feat: adding e2e tests for launching agent.

This reverts commit b28bb44f97.

.env.e2e

@@ -0,0 +1,41 @@
+PROJECT_URL=http://localhost:8887
+
+E2E_NOTIFICATION_SMTP_HOST="smtp.lunaris-mail.test"
+E2E_NOTIFICATION_SMTP_PORT="587"
+E2E_NOTIFICATION_SMTP_USER="e2e_user_7f9a2c"
+E2E_NOTIFICATION_SMTP_PASSWORD="uR8vK3mZpQ92xTnB"
+E2E_NOTIFICATION_SMTP_FROM="e2e-sender@lunaris-mail.test"
+E2E_NOTIFICATION_SMTP_TO="e2e-recipient@lunaris-mail.test"
+E2E_NOTIFICATION_SLACK_WEBHOOK="https://hooks.slack.com/services/T00000000/B00000000/AbCdEfGhIjKlMnOpQrStUvWx"
+E2E_NOTIFICATION_DISCORD_WEBHOOK="https://discord.com/api/webhooks/123456789012345678/qtY8xKpLmN4vBzR6sWdE9uHaC3fGjT2"
+E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN="7352198460:AAHkLm9vPqR2sTuVwXyZ1234567890abcd"
+E2E_NOTIFICATION_TELEGRAM_CHAT_ID="-1002847391826"
+E2E_NOTIFICATION_TELEGRAM_TOPIC_ID="42"
+E2E_NOTIFICATION_GOTIFY_SERVER_URL="https://gotify-e2e.lunaris.test"
+E2E_NOTIFICATION_GOTIFY_APP_TOKEN="gfy_8a92f3c1d7e64b0aa51c"
+E2E_NOTIFICATION_NTFY_TOPIC="e2e-alerts-7f9a2c"
+E2E_NOTIFICATION_NTFY_SERVER_URL="https://ntfy.sh"
+E2E_NOTIFICATION_NTFY_TOKEN="tk_e2e_9c7f4a1b6d2e8f0"
+E2E_NOTIFICATION_NTFY_USERNAME="ntfy_e2e_user"
+E2E_NOTIFICATION_NTFY_PASSWORD="NtFyP4ss_8rQ2zLm"
+E2E_NOTIFICATION_WEBHOOK_URL="https://webhook-e2e.lunaris.test/notify"
+E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER="X-E2E-Signature"
+E2E_NOTIFICATION_WEBHOOK_SECRET="whsec_2f8a9c4e71b6d3a0"
+
+E2E_STORAGE_AWS_S3_ENDPOINT_URL="https://s3.eu-west-3.amazonaws.com"
+E2E_STORAGE_AWS_S3_REGION="eu-west-3"
+E2E_STORAGE_AWS_S3_ACCESS_KEY="AKIAE2E7F9A2C4D6B8QX"
+E2E_STORAGE_AWS_S3_SECRET_KEY="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
+E2E_STORAGE_AWS_S3_BUCKET_NAME="e2e-bucket-7f9a2c"
+E2E_STORAGE_AWS_S3_PORT="443"
+
+E2E_STORAGE_R2_ENDPOINT_URL="https://7f9a2c4d6b8q.r2.cloudflarestorage.com"
+E2E_STORAGE_R2_REGION="auto"
+E2E_STORAGE_R2_ACCESS_KEY="R2E2E7F9A2C4D6B8QX"
+E2E_STORAGE_R2_SECRET_KEY="r2sec_8vK3mZpQ92xTnBuR4sWdE9uHaC3fGjT2"
+E2E_STORAGE_R2_BUCKET_NAME="r2-e2e-bucket-7f9a2c"
+E2E_STORAGE_R2_PORT="443"
+
+E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID="735219846012-e2e7f9a2c4d6b8q.apps.googleusercontent.com"
+E2E_STORAGE_GOOGLE_DRIVE_CLIENT_SECRET="GOCSPX-e2e_8vK3mZpQ92xTnBuR4sWd"
+E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID="1E2e7F9a2C4d6B8qXzLmNoPqRsTuVwXyZ"

.env.example

@@ -1,6 +1,12 @@
 # Environment
 NODE_ENV=development
 
+# Logging
+# Controls minimum log level. Options: debug | info | warn | error
+# Set to "warn" or "error" in production to suppress health-check ping noise.
+# Use "debug" to see all request logs including agent status pings.
+LOG_LEVEL=info
+
 # Database
 DATABASE_URL=postgresql://devuser:changeme@localhost:5433/devdb?schema=public
 
@@ -39,7 +45,6 @@ AUTH_OIDC_ROLE_MAP=""
 AUTH_ALLOW_LINKING=true
 AUTH_ALLOW_UNLINKING=true
 
-
 # Social OAuth2 Authentification
 AUTH_SOCIAL_ID=""
 AUTH_SOCIAL_TITLE=""
@@ -58,3 +63,5 @@ AUTH_PASSKEY_ENABLED=true
 
 # Retention
 RETENTION_CRON="* * * * *"
+
+TRUSTED_DOMAINS="http://localhost:8887, http://localhost:3055, http://localhost:3056, http://localhost:3057"

.github/workflows/e2e.yml

@@ -7,6 +7,7 @@ on:
 jobs:
   build-and-test:
     runs-on: ubuntu-latest
+    if: github.event.pull_request.head.repo.full_name == github.repository
 
     steps:
       - uses: actions/checkout@v4
@@ -32,19 +33,64 @@ jobs:
           load: true
           tags: portabase/portabase:test
 
-      - name: Run app container
+      - name: Create shared Docker network
         run: |
-          docker run -d --name myapp \
-            -p 8887:80 \
-            -e NODE_ENV=production \
-            -e PROJECT_URL=http://localhost:8887 \
-            -e PROJECT_SECRET=80af5e4c875dfded3a6ba511c6ed8b0160cad723f848ee0851403ed6141f6ba1 \
-            portabase/portabase:test
+          docker network inspect portabase >/dev/null 2>&1 || \
+            docker network create portabase
+
+      - name: Seed OIDC services
+        run: make seed-auth
+
+      - name: Wait for OIDC providers
+        run: |
+          for i in {1..60}; do
+            if curl -fsS http://localhost:3056/realms/master/.well-known/openid-configuration >/dev/null; then
+              echo "Keycloak is ready"
+              break
+            fi
+            if [ "$i" -eq 60 ]; then
+              echo "Timeout: Keycloak never became ready"
+              docker compose -f docker-compose.oidc.yml logs
+              exit 1
+            fi
+            echo "Waiting for Keycloak... ($i/60)"
+            sleep 2
+          done
+
+          for i in {1..60}; do
+            if curl -fsS http://localhost:3055/healthz >/dev/null; then
+              echo "Pocket ID is ready"
+              break
+            fi
+            if [ "$i" -eq 60 ]; then
+              echo "Timeout: Pocket ID never became ready"
+              docker compose -f docker-compose.oidc.yml logs
+              exit 1
+            fi
+            echo "Waiting for Pocket ID... ($i/60)"
+            sleep 2
+          done
+
+          for i in {1..60}; do
+            if curl -fsS http://localhost:3057/application/o/portabase/.well-known/openid-configuration >/dev/null; then
+              echo "Authentik is ready"
+              break
+            fi
+            if [ "$i" -eq 60 ]; then
+              echo "Timeout: Authentik never became ready"
+              docker compose -f docker-compose.oidc.yml logs
+              exit 1
+            fi
+            echo "Waiting for Authentik... ($i/60)"
+            sleep 2
+          done
+
+      - name: Start E2E app stack
+        run: docker compose -f docker-compose.prod.yml up -d --no-build
 
       - name: Wait for app port to be listening
         run: |
           for i in {1..40}; do
-          
             if curl -fsS http://localhost:8887/ >/dev/null; then
               echo "App is responding on port 8887"
               exit 0
@@ -53,16 +99,55 @@ jobs:
             sleep 2
           done
           echo "Timeout: app never became ready"
-          docker logs myapp
+          docker compose -f docker-compose.prod.yml logs
           exit 1
 
       - name: Install Playwright browsers
-        run: pnpm exec playwright install --with-deps chromium firefox webkit
+        run: pnpm exec playwright install --with-deps chromium
 
       - name: Run Playwright tests
-        run: pnpm exec playwright test --project chromium
+        run: pnpm exec playwright test
         env:
           PROJECT_URL: http://localhost:8887
+          # E2E Notification
+          E2E_NOTIFICATION_SMTP_HOST: ${{ secrets.E2E_NOTIFICATION_SMTP_HOST }}
+          E2E_NOTIFICATION_SMTP_PORT: ${{ secrets.E2E_NOTIFICATION_SMTP_PORT }}
+          E2E_NOTIFICATION_SMTP_USER: ${{ secrets.E2E_NOTIFICATION_SMTP_USER }}
+          E2E_NOTIFICATION_SMTP_PASSWORD: ${{ secrets.E2E_NOTIFICATION_SMTP_PASSWORD }}
+          E2E_NOTIFICATION_SMTP_FROM: ${{ secrets.E2E_NOTIFICATION_SMTP_FROM }}
+          E2E_NOTIFICATION_SMTP_TO: ${{ secrets.E2E_NOTIFICATION_SMTP_TO }}
+          E2E_NOTIFICATION_SLACK_WEBHOOK: ${{ secrets.E2E_NOTIFICATION_SLACK_WEBHOOK }}
+          E2E_NOTIFICATION_DISCORD_WEBHOOK: ${{ secrets.E2E_NOTIFICATION_DISCORD_WEBHOOK }}
+          E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN: ${{ secrets.E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN }}
+          E2E_NOTIFICATION_TELEGRAM_CHAT_ID: ${{ secrets.E2E_NOTIFICATION_TELEGRAM_CHAT_ID }}
+          E2E_NOTIFICATION_TELEGRAM_TOPIC_ID: ${{ secrets.E2E_NOTIFICATION_TELEGRAM_TOPIC_ID }}
+          E2E_NOTIFICATION_GOTIFY_SERVER_URL: ${{ secrets.E2E_NOTIFICATION_GOTIFY_SERVER_URL }}
+          E2E_NOTIFICATION_GOTIFY_APP_TOKEN: ${{ secrets.E2E_NOTIFICATION_GOTIFY_APP_TOKEN }}
+          E2E_NOTIFICATION_NTFY_TOPIC: ${{ secrets.E2E_NOTIFICATION_NTFY_TOPIC }}
+          E2E_NOTIFICATION_NTFY_SERVER_URL: ${{ secrets.E2E_NOTIFICATION_NTFY_SERVER_URL }}
+          E2E_NOTIFICATION_NTFY_TOKEN: ${{ secrets.E2E_NOTIFICATION_NTFY_TOKEN }}
+          E2E_NOTIFICATION_NTFY_USERNAME: ${{ secrets.E2E_NOTIFICATION_NTFY_USERNAME }}
+          E2E_NOTIFICATION_NTFY_PASSWORD: ${{ secrets.E2E_NOTIFICATION_NTFY_PASSWORD }}
+          E2E_NOTIFICATION_WEBHOOK_URL: ${{ secrets.E2E_NOTIFICATION_WEBHOOK_URL }}
+          E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER: ${{ secrets.E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER }}
+          E2E_NOTIFICATION_WEBHOOK_SECRET: ${{ secrets.E2E_NOTIFICATION_WEBHOOK_SECRET }}
+
+          # E2E Storage
+          E2E_STORAGE_AWS_S3_ENDPOINT_URL: ${{ secrets.E2E_STORAGE_AWS_S3_ENDPOINT_URL }}
+          E2E_STORAGE_AWS_S3_REGION: ${{ secrets.E2E_STORAGE_AWS_S3_REGION }}
+          E2E_STORAGE_AWS_S3_ACCESS_KEY: ${{ secrets.E2E_STORAGE_AWS_S3_ACCESS_KEY }}
+          E2E_STORAGE_AWS_S3_SECRET_KEY: ${{ secrets.E2E_STORAGE_AWS_S3_SECRET_KEY }}
+          E2E_STORAGE_AWS_S3_BUCKET_NAME: ${{ secrets.E2E_STORAGE_AWS_S3_BUCKET_NAME }}
+          E2E_STORAGE_AWS_S3_PORT: ${{ secrets.E2E_STORAGE_AWS_S3_PORT }}
+          E2E_STORAGE_R2_ENDPOINT_URL: ${{ secrets.E2E_STORAGE_R2_ENDPOINT_URL }}
+          E2E_STORAGE_R2_REGION: ${{ secrets.E2E_STORAGE_R2_REGION }}
+          E2E_STORAGE_R2_ACCESS_KEY: ${{ secrets.E2E_STORAGE_R2_ACCESS_KEY }}
+          E2E_STORAGE_R2_SECRET_KEY: ${{ secrets.E2E_STORAGE_R2_SECRET_KEY }}
+          E2E_STORAGE_R2_BUCKET_NAME: ${{ secrets.E2E_STORAGE_R2_BUCKET_NAME }}
+          E2E_STORAGE_R2_PORT: ${{ secrets.E2E_STORAGE_R2_PORT }}
+          E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID: ${{ secrets.E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID }}
+          E2E_STORAGE_GOOGLE_DRIVE_CLIENT_SECRET: ${{ secrets.E2E_STORAGE_GOOGLE_DRIVE_CLIENT_SECRET }}
+          E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID: ${{ secrets.E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID }}
 
