
       },
       async authorize(credentials, req) {
         const { headers } = req;
-        console.log({ headers });
         const leafcutterUser = headers?.["x-leafcutter-user"];
         const authToken = credentials?.authToken;
 
         if (!leafcutterUser || leafcutterUser.trim() === "") {
-          console.log("no leafcutter user");
           return null;
         }
 
-        console.log({ authToken });
         return null;
         /*
         try {
@@ -48,14 +48,13 @@ export const authOptions: NextAuthOptions = {
 
           return user;
         } catch (e) {
-          console.log({ e });
+          logger.error({ e });
         }
 
         return null;
         */
-      }
+      },
-    })
+    }),
-
   ],
   secret: process.env.NEXTAUTH_SECRET,
   /*
@@ -77,4 +76,3 @@ export const authOptions: NextAuthOptions = {
     }
   },*/
 };
-

apps/leafcutter/app/_lib/opensearch.ts

@@ -1,6 +1,9 @@
 /* eslint-disable no-underscore-dangle */
 import { Client } from "@opensearch-project/opensearch";
 import { v4 as uuid } from "uuid";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('leafcutter-opensearch');
 
 /* Common */
 
@@ -10,7 +13,8 @@ const userMetadataIndexName = "user_metadata";
 
 const baseURL = `https://${process.env.OPENSEARCH_USERNAME}:${process.env.OPENSEARCH_PASSWORD}@${process.env.OPENSEARCH_URL}`;
 
-const createClient = () => new Client({
+const createClient = () =>
+  new Client({
     node: baseURL,
     auth: {
       username: process.env.OPENSEARCH_USERNAME!,
@@ -21,7 +25,8 @@ const createClient = () => new Client({
     },
   });
 
-const createUserClient = (username: string, password: string) => new Client({
+const createUserClient = (username: string, password: string) =>
+  new Client({
     node: baseURL,
     auth: {
       username,
@@ -115,7 +120,7 @@ export const getUserMetadata = async (username: string) => {
     await client.create({
       id: username,
       index: userMetadataIndexName,
-      body: { username, savedSearches: [] }
+      body: { username, savedSearches: [] },
     });
 
     res = await client.get({
@@ -132,7 +137,7 @@ export const saveUserMetadata = async (username: string, metadata: any) => {
   await client.update({
     id: username,
     index: userMetadataIndexName,
-    body: { doc: { username, ...metadata } }
+    body: { doc: { username, ...metadata } },
   });
 };
 
@@ -181,7 +186,7 @@ const getIndexPattern: any = async (index: string) => {
     sort: ["updated_at:desc"],
   });
 
-  if (res.body.hits.total.value === 0) {
+  if (res?.body?.hits?.total?.valueOf() === 0) {
     // eslint-disable-next-line no-use-before-define
     return createCurrentUserIndexPattern(index);
   }
@@ -226,7 +231,7 @@ interface createUserVisualizationProps {
 }
 
 export const createUserVisualization = async (
-  props: createUserVisualizationProps
+  props: createUserVisualizationProps,
 ) => {
   const { email, query, visualizationID, title, description } = props;
   const userIndex = await getCurrentUserIndex(email);
@@ -279,7 +284,7 @@ interface updateVisualizationProps {
 }
 
 export const updateUserVisualization = async (
-  props: updateVisualizationProps
+  props: updateVisualizationProps,
 ) => {
   const { email, id, query, title, description } = props;
   const userIndex = await getCurrentUserIndex(email);
@@ -300,8 +305,7 @@ export const updateUserVisualization = async (
       body,
     });
   } catch (e) {
-    // eslint-disable-next-line no-console
+    logger.error({ e });
-    console.log({ e });
   }
 
   return id;
@@ -469,10 +473,18 @@ export const performQuery = async (searchQuery: any, limit: number) => {
   const results = hits.map((hit: any) => ({
     ...hit._source,
     id: hit._id,
-    incident: Array.isArray(hit._source.incident) ? hit._source.incident.join(", ") : hit._source.incident,
+    incident: Array.isArray(hit._source.incident)
-    technology: Array.isArray(hit._source.technology) ? hit._source.technology.join(", ") : hit._source.technology,
+      ? hit._source.incident.join(", ")
-    targeted_group: Array.isArray(hit._source.targeted_group) ? hit._source.targeted_group.join(", ") : hit._source.targeted_group,
+      : hit._source.incident,
-    country: Array.isArray(hit._source.country) ? hit._source.country.join(", ") : hit._source.country,
+    technology: Array.isArray(hit._source.technology)
+      ? hit._source.technology.join(", ")
+      : hit._source.technology,
+    targeted_group: Array.isArray(hit._source.targeted_group)
+      ? hit._source.targeted_group.join(", ")
+      : hit._source.targeted_group,
+    country: Array.isArray(hit._source.country)
+      ? hit._source.country.join(", ")
+      : hit._source.country,
   }));
 
   return results;
@@ -570,7 +582,6 @@ export const getTemplates = async (limit: number) => {
     },
   };
 
-
   const rawResponse = await client.search({
     index: globalIndex,
     size: limit,

apps/leafcutter/app/api/link/auth/route.ts

@@ -2,14 +2,12 @@ import { NextRequest, NextResponse } from "next/server";
 
 export const GET = async (req: NextRequest) => {
   const validDomains = "localhost";
-    console.log({ req });
 
   return NextResponse.json({ response: "ok" });
 };
 
 export const POST = async (req: NextRequest) => {
   const validDomains = "localhost";
-    console.log({ req });
 
   return NextResponse.json({ response: "ok" });
 };

apps/leafcutter/app/api/trends/recent/route.ts

@@ -3,9 +3,8 @@ import { getTrends } from "app/_lib/opensearch";
 
 export const GET = async () => {
   const results = await getTrends(5);
-    console.log({ results });
 
   NextResponse.json(results);
 };
 
-export const dynamic = 'force-dynamic';
+export const dynamic = "force-dynamic";

apps/leafcutter/app/api/upload/index.ts

@@ -4,6 +4,9 @@ import { Client } from "@opensearch-project/opensearch";
 import { v4 as uuid } from "uuid";
 import taxonomy from "app/_config/taxonomy.json";
 import unRegions from "app/_config/unRegions.json";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('leafcutter-index');
 
 export const POST = async (req: NextRequest) => {
   const { tickets } = await req.json();
@@ -15,8 +18,8 @@ export const POST = async (req: NextRequest) => {
       rejectUnauthorized: false,
     },
     headers: {
-      authorization
+      authorization,
-    }
+    },
   });
 
   const succeeded = [];
@@ -28,11 +31,15 @@ export const POST = async (req: NextRequest) => {
       const country = ticket.country[0] ?? "none";
       // @ts-expect-error
       const translatedCountry = taxonomy.country[country]?.display ?? "none";
-      const countryDetails: any = unRegions.find((c) => c.name === translatedCountry);
+      const countryDetails: any = unRegions.find(
+        (c) => c.name === translatedCountry,
+      );
       const augmentedTicket = {
         ...ticket,
-        region: countryDetails['sub-region']?.toLowerCase().replace(" ", "-") ?? null,
+        region:
-        continent: countryDetails.region?.toLowerCase().replace(" ", "-") ?? null,
+          countryDetails["sub-region"]?.toLowerCase().replace(" ", "-") ?? null,
+        continent:
+          countryDetails.region?.toLowerCase().replace(" ", "-") ?? null,
       };
       const out = await client.create({
         id: uuid(),
@@ -40,10 +47,9 @@ export const POST = async (req: NextRequest) => {
         refresh: true,
         body: augmentedTicket,
       });
-      console.log(out);
       succeeded.push(id);
     } catch (e) {
-      console.log(e);
+      logger.error(e);
       failed.push(id);
     }
   }
@@ -52,4 +58,3 @@ export const POST = async (req: NextRequest) => {
 
   return NextResponse.json(results);
 };
-

apps/leafcutter/app/api/visualizations/delete/route.ts

@@ -3,13 +3,13 @@ import { getServerSession } from "next-auth";
 import { authOptions } from "app/_lib/auth";
 import { deleteUserVisualization } from "app/_lib/opensearch";
 
-export const POST = async (req: NextRequest, res: NextResponse) => {
+export const POST = async (req: NextRequest) => {
   const session = await getServerSession(authOptions);
-    const { user: { email } }: any = session;
+  const {
+    user: { email },
+  }: any = session;
   const { id } = await req.json();
   await deleteUserVisualization(email as string, id);
 
   return NextResponse.json({ id });
 };
-
-

apps/leafcutter/next-env.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
 /// <reference types="next/navigation-types/compat/navigation" />
+/// <reference path="./.next/types/routes.d.ts" />
 
 // NOTE: This file should not be edited
-// see https://nextjs.org/docs/app/building-your-application/configuring/typescript for more information.
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

apps/leafcutter/next.config.js

@@ -1,8 +1,5 @@
 module.exports = {
   transpilePackages: ["@link-stack/leafcutter-ui", "@link-stack/opensearch-common"],
-  experimental: {
-    missingSuspenseWithCSRBailout: false,
-  },
   poweredByHeader: false,
   rewrites: async () => ({
     fallback: [

apps/leafcutter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@link-stack/leafcutter",
-  "version": "2.2.0",
+  "version": "3.2.0b5",
   "scripts": {
     "dev": "next dev -p 3001",
     "login": "aws sso login --sso-session cdr",
@@ -13,37 +13,38 @@
     "lint": "next lint"
   },
   "dependencies": {
-    "@emotion/cache": "^11.13.1",
+    "@emotion/cache": "^11.14.0",
-    "@emotion/react": "^11.13.3",
+    "@emotion/react": "^11.14.0",
     "@emotion/server": "^11.11.0",
-    "@emotion/styled": "^11.13.0",
+    "@emotion/styled": "^11.14.1",
     "@link-stack/leafcutter-ui": "*",
+    "@link-stack/logger": "*",
     "@link-stack/opensearch-common": "*",
-    "@mui/icons-material": "^5",
+    "@mui/icons-material": "^6",
-    "@mui/material": "^5",
+    "@mui/material": "^6",
-    "@mui/material-nextjs": "^5",
+    "@mui/material-nextjs": "^6",
-    "@mui/x-date-pickers-pro": "^7.18.0",
+    "@mui/x-date-pickers-pro": "^7",
-    "@opensearch-project/opensearch": "^2.12.0",
+    "@opensearch-project/opensearch": "^3.5.1",
     "date-fns": "^4.1.0",
-    "http-proxy-middleware": "^3.0.2",
+    "http-proxy-middleware": "^3.0.5",
-    "material-ui-popup-state": "^5.3.1",
+    "material-ui-popup-state": "^5.3.6",
-    "next": "^14.2.23",
+    "next": "15.5.9",
-    "next-auth": "^4.24.8",
+    "next-auth": "^4.24.11",
-    "react": "18.3.1",
+    "react": "19.2.0",
-    "react-cookie": "^7.2.0",
+    "react-cookie": "^8.0.1",
     "react-cookie-consent": "^9.0.0",
-    "react-dom": "18.3.1",
+    "react-dom": "19.2.0",
     "react-iframe": "^1.8.5",
     "react-polyglot": "^0.7.2",
-    "sharp": "^0.33.5",
+    "sharp": "^0.34.4",
-    "uuid": "^10.0.0"
+    "uuid": "^13.0.0"
   },
   "devDependencies": {
+    "@types/node": "^24.7.0",
+    "@types/react": "19.2.2",
+    "@types/uuid": "^11.0.0",
     "@link-stack/eslint-config": "*",
     "@link-stack/typescript-config": "*",
-    "@types/node": "^22.7.3",
+    "typescript": "5.9.3"
-    "@types/react": "18.3.9",
-    "@types/uuid": "^10.0.0",
-    "typescript": "5.6.2"
   }
 }

apps/leafcutter/pages/api/proxy/[[...path]].ts

@@ -1,6 +1,9 @@
 import { createProxyMiddleware } from "http-proxy-middleware";
 import { NextApiRequest, NextApiResponse } from "next";
 import { getToken } from "next-auth/jwt";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('leafcutter-[[...path]]');
 
 /*
 
@@ -24,17 +27,17 @@ const withAuthInfo =
     const requestSignature = req.query.signature;
     const url = new URL(req.headers.referer as string);
     const referrerSignature = url.searchParams.get("signature");
-
-    console.log({ requestSignature, referrerSignature });
     const isAppPath = !!req.url?.startsWith("/app");
-    const isResourcePath = !!req.url?.match(/\/(api|app|bootstrap|3961|ui|translations|internal|login|node_modules)/);
+    const isResourcePath = !!req.url?.match(
+      /\/(api|app|bootstrap|3961|ui|translations|internal|login|node_modules)/,
+    );
 
     if (requestSignature && isAppPath) {
-      console.log("Has Signature");
+      logger.info("Has Signature");
     }
 
     if (referrerSignature && isResourcePath) {
-      console.log("Has Signature");
+      logger.info("Has Signature");
     }
 
     if (!email) {

apps/leafcutter/public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /

apps/link/Dockerfile

@@ -38,10 +38,7 @@ RUN chown -R node ${APP_DIR}/
 
 USER node
 WORKDIR ${APP_DIR}
-COPY --from=installer  ${APP_DIR}/node_modules/ ./node_modules/
+COPY --from=installer ${APP_DIR} ./
-COPY --from=installer  ${APP_DIR}/apps/link/ ./apps/link/
-COPY --from=installer  ${APP_DIR}/apps/bridge-migrations/ ./apps/bridge-migrations/
-COPY --from=installer ${APP_DIR}/package.json ./package.json
 USER root
 WORKDIR ${APP_DIR}/apps/link/
 RUN chmod +x docker-entrypoint.sh

apps/link/README.md

@@ -1,32 +1,109 @@
-This is a [Next.js](https://nextjs.org/) project bootstrapped with [`create-next-app`](https://github.com/vercel/next.js/tree/canary/packages/create-next-app).
+# CDR Link
 
-## Getting Started
+The main CDR (Center for Digital Resilience) Link application - a streamlined helpdesk interface built on top of Zammad with integrated communication channels and data visualization.
 
-First, run the development server:
+## Overview
+
+CDR Link provides a unified dashboard for managing support tickets, communication channels, and data analytics. It integrates multiple services including Zammad (ticketing), Bridge (multi-channel messaging), Leafcutter (data visualization), and OpenSearch.
+
+## Features
+
+- **Simplified Helpdesk Interface**: Streamlined UI for Zammad ticket management
+- **Multi-Channel Communication**: Integration with Signal, WhatsApp, Facebook, and Voice channels
+- **Data Visualization**: Embedded Leafcutter analytics and reporting
+- **User Management**: Role-based access control with Google OAuth
+- **Search**: Integrated OpenSearch for advanced queries
+- **Label Studio Integration**: For data annotation workflows
+
+## Development
+
+### Prerequisites
+
+- Node.js >= 20
+- npm >= 10
+- Running instances of Zammad, PostgreSQL, and Redis
+- Configured authentication providers
+
+### Setup
 
 ```bash
+# Install dependencies
+npm install
+
+# Run development server
 npm run dev
+
+# Build for production
+npm run build
+
+# Start production server
+npm run start
 ```
 
-Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
+### Environment Variables
 
-You can start editing the page by modifying `pages/index.js`. The page auto-updates as you edit the file.
+Key environment variables required:
 
-[API routes](https://nextjs.org/docs/api-routes/introduction) can be accessed on [http://localhost:3000/api/hello](http://localhost:3000/api/hello). This endpoint can be edited in `pages/api/hello.js`.
+- `ZAMMAD_URL` - Zammad instance URL
+- `ZAMMAD_API_TOKEN` - Zammad API authentication token
+- `DATABASE_URL` - PostgreSQL connection string
+- `REDIS_URL` - Redis connection URL
+- `NEXTAUTH_URL` - Application URL for authentication
+- `NEXTAUTH_SECRET` - Secret for NextAuth.js
+- `GOOGLE_CLIENT_ID` - Google OAuth client ID
+- `GOOGLE_CLIENT_SECRET` - Google OAuth client secret
 
-The `pages/api` directory is mapped to `/api/*`. Files in this directory are treated as [API routes](https://nextjs.org/docs/api-routes/introduction) instead of React pages.
+### Available Scripts
 