       - name: Upload report if failed
         if: failure()
@@ -74,4 +159,6 @@ jobs:
 
       - name: Cleanup
         if: always()
-        run: docker stop myapp && docker rm myapp || true
+        run: |
+          docker compose -f docker-compose.prod.yml down --volumes || true
+          docker compose -f docker-compose.oidc.yml down --volumes || true

.github/workflows/release.yml

@@ -1,7 +1,7 @@
 name: Auto Release & Publish
 
 on:
-  pull_request:
+  pull_request_target:
     types: [ closed ]
     branches:
       - main

.github/workflows/security.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: aquasecurity/trivy-action@0.35.0
+      - uses: aquasecurity/trivy-action@v0.35.0
         with:
           scan-type: 'fs'
           format: 'table'

.gitignore

@@ -54,3 +54,9 @@ certificates
 /blob-report/
 /playwright/.cache/
 /playwright/.auth/
+/e2e/local-storage.json
+
+.claude
+.codex
+/docs
+.worktrees

CITATION.cff

@@ -21,6 +21,8 @@ keywords:
   - backups
   - postgresql
   - mysql
+  - firebird
+  - mssql
   - mariadb
   - devops
   - database
@@ -31,5 +33,5 @@ keywords:
   - web-ui
   - agent
 license: Apache-2.0
-version: 1.9.1
+version: 1.15.0
 date-released: '2026-03-02'

Makefile

@@ -5,44 +5,73 @@ up:
 
 seed-keycloak:
 	@[ $$(ls -1 seeds/keycloak/*.json 2>/dev/null | wc -l) -gt 0 ] || (echo "No realm export found in seeds/keycloak. Add an export from Keycloak first."; exit 1)
-	@docker compose -f docker-compose.func.yml stop keycloak >/dev/null 2>&1 || true
-	@docker compose -f docker-compose.func.yml rm -f -s keycloak >/dev/null 2>&1 || true
-	@docker volume rm portabase-dev-func_keycloak-data >/dev/null 2>&1 || true
-	@docker compose -f docker-compose.func.yml up -d keycloak
+	@docker compose -f docker-compose.oidc.yml stop keycloak >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml rm -f -s keycloak >/dev/null 2>&1 || true
+	@docker volume rm portabase-oidc_keycloak-data >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml up -d keycloak
 	@echo "Keycloak seed import triggered from seeds/keycloak/*.json"
 
 seed-pocket:
 	@[ -f seeds/pocket-id/portabase.zip ] || (echo "No export found in seeds/pocket-id. Add an export from Pocket ID first."; exit 1)
-	@docker compose -f docker-compose.func.yml stop pocket-id >/dev/null 2>&1 || true
-	@docker compose -f docker-compose.func.yml rm -f -s pocket-id >/dev/null 2>&1 || true
-	@docker volume rm portabase-dev-func_pocket-id-data >/dev/null 2>&1 || true
-	@docker compose -f docker-compose.func.yml run --rm -v ./seeds/pocket-id/portabase.zip:/tmp/portabase.zip pocket-id ./pocket-id import --yes --path /tmp/portabase.zip >/dev/null
-	@docker compose -f docker-compose.func.yml up -d pocket-id
+	@docker compose -f docker-compose.oidc.yml stop pocket-id >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml rm -f -s pocket-id >/dev/null 2>&1 || true
+	@docker volume rm portabase-oidc_pocket-id-data >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml run --rm -v $$(pwd)/seeds/pocket-id/portabase.zip:/tmp/portabase.zip pocket-id ./pocket-id import --yes --path /tmp/portabase.zip >/dev/null
+	@docker compose -f docker-compose.oidc.yml up -d pocket-id
 	@sleep 2
-	@docker compose -f docker-compose.func.yml exec pocket-id ./pocket-id one-time-access-token admin
+	@docker compose -f docker-compose.oidc.yml exec pocket-id ./pocket-id one-time-access-token admin
 	@echo "Pocket ID data restored from seeds/pocket-id/portabase.zip"
 
-seed-auth: seed-keycloak seed-pocket
+seed-authentik:
+	@docker compose -f docker-compose.oidc.yml stop authentik-postgresql authentik-server authentik-worker >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml rm -f -s authentik-postgresql authentik-server authentik-worker >/dev/null 2>&1 || true
+	@docker volume rm portabase-oidc_authentik-data >/dev/null 2>&1 || true
+	@docker compose -f docker-compose.oidc.yml up -d authentik-postgresql authentik-server authentik-worker
+	@docker compose -f docker-compose.oidc.yml run --rm authentik-bootstrap
+	@echo "Authentik seed/bootstrap completed"
+
+seed-auth: seed-keycloak seed-pocket seed-authentik
 
 pocket-token:
-	@docker compose -f docker-compose.func.yml exec pocket-id ./pocket-id one-time-access-token admin
+	@docker compose -f docker-compose.oidc.yml exec pocket-id ./pocket-id one-time-access-token admin
 
 export-pocket:
 	@echo "Exporting Pocket ID data to seeds/pocket-id/portabase.zip..."
 	@mkdir -p ./seeds/pocket-id
-	@docker compose -f docker-compose.func.yml exec pocket-id ./pocket-id export --path /tmp/portabase-export.zip
-	@docker compose -f docker-compose.func.yml cp pocket-id:/tmp/portabase-export.zip ./seeds/pocket-id/portabase.zip
-	@docker compose -f docker-compose.func.yml exec pocket-id rm /tmp/portabase-export.zip
+	@docker compose -f docker-compose.oidc.yml exec pocket-id ./pocket-id export --path /tmp/portabase-export.zip
+	@docker compose -f docker-compose.oidc.yml cp pocket-id:/tmp/portabase-export.zip ./seeds/pocket-id/portabase.zip
+	@docker compose -f docker-compose.oidc.yml exec pocket-id rm /tmp/portabase-export.zip
 	@echo "Pocket ID data exported to seeds/pocket-id/portabase.zip"
 
 export-keycloak:
 	@echo "Exporting Keycloak configuration and users to seeds/keycloak/*.json..."
 	@mkdir -p ./seeds/keycloak
 	@rm -f ./seeds/keycloak/*.json
-	@docker compose -f docker-compose.func.yml stop keycloak >/dev/null 2>&1
+	@docker compose -f docker-compose.oidc.yml stop keycloak >/dev/null 2>&1
 	@docker rm -f kc-exporter >/dev/null 2>&1 || true
-	@docker compose -f docker-compose.func.yml run --name kc-exporter keycloak export --dir /tmp/kc-export --users realm_file
+	@docker compose -f docker-compose.oidc.yml run --name kc-exporter keycloak export --dir /tmp/kc-export --users realm_file
 	@docker cp kc-exporter:/tmp/kc-export/. ./seeds/keycloak/
 	@docker rm -f kc-exporter >/dev/null 2>&1
-	@docker compose -f docker-compose.func.yml start keycloak >/dev/null 2>&1
+	@docker compose -f docker-compose.oidc.yml start keycloak >/dev/null 2>&1
 	@echo "Keycloak configuration and users exported to seeds/keycloak/*.json"
+
+e2e-auto:
+	@echo "Starting E2E testing..."
+	@docker network inspect portabase >/dev/null 2>&1 || docker network create portabase
+	@$(MAKE) seed-auth
+	@docker compose -f docker-compose.prod.yml up -d
+	@CI=true PROJECT_URL=http://localhost:8887 pnpm playwright test --project=chromium || (docker compose -f docker-compose.prod.yml down --volumes && docker compose -f docker-compose.oidc.yml down --volumes && exit 1)
+	@docker compose -f docker-compose.prod.yml down --volumes
+	@docker compose -f docker-compose.oidc.yml down --volumes
+	@echo "Finished E2E testing successfully."
+
+e2e-manual:
+	@echo "Starting E2E testing..."
+	@docker network inspect portabase >/dev/null 2>&1 || docker network create portabase
+	@docker compose -f e2e/helpers/agent/docker-compose.database.yml up -d
+	@$(MAKE) seed-auth
+	@docker compose -f docker-compose.prod.yml up -d
+	@pnpm playwright test --ui || (docker compose -f docker-compose.prod.yml down --volumes && docker compose -f docker-compose.oidc.yml down --volumes && exit 1)
+	@docker compose -f docker-compose.prod.yml down --volumes
+	@docker compose -f docker-compose.oidc.yml down --volumes
+	@echo "Finished E2E testing successfully."

README.md

@@ -13,6 +13,7 @@
 
 [![License: Apache](https://img.shields.io/badge/License-apache-yellow.svg)](LICENSE)
 [![Docker Pulls](https://img.shields.io/docker/pulls/portabase/portabase?color=brightgreen)](https://hub.docker.com/r/portabase/portabase)
+[![Helm Chart](https://img.shields.io/badge/Helm-Kubernetes-326ce5?logo=helm&logoColor=white)](https://github.com/Portabase/portabase/pkgs/container/charts%2Fportabase)
 [![Platform](https://img.shields.io/badge/platform-linux%20%7C%20macos%20%7C%20windows-lightgrey)](https://github.com/Portabase/portabase)
 [![Support Portabase](https://img.shields.io/badge/Support-Portabase-orange)](https://www.buymeacoffee.com/portabase)
 
@@ -21,8 +22,11 @@
 [![MariaDB](https://img.shields.io/badge/MariaDB-003545?logo=mariadb&logoColor=white)](https://mariadb.org/)
 [![SQLite](https://img.shields.io/badge/-SQLite-blue?logo=sqlite&logoColor=white)](https://sqlite.org/)
 [![Redis](https://img.shields.io/badge/Redis-DC382D?style=flat&logo=Redis&logoColor=white)](https://redis.io/)
-[![Valkey](https://img.shields.io/badge/Valkey-6284fc?style=flat&logo=Valkey&logoColor=white)](https://valkey.io/)
 [![MongoDB](https://img.shields.io/badge/-MongoDB-13aa52?logo=mongodb&logoColor=white)](https://www.mongodb.com/)
+[![Valkey](https://img.shields.io/badge/Valkey-6284fc?style=flat&logo=Valkey&logoColor=white)](https://valkey.io/)
+[![Firebird](https://img.shields.io/badge/Firebird-f55b14?style=flat&logo=Firebird&logoColor=white)](https://firebirdsql.org/)
+[![Microsoft SQL Server](https://img.shields.io/badge/Microsoft%20SQL%20Server-CC2927?style=flat&logo=microsoftsqlserver&logoColor=white)](https://www.microsoft.com/en-us/sql-server)
+
 [![Self Hosted](https://img.shields.io/badge/self--hosted-yes-brightgreen)](https://github.com/Portabase/portabase)
 [![Open Source](https://img.shields.io/badge/open%20source-❤️-red)](https://github.com/Portabase/portabase)
 