-## Learn More
+- `npm run dev` - Start development server
+- `npm run build` - Build for production
+- `npm run start` - Start production server
+- `npm run lint` - Run ESLint
+- `npm run export` - Export static site
 
-To learn more about Next.js, take a look at the following resources:
+## Architecture
 
-- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
+### Pages Structure
-- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
 
-You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js/) - your feedback and contributions are welcome!
+- `/` - Main dashboard
+- `/overview/[overview]` - Ticket overview pages
+- `/tickets/[id]` - Individual ticket view/edit
+- `/admin/bridge` - Bridge configuration management
+- `/leafcutter` - Data visualization dashboard
+- `/opensearch` - Search dashboard
+- `/zammad` - Direct Zammad access
+- `/profile` - User profile management
 
-## Deploy on Vercel
+### API Routes
 
-The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
+- `/api/auth` - NextAuth.js authentication
+- `/api/v2/users` - User management API
+- `/api/[service]/bots` - Bot management for communication channels
+- `/api/[service]/webhooks` - Webhook endpoints
 
-Check out our [Next.js deployment documentation](https://nextjs.org/docs/deployment) for more details.
+### Key Components
+
+- `ZammadWrapper` - Embeds Zammad UI with authentication
+- `SearchBox` - Global search functionality
+- `TicketList` / `TicketDetail` - Ticket management components
+- `Sidebar` - Navigation and service switching
+
+## Docker Support
+
+Build and run with Docker:
+
+```bash
+# Build image
+docker build -t link-stack/link .
+
+# Run with docker-compose
+docker-compose -f docker/compose/link.yml up
+```
+
+## Integration Points
+
+- **Zammad**: GraphQL queries for ticket data
+- **Bridge Services**: REST APIs for channel management
+- **Leafcutter**: Embedded iframe integration
+- **OpenSearch**: Direct dashboard embedding
+- **Redis**: Session and cache storage

apps/link/app/(login)/login/_components/Login.tsx

@@ -23,13 +23,15 @@ import { useSearchParams } from "next/navigation";
 
 type LoginProps = {
   session: any;
+  baseURL: string;
 };
 
-export const Login: FC<LoginProps> = ({ session }) => {
+export const Login: FC<LoginProps> = ({ session, baseURL }) => {
-  const origin =
+  let origin = null;
-    typeof window !== "undefined" && window.location.origin
+  if (typeof window !== "undefined") {
-      ? window.location.origin
+    origin = window.location.origin;
-      : "";
+  }
+  const callbackUrl = `${origin}/link`;
   const [provider, setProvider] = useState(undefined);
   const [email, setEmail] = useState("");
   const [password, setPassword] = useState("");
@@ -158,7 +160,7 @@ export const Login: FC<LoginProps> = ({ session }) => {
                         sx={buttonStyles}
                         onClick={() =>
                           signIn("google", {
-                            callbackUrl: `${origin}`,
+                            callbackUrl,
                           })
                         }
                       >
@@ -174,7 +176,7 @@ export const Login: FC<LoginProps> = ({ session }) => {
                         sx={buttonStyles}
                         onClick={() =>
                           signIn("apple", {
-                            callbackUrl: `${window.location.origin}`,
+                            callbackUrl,
                           })
                         }
                       >
@@ -189,7 +191,7 @@ export const Login: FC<LoginProps> = ({ session }) => {
                         sx={buttonStyles}
                         onClick={() =>
                           signIn("azure-ad", {
-                            callbackUrl: `${origin}`,
+                            callbackUrl,
                           })
                         }
                       >
@@ -226,13 +228,13 @@ export const Login: FC<LoginProps> = ({ session }) => {
                       <Grid item sx={{ width: "100%" }}>
                         <IconButton
                           sx={buttonStyles}
-                          onClick={() =>
+                          onClick={() => {
                             signIn("credentials", {
                               email,
                               password,
-                              callbackUrl: `${origin}/setup`,
+                              callbackUrl,
-                            })
+                            });
-                          }
+                          }}
                         >
                           <KeyIcon sx={{ mr: 1 }} />
                           Sign in with Zammad credentials

apps/link/app/(login)/login/page.tsx

@@ -9,10 +9,11 @@ export const metadata: Metadata = {
 
 export default async function Page() {
   const session = await getSession();
+  const baseURL = process.env.LINK_URL;
 
   return (
     <Suspense fallback={<div>Loading...</div>}>
-      <Login session={session} />
+      <Login session={session} baseURL={baseURL} />
     </Suspense>
   );
 }

apps/link/app/(main)/_components/ClientOnly.tsx

@@ -1,8 +1,9 @@
 "use client";
 
+import { ReactNode } from "react";
 import dynamic from "next/dynamic";
 
-type ClientOnlyProps = { children: JSX.Element };
+type ClientOnlyProps = { children: ReactNode };
 const ClientOnly = (props: ClientOnlyProps) => {
   const { children } = props;
 

apps/link/app/(main)/_components/Home.tsx

@@ -3,9 +3,10 @@
 import { FC } from "react";
 import { OpenSearchWrapper } from "@link-stack/leafcutter-ui";
 
-export const Home: FC = () => (
+type HomeProps = {
-  <OpenSearchWrapper
+  url: string;
-    url="/app/visualize#/edit/237b8f00-e6a0-11ee-94b3-d7b7409294e7?embed=true"
+};
-    marginTop="0"
+
-  />
+export const Home: FC<HomeProps> = ({ url }) => (
+  <OpenSearchWrapper url={url} margin={0} />
 );

apps/link/app/(main)/_components/Sidebar.tsx

@@ -207,10 +207,6 @@ export const Sidebar: FC<SidebarProps> = ({
     return () => clearInterval(interval);
   }, []);
 
-  const logout = () => {
-    signOut({ callbackUrl: "/login" });
-  };
-
   return (
     <Drawer
       sx={{ width: open ? openWidth : closedWidth, flexShrink: 0 }}
@@ -485,7 +481,17 @@ export const Sidebar: FC<SidebarProps> = ({
               selected={pathname.endsWith("/docs")}
               open={open}
             />
-            {leafcutterEnabled && (
+            {roles.includes("admin") && leafcutterEnabled && (
+              <MenuItem
+                name="Opensearch"
+                href="/opensearch"
+                Icon={InsightsIcon}
+                iconSize={20}
+                selected={pathname.startsWith("/opensearch")}
+                open={open}
+              />
+            )}
+            {false && leafcutterEnabled && (
               <MenuItem
                 name="Leafcutter"
                 href="/leafcutter"
@@ -617,7 +623,6 @@ export const Sidebar: FC<SidebarProps> = ({
               Icon={LogoutIcon}
               iconSize={20}
               open={open}
-              onClick={logout}
             />
           </List>
         </Grid>

apps/link/app/(main)/_components/ZammadWrapper.tsx

@@ -41,7 +41,6 @@ export const ZammadWrapper: FC<ZammadWrapperProps> = ({
         method: "GET",
         redirect: "manual",
       });
-      console.log({ res });
       if (res.type === "opaqueredirect") {
         setAuthenticated(true);
       } else {
@@ -69,7 +68,6 @@ export const ZammadWrapper: FC<ZammadWrapperProps> = ({
   }, [session]);
 
   if (!session || !authenticated) {
-    console.log("Not authenticated");
     return (
       <Box sx={{ width: "100%" }}>
         <Grid
@@ -89,7 +87,6 @@ export const ZammadWrapper: FC<ZammadWrapperProps> = ({
   }
 
   if (session && authenticated) {
-    console.log("Session and authenticated");
     return (
       <Iframe
         id={id}
@@ -102,10 +99,6 @@ export const ZammadWrapper: FC<ZammadWrapperProps> = ({
           const linkElement = document.querySelector(
             `#${id}`,
           ) as HTMLIFrameElement;
-
-          console.log({ path });
-          console.log({ id });
-          console.log({ linkElement });
           if (
             linkElement.contentDocument &&
             linkElement.contentDocument?.querySelector &&

apps/link/app/(main)/admin/bridge/[...segment]/@create/page.tsx

@@ -1,10 +1,11 @@
 import { Create } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
 
   return <Create service={service} />;

apps/link/app/(main)/admin/bridge/[...segment]/@detail/page.tsx

@@ -1,11 +1,12 @@
 import { db } from "@link-stack/bridge-common";
 import { serviceConfig, Detail } from "@link-stack/bridge-ui";
 
-type Props = {
+type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default async function Page({ params: { segment } }: Props) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
   const id = segment?.[1];
 

apps/link/app/(main)/admin/bridge/[...segment]/@edit/page.tsx

@@ -2,10 +2,11 @@ import { db } from "@link-stack/bridge-common";
 import { serviceConfig, Edit } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: { segment: string[] };
+  params: Promise<{ segment: string[] }>;
 };
 
-export default async function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
   const id = segment?.[1];
 

apps/link/app/(main)/admin/bridge/[...segment]/page.tsx

@@ -2,12 +2,13 @@ import { db } from "@link-stack/bridge-common";
 import { serviceConfig, List } from "@link-stack/bridge-ui";
 
 type PageProps = {
-  params: {
+  params: Promise<{
     segment: string[];
-  };
+  }>;
 };
 
-export default async function Page({ params: { segment } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { segment } = await params;
   const service = segment[0];
 
   if (!service) return null;

apps/link/app/(main)/knowledge/page.tsx

@@ -1,10 +0,0 @@
-import { Metadata } from "next";
-import { ZammadWrapper } from "../../(main)/_components/ZammadWrapper";
-
-export const metadata: Metadata = {
-  title: "Knowledge Base",
-};
-
-export default function Page() {
-  return <ZammadWrapper path="/#knowledge_base/1/locale/en-us" />;
-}

apps/link/app/(main)/logout/page.tsx

@@ -1,9 +1,20 @@
 "use client";
 
+import { useEffect } from "react";
 import { signOut } from "next-auth/react";
 
 export default function Page() {
-  signOut({ callbackUrl: "/login" });
+  useEffect(() => {
+    const multistepSignOut = async () => {
+      const response = await fetch("/api/logout", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        credentials: "same-origin",
+      });
+      signOut({ callbackUrl: "/link/login" });
+    };
+    multistepSignOut();
+  }, []);
 
   return <div />;
 }

apps/link/app/(main)/opensearch/page.tsx

@@ -0,0 +1,5 @@
+import { OpenSearchWrapper } from "@link-stack/leafcutter-ui";
+
+export default function Page() {
+  return <OpenSearchWrapper url="/app/visualize#/" margin={50} />;
+}

apps/link/app/(main)/overview/[overview]/_components/TicketCreateDialog.tsx

@@ -1,7 +1,6 @@
 "use client";
 
-import { FC, useState, useEffect } from "react";
+import { FC, useState, useEffect, useActionState } from "react";
-import { useFormState } from "react-dom";
 import { useRouter } from "next/navigation";
 import { Grid } from "@mui/material";
 import {
@@ -44,7 +43,7 @@ export const TicketCreateDialog: FC<TicketCreateDialogProps> = ({
       },
     },
   };
-  const [formState, formAction] = useFormState(
+  const [formState, formAction] = useActionState(
     createTicketAction,
     initialState,
   );

apps/link/app/(main)/overview/[overview]/_components/TicketList.tsx

@@ -65,7 +65,6 @@ export const TicketList: FC<TicketListProps> = ({ title, tickets }) => {
         columns={gridColumns}
         onRowClick={onRowClick}
         getRowID={(row: any) => {
-          console.log({ row });
           return row.internalId;
         }}
         buttons={

apps/link/app/(main)/overview/[overview]/_components/ZammadOverview.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { FC, useEffect, useState } from "react";
+import { redirect } from "next/navigation";
 import { getOverviewTicketsAction } from "app/_actions/overviews";
 
 import { TicketList } from "./TicketList";
@@ -12,6 +13,19 @@ type ZammadOverviewProps = {
 export const ZammadOverview: FC<ZammadOverviewProps> = ({ name }) => {
   const [tickets, setTickets] = useState([]);
 
+  if (typeof window !== "undefined") {
+    useEffect(() => {
+      const hash = window?.location?.hash;
+
+      if (hash) {
+        const ticketID = hash.replace("#ticket/zoom/", "");
+        if (ticketID && !isNaN(parseInt(ticketID, 10))) {
+          redirect(`/tickets/${ticketID}`);
+        }
+      }
+    }, [window?.location?.hash]);
+  }
+
   useEffect(() => {
     const fetchTickets = async () => {
       const { tickets } = await getOverviewTicketsAction(name);

apps/link/app/(main)/overview/[overview]/page.tsx

@@ -6,14 +6,15 @@ const getSection = (overview: string) => {
 };
 
 type MetadataProps = {
-  params: {
+  params: Promise<{
     overview: string;
-  };
+  }>;
 };
 
 export async function generateMetadata({
-  params: { overview },
+  params,
 }: MetadataProps): Promise<Metadata> {
+  const { overview } = await params;
   const section = getSection(overview);
 
   return {
@@ -22,12 +23,13 @@ export async function generateMetadata({
 }
 
 type PageProps = {
-  params: {
+  params: Promise<{
     overview: string;
-  };
+  }>;
 };
 
-export default function Page({ params: { overview } }: PageProps) {
+export default async function Page({ params }: PageProps) {
+  const { overview } = await params;
   const section = getSection(overview);
 
   return <ZammadOverview name={section} />;

apps/link/app/(main)/page.tsx

@@ -1,9 +1,13 @@
 import { Metadata } from "next";
 import { redirect } from "next/navigation";
-import { getServerSession } from "app/_lib/authentication";
+import { Home } from "./_components/Home";
-import { Home } from "@link-stack/leafcutter-ui";
+import { createLogger } from "@link-stack/logger";
-import { getUserVisualizations } from "@link-stack/opensearch-common";
+
-import { LeafcutterWrapper } from "@link-stack/leafcutter-ui";
+const logger = createLogger('link-page');
+// import { getServerSession } from "app/_lib/authentication";
+// import { Home } from "@link-stack/leafcutter-ui";
+// import { getUserVisualizations } from "@link-stack/opensearch-common";
+// import { LeafcutterWrapper } from "@link-stack/leafcutter-ui";
 
 export const metadata: Metadata = {
   title: "CDR Link - Home",
@@ -11,21 +15,31 @@ export const metadata: Metadata = {
 
 export default async function Page() {
   const leafcutterEnabled = process.env.LEAFCUTTER_ENABLED === "true";
+  const dashboardURL = process.env.LEAFCUTTER_DEFAULT_DASHBOARD_URL;
 
   if (!leafcutterEnabled) {
     redirect("/overview/recent");
   }
-
+  /*
   const session = await getServerSession();
   const {
     user: { email },
   }: any = session;
-
+   */
-  const visualizations = await getUserVisualizations(email ?? "none", 20);
+  let visualizations = [];
+  /*
+  try {
+    visualizations = await getUserVisualizations(email ?? "none", 20);
+  } catch (e) {
+    logger.error({ meta: e.meta }, "Error metadata");
+  }
 
   return (
     <LeafcutterWrapper>
       <Home visualizations={visualizations} showWelcome={false} />
     </LeafcutterWrapper>
   );
+   */
+
+  return <Home url={dashboardURL} />;
 }

apps/link/app/(main)/setup/_components/Setup.tsx

@@ -8,6 +8,13 @@ import { ZammadWrapper } from "app/(main)/_components/ZammadWrapper";
 export const Setup: FC = () => {
   const router = useRouter();
   useLayoutEffect(() => {
+    const fingerprint = localStorage.getItem("fingerprint");
+    if (!fingerprint || fingerprint === "") {
+      const newFingerprint = `${Math.floor(
+        Math.random() * 100000000,
+      )}`.padStart(8, "0");
+      localStorage.setItem("fingerprint", newFingerprint);
+    }
     setTimeout(() => router.push("/"), 4000);
   }, [router]);
 