@@ -62,16 +66,17 @@ You have 4 ways to install Portabase:
 
 ## Supported databases
 
-| Engine             | Support   | Supported Versions                | Restore |
-|:-------------------|:----------|:----------------------------------|:--------|
-| **PostgreSQL**     | ✅ Stable  | 12, 13, 14, 15, 16, 17 et 18      | Yes     |
-| **MySQL**          | ✅ Stable  | 5.7, 8 et 9                       | Yes     |
-| **MariaDB**        | ✅ Stable  | 10 et 11                          | Yes     |
-| **MongoDB**        | ✅ Stable  | 4, 5, 6, 7 et 8                   | Yes     |
-| **SQLite**         | ✅ Stable  | 3.x                               | Yes     |
-| **Redis**          | ✅ Stable  | 2.8+                              | No      |
-| **Valkey**         | ✅ Stable  | 7.2+                              | No      |
-| **MSSQL Server**   | ❌ Ongoing | -                                 | Yes     |
+| Engine             | Support   | Supported Versions            | Restore |
+|:-------------------|:----------|:------------------------------|:--------|
+| **PostgreSQL**     | ✅ Stable  | 12, 13, 14, 15, 16, 17 and 18 | Yes     |
+| **MySQL**          | ✅ Stable  | 5.7, 8 and 9                  | Yes     |
+| **MariaDB**        | ✅ Stable  | 10 and 11                     | Yes     |
+| **MongoDB**        | ✅ Stable  | 4, 5, 6, 7 and 8              | Yes     |
+| **SQLite**         | ✅ Stable  | 3.x                           | Yes     |
+| **Redis**          | ✅ Stable  | 2.8+                          | No      |
+| **Valkey**         | ✅ Stable  | 7.2+                          | No      |
+| **Firebird**       | ✅ Stable  | 3.0, 4.0, 5.0                 | Yes     |
+| **MSSQL Server**   | ✅ Stable  | 2017, 2019, 2022, Azure SQL         | Yes     |
 
 See the [Database Servers documentation](https://portabase.io/docs/agent/db) for version-specific backup and restore details.
 

app/(customer)/dashboard/(admin)/admin/settings/page.tsx

@@ -1,6 +1,7 @@
 import {PageParams} from "@/types/next";
 import {Page, PageContent, PageHeader, PageTitle} from "@/features/layout/page";
 import {db} from "@/db";
+import {logger} from "@/lib/logger";
 import {notFound} from "next/navigation";
 import {SettingsTabs} from "@/components/wrappers/dashboard/admin/settings/settings-tabs";
 import {desc, isNull} from "drizzle-orm";
@@ -8,13 +9,15 @@ import * as drizzleDb from "@/db";
 import {StorageChannelWith} from "@/db/schema/12_storage-channel";
 import {NotificationChannelWith} from "@/db/schema/09_notification-channel";
 
+const log = logger.child({module: "dashboard/admin/settings"});
+
 export default async function RoutePage(props: PageParams<{}>) {
 
     const settings = await db.query.setting.findFirst({
         where: (fields, {eq}) => eq(fields.name, "system"),
     });
 
-    console.log(settings)
+    log.debug({settings}, "Settings loaded");
 
     const storageChannels = await db.query.storageChannel.findMany({
         with: {
@@ -33,7 +36,7 @@ export default async function RoutePage(props: PageParams<{}>) {
     }) as NotificationChannelWith[]
 
 
-    if (!settings || !storageChannels || !notificationChannels ) {
+    if (!settings || !storageChannels || !notificationChannels) {
         notFound()
     }
 
@@ -45,7 +48,8 @@ export default async function RoutePage(props: PageParams<{}>) {
                 </div>
             </PageHeader>
             <PageContent className="flex flex-col gap-5">
-                <SettingsTabs storageChannels={storageChannels} notificationChannels={notificationChannels} settings={settings} />
+                <SettingsTabs storageChannels={storageChannels} notificationChannels={notificationChannels}
+                              settings={settings}/>
             </PageContent>
         </Page>
     );

app/(customer)/dashboard/(admin)/agents/[agentId]/page.tsx

@@ -7,7 +7,7 @@ import {
 } from "@/features/layout/page";
 import { db } from "@/db";
 import * as drizzleDb from "@/db";
-import { eq } from "drizzle-orm";
+import {eq, isNull} from "drizzle-orm";
 import { notFound } from "next/navigation";
 import { ButtonDeleteAgent } from "@/components/wrappers/dashboard/agent/button-delete-agent/button-delete-agent";
 import { capitalizeFirstLetter } from "@/utils/text";
@@ -15,7 +15,7 @@ import { generateEdgeKey } from "@/utils/edge_key";
 import { getServerUrl } from "@/utils/get-server-url";
 import { AgentContentPage } from "@/components/wrappers/dashboard/agent/agent-content";
 import { AgentDialog } from "@/features/agents/components/agent.dialog";
-import { AgentType } from "@/features/agents/agents.schema";
+
 
 export default async function RoutePage(
   props: PageParams<{ agentId: string }>,
@@ -26,13 +26,30 @@ export default async function RoutePage(
     where: eq(drizzleDb.schemas.agent.id, agentId),
     with: {
       databases: true,
+      organizations: true,
     },
   });
 
+  const organizations = await db.query.organization.findMany({
+    where: (fields) => isNull(fields.deletedAt),
+    with: {
+      members: true,
+    },
+  });
+
+
   if (!agent) {
     notFound();
   }
 
+  const isOwnerByAnOrganization = agent.organizationId
+
+  if (isOwnerByAnOrganization){
+    notFound();
+  }
+
+  const organizationIds = agent.organizations.map(org => org.organizationId)
+
   const edgeKey = await generateEdgeKey(getServerUrl(), agent.id);
 
   return (
@@ -45,12 +62,14 @@ export default async function RoutePage(
           <div className="flex items-center gap-2 md:justify-between w-full ">
             <div className="flex items-center gap-2">
               <AgentDialog
-                agent={agent as AgentType & { id: string }}
+                agent={agent}
                 typeTrigger={"edit"}
+                adminView={true}
+                organizations={organizations}
               />
             </div>
             <div className="flex items-center gap-2">
-              <ButtonDeleteAgent agentId={agentId} text={"Delete Agent"} />
+              <ButtonDeleteAgent organizationIds={organizationIds} agentId={agentId} text={"Delete Agent"} />
             </div>
           </div>
         </PageTitle>

app/(customer)/dashboard/(admin)/agents/page.tsx

@@ -5,7 +5,7 @@ import {Page, PageActions, PageContent, PageHeader, PageTitle} from "@/features/
 import {notFound} from "next/navigation";
 import {db} from "@/db";
 import * as drizzleDb from "@/db";
-import {desc, eq, not} from "drizzle-orm";
+import {and, desc, eq, isNull, not} from "drizzle-orm";
 import {Metadata} from "next";
 import {AgentDialog} from "@/features/agents/components/agent.dialog";
 
@@ -16,13 +16,13 @@ export const metadata: Metadata = {
 export default async function RoutePage(props: PageParams<{}>) {
 
     const agents = await db.query.agent.findMany({
-        where: not(eq(drizzleDb.schemas.agent.isArchived, true)),
+        where: and(not(eq(drizzleDb.schemas.agent.isArchived, true)),isNull(drizzleDb.schemas.agent.organizationId)),
         with: {
             databases: true
         },
         orderBy: (fields) => desc(fields.lastContact),
     });
-
+    
     if (!agents) {
         notFound();
     }

app/(customer)/dashboard/(organization)/migration/page.tsx

@@ -0,0 +1,65 @@
+import {PageParams} from "@/types/next";
+import {Page, PageContent, PageHeader, PageTitle} from "@/features/layout/page";
+import {notFound} from "next/navigation";
+import {getOrganization} from "@/lib/auth/auth";
+import {Metadata} from "next";
+import {db} from "@/db";
+import {MigrationTool} from "@/components/wrappers/dashboard/organization/migration/migration-tool";
+
+export const metadata: Metadata = {
+    title: "Projects",
+};
+
+export default async function RoutePage(props: PageParams<{}>) {
+
+    const organization = await getOrganization({});
+
+    if (!organization) {
+        notFound();
+    }
+
+    const projects = await db.query.project.findMany({
+        where: (project, {eq, and, not}) =>
+            and(
+                eq(project.organizationId, organization.id),
+                not(eq(project.isArchived, true))
+            ),
+        with: {
+            organization: true,
+            databases: {
+                where: (database, { isNull, not, inArray, and }) =>
+                    and(
+                        isNull(database.deletedAt),
+                        not(inArray(database.dbms, ["valkey", "redis"]))
+                    ),
+
+                with: {
+                    backups: {
+                        where: (backup, { isNull, eq, and }) =>
+                            and(
+                                isNull(backup.deletedAt),
+                                eq(backup.status, "success")
+                            ),
+                        orderBy: (backup, {desc}) => [desc(backup.createdAt)],
+                        limit: 15,
+                    }
+                }
+            },
+        },
+    });
+    return (
+        <Page>
+            <PageHeader className="flex flex-col items-start justify-between mb-6">
+                <PageTitle className="mb-2">
+                    Database Migration
+                </PageTitle>
+                <p className="text-sm text-muted-foreground">
+                    Import backups from a source project into your target database
+                </p>
+            </PageHeader>
+            <PageContent>
+                <MigrationTool projects={projects}/>
+            </PageContent>
+        </Page>
+    );
+}

app/(customer)/dashboard/(organization)/projects/[projectId]/page.tsx

@@ -6,16 +6,15 @@ import {
 import {CardsWithPagination} from "@/components/wrappers/common/cards-with-pagination";
 import {ProjectDatabaseCard} from "@/components/wrappers/dashboard/projects/project-card/project-database-card";
 import {notFound, redirect} from "next/navigation";
-
 import {db} from "@/db";
 import {eq} from "drizzle-orm";
 import {getActiveMember, getOrganization} from "@/lib/auth/auth";
 import * as drizzleDb from "@/db";
 import {capitalizeFirstLetter} from "@/utils/text";
 import {ProjectDialog} from "@/features/projects/components/project.dialog";
-import {DatabaseWith} from "@/db/schema/07_database";
 import {ProjectWith} from "@/db/schema/06_project";
 import {isUuidv4} from "@/utils/verify-uuid";
+import {getOrganizationAvailableDatabases} from "@/db/services/database";
 
 
 export default async function RoutePage(props: PageParams<{
@@ -56,19 +55,7 @@ export default async function RoutePage(props: PageParams<{
         redirect("/dashboard/projects");
     }
 
-    const availableDatabases = (
-        await db.query.database.findMany({
-            where: (db, {or, eq, isNull}) => or(isNull(db.projectId), eq(db.projectId, proj.id)),
-            with: {
-                agent: true,
-                project: true,
-                backups: true,
-                restorations: true,
-            },
-            orderBy: (db, {desc}) => [desc(db.createdAt)],
-        })
-    ) as DatabaseWith[];
-
+    const availableDatabases = await getOrganizationAvailableDatabases(organization.id, proj.id)
     const isMember = activeMember?.role === "member";
 
     return (
@@ -102,8 +89,9 @@ export default async function RoutePage(props: PageParams<{
                         organizationSlug={organization.slug}
                         // @ts-ignore
                         cardItem={ProjectDatabaseCard}
-                        cardsPerPage={6}
+                        cardsPerPage={20}
                         numberOfColumns={3}
+                        pageSizeOptions={[10, 20, 50]}
                         extendedProps={proj}
                     />
                 ) : (

app/(customer)/dashboard/(organization)/projects/page.tsx

@@ -9,6 +9,7 @@ import {EmptyStatePlaceholder} from "@/components/wrappers/common/empty-state-pl
 import {Metadata} from "next";
 import {ProjectDialog} from "@/features/projects/components/project.dialog";
 import {DatabaseWith} from "@/db/schema/07_database";
+import {getOrganizationAvailableDatabases} from "@/db/services/database";
 
 export const metadata: Metadata = {
     title: "Projects",
@@ -35,18 +36,7 @@ export default async function RoutePage(props: PageParams<{}>) {
     });
     const isMember = activeMember?.role === "member";
 