apps/link/app/(main)/tickets/[id]/@detail/_components/ArticleCreateDialog.tsx

@@ -1,100 +0,0 @@
-"use client";
-
-import { FC, useState } from "react";
-import {
-  Grid,
-  Button,
-  Dialog,
-  DialogActions,
-  DialogContent,
-  TextField,
-} from "@mui/material";
-import { createTicketArticleAction } from "app/_actions/tickets";
-
-interface ArticleCreateDialogProps {
-  ticketID: string;
-  open: boolean;
-  closeDialog: () => void;
-  kind: string;
-  recipient?: string;
-}
-
-export const ArticleCreateDialog: FC<ArticleCreateDialogProps> = ({
-  ticketID,
-  open,
-  closeDialog,
-  kind,
-  recipient,
-}) => {
-  const [body, setBody] = useState("");
-  const backgroundColor = kind === "note" ? "#FFB620" : "#1982FC";
-  const color = kind === "note" ? "black" : "white";
-  const article = {
-    body,
-    type: kind,
-    internal: kind === "note",
-  };
-
-  if (kind === "email") {
-    article["to"] = recipient;
-  }
-
-  const createArticle = async () => {
-    await createTicketArticleAction(ticketID, article);
-    closeDialog();
-    setBody("");
-  };
-
-  return (
-    <Dialog open={open} maxWidth="sm" fullWidth>
-      <DialogContent>
-        <TextField
-          label={kind === "note" ? "Write internal note" : "Write reply"}
-          multiline
-          rows={10}
-          fullWidth
-          value={body}
-          onChange={(e: any) => setBody(e.target.value)}
-        />
-      </DialogContent>
-      <DialogActions sx={{ px: 3, pt: 0, pb: 3 }}>
-        <Grid container justifyContent="space-between">
-          <Grid item>
-            <Button
-              sx={{
-                backgroundColor: "white",
-                color: "#666",
-                fontFamily: "Poppins, sans-serif",
-                fontWeight: 700,
-                borderRadius: 2,
-                textTransform: "none",
-              }}
-              onClick={() => {
-                setBody("");
-                closeDialog();
-              }}
-            >
-              Cancel
-            </Button>
-          </Grid>
-          <Grid item>
-            <Button
-              sx={{
-                backgroundColor,
-                color,
-                fontFamily: "Poppins, sans-serif",
-                fontWeight: 700,
-                borderRadius: 2,
-                textTransform: "none",
-                px: 3,
-              }}
-              onClick={createArticle}
-            >
-              {kind === "note" ? "Save Note" : "Send Reply"}
-            </Button>
-          </Grid>
-        </Grid>
-      </DialogActions>
-    </Dialog>
-  );
-};

apps/link/app/(main)/tickets/[id]/@detail/_components/TicketDetail.tsx

@@ -1,177 +0,0 @@
-"use client";
-
-import { FC, useState, useEffect } from "react";
-import { getTicketAction, getTicketArticlesAction } from "app/_actions/tickets";
-import { Grid, Box, Typography } from "@mui/material";
-import { Button, fonts, colors } from "@link-stack/ui";
-import "@chatscope/chat-ui-kit-styles/dist/default/styles.min.css";
-import {
-  MainContainer,
-  ChatContainer,
-  MessageList,
-  Message,
-  ConversationHeader,
-} from "@chatscope/chat-ui-kit-react";
-import { ArticleCreateDialog } from "./ArticleCreateDialog";
-
-interface TicketDetailProps {
-  id: string;
-}
-
-export const TicketDetail: FC<TicketDetailProps> = ({ id }) => {
-  const [ticket, setTicket] = useState<any>(null);
-  const [ticketArticles, setTicketArticles] = useState<any>(null);
-  const { poppins, roboto } = fonts;
-  const { veryLightGray, lightGray } = colors;
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [articleKind, setArticleKind] = useState("note");
-
-  useEffect(() => {
-    const fetchTicket = async () => {
-      const result = await getTicketAction(id);
-      setTicket(result);
-    };
-
-    fetchTicket();
-
-    const interval = setInterval(fetchTicket, 20000);
-
-    return () => clearInterval(interval);
-  }, [id]);
-
-  useEffect(() => {
-    const fetchTicketArticles = async () => {
-      const result = await getTicketArticlesAction(id);
-      setTicketArticles(result);
-    };
-
-    fetchTicketArticles();
-
-    const interval = setInterval(fetchTicketArticles, 5000);
-
-    return () => clearInterval(interval);
-  }, [id]);
-
-  const closeDialog = () => setDialogOpen(false);
-
-  const firstArticle = ticketArticles?.edges[0]?.node;
-  const firstArticleKind = firstArticle?.type?.name ?? "phone";
-  const firstEmailSender = firstArticle?.from?.parsed?.[0]?.emailAddress ?? "";
-  const recipient = firstEmailSender;
-  const shouldRender = !!ticket && !!ticketArticles;
-
-  return (
-    <Box sx={{ height: "100%", width: "100%", background: veryLightGray }}>
-      {shouldRender && (
-        <>
-          <MainContainer>
-            <ChatContainer>
-              <ConversationHeader>
-                <ConversationHeader.Content>
-                  <Box
-                    sx={{
-                      width: "100%",
-                      textAlign: "center",
-                      fontWeight: "bold",
-                    }}
-                  >
-                    <Typography
-                      variant="h5"
-                      sx={{
-                        fontFamily: poppins.style.fontFamily,
-                        fontWeight: 700,
-                      }}
-                    >
-                      {ticket.title}
-                    </Typography>
-                    <Typography
-                      variant="h6"
-                      sx={{
-                        fontFamily: roboto.style.fontFamily,
-                        fontWeight: 400,
-                      }}
-                    >{`Ticket #${ticket.number} (created ${new Date(
-                      ticket.createdAt,
-                    ).toLocaleDateString()})`}</Typography>
-                  </Box>
-                </ConversationHeader.Content>
-              </ConversationHeader>
-              <MessageList style={{ marginBottom: 80 }}>
-                {ticketArticles.edges.map(({ node: article }: any) => (
-                  <Message
-                    key={article.id}
-                    className={
-                      article.internal
-                        ? "internal-note"
-                        : article?.sender?.name === "Agent"
-                          ? "outgoing-message"
-                          : "incoming-message"
-                    }
-                    model={{
-                      message: article.bodyWithUrls,
-                      type:
-                        article.contentType === "text/html" ? "html" : "text",
-                      sentTime: article.updated_at,
-                      sender: article.from,
-                      direction:
-                        article.sender === "Agent" ? "outgoing" : "incoming",
-                      position: "single",
-                    }}
-                  />
-                ))}
-              </MessageList>
-            </ChatContainer>
-            <Box
-              sx={{
-                height: 80,
-                background: veryLightGray,
-                borderTop: `1px solid ${lightGray}`,
-                position: "absolute",
-                bottom: 0,
-                width: "100%",
-                zIndex: 1000,
-              }}
-            >
-              <Grid
-                container
-                spacing={6}
-                justifyContent="center"
-                alignItems="center"
-                alignContent="center"
-                sx={{ height: "100%", pt: 6 }}
-              >
-                <Grid item>
-                  <Button
-                    text="Write note to agent"
-                    color="#FFB620"
-                    onClick={() => {
-                      setArticleKind("note");
-                      setDialogOpen(true);
-                    }}
-                  />
-                </Grid>
-                <Grid item>
-                  <Button
-                    text="Reply to ticket"
-                    kind="primary"
-                    onClick={() => {
-                      setArticleKind(firstArticleKind);
-                      setDialogOpen(true);
-                    }}
-                  />
-                </Grid>
-              </Grid>
-            </Box>
-          </MainContainer>
-          <ArticleCreateDialog
-            ticketID={ticket.internalId}
-            open={dialogOpen}
-            closeDialog={closeDialog}
-            kind={articleKind}
-            recipient={recipient}
-          />
-        </>
-      )}
-    </Box>
-  );
-};

apps/link/app/(main)/tickets/[id]/@detail/page.tsx

@@ -1,11 +0,0 @@
-import { TicketDetail } from "./_components/TicketDetail";
-
-type PageProps = {
-  params: {
-    id: string;
-  };
-};
-
-export default function Page({ params: { id } }: PageProps) {
-  return <TicketDetail id={id} />;
-}

apps/link/app/(main)/tickets/[id]/@edit/_components/TicketEdit.tsx

@@ -1,205 +0,0 @@
-"use client";
-
-import { FC, useEffect, useState } from "react";
-import { Grid, Box } from "@mui/material";
-import { Select, Button } from "@link-stack/ui";
-import { MuiChipsInput } from "mui-chips-input";
-import { DatePicker } from "@mui/x-date-pickers/DatePicker";
-import {
-  updateTicketAction,
-  getTicketAction,
-  getTicketStatesAction,
-  getTicketPrioritiesAction,
-} from "app/_actions/tickets";
-import { getAgentsAction } from "app/_actions/users";
-import { getGroupsAction } from "app/_actions/groups";
-
-interface TicketEditProps {
-  id: string;
-}
-
-export const TicketEdit: FC<TicketEditProps> = ({ id }) => {
-  const [ticket, setTicket] = useState<any>();
-  const [hasChanges, setHasChanges] = useState(false);
-  const [formState, setFormState] = useState({
-    values: {
-      group: null,
-      owner: null,
-      priority: null,
-      pendingTime: null,
-      state: null,
-      tags: [],
-    },
-  });
-  const [ticketStates, setTicketStates] = useState<any>();
-  const [ticketPriorities, setTicketPriorities] = useState<any>();
-  const [groups, setGroups] = useState<any>();
-  const [agents, setAgents] = useState<any>();
-  const [pendingVisible, setPendingVisible] = useState(false);
-
-  const filteredStates =
-    ticketStates?.filter(
-      (state: any) => !["new", "merged", "removed"].includes(state.label),
-    ) ?? [];
-
-  useEffect(() => {
-    const fetchAgents = async () => {
-      const result = await getAgentsAction();
-      setAgents(result);
-    };
-
-    const fetchGroups = async () => {
-      const result = await getGroupsAction();
-      setGroups(result);
-    };
-
-    const fetchTicketStates = async () => {
-      const result = await getTicketStatesAction();
-      setTicketStates(result);
-    };
-
-    const fetchTicketPriorities = async () => {
-      const result = await getTicketPrioritiesAction();
-      setTicketPriorities(result);
-    };
-
-    fetchTicketStates();
-    fetchTicketPriorities();
-    fetchAgents();
-    fetchGroups();
-  }, []);
-
-  useEffect(() => {
-    const fetchTicket = async () => {
-      const result = await getTicketAction(id);
-      setTicket(result);
-      setFormState({
-        values: {
-          ...formState.values,
-          group: result?.group?.id,
-          owner: result?.owner?.id,
-          priority: result?.priority?.id,
-          state: result?.state?.id,
-          tags: result?.tags,
-        },
-      });
-    };
-
-    fetchTicket();
-  }, []);
-
-  const updateFormState = (name: string, value: any) => {
-    setFormState({
-      values: {
-        ...formState.values,
-        [name]: value,
-      },
-    });
-    const stateName = filteredStates?.find(
-      (state: any) => state.id === formState.values.state,
-    )?.name;
-    setPendingVisible(stateName?.includes("pending") ?? false);
-    setHasChanges(true);
-  };
-
-  const updateTicket = async () => {
-    await updateTicketAction(id, formState.values);
-    setHasChanges(false);
-  };
-
-  const shouldRender = !!ticket;
-
-  return (
-    <Box sx={{ height: "100vh", background: "#ddd", p: 2 }}>
-      {shouldRender && (
-        <Grid container direction="column" spacing={3}>
-          <Grid item>
-            <Box sx={{ m: 1 }}>Group</Box>
-            <Select
-              name="group"
-              label="Group"
-              formState={formState}
-              updateFormState={updateFormState}
-              getOptions={() => groups}
-            />
-          </Grid>
-          <Grid item>
-            <Box sx={{ m: 1, mt: 0 }}>Owner</Box>
-            <Select
-              name="owner"
-              label="Owner"
-              formState={formState}
-              updateFormState={updateFormState}
-              getOptions={() => agents}
-            />
-          </Grid>
-          <Grid item xs={12}>
-            <Box sx={{ m: 1, mt: 0 }}>State</Box>
-            <Select
-              name="state"
-              label="State"
-              formState={formState}
-              updateFormState={updateFormState}
-              getOptions={() => filteredStates}
-            />
-          </Grid>
-          <Grid
-            item
-            xs={12}
-            sx={{ display: pendingVisible ? "inherit" : "none" }}
-          >
-            <DatePicker
-              label="Pending Date"
-              value={new Date(formState.values.pendingTime)}
-              onChange={(newValue: any) => {
-                updateFormState("pendingDate", newValue.toISOString());
-              }}
-              slotProps={{ textField: { size: "small" } }}
-              sx={{
-                width: "100%",
-                backgroundColor: "white",
-              }}
-            />
-          </Grid>
-          <Grid item>
-            <Box sx={{ m: 1, mt: 0 }}>Priority</Box>
-            <Select
-              name="priority"
-              label="Priority"
-              formState={formState}
-              updateFormState={updateFormState}
-              getOptions={() => ticketPriorities}
-            />
-          </Grid>
-          <Grid item>
-            <Box sx={{ mb: 1 }}>Tags</Box>
-            <MuiChipsInput
-              sx={{ backgroundColor: "white", width: "100%" }}
-              value={formState.values.tags}
-              hideClearAll
-              onChange={(tags: any) => {
-                updateFormState("tags", tags);
-              }}
-              onDeleteChip={(tag: any) => {
-                const tags = formState.values.tags.filter(
-                  (t: any) => t !== tag,
-                );
-                updateFormState("tags", tags);
-              }}
-            />
-          </Grid>
-          <Grid item container direction="row-reverse">
-            <Grid item>
-              <Button
-                text="Save"
-                kind="primary"
-                onClick={updateTicket}
-                disabled={!hasChanges}
-              />
-            </Grid>
-          </Grid>
-        </Grid>
-      )}
-    </Box>
-  );
-};

apps/link/app/(main)/tickets/[id]/@edit/page.tsx

@@ -1,11 +0,0 @@
-import { TicketEdit } from "./_components/TicketEdit";
-
-type PageProps = {
-  params: {
-    id: string;
-  };
-};
-
-export default function Page({ params: { id } }: PageProps) {
-  return <TicketEdit id={id} />;
-}

apps/link/app/(main)/tickets/[id]/error.tsx

@@ -1,11 +0,0 @@
-"use client";
-
-import { DisplayError } from "app/_components/DisplayError";
-
-type PageProps = {
-  error: Error;
-};
-
-export default function Page({ error }: PageProps) {
-  return <DisplayError error={error} />;
-}

apps/link/app/(main)/tickets/[id]/layout.tsx

@@ -1,24 +0,0 @@
-"use client";
-
-import { Grid } from "@mui/material";
-
-type LayoutProps = {
-  detail: any;
-  edit: any;
-  params: {
-    id: string;
-  };
-};
-
-export default function Layout({ detail, edit, params: { id } }: LayoutProps) {
-  return (
-    <Grid container spacing={0} sx={{ height: "100vh" }} direction="row">
-      <Grid item sx={{ height: "100vh" }} xs={9}>
-        {detail}
-      </Grid>
-      <Grid item xs={3} sx={{ height: "100vh" }}>
-        {edit}
-      </Grid>
-    </Grid>
-  );
-}

apps/link/app/(main)/tickets/[id]/not-found.tsx

@@ -1,15 +0,0 @@
-"use client";
-
-import Link from "next/link";
-
-export default function Page() {
-  return (
-    <div>
-      <h2>Not Found</h2>
-      <p>Could not find requested resource</p>
-      <p>
-        View <Link href="/blog">all posts</Link>
-      </p>
-    </div>
-  );
-}

apps/link/app/_actions/groups.ts

@@ -1,6 +1,9 @@
 "use server";
 
 import { executeREST } from "app/_lib/zammad";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-groups');
 
 export const getGroupsAction = async () => {
   try {
@@ -15,7 +18,7 @@ export const getGroupsAction = async () => {
 
     return formattedGroups;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };

apps/link/app/_actions/overviews.ts

@@ -3,6 +3,9 @@
 import { executeGraphQL, executeREST } from "app/_lib/zammad";
 import { getTicketOverviewCountsQuery } from "app/_graphql/getTicketOverviewCountsQuery";
 import { getTicketsByOverviewQuery } from "app/_graphql/getTicketsByOverviewQuery";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-overviews');
 