-    const availableDatabases = (
-        await db.query.database.findMany({
-            where: (db, {isNull}) => isNull(db.projectId),
-            with: {
-                agent: true,
-                project: true,
-                backups: true,
-                restorations: true,
-            },
-            orderBy: (db, {desc}) => [desc(db.createdAt)],
-        })
-    ).filter((db) => db.project == null) as DatabaseWith[];
+    const availableDatabases = await getOrganizationAvailableDatabases(organization.id)
 
 
     return (
@@ -66,11 +56,12 @@ export default async function RoutePage(props: PageParams<{}>) {
                         organizationSlug={organization.slug}
                         data={projects}
                         cardItem={ProjectCard}
-                        cardsPerPage={9}
+                        cardsPerPage={12}
                         numberOfColumns={3}
+                        pageSizeOptions={[12, 24, 48]}
                     />
                 ) : isMember ? (
-                    <EmptyStatePlaceholder text="No project available"/>
+                    <EmptyStatePlaceholder state={"empty"} text="No project available"/>
                 ) : (
                     <ProjectDialog databases={availableDatabases} organization={organization} isEmpty={true}/>
                 )}

app/(customer)/dashboard/(organization)/settings/agents/[agentId]/page.tsx

@@ -0,0 +1,101 @@
+import {PageParams} from "@/types/next";
+import {
+    Page,
+    PageContent,
+    PageDescription,
+    PageTitle,
+} from "@/features/layout/page";
+import {db} from "@/db";
+import * as drizzleDb from "@/db";
+import {eq} from "drizzle-orm";
+import {notFound} from "next/navigation";
+import {ButtonDeleteAgent} from "@/components/wrappers/dashboard/agent/button-delete-agent/button-delete-agent";
+import {capitalizeFirstLetter} from "@/utils/text";
+import {generateEdgeKey} from "@/utils/edge_key";
+import {getServerUrl} from "@/utils/get-server-url";
+import {AgentContentPage} from "@/components/wrappers/dashboard/agent/agent-content";
+import {AgentDialog} from "@/features/agents/components/agent.dialog";
+import {getActiveMember, getOrganization} from "@/lib/auth/auth";
+import {currentUser} from "@/lib/auth/current-user";
+import {computeOrganizationPermissions} from "@/lib/acl/organization-acl";
+
+
+export default async function RoutePage(
+    props: PageParams<{ agentId: string }>,
+) {
+    const {agentId} = await props.params;
+
+    const organization = await getOrganization({});
+    const user = await currentUser();
+    const activeMember = await getActiveMember();
+
+    if (!organization || !activeMember || !user) {
+        notFound();
+    }
+
+
+
+    const {canManageAgents} = computeOrganizationPermissions(activeMember);
+
+    if (!canManageAgents){
+        notFound();
+    }
+
+    const agent = await db.query.agent.findFirst({
+        where: eq(drizzleDb.schemas.agent.id, agentId),
+        with: {
+            databases: true,
+            organizations: true,
+        },
+    });
+
+
+    if (!agent) {
+        notFound();
+    }
+
+    const hasAccess =
+        agent.organizationId === organization.id ||
+        agent.organizations.some(org => org.organizationId === organization.id);
+
+    if (!hasAccess) {
+        notFound();
+    }
+
+    const isOwned = agent.organizationId
+    const edgeKey = await generateEdgeKey(getServerUrl(), agent.id);
+
+    return (
+        <Page>
+            <div className="justify-between gap-2 sm:flex">
+                <PageTitle className="flex flex-col md:flex-row items-center justify-between w-full ">
+                    <div className="min-w-full md:min-w-fit ">
+                        {capitalizeFirstLetter(agent.name)}
+                    </div>
+                    {isOwned && (
+                        <div className="flex items-center gap-2 md:justify-between w-full ">
+                            <div className="flex items-center gap-2">
+                                <AgentDialog
+                                    agent={agent}
+                                    typeTrigger={"edit"}
+                                />
+                            </div>
+                            <div className="flex items-center gap-2">
+                                <ButtonDeleteAgent organizationId={organization.id ?? null} agentId={agentId} text={"Delete Agent"}/>
+                            </div>
+                        </div>
+                    )}
+                </PageTitle>
+            </div>
+
+            {agent.description && (
+                <PageDescription className="mt-5 sm:mt-0">
+                    {agent.description}
+                </PageDescription>
+            )}
+            <PageContent className="flex flex-col w-full h-full justify-between gap-6">
+                <AgentContentPage agent={agent} edgeKey={edgeKey}/>
+            </PageContent>
+        </Page>
+    );
+}

app/(customer)/dashboard/(organization)/settings/agents/page.tsx

@@ -0,0 +1,5 @@
+import { redirect } from "next/navigation";
+
+export default async function RoutePage() {
+    redirect("/dashboard/settings?tab=agents");
+}

app/(customer)/dashboard/(organization)/settings/page.tsx

@@ -1,95 +1,114 @@
-import { PageParams } from "@/types/next";
+import {PageParams} from "@/types/next";
 import {
-  Page,
-  PageActions,
-  PageContent,
-  PageHeader,
-  PageTitle,
+    Page,
+    PageContent,
+    PageHeader,
+    PageTitle,
 } from "@/features/layout/page";
-import { currentUser } from "@/lib/auth/current-user";
-import { getActiveMember, getOrganization } from "@/lib/auth/auth";
-import { notFound } from "next/navigation";
-import { Metadata } from "next";
-import { OrganizationTabs } from "@/components/wrappers/dashboard/organization/tabs/organization-tabs";
-import { getOrganizationChannels } from "@/db/services/notification-channel";
-import { computeOrganizationPermissions } from "@/lib/acl/organization-acl";
-import { getOrganizationStorageChannels } from "@/db/services/storage-channel";
-import { DeleteOrganizationButton } from "@/components/wrappers/dashboard/organization/delete-organization-button";
-import { EditOrganizationDialog } from "@/features/organization/components/edit-organization.dialog";
-import { db } from "@/db";
-import { isNull } from "drizzle-orm";
+import {currentUser} from "@/lib/auth/current-user";
+import {getActiveMember, getOrganization} from "@/lib/auth/auth";
+import {notFound} from "next/navigation";
+import {Metadata} from "next";
+import {OrganizationTabs} from "@/components/wrappers/dashboard/organization/tabs/organization-tabs";
+import {getOrganizationChannels} from "@/db/services/notification-channel";
+import {computeOrganizationPermissions} from "@/lib/acl/organization-acl";
+import {getOrganizationStorageChannels} from "@/db/services/storage-channel";
+import {DeleteOrganizationButton} from "@/components/wrappers/dashboard/organization/delete-organization-button";
+import {EditOrganizationDialog} from "@/features/organization/components/edit-organization.dialog";
+import {db} from "@/db";
+import {isNull} from "drizzle-orm";
 import * as drizzleDb from "@/db";
-import { eq } from "drizzle-orm";
+import {eq} from "drizzle-orm";
+import {getOrganizationAgents} from "@/db/services/agent";
+import {Tooltip, TooltipContent, TooltipTrigger} from "@/components/ui/tooltip";
 
 export const metadata: Metadata = {
-  title: "Settings",
+    title: "Settings",
 };
 
 export default async function RoutePage(props: PageParams<{ slug: string }>) {
-  const organization = await getOrganization({});
-  const user = await currentUser();
-  const activeMember = await getActiveMember();
+    const organization = await getOrganization({});
+    const user = await currentUser();
+    const activeMember = await getActiveMember();
 
-  if (!organization || !activeMember || !user) {
-    notFound();
-  }
+    if (!organization || !activeMember || !user) {
+        notFound();
+    }
 
-  const notificationChannels = await getOrganizationChannels(organization.id);
-  const storageChannels = await getOrganizationStorageChannels(organization.id);
-  const permissions = computeOrganizationPermissions(activeMember);
+    const notificationChannels = await getOrganizationChannels(organization.id);
+    const storageChannels = await getOrganizationStorageChannels(organization.id);
+    const agents = await getOrganizationAgents(organization.id);
+    const permissions = computeOrganizationPermissions(activeMember);
 
-  const users = await db.query.user.findMany({
-    where: (fields) => isNull(fields.deletedAt),
-  });
+    const users = await db.query.user.findMany({
+        where: (fields) => isNull(fields.deletedAt),
+    });
 
-  const organizationWithMembers = await db.query.organization.findFirst({
-    where: eq(drizzleDb.schemas.organization.id, organization.id),
-    with: {
-      members: {
+    const organizationWithMembers = await db.query.organization.findFirst({
+        where: eq(drizzleDb.schemas.organization.id, organization.id),
         with: {
-          user: true,
+            projects: true,
+            members: {
+                with: {
+                    user: true,
+                },
+            },
         },
-      },
-    },
-  });
+    });
 
-  if (!organizationWithMembers) notFound();
+    if (!organizationWithMembers) notFound();
 
-  return (
-    <Page>
-      <PageHeader>
-        <PageTitle className="flex flex-col md:flex-row items-center justify-between w-full ">
-          <div className="min-w-full md:min-w-fit ">Organization settings</div>
-          <div className="flex items-center gap-2 md:justify-between w-full ">
-            <div className="flex items-center gap-2">
-              {permissions.canManageSettings &&
-                organization.slug !== "default" && (
-                  <EditOrganizationDialog
-                    organization={organizationWithMembers}
-                    users={users}
-                    currentUser={user}
-                  />
-                )}
-            </div>
-            <div className="flex items-center gap-2">
-              {permissions.canManageDangerZone &&
-                organization.slug !== "default" && (
-                  <DeleteOrganizationButton
-                    organizationSlug={organization.slug}
-                  />
-                )}
-            </div>
-          </div>
-        </PageTitle>
-      </PageHeader>
-      <PageContent>
-        <OrganizationTabs
-          activeMember={activeMember}
-          organization={organization}
-          notificationChannels={notificationChannels}
-          storageChannels={storageChannels}
-        />
-      </PageContent>
-    </Page>
-  );
+    return (
+        <Page>
+            <PageHeader>
+                <PageTitle className="flex flex-col md:flex-row items-center justify-between w-full ">
+                    <div className="min-w-full md:min-w-fit ">Organization settings</div>
+                    <div className="flex items-center gap-2 md:justify-between w-full ">
+                        <div className="flex items-center gap-2">
+                            {permissions.canManageSettings &&
+                                organization.slug !== "default" && (
+                                    <EditOrganizationDialog
+                                        organization={organizationWithMembers}
+                                        users={users}
+                                        currentUser={user}
+                                    />
+                                )}
+                        </div>
+                        <div className="flex items-center gap-2">
+                            {permissions.canManageDangerZone &&
+                                organization.slug !== "default" && (
+
+                                    <Tooltip>
+                                        <TooltipTrigger asChild>
+                                            <div>
+                                                <DeleteOrganizationButton
+                                                    disabled={organizationWithMembers.projects.length > 0}
+                                                    organizationSlug={organization.slug}
+                                                />
+                                            </div>
+
+                                        </TooltipTrigger>
+                                        {organizationWithMembers.projects.length > 0 && (
+                                            <TooltipContent>
+                                                <p>Your organization has some projects associated with it. Please delete them before deleting the organization.</p>
+                                            </TooltipContent>
+                                        )}
+                                    </Tooltip>
+
+                                )}
+                        </div>
+                    </div>
+                </PageTitle>
+            </PageHeader>
+            <PageContent>
+                <OrganizationTabs
+                    activeMember={activeMember}
+                    organization={organization}
+                    notificationChannels={notificationChannels}
+                    storageChannels={storageChannels}
+                    agents={agents}
+                />
+            </PageContent>
+        </Page>
+    );
 }