 const overviewLookup = {
   Assigned: "My Assigned Tickets",
@@ -36,7 +39,7 @@ export const getOverviewTicketCountsAction = async () => {
 
     return counts;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {};
   }
 };
@@ -47,10 +50,10 @@ export const getOverviewTicketsAction = async (name: string) => {
   try {
     if (name === "Recent") {
       const recent = await executeREST({ path: "/api/v1/recent_view" });
-
+      const uniqueIDs = new Set(recent.map((rec: any) => rec.o_id));
-      for (const rec of recent) {
+      for (const id of uniqueIDs) {
         const tkt = await executeREST({
-          path: `/api/v1/tickets/${rec.o_id}`,
+          path: `/api/v1/tickets/${id}`,
         });
         tickets.push({
           ...tkt,
@@ -91,7 +94,7 @@ export const getOverviewTicketsAction = async (name: string) => {
 
     return { tickets: sortedTickets };
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return { tickets, message: e.message ?? "" };
   }
 };

apps/link/app/_actions/search.ts

@@ -1,6 +1,9 @@
 "use server";
 import { executeGraphQL } from "app/_lib/zammad";
 import { searchQuery } from "@/app/_graphql/searchQuery";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-search');
 
 export const searchAllAction = async (query: string, limit: number) => {
   try {
@@ -11,7 +14,7 @@ export const searchAllAction = async (query: string, limit: number) => {
 
     return result?.search;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };

apps/link/app/_actions/tickets.ts

@@ -1,12 +1,14 @@
 "use server";
 
-import { revalidatePath } from "next/cache";
 import { getTicketQuery } from "app/_graphql/getTicketQuery";
 import { getTicketArticlesQuery } from "app/_graphql/getTicketArticlesQuery";
 import { createTicketMutation } from "app/_graphql/createTicketMutation";
 import { updateTicketMutation } from "app/_graphql/updateTicketMutation";
 import { updateTagsMutation } from "app/_graphql/updateTagsMutation";
 import { executeGraphQL, executeREST } from "app/_lib/zammad";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-tickets');
 
 export const createTicketAction = async (
   currentState: any,
@@ -36,7 +38,7 @@ export const createTicketAction = async (
       success: true,
     };
   } catch (e: any) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {
       success: false,
       values: {},
@@ -63,7 +65,7 @@ export const createTicketArticleAction = async (
       success: true,
     };
   } catch (e: any) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {
       success: false,
       message: e?.message ?? "Unknown error",
@@ -75,7 +77,6 @@ export const updateTicketAction = async (
   ticketID: string,
   ticketInfo: Record<string, any>,
 ) => {
-  console.log({ ticketID, ticketInfo });
   try {
     const input = {};
     if (ticketInfo.state) {
@@ -117,7 +118,7 @@ export const updateTicketAction = async (
       success: true,
     };
   } catch (e: any) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {
       success: false,
       message: e?.message ?? "Unknown error",
@@ -134,7 +135,7 @@ export const getTicketAction = async (id: string) => {
 
     return ticketData?.ticket;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {};
   }
 };
@@ -148,7 +149,7 @@ export const getTicketArticlesAction = async (id: string) => {
 
     return ticketData?.ticketArticles;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return {};
   }
 };
@@ -158,16 +159,15 @@ export const getTicketStatesAction = async () => {
     const states = await executeREST({
       path: "/api/v1/ticket_states",
     });
-
     const formattedStates =
       states?.map((state: any) => ({
         value: `gid://zammad/Ticket::State/${state.id}`,
         label: state.name,
+        disabled: ["new", "merged", "removed"].includes(state.name),
       })) ?? [];
-
     return formattedStates;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };
@@ -180,7 +180,7 @@ export const getTagsAction = async () => {
 
     return tags;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };
@@ -199,7 +199,7 @@ export const getTicketPrioritiesAction = async () => {
 
     return formattedPriorities;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };

apps/link/app/_actions/users.ts

@@ -1,14 +1,20 @@
 "use server";
 
 import { executeREST } from "app/_lib/zammad";
+import { createLogger } from "@link-stack/logger";
 
-export const getAgentsAction = async () => {
+const logger = createLogger('link-users');
+
+export const getAgentsAction = async (groupID: number) => {
   try {
-    const users = await executeREST({
+    const group = await executeREST({
-      path: "/api/v1/users",
+      path: `/api/v1/groups/${groupID}`,
     });
+    const { user_ids: groupUserIDs } = group;
+    const path = `/api/v1/users/search?query=role_ids:2&limit=1000`;
+    const users = await executeREST({ path });
     const agents =
-      users?.filter((user: any) => user.role_ids.includes(2)) ?? [];
+      users?.filter((user: any) => groupUserIDs.includes(user.id)) ?? [];
     const formattedAgents = agents
       .map((agent: any) => ({
         label: `${agent.firstname} ${agent.lastname}`,
@@ -18,7 +24,7 @@ export const getAgentsAction = async () => {
 
     return formattedAgents;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };
@@ -39,7 +45,7 @@ export const getCustomersAction = async () => {
 
     return formattedCustomers;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };
@@ -49,7 +55,6 @@ export const getUsersAction = async () => {
     const users = await executeREST({
       path: "/api/v1/users",
     });
-    console.log({ users });
     const formattedUsers = users
       .map((customer: any) => ({
         label: customer.login,
@@ -59,7 +64,7 @@ export const getUsersAction = async () => {
 
     return formattedUsers;
   } catch (e) {
-    console.error(e.message);
+    logger.error({ error: e }, "Error occurred");
     return [];
   }
 };

apps/link/app/_components/MultiProvider.tsx

@@ -12,7 +12,7 @@ import { locales, LeafcutterProvider } from "@link-stack/leafcutter-ui";
 import { ZammadLoginProvider } from "./ZammadLoginProvider";
 
 LicenseInfo.setLicenseKey(
-  "c787ac6613c5f2aa0494c4285fe3e9f2Tz04OTY1NyxFPTE3NDYzNDE0ODkwMDAsUz1wcm8sTE09c3Vic2NyaXB0aW9uLEtWPTI=",
+  "2a7dd73ee59e3e028b96b0d2adee1ad8Tz0xMTMwOTUsRT0xNzc5MDYyMzk5MDAwLFM9cHJvLExNPXN1YnNjcmlwdGlvbixQVj1pbml0aWFsLEtWPTI=",
 );
 
 export const MultiProvider: FC<PropsWithChildren> = ({ children }) => {

apps/link/app/_components/ZammadLoginProvider.tsx

@@ -14,12 +14,12 @@ export const ZammadLoginProvider: FC<PropsWithChildren> = ({ children }) => {
         const response = await fetch("/api/v1/users/me", {
           method: "GET",
           headers: {
-            "X-Browser-Fingerprint": `${session.expires}`,
+            "X-Browser-Fingerprint": localStorage.getItem("fingerprint") || "",
           },
         });
 
         if (response.status !== 200) {
-          window.location.href = "/zammad/auth/sso";
+          window.location.href = "/link/login";
         } else {
           const token = response.headers.get("CSRF-Token");
           update({ zammadCsrfToken: token });

apps/link/app/_lib/authentication.ts

@@ -10,7 +10,11 @@ import {
 import Google from "next-auth/providers/google";
 import Credentials from "next-auth/providers/credentials";
 import Apple from "next-auth/providers/apple";
+import { Redis } from "ioredis";
 import AzureADProvider from "next-auth/providers/azure-ad";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-authentication');
 
 const headers = { Authorization: `Token ${process.env.ZAMMAD_API_TOKEN}` };
 
@@ -37,6 +41,9 @@ const fetchUser = async (email: string) => {
 const getUserRoles = async (email: string) => {
   try {
     const user = await fetchUser(email);
+    if (!user) {
+      return [];
+    }
     const allRoles = await fetchRoles();
     const roles = user.role_ids.map((roleID: number) => {
       const role = allRoles[roleID];
@@ -44,7 +51,7 @@ const getUserRoles = async (email: string) => {
     });
     return roles.filter((role: string) => role !== null);
   } catch (e) {
-    console.log({ e });
+    logger.error({ error: e, email }, 'Failed to get user roles');
     return [];
   }
 };
@@ -117,11 +124,14 @@ if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
 
 export const authOptions: NextAuthOptions = {
   pages: {
-    signIn: "/login",
+    signIn: "/link/login",
-    error: "/login",
+    error: "/link/login",
-    signOut: "/logout",
+    signOut: "/link/logout",
   },
   providers,
+  session: {
+    maxAge: 3 * 24 * 60 * 60,
+  },
   secret: process.env.NEXTAUTH_SECRET,
   callbacks: {
     signIn: async ({ user }) => {
@@ -129,6 +139,11 @@ export const authOptions: NextAuthOptions = {
       return roles.includes("admin") || roles.includes("agent");
     },
     session: async ({ session, token }) => {
+      // const redis = new Redis(process.env.REDIS_URL);
+      // const isInvalidated = await redis.get(`invalidated:${token.sub}`);
+      // if (isInvalidated) {
+      //  return null;
+      // }
       // @ts-ignore
       session.user.roles = token.roles ?? [];
       // @ts-ignore

apps/link/app/_lib/utils.ts

@@ -1,3 +1,7 @@
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-utils');
+
 export const fetchLeafcutter = async (url: string, options: any) => {
   /*
 
@@ -13,21 +17,18 @@ export const fetchLeafcutter = async (url: string, options: any) => {
       const json = await res.json();
       return json;
     } catch (error) {
-      console.log({ error });
+      logger.error({ error }, "Error occurred");
       return null;
     }
   };
 
   const data = await fetchData(url, options);
-  console.log({ data });
 
   if (!data) {
     const csrfURL = `${process.env.NEXT_PUBLIC_LEAFCUTTER_URL}/api/auth/csrf`;
     const csrfData = await fetchData(csrfURL, {});
-    console.log({ csrfData });
     const authURL = `${process.env.NEXT_PUBLIC_LEAFCUTTER_URL}/api/auth/callback/credentials`;
     const authData = await fetchData(authURL, { method: "POST" });
-    console.log({ authData });
     if (!authData) {
       return null;
     } else {
@@ -37,5 +38,3 @@ export const fetchLeafcutter = async (url: string, options: any) => {
     return data;
   }
 };
-
-

apps/link/app/_lib/zammad.ts

@@ -2,12 +2,11 @@ import { getServerSession } from "app/_lib/authentication";
 import { cookies } from "next/headers";
 
 const getHeaders = async () => {
-  const allCookies = cookies().getAll();
+  const allCookies = (await cookies()).getAll();
   const session = await getServerSession();
-  const headers = {
+  const finalHeaders = {
     "Content-Type": "application/json",
     Accept: "application/json",
-    "X-Browser-Fingerprint": `${session.expires}`,
     // @ts-ignore
     "X-CSRF-Token": session.user.zammadCsrfToken,
     Cookie: allCookies
@@ -15,7 +14,7 @@ const getHeaders = async () => {
       .join("; "),
   };
 
-  return headers;
+  return finalHeaders;
 };
 
 interface ExecuteGraphQLOptions {

apps/link/app/api/logout/route.ts

@@ -0,0 +1,38 @@
+import { NextRequest, NextResponse } from "next/server";
+import { Redis } from "ioredis";
+import { getToken } from "next-auth/jwt";
+
+export async function POST(request: NextRequest) {
+  const token = await getToken({
+    req: request,
+    secret: process.env.NEXTAUTH_SECRET,
+  });
+  const allCookies = request.cookies.getAll();
+  const zammadURL = process.env.ZAMMAD_URL ?? "http://zammad-nginx:8080";
+  const signOutURL = `${zammadURL}/api/v1/signout`;
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    Cookie: allCookies
+      .map((cookie) => `${cookie.name}=${cookie.value}`)
+      .join("; "),
+  };
+
+  await fetch(signOutURL, { headers });
+
+  const cookiePrefixesToRemove = ["_zammad"];
+  const response = NextResponse.json({ message: "ok" });
+
+  for (const cookie of allCookies) {
+    if (
+      cookiePrefixesToRemove.some((prefix) => cookie.name.startsWith(prefix))
+    ) {
+      response.cookies.set(cookie.name, "", { path: "/", maxAge: 0 });
+    }
+  }
+
+  const redis = new Redis(process.env.REDIS_URL);
+  await redis.setex(`invalidated:${token.sub}`, 24 * 60 * 60, "1");
+
+  return response;
+}

apps/link/middleware.ts

@@ -1,21 +1,30 @@
 import { NextResponse } from "next/server";
 import { withAuth, NextRequestWithAuth } from "next-auth/middleware";
+import { createLogger } from "@link-stack/logger";
+
+const logger = createLogger('link-middleware');
 
-/*
 const rewriteURL = (
   request: NextRequestWithAuth,
   originBaseURL: string,
   destinationBaseURL: string,
   headers: any = {},
 ) => {
+  logger.debug({
+    originBaseURL,
+    destinationBaseURL,
+    headerKeys: Object.keys(headers)
+  }, "Rewriting URL");
   let path = request.url.replace(originBaseURL, "");
   if (path.startsWith("/")) {
     path = path.slice(1);
   }
   const destinationURL = `${destinationBaseURL}/${path}`;
-  console.log(`Rewriting ${request.url} to ${destinationURL}`);
+  logger.debug({ from: request.url, to: destinationURL }, "URL rewrite");
   const requestHeaders = new Headers(request.headers);
+
   requestHeaders.delete("x-forwarded-user");
+  requestHeaders.delete("x-forwarded-roles");
   requestHeaders.delete("connection");
 
   for (const [key, value] of Object.entries(headers)) {
@@ -26,17 +35,36 @@ const rewriteURL = (
     request: { headers: requestHeaders },
   });
 };
- */
+
 const checkRewrites = async (request: NextRequestWithAuth) => {
-  // const linkBaseURL = process.env.LINK_URL ?? "http://localhost:3000";
+  const linkBaseURL = process.env.LINK_URL ?? "http://localhost:3000";
+  logger.debug({ linkBaseURL }, "Link base URL");
+  const opensearchBaseURL =
+    process.env.OPENSEARCH_DASHBOARDS_URL ??
+    "http://opensearch-dashboards:5601";
+
   const { token } = request.nextauth;
   const email = token?.email?.toLowerCase() ?? "unknown";
-  // let headers = { "x-forwarded-user": email };
+  const roles = (token?.roles as string[]) ?? [];
+  let headers = {
+    "x-forwarded-user": email,
+    "x-forwarded-roles": roles.join(","),
+  };
+
+  if (request.nextUrl.pathname.startsWith("/dashboards")) {
+    return rewriteURL(
+      request,
+      `${linkBaseURL}/dashboards`,
+      opensearchBaseURL,
+      headers,
+    );
+  }
 
   const isDev = process.env.NODE_ENV === "development";
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
   const cspHeader = `
     default-src 'self';
+    frame-src 'self' https://digiresilience.org;
     connect-src 'self';
     script-src 'self' 'nonce-${nonce}' 'strict-dynamic' ${isDev ? "'unsafe-eval'" : ""};
     style-src 'self' 'unsafe-inline';
@@ -45,7 +73,7 @@ const checkRewrites = async (request: NextRequestWithAuth) => {
     object-src 'none';
     base-uri 'self';
     form-action 'self';
-    frame-ancestors 'none';
+    frame-ancestors 'self';
     upgrade-insecure-requests;
 `;
   const contentSecurityPolicyHeaderValue = cspHeader
@@ -71,7 +99,7 @@ const checkRewrites = async (request: NextRequestWithAuth) => {
   );
 
   return response;
-};
+}
 
 export default withAuth(checkRewrites, {
   callbacks: {
@@ -101,5 +129,7 @@ export default withAuth(checkRewrites, {
 });
 
 export const config = {
-  matcher: ["/((?!ws|wss|api|_next/static|_next/image|favicon.ico).*)"],
+  matcher: [
-};
+    "/((?!ws|wss|api/signal|api/whatsapp|_next/static|_next/image|favicon.ico).*)",
+  ],
+}

apps/link/next-env.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
+/// <reference path="./.next/types/routes.d.ts" />
 
 // NOTE: This file should not be edited
-// see https://nextjs.org/docs/app/building-your-application/configuring/typescript for more information.
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.