app/(customer)/dashboard/home/page.tsx

@@ -5,7 +5,7 @@ import {Building2, Database, DatabaseBackup, Folder, RefreshCcw, Server, Workflo
 import {currentUser} from "@/lib/auth/current-user";
 import {notFound} from "next/navigation";
 import {db} from "@/db";
-import {asc, inArray} from "drizzle-orm";
+import {and, asc, eq, inArray} from "drizzle-orm";
 import * as drizzleDb from "@/db";
 import {listOrganizations} from "@/lib/auth/auth";
 import {Metadata} from "next";
@@ -26,7 +26,7 @@ export default async function RoutePage(props: PageParams<{}>) {
     const agents = await db.query.agent.findMany({});
 
     const projects = await db.query.project.findMany({
-        where: inArray(drizzleDb.schemas.project.organizationId, organizationIds),
+        where: and(inArray(drizzleDb.schemas.project.organizationId, organizationIds), eq(drizzleDb.schemas.project.isArchived, false)),
     });
 
     const projectIds = projects.map(project => project.id);

app/(landing)/page.tsx

@@ -9,8 +9,4 @@ export default async function Index() {
         redirect(`/dashboard/home`);
     }
     redirect("/login");
-    //Do not delete
-    // return (
-    //     <Home/>
-    // );
 }

app/api/agent/[agentId]/backup/helpers.ts

@@ -1,7 +1,10 @@
-import { NextResponse } from "next/server";
-import { eq } from "drizzle-orm";
-import { db } from "@/db";
+import {NextResponse} from "next/server";
+import {and, eq} from "drizzle-orm";
+import {db} from "@/db";
 import * as drizzleDb from "@/db";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/agent/backup/helpers"});
 
 export function withAgentCheck(handler: Function) {
     return async (request: Request, context: { params: Promise<{ agentId: string }> }) => {
@@ -9,28 +12,27 @@ export function withAgentCheck(handler: Function) {
             const agentId = (await context.params).agentId;
 
             const agent = await db.query.agent.findFirst({
-                where: eq(drizzleDb.schemas.agent.id, agentId),
+                where: and(eq(drizzleDb.schemas.agent.id, agentId), eq(drizzleDb.schemas.agent.isArchived, false)),
             });
 
             if (!agent) {
                 return NextResponse.json(
-                    { error: "Agent not found" },
-                    { status: 404 }
+                    {error: "Agent not found"},
+                    {status: 404}
                 );
             }
 
-            return handler(request, { ...context, agent });
+            return handler(request, {...context, agent});
         } catch (err) {
-            console.error("Error in agent middleware:", err);
+            log.error({error: err, name: "withAgentCheck"}, "Error in agent middleware");
             return NextResponse.json(
-                { error: "Internal server error" },
-                { status: 500 }
+                {error: "Internal server error"},
+                {status: 500}
             );
         }
     };
 }
 
-
 export async function getDatabaseOrThrow(generatedId: string) {
     const database = await db.query.database.findFirst({
         where: eq(drizzleDb.schemas.database.agentDatabaseId, generatedId),
@@ -43,8 +45,8 @@ export async function getDatabaseOrThrow(generatedId: string) {
 
     if (!database) {
         throw NextResponse.json(
-            { error: "Database associated with generatedId not found" },
-            { status: 404 }
+            {error: "Database associated with generatedId not found"},
+            {status: 404}
         );
     }
 

app/api/agent/[agentId]/backup/route.ts

@@ -8,6 +8,9 @@ import {withUpdatedAt} from "@/db/utils";
 import {eventEmitter} from "@/features/shared/event";
 import {sendNotificationsBackupRestore} from "@/features/notifications/helpers";
 import {EventKind} from "@/features/notifications/types";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/agent/backup/route"});
 
 export type BodyPost = {
     method: "manual" | "automatic"
@@ -77,7 +80,6 @@ export const POST = withAgentCheck(async (request: Request, {params, agent}: {
             }
         }
 
-
         eventEmitter.emit('modification', {update: true});
 
         return NextResponse.json(
@@ -88,7 +90,7 @@ export const POST = withAgentCheck(async (request: Request, {params, agent}: {
             {status: 200}
         );
     } catch (error) {
-        console.error("Error in POST for INIT backup:", error);
+        log.error({error: error}, "Error in POST for INIT backup");
         return NextResponse.json(
             {error: "Internal server error"},
             {status: 500}
@@ -102,7 +104,7 @@ export const PATCH = withAgentCheck(async (request: Request, {params, agent}: {
 }) => {
     try {
         const body: BodyPatch = await request.json();
-        console.log("body", body);
+        log.info({data: body}, "Body from PATH in backup route");
 
         const status = body.status
         const backupId = body.backupId
@@ -142,9 +144,7 @@ export const PATCH = withAgentCheck(async (request: Request, {params, agent}: {
             {status: 200}
         );
     } catch (error) {
-
-
-        console.error("Error in PATCH backup:", error);
+        log.error({error: error}, "Error in PATCH backup")
         return NextResponse.json(
             {error: "Internal server error"},
             {status: 500}

app/api/agent/[agentId]/backup/upload/init/route.ts

@@ -5,6 +5,9 @@ import {db} from "@/db";
 import {getDatabaseOrThrow, withAgentCheck} from "../../helpers";
 import {isUuidv4} from "@/utils/verify-uuid";
 import {eventEmitter} from "@/features/shared/event";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/agent/backup/upload/init"});
 
 export type Body = {
     generatedId: string
@@ -18,7 +21,7 @@ export const POST = withAgentCheck(async (request: Request, {params, agent}: {
     try {
         const body: Body = await request.json();
 
-        console.log("body", body);
+        log.info({data: body}, "Body for backup upload init");
 
         const generatedId = body.generatedId;
         const storageChannelId = body.storageChannelId;
@@ -66,7 +69,7 @@ export const POST = withAgentCheck(async (request: Request, {params, agent}: {
             {status: 200}
         );
     } catch (error) {
-        console.error("Error in POST for INIT backup:", error);
+        log.error({error: error}, "Error in POST for INIT backup");
         return NextResponse.json(
             {error: "Internal server error"},
             {status: 500}

app/api/agent/[agentId]/backup/upload/status/route.ts

@@ -5,6 +5,9 @@ import {db as dbClient, db} from "@/db";
 import {withUpdatedAt} from "@/db/utils";
 import {getDatabaseOrThrow, withAgentCheck} from "../../helpers";
 import {eventEmitter} from "@/features/shared/event";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/agent/backup/upload/status"});
 
 export type Body = {
     generatedId: string
@@ -27,8 +30,7 @@ export const PATCH = withAgentCheck(async (request: Request, {params, agent}: {
         const backupStorageId = body.backupStorageId;
         const backupId = body.backupId;
 
-
-        console.log("body", body);
+        log.info({data: body}, "Body for backup upload status");
 
         const database = await getDatabaseOrThrow(generatedId);
 
@@ -68,10 +70,10 @@ export const PATCH = withAgentCheck(async (request: Request, {params, agent}: {
             if (hasSuccessfulStorage && backup.status !== "success") {
                 await db
                     .update(drizzleDb.schemas.backup)
-                    .set({
+                    .set(withUpdatedAt({
                         status: "success",
                         fileSize: fileSize,
-                    })
+                    }))
                     .where(eq(drizzleDb.schemas.backup.id, backup.id));
             }
         }
@@ -85,7 +87,7 @@ export const PATCH = withAgentCheck(async (request: Request, {params, agent}: {
             {status: 200}
         );
     } catch (error) {
-        console.error("Error in POST for INIT backup:", error);
+        log.error({error: error},"Error in POST for INIT backup");
         return NextResponse.json(
             {error: "Internal server error"},
             {status: 500}

app/api/agent/[agentId]/restore/route.ts

@@ -4,7 +4,10 @@ import * as drizzleDb from "@/db";
 import {db} from "@/db";
 import {and, eq} from "drizzle-orm";
 import {sendNotificationsBackupRestore} from "@/features/notifications/helpers";
-import {eventEmitter} from "@/features/shared/event";
+import {logger} from "@/lib/logger";
+import {withUpdatedAt} from "@/db/utils";
+
+const log = logger.child({module: "api/agent/restore"});
 
 export type BodyResultRestore = {
     generatedId: string
@@ -32,7 +35,7 @@ export async function POST(
         }
 
         const agent = await db.query.agent.findFirst({
-            where: eq(drizzleDb.schemas.agent.id, agentId)
+            where: and(eq(drizzleDb.schemas.agent.id, agentId), eq(drizzleDb.schemas.agent.isArchived, false)),
         })
         if (!agent) {
             return NextResponse.json({error: "Agent not found"}, {status: 404})
@@ -60,7 +63,7 @@ export async function POST(
 
         await db
             .update(drizzleDb.schemas.restoration)
-            .set({status: body.status as RestorationStatus})
+            .set(withUpdatedAt({status: body.status as RestorationStatus}))
             .where(eq(drizzleDb.schemas.restoration.id, restoration.id));
 
         await sendNotificationsBackupRestore(database, body.status == "failed" ? "error_restore" : "success_restore");
@@ -70,10 +73,9 @@ export async function POST(
             message: "Restoration successfully updated"
         }
 
-
         return Response.json(response, {status: 200})
     } catch (error) {
-        console.error('Error in POST handler:', error);
+        log.error({error: error}, "Error in POST handler")
         return NextResponse.json(
             {error: 'Internal server error'},
             {status: 500}

app/api/agent/[agentId]/status/helpers.ts

@@ -2,7 +2,7 @@ import {NextResponse} from "next/server";
 import {Body} from "./route";
 import {isUuidv4} from "@/utils/verify-uuid";
 import {Agent} from "@/db/schema/08_agent";
-import {Database, DatabaseWith} from "@/db/schema/07_database";
+import {DatabaseWith} from "@/db/schema/07_database";
 import * as drizzleDb from "@/db";
 import {db, db as dbClient} from "@/db";
 import {and, eq, inArray} from "drizzle-orm";
@@ -11,6 +11,9 @@ import {withUpdatedAt} from "@/db/utils";
 import type {StorageInput} from "@/features/storages/types";
 import {dispatchStorage} from "@/features/storages/dispatch";
 import {Setting} from "@/db/schema/01_setting";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/agent/status/helpers"});
 
 export async function handleDatabases(body: Body, agent: Agent, lastContact: Date, settings: Setting) {
     const databasesResponse = [];
@@ -56,7 +59,7 @@ export async function handleDatabases(body: Body, agent: Agent, lastContact: Dat
             }
 
             if (!dbmsEnumSchema.safeParse(db.dbms).success) {
-                console.log(`Database type not available: ${db.dbms}`);
+                log.error({name: "handleDatabases"},`Database type not available: ${db.dbms}`);
                 continue;
             }
 
@@ -85,7 +88,6 @@ export async function handleDatabases(body: Body, agent: Agent, lastContact: Dat
                         date: lastContact
                     })
 
-
                 const storages = await getDatabaseStorageChannels(databaseCreated.id)
 
                 databasesResponse.push(formatDatabase(databaseCreated, backupAction, restoreAction, urlBackup, storages, null));
@@ -97,6 +99,7 @@ export async function handleDatabases(body: Body, agent: Agent, lastContact: Dat
                 .set(withUpdatedAt({
                     name: db.name,
                     agentId: agent.id,
+                    dbms: db.dbms as EDbmsSchema,
                     lastContact: db.pingStatus ? lastContact : existingDatabase.lastContact,
                     healthErrorCount: db.pingStatus ? null : existingDatabase.healthErrorCount,
                 }))
@@ -180,25 +183,25 @@ export async function handleDatabases(body: Body, agent: Agent, lastContact: Dat
                     } else {
                         await dbClient
                             .update(drizzleDb.schemas.restoration)
-                            .set({status: "failed"})
+                            .set(withUpdatedAt({status: "failed"}))
                             .where(eq(drizzleDb.schemas.restoration.id, restoration.id));
 
                         const errorMessage = "Failed to get backup URL";
-                        console.error("Restoration failed: ", errorMessage);
+                        log.error({error: errorMessage, name: "handleDatabases"}, "Restoration failed");
                         continue;
                     }
                 } catch (err) {
-                    console.error("Restoration crashed unexpectedly:", err);
+                    log.error({error: err, name: "handleDatabases"}, "Restoration crashed unexpectedly");
                     await dbClient
                         .update(drizzleDb.schemas.restoration)
-                        .set({status: "failed"})
+                        .set(withUpdatedAt({status: "failed"}))
                         .where(eq(drizzleDb.schemas.restoration.id, restoration.id));
                     continue;
                 }
 
                 await dbClient
                     .update(drizzleDb.schemas.restoration)
-                    .set({status: "ongoing"})
+                    .set(withUpdatedAt({status: "ongoing"}))
                     .where(eq(drizzleDb.schemas.restoration.id, restoration.id));
             }
             const storages = await getDatabaseStorageChannels(databaseUpdated.id)

app/api/agent/[agentId]/status/route.ts

@@ -3,11 +3,14 @@ import {handleDatabases} from "./helpers";
 import * as drizzleDb from "@/db";
 import {db} from "@/db";
 import {EDbmsSchema} from "@/db/schema/types";
-import {eq} from "drizzle-orm";
+import {and, eq} from "drizzle-orm";
 import {isUuidv4} from "@/utils/verify-uuid";
 import {withUpdatedAt} from "@/db/utils";
-import {eventEmitter} from "@/features/shared/event";
-import {notFound} from "next/navigation";
+import {logger} from "@/lib/logger";
+
+
+const log = logger.child({module: "api/agent/status/route"});
+
 
 export type databaseAgent = {
     name: string,
@@ -28,14 +31,14 @@ export async function POST(
 ) {
     try {
         const agentId = (await params).agentId
-        console.log(agentId)
+        log.debug(`Agent ID: ${agentId}`)
         const body: Body = await request.json();
         const lastContact = new Date();
         let message: string
 
         if (!isUuidv4(agentId)) {
             message = "agentId is not a valid uuid"
-            console.error(message)
+            log.error({error: message}, "An error occurred")
             return NextResponse.json(
                 {error: "agentId is not a valid uuid"},
                 {status: 500}
@@ -43,7 +46,7 @@ export async function POST(
         }
 
         const agent = await db.query.agent.findFirst({
-            where: eq(drizzleDb.schemas.agent.id, agentId),
+            where: and(eq(drizzleDb.schemas.agent.id, agentId), eq(drizzleDb.schemas.agent.isArchived, false)),
         })
 
         if (!agent) {
@@ -56,7 +59,6 @@ export async function POST(
             return NextResponse.json({error: "An error occured"}, {status: 404})
         }
 
-
         const databasesResponse = await handleDatabases(body, agent, lastContact, settings)
 
         await db
@@ -85,10 +87,9 @@ export async function POST(
             databases: databasesResponse
         }
 
-
         return Response.json(response)
     } catch (error) {
-        console.error('Error in POST handler:', error);
+        log.error({error: error}, "Error in POST handler")
         return NextResponse.json(
             {error: 'Internal server error'},
             {status: 500}

app/api/events/route.ts

@@ -2,6 +2,9 @@ import {auth} from "@/lib/auth/auth";
 import {headers} from "next/headers";
 import {NextResponse} from "next/server";
 import {eventEmitter} from "@/features/shared/event";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/events"});
 
 export async function GET(request: Request) {
 
@@ -16,9 +19,9 @@ export async function GET(request: Request) {
     return new Response(
         new ReadableStream({
             start(controller) {
-                console.log('Stream started');
+                log.info("Stream started");
                 const handleModification = (data: any) => {
-                    console.log('Modification event triggered:', data);
+                    log.info({data: data},"Modification event triggered");
                     controller.enqueue(`event: modification\n`);
                     controller.enqueue(`data: ${JSON.stringify(data)}\n\n`);
                 };
@@ -26,7 +29,7 @@ export async function GET(request: Request) {
                 eventEmitter.on('modification', handleModification);
 
                 request.signal.addEventListener('abort', () => {
-                    console.log('Client disconnected');
+                    log.info("Client disconnected");
                     controller.close();
                     eventEmitter.off('modification', handleModification);
                 });

app/api/files/backups/route.ts

@@ -3,6 +3,9 @@ import path from "path";
 import type {StorageInput} from "@/features/storages/types";
 import {dispatchStorage} from "@/features/storages/dispatch";
 import {Readable} from "node:stream";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/files/backups"});
 
 export async function GET(
     request: Request,
@@ -30,7 +33,7 @@ export async function GET(
         }
     };
 
-    console.debug(input);
+    log.info({input: input}, "Dispatch Storage");
 
     const result = await dispatchStorage(input, undefined, storageId);
 

app/api/files/images/[fileName]/route.ts

@@ -1,12 +1,12 @@
 import {NextResponse} from "next/server";
 import {auth} from "@/lib/auth/auth";
 import {headers} from "next/headers";
-import {db} from "@/db";
-import * as drizzleDb from "@/db";
-import {eq} from "drizzle-orm";
 import {StorageInput} from "@/features/storages/types";
 import {dispatchStorage} from "@/features/storages/dispatch";
 import {Readable} from "node:stream";
+import {logger} from "@/lib/logger";
+
+const log = logger.child({module: "api/files/images"});
 
 export async function GET(
     req: Request,
@@ -56,7 +56,7 @@ export async function GET(
         const result = await dispatchStorage(input, undefined, storageId);
 
         if (!result.file || !(result.file instanceof Readable)) {
-            console.error(`An error occurred while getting file :`, result);
+            log.error({error: result}, `An error occurred while getting file`);
             return NextResponse.json(
                 {error: "Invalid file payload"},
                 {status: 500}
@@ -82,7 +82,7 @@ export async function GET(
         });
 
     } catch (err) {
-        console.error("Error streaming image:", err);
+        log.error({error: err}, `Error streaming image`);
         return NextResponse.json({error: "Error fetching file"}, {status: 500});
     }
 }

app/api/health/route.ts

@@ -0,0 +1,5 @@
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  return NextResponse.json({ success: true });
+}

app/api/tus/hooks/route.ts

@@ -2,7 +2,9 @@ import {NextResponse} from "next/server";
 import fs from "fs";
 import path from "path";
 import {env} from "@/env.mjs";
+import {logger} from "@/lib/logger";
 
+const log = logger.child({module: "api/tus/hooks"});
 
 export async function POST(request: Request) {
     try {
@@ -13,7 +15,7 @@ export async function POST(request: Request) {
         const uploadOffset = headers["Upload-Offset"]?.[0];
         const status = headers["X-Status"]?.[0];
 
-        console.log(`Upload ID : ${event.Upload.ID} (${uploadOffset}/${uploadLength})`);
+        log.info(`Upload ID : ${event.Upload.ID} (${uploadOffset}/${uploadLength})`);
 
         if (status === "success") {
             if (
@@ -29,9 +31,7 @@ export async function POST(request: Request) {
                     return NextResponse.json({error: "Missing X-File-Path"}, {status: 500});
                 }
 
-
-                // const uploadDir = path.join(process.cwd(), "/private/uploads/");
-                const uploadDir = path.join(env.PRIVATE_PATH, "/uploads/");
+                const uploadDir = path.join(env.PRIVATE_PATH!, "/uploads/");
 
                 const oldFilePath = path.join(uploadDir, "tmp", id);
                 const newFilePath = path.join(uploadDir, filePath);
@@ -74,7 +74,7 @@ export async function POST(request: Request) {
         }
         return NextResponse.json({});
     } catch (error) {
-        console.error("Hook error:", error);
+        log.error({error: error},"TUS Hook error");
         return NextResponse.json({error: "Internal server error"}, {status: 500});
     }
 }

docker-compose.func.yml

@@ -1,35 +0,0 @@
-name: portabase-dev-func
-
-services:
-  keycloak:
-    image: quay.io/keycloak/keycloak:latest
-    command: start-dev --import-realm
-    # environment:
-    #   KC_BOOTSTRAP_ADMIN_USERNAME: admin
-    #   KC_BOOTSTRAP_ADMIN_PASSWORD: admin
-    ports:
-      - "3056:8080"
-    volumes:
-      - keycloak-data:/opt/keycloak/data
-      - ./seeds/keycloak:/opt/keycloak/data/import:ro
-      - ./export:/tmp/export
-  pocket-id:
-    image: ghcr.io/pocket-id/pocket-id
-    restart: unless-stopped
-    environment:
-      - APP_URL=http://localhost:3055
-      - ENCRYPTION_KEY=QwHyjbZvSsDUAcjpdmSPsuYxaH6vET6OeBaeLwXccCb43L6Om3W1AoU5pKIJTzYr
-    ports:
-      - 3055:1411
-    volumes:
-      - pocket-id-data:/app/data
-      - ./seeds/pocket-id:/seed:ro
-    healthcheck:
-      test: "curl -f http://localhost:1411/healthz"
-      interval: 1m30s
-      timeout: 5s
-      retries: 2
-      start_period: 10s
-volumes:
-  keycloak-data:
-  pocket-id-data:

docker-compose.oidc.yml

@@ -0,0 +1,138 @@
+name: portabase-oidc
+
+services:
+
+  keycloak:
+    image: quay.io/keycloak/keycloak:latest
+    restart: unless-stopped
+    command: start-dev --import-realm
+    environment:
+      KC_BOOTSTRAP_ADMIN_USERNAME: bootstrap-admin
+      KC_BOOTSTRAP_ADMIN_PASSWORD: admin
+      KC_HEALTH_ENABLED: "true"
+    ports:
+      - "3056:8080"
+    volumes:
+      - keycloak-data:/opt/keycloak/data
+      - ./seeds/keycloak:/opt/keycloak/data/import:ro
+      - ./export:/tmp/export
+    healthcheck:
+      test: [ "CMD-SHELL", "bash -ec '</dev/tcp/127.0.0.1/8080'" ]
+      interval: 30s
+      timeout: 5s
+      retries: 10
+      start_period: 30s
+
+  pocket-id:
+    image: ghcr.io/pocket-id/pocket-id
+    restart: unless-stopped
+    environment:
+      - APP_URL=http://localhost:3055
+      - ENCRYPTION_KEY=QwHyjbZvSsDUAcjpdmSPsuYxaH6vET6OeBaeLwXccCb43L6Om3W1AoU5pKIJTzYr
+    ports:
+      - "3055:1411"
+    volumes:
+      - pocket-id-data:/app/data
+      - ./seeds/pocket-id:/seed:ro
+    healthcheck:
+      test: "curl -f http://localhost:1411/healthz"
+      interval: 1m30s
+      timeout: 5s
+      retries: 2
+      start_period: 10s
+
+  authentik-server:
+    image: ghcr.io/goauthentik/server:2026.2.3
+    restart: unless-stopped
+    command: server
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: authentik-postgresql
+      AUTHENTIK_POSTGRESQL__USER: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: authentik
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_SECRET_KEY: changemechangemechangemechangeme
+    ports:
+      - "3057:9000"
+    depends_on:
+      authentik-postgresql:
+        condition: service_healthy
+    healthcheck:
+      test: [ "CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://127.0.0.1:9000/-/health/live/')\"" ]
+      interval: 30s
+      timeout: 5s
+      retries: 10
+      start_period: 30s
+
+  authentik-postgresql:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: authentik
+      POSTGRES_USER: authentik
+      POSTGRES_PASSWORD: authentik
+    volumes:
+      - authentik-data:/var/lib/postgresql/data
+    healthcheck:
+      test: [ "CMD-SHELL", "pg_isready -U authentik -d authentik" ]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 5s
+
+  authentik-worker:
+    image: ghcr.io/goauthentik/server:2026.2.3
+    restart: unless-stopped
+    command: worker
+    user: root
+    environment:
+      AUTHENTIK_POSTGRESQL__HOST: authentik-postgresql
+      AUTHENTIK_POSTGRESQL__USER: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: authentik
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_SECRET_KEY: changemechangemechangemechangeme
+      AUTHENTIK_BOOTSTRAP_PASSWORD: portabase-bootstrap-password
+      AUTHENTIK_BOOTSTRAP_TOKEN: portabase-bootstrap-token
+      AUTHENTIK_BOOTSTRAP_EMAIL: akadmin@portabase.local
+    volumes:
+      - ./seeds/authentik/blueprints/portabase-oidc.yaml:/blueprints/portabase-oidc.yaml:ro
+    shm_size: 512mb
+    depends_on:
+      authentik-postgresql:
+        condition: service_healthy
+
+  authentik-bootstrap:
+    image: ghcr.io/goauthentik/server:2026.2.3
+    entrypoint: [ "/bin/sh", "/seeds/bootstrap.sh" ]
+    environment:
+      AUTHENTIK_BASE_URL: http://authentik-server:9000
+      AUTHENTIK_API_TOKEN: portabase-bootstrap-token
+      AUTHENTIK_DISCOVERY_PATH: /application/o/portabase/.well-known/openid-configuration
+      AUTHENTIK_SECRET_KEY: changemechangemechangemechangeme
+      AUTHENTIK_POSTGRESQL__HOST: authentik-postgresql
+      AUTHENTIK_POSTGRESQL__USER: authentik
+      AUTHENTIK_POSTGRESQL__PASSWORD: authentik
+      AUTHENTIK_POSTGRESQL__NAME: authentik
+      AUTHENTIK_BOOTSTRAP_EMAIL: akadmin@portabase.local
+      AUTHENTIK_TEST_USER_USERNAME: admin@example.com
+      AUTHENTIK_TEST_USER_EMAIL: admin@example.com
+      AUTHENTIK_TEST_USER_NAME: Portabase Admin
+      AUTHENTIK_TEST_USER_PASSWORD: testPASS123456!
+      AUTHENTIK_TEST_GROUP: admin
+      AUTHENTIK_PROVIDER_NAME: portabase
+      AUTHENTIK_APPLICATION_NAME: Portabase
+      AUTHENTIK_APPLICATION_SLUG: portabase
+      AUTHENTIK_CLIENT_ID: portabase
+      AUTHENTIK_CLIENT_SECRET: portabase-e2e-secret
+      AUTHENTIK_REDIRECT_URI: http://localhost:8887/api/auth/sso/callback/authentik
+    volumes:
+      - ./seeds/authentik:/seeds:ro
+    depends_on:
+      authentik-server:
+        condition: service_healthy
+      authentik-worker:
+        condition: service_healthy
+
+volumes:
+  keycloak-data:
+  pocket-id-data:
+  authentik-data:

docker-compose.prod.yml

@@ -1,29 +1,36 @@
+name: portabase-prod
+
 services:
+
   app:
-#        build:
-#          context: .
-#          dockerfile: docker/dockerfile/Dockerfile
-#          target: prod
-    image: portabase/portabase:1.7.1
+    build:
+      context: .
+      dockerfile: docker/dockerfile/Dockerfile
+      target: prod
     ports:
       - '8887:80'
     environment:
       TZ: "Europe/Paris"
-    env_file:
-      - .env
     volumes:
-      - portabase-data:/data
+      - portabase-prod-data:/data
     depends_on:
       db:
         condition: service_healthy
-    container_name: portabase-app-prod
+    healthcheck:
+      test: [ "CMD-SHELL", "curl -f http://localhost/api/health" ]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 60s
+    extra_hosts:
+      - "localhost:host-gateway"
 
   db:
-    image: postgres:16-alpine
+    image: postgres:17-alpine
     ports:
       - "5433:5432"
     volumes:
-      - postgres-data:/var/lib/postgresql/data
+      - portabase-prod-postgres-data:/var/lib/postgresql/data
     environment:
       - POSTGRES_DB=devdb
       - POSTGRES_USER=devuser
@@ -35,5 +42,5 @@ services:
       retries: 5
 
 volumes:
-  portabase-data:
-  postgres-data:
+  portabase-prod-data:
+  portabase-prod-postgres-data:

docker-compose.yml

@@ -6,13 +6,13 @@ services:
     ports:
       - "5433:5432"
     volumes:
-      - postgres-data:/var/lib/postgresql/data
+      - portabase-dev-postgres-data:/var/lib/postgresql/data
     environment:
       - POSTGRES_DB=devdb
       - POSTGRES_USER=devuser
       - POSTGRES_PASSWORD=changeme
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U devuser -d devdb"]
+      test: [ "CMD-SHELL", "pg_isready -U devuser -d devdb" ]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -32,5 +32,14 @@ services:
       - ./private/uploads/tmp:/data/uploads/tmp
     user: "1000:1000"
 
+  mailpit:
+    image: axllent/mailpit:latest
+    container_name: portabase-mailpit-dev
+    hostname: mailpit
+    restart: unless-stopped
+    ports:
+      - "8025:8025"
+      - "1025:1025"
+
 volumes:
-  postgres-data:
+  portabase-dev-postgres-data:

e2e/access-management.spec.ts

@@ -0,0 +1,74 @@
+import {expect, test} from "@playwright/test";
+import {users} from "./helpers/auth";
+import {changeUserRole, create, switchToDefault} from "./helpers/access-management";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const firstOrganization = "Organization A";
+const secondOrganization = "Organization B";
+
+test.describe.serial(() => {
+    test("Create an organization from organizations page", async ({page}) => {
+        await page.goto("/dashboard/admin/organizations");
+        await expect(page.getByRole("heading", {name: "Active organizations"})).toBeVisible();
+
+        await create(page, "button", firstOrganization);
+
+        await expect(page.getByText(/Organization has been successfully created\./i)).toBeVisible();
+        await expect(page).toHaveURL("/dashboard/admin/organizations");
+        await expect(page.getByRole("button", {name: firstOrganization, exact: true})).toBeVisible();
+
+        await switchToDefault(page);
+    });
+
+    test("Create an organization from sidebar button", async ({page}) => {
+        await page.goto("/dashboard/home");
+        await expect(page.getByRole("heading", {name: "Dashboard"})).toBeVisible();
+
+        await create(page, "sidebar", secondOrganization);
+
+        await expect(page.getByText(/Organization has been successfully created\./i)).toBeVisible();
+        await expect(page).toHaveURL("/dashboard/home");
+        await expect(page.getByRole("button", {name: secondOrganization, exact: true})).toBeVisible();
+
+        await switchToDefault(page);
+    });
+
+    test("Change John Doe's role from pending to user", async ({page}) => {
+        await page.goto("/dashboard/admin/users");
+        await expect(page.getByText(users.normal.email, {exact: true})).toBeVisible();
+
+        const userRow = page.locator("tr").filter({hasText: users.normal.email}).first();
+        await expect(userRow).toBeVisible();
+        await userRow.locator("button").last().click();
+        await page.getByRole('menuitem', {name: 'Role'}).click();
+
+        await expect(page.getByRole("heading", {name: "Change the user's role"})).toBeVisible();
+
+        await changeUserRole(page, "user")
+
+        await expect(page.getByText("User role changed successfully.")).toBeVisible();
+        await expect(page.locator("tr").filter({hasText: users.normal.email}).getByText("user", {exact: true})).toBeVisible();
+    });
+
+    test("Add John Doe to Organization A", async ({page}) => {
+        await page.goto("/dashboard/admin/organizations");
+        await expect(page.getByRole("heading", {name: "Active organizations"})).toBeVisible();
+
+        const organizationRow = page.locator("tr").filter({hasText: firstOrganization}).first();
+        await expect(organizationRow).toBeVisible();
+        await organizationRow.locator('a[href*="/dashboard/admin/organizations/"], a[href*="organizations/"]').click();
+
+        await expect(page.getByText(firstOrganization, {exact: true})).toBeVisible();
+        await page.getByRole("button", {name: /Add member/i}).click();
+        await expect(page.getByRole("heading", {name: "Add member to your organization"})).toBeVisible();
+
+        await page.getByPlaceholder("Enter a user email").fill(users.normal.email);
+        await page.getByRole("option", {name: new RegExp(users.normal.email, "i")}).click();
+        await page.getByRole("button", {name: "Confirm"}).click();
+
+        await expect(page.getByText("Member successfully added!")).toBeVisible();
+        await expect(page.getByText(users.normal.email, {exact: true})).toBeVisible();
+    });
+});

e2e/agent.spec.ts

@@ -0,0 +1,79 @@
+import {expect, test} from "@playwright/test";
+import {create, edit, get, launch, remove} from "./helpers/agent";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
+
+const agent = {
+    aName: "Agent A",
+    aUpdatedName: "Agent A Updated",
+    bName: "Agent B",
+    description: "Agent created by Playwright E2E",
+    updatedDescription: "Agent updated by Playwright E2E",
+};
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+test.describe.serial(() => {
+    let agentWorkspace: string | null = null;
+
+    test("Create agent A from empty state", async ({page}) => {
+        await page.goto("/dashboard/agents");
+        await expect(page.getByRole("heading", {name: "Agents"})).toBeVisible();
+        await expect(page.getByText("Create new Agent", {exact: true})).toBeVisible();
+        await create(page, "emptyState", agent.aName, agent.description);
+
+        await expect(page.getByText("Success creating agent")).toBeVisible();
+        await expect(get(page, agent.aName)).toBeVisible();
+        await expect(page.getByText("Create new Agent", {exact: true})).toHaveCount(0);
+    });
+
+    test("Edit agent A", async ({page}) => {
+        await page.goto("/dashboard/agents");
+        await expect(page.getByRole("heading", {name: "Agents"})).toBeVisible();
+        await expect(get(page, agent.aName)).toBeVisible();
+
+        await edit(page, agent.aName, agent.aUpdatedName, agent.updatedDescription);
+
+        await expect(page.getByText("Success updating agent")).toBeVisible();
+        await expect(page.getByText(agent.aUpdatedName, {exact: true})).toBeVisible();
+        await expect(page.getByText(agent.updatedDescription, {exact: true})).toBeVisible();
+    });
+
+    test("Create agent B from classic button", async ({page}) => {
+        await page.goto("/dashboard/agents");
+        await expect(page.getByRole("heading", {name: "Agents"})).toBeVisible();
+        await expect(page.getByRole("button", {name: /Create Agent/i})).toBeVisible();
+        await create(page, "button", agent.bName, agent.description);
+
+        await expect(page.getByText("Success creating agent")).toBeVisible();
+        await expect(get(page, agent.bName)).toBeVisible();
+    });
+
+    test("Delete Agent B", async ({page}) => {
+        await page.goto("/dashboard/agents");
+        await expect(page.getByRole("heading", {name: "Agents"})).toBeVisible();
+        await expect(get(page, agent.bName)).toBeVisible();
+        await remove(page, agent.bName);
+
+        await expect(page.getByText("Agent has been successfully deleted.")).toBeVisible();
+        await expect(page).toHaveURL("/dashboard/agents");
+        await expect(page.getByText(agent.bName)).toHaveCount(0);
+    });
+
+    test("Launch the updated agent", async ({page}) => {
+        await page.goto("/dashboard/agents");
+        await expect(page.getByRole("heading", {name: "Agents"})).toBeVisible();
+        await get(page, agent.aName).click();
+
+        await expect(page).toHaveURL(/\/dashboard\/agents\/.+/);
+        await expect(page.getByText(agent.aUpdatedName, {exact: true})).toBeVisible();
+        await expect(page.getByText("Registration & Setup")).toBeVisible();
+
+        const commandInput = page.locator("input[readonly]").last();
+        await page.locator("input[readonly]").first().locator("xpath=following-sibling::button[1]").click();
+        const edgeKey = await commandInput.inputValue();
+
+        await launch(edgeKey)
+
+        await expect(page.getByRole("heading", { name: "Managed Databases" })).toBeVisible();
+    });
+});

e2e/auth.spec.ts

@@ -1,43 +1,17 @@
-import {test, expect, Page} from '@playwright/test';
+import {test, expect} from '@playwright/test';
+import {login, register, users} from "./helpers/auth";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
 
+const TIMEOUT = undefined
+// const TIMEOUT = 5000
 
-type UserCredentials = {
-    username: string
-    email: string
-    password: string
-}
+test.use({storageState: LOCAL_STORAGE_PATH})
 
-
-const users: Record<string, UserCredentials> = {
-    admin: {username: 'Admin', email: 'admin@example.com', password: 'testPASS123456!'},
-    normal: {username: 'John Doe', email: 'john.doe@example.com', password: 'testPASS123456!'},
-}
-
-async function register(page: Page, name: string, email: string, password: string, confirmPassword: string) {
-    await page.locator('input[name="name"]').fill(name)
-    await page.locator('input[name="email"]').fill(email)
-    await page.locator('input[name="password"]').fill(password)
-    await page.locator('input[name="confirmPassword"]').fill(confirmPassword)
-
-    await page.click('button[type="submit"]')
-}
-
-async function login(page: Page, email: string, password: string) {
-    await page.locator('input[name="email"]').fill(email)
-    await page.locator('input[name="password"]').fill(password)
-
-    await page.locator('button:has-text("Login")').click()
-}
-
-async function logout() {
-    //TODO
-}
-
-test.describe.serial('User signup and login flows', () => {
+test.describe.serial( () => {
 
     test('Redirect to login if not connected', async ({page}) => {
         await page.goto('/dashboard/projects');
-        await expect(page).toHaveURL("login?redirect=%2Fdashboard%2Fprojects");
+        await expect(page).toHaveURL("login?redirect=%2Fdashboard%2Fprojects", {timeout: TIMEOUT});
     });
 
     test('Password too short', async ({page}) => {
@@ -85,7 +59,7 @@ test.describe.serial('User signup and login flows', () => {
 
         await register(page, users["admin"].username, users["admin"].email, users["admin"].password, users["admin"].password)
 
-        await expect(page).toHaveURL('/login')
+        await expect(page).toHaveURL('/login', {timeout: TIMEOUT})
     })
 
     test('User already exists.', async ({page}) => {
@@ -108,7 +82,7 @@ test.describe.serial('User signup and login flows', () => {
 
         await register(page, users["normal"].username, users["normal"].email, users["normal"].password, users["normal"].password)
 
-        await expect(page).toHaveURL('login')
+        await expect(page).toHaveURL('/login', {timeout: TIMEOUT})
     })
 
     test('Failed login because account not active', async ({page}) => {
@@ -120,16 +94,11 @@ test.describe.serial('User signup and login flows', () => {
     })
 
     test('Successful login', async ({page}) => {
-        await page.goto('login')
+        await page.goto('/login')
         await login(page, users["admin"].email, users["admin"].password)
 
-        await expect(page).toHaveURL('/dashboard/home')
+        await expect(page).toHaveURL('/dashboard/home', {timeout: TIMEOUT})
+        await expect(page.getByRole('link', {name: 'Logo Portabase'})).toBeVisible()
+        await page.context().storageState({path: LOCAL_STORAGE_PATH})
     })
-
 })
-
-
-// test('Successful logout', async ({page}) => {
-//     await logout()
-//     await expect(page).toHaveURL('/login')
-// })

e2e/cleanup.spec.ts

@@ -0,0 +1,32 @@
+import {expect, test} from "@playwright/test";
+import fs from "fs";
+import {logout} from "./helpers/auth";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
+
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+test.describe( () => {
+    test.afterAll(async () => {
+        if (fs.existsSync(LOCAL_STORAGE_PATH)) {
+            fs.unlinkSync(LOCAL_STORAGE_PATH);
+        }
+    });
+
+    test("Remove shared storage state", async ({page}) => {
+        await test.step("Logout shared authenticated session", async () => {
+            if (!fs.existsSync(LOCAL_STORAGE_PATH)) {
+                return;
+            }
+
+            const content = fs.readFileSync(LOCAL_STORAGE_PATH, "utf-8").trim();
+            if (!content || content === "{}") {
+                return;
+            }
+
+            await page.goto('/dashboard/home');
+            await logout(page);
+            await expect(page).toHaveURL(/\/login(?:\?.*)?$/);
+        });
+    });
+});

e2e/helpers/access-management.ts

@@ -0,0 +1,70 @@
+import {Page} from "@playwright/test";
+
+export function getUserRow(page: Page, email: string) {
+    return page.locator("tr").filter({hasText: email}).first();
+}
+
+export function getOrganizationRow(page: Page, organizationName: string) {
+    return page.locator("tr").filter({hasText: organizationName}).first();
+}
+
+/**
+ * Create an organization from the selected entrypoint.
+ *
+ * Available entrypoints:
+ * - `button`: the organizations page create button.
+ * - `sidebar`: the sidebar organization switcher.
+ *
+ * Executes from:
+ * - `/dashboard/admin/organizations` for "button" entrypoint
+ * - any `/dashboard/**` page for "sidebar" entrypoint
+ */
+export async function create(page: Page, entrypoint: "button" | "sidebar", name: string) {
+    if (entrypoint === "sidebar") {
+        await page.getByRole("button", {name: "Default Organization"}).click();
+        await page.getByText("Create organization", {exact: true}).click();
+    } else {
+        await page.getByRole("button", {name: /Create a new organization/i}).click();
+    }
+
+    await page.getByLabel("Name").fill(name);
+    await page.getByRole("button", {name: "Create"}).click();
+}
+
+/**
+ * Switch the active organization from the sidebar switcher.
+ *
+ * Executes from: any `/dashboard/**` if the sidebar is visible.
+ */
+export async function switchTo(page: Page, name: string) {
+    await page.getByTestId('organization-dropdown').click();
+    await page.getByRole('menuitem', {name: name}).click();
+}
+
+/**
+ * Switch back to the default organization.
+ *
+ * Executes from: any `/dashboard/**` if the sidebar is visible.
+ */
+export async function switchToDefault(page: Page) {
+    await switchTo(page, "Default Organization");
+}
+
+const ROLE_LABELS = {
+    pending: "Pending",
+    user: "User",
+    admin: "Admin",
+} as const;
+
+/**
+ * Change the global role of a user from the admin users role modal.
+ *
+ * Executes from: the "Change the user's role" dialog opened from `/dashboard/admin/users`.
+ */
+export async function changeUserRole(page: Page, role: keyof typeof ROLE_LABELS) {
+    const roleOption = ROLE_LABELS[role];
+
+    await page.getByRole("combobox").click();
+    await page.getByRole("option", {name: roleOption}).click();
+    await page.getByRole("button", {name: "Validate"}).click();
+}

e2e/helpers/agent-cli.ts

@@ -0,0 +1,107 @@
+import * as pty from "node-pty";
+
+type InteractiveStep = {
+    match: RegExp;
+    reply: string;
+};
+
+function normalizeOutput(output: string) {
+    return output.replace(/\u001b\[[0-9;?]*[ -/]*[@-~]/g, "");
+}
+
+/**
+ * Run an interactive CLI command and answer prompts in sequence.
+ * Entry point:
+ * - `command` is the full CLI command executed in the PTY.
+ * - `cwd` is the local workspace where the command is launched.
+ * - `steps` defines which prompt text is matched and which reply is sent.
+ * - `timeoutMs` controls when the command is aborted if it stalls.
+ * Executes from: not page-bound; runs from a local test workspace on the Node.js side.
+ */
+export async function runInteractiveCommand(
+    command: string,
+    cwd: string,
+    steps: InteractiveStep[],
+    timeoutMs: number = 120_000,
+) {
+    await new Promise<void>((resolve, reject) => {
+        const child = pty.spawn("sh", ["-lc", command], {
+            cwd,
+            env: {
+                ...process.env,
+                TERM: "xterm-256color",
+            },
+            cols: 120,
+            rows: 30,
+        });
+
+        let currentStep = 0;
+        let output = "";
+        const timer = setTimeout(() => {
+            child.kill();
+            reject(new Error(`Interactive command timed out.\n\nCommand: ${command}\n\nOutput:\n${normalizeOutput(output)}`));
+        }, timeoutMs);
+
+        const handleChunk = (chunk: string) => {
+            output += chunk;
+            const normalizedOutput = normalizeOutput(output);
+
+            while (currentStep < steps.length && steps[currentStep].match.test(normalizedOutput)) {
+                child.write(steps[currentStep].reply);
+                currentStep += 1;
+            }
+        };
+
+        child.onData(handleChunk);
+        child.onExit(({exitCode}) => {
+            clearTimeout(timer);
+            if (exitCode === 0) {
+                resolve();
+                return;
+            }
+
+            reject(new Error(`Interactive command failed with exit code ${exitCode}.\n\nCommand: ${command}\n\nOutput:\n${normalizeOutput(output)}`));
+        });
+    });
+}
+
+/**
+ * Create and configure a Portabase agent with two Docker-backed databases.
+ * Entry point:
+ * - `command` is the CLI setup command copied from the agent details page.
+ * - `cwd` is the local workspace where the agent is installed.
+ * - this helper answers the wizard for PostgreSQL first, then MariaDB.
+ * Executes from: not page-bound; runs from a local test workspace on the Node.js side.
+ */
+export async function createAgentWithDockerDatabases(command: string, cwd: string) {
+    await runInteractiveCommand(command, cwd, [
+        {
+            match: /configure.*database|add.*database/i,
+            reply: "y\n",
+        },
+        {
+            match: /docker.*new local container|manual.*external|external.*existing/i,
+            reply: "\r",
+        },
+        {
+            match: /postgresql|mariadb/i,
+            reply: "\r",
+        },
+        {
+            match: /another.*database|add.*another|configure.*another/i,
+            reply: "y\n",
+        },
+        {
+            match: /docker.*new local container|manual.*external|external.*existing/i,
+            reply: "\r",
+        },
+        {
+            match: /postgresql|mariadb/i,
+            reply: "\u001B[B\r",
+        },
+        {
+            match: /another.*database|add.*another|configure.*another/i,
+            reply: "n\n",
+        },
+    ]);
+}

e2e/helpers/agent.ts

@@ -0,0 +1,80 @@
+import {Page} from "@playwright/test";
+import {execSync} from "node:child_process";
+
+
+/**
+ * Locate an agent card in the list.
+
+ * Executes from: `/dashboard/agents`.
+ */
+export function get(page: Page, name: string) {
+    return page.locator('a[href^="/dashboard/agents"]').filter({hasText: name}).first();
+}
+
+/**
+ * Create an agent from the selected entrypoint.
+ *
+ * Available entrypoints:
+ * - `button`: the classic create button.
+ * - `emptyState`: the empty-state CTA.
+ * - `auto`: uses the classic create button and falls back to the empty-state CTA.
+ *
+ * Executes from: `/dashboard/agents`.
+ */
+export async function create(page: Page, entrypoint: "auto" | "emptyState" | "button" = "auto", agentName: string, description: string) {
+    if (entrypoint === "auto") {
+        const createButton = page.getByRole("button", {name: /Create Agent/i});
+        if (await createButton.isVisible()) await page.getByRole("button", {name: /Create Agent/i}).click();
+        await page.getByText("Create new Agent", {exact: true}).click();
+    } else if (entrypoint === "button") {
+        await page.getByRole("button", {name: /Create Agent/i}).click();
+    } else if (entrypoint === "emptyState") {
+        await page.getByText("Create new Agent", {exact: true}).click();
+    }
+
+    await page.getByLabel("Name").fill(agentName);
+    await page.getByLabel("Description").fill(description);
+    await page.getByRole("button", {name: "Create"}).click();
+}
+
+/**
+ * Edit an existing agent (name and description) from its details page.
+ *
+ * Executes from: `/dashboard/agents/[agentId]`.
+ */
+export async function edit(page: Page, currentName: string, updatedName: string, updatedDescription: string) {
+    await get(page, currentName).click();
+
+    await page
+        .getByRole("button", {name: /Delete Agent/i})
+        .locator("xpath=ancestor::div[1]/preceding-sibling::div[1]/*[1]")
+        .click();
+
+    await page.getByLabel("Name").fill(updatedName);
+    await page.getByLabel("Description").fill(updatedDescription);
+    await page.getByRole("button", {name: "Update"}).click();
+}
+
+/**
+ * Delete an agent from its details page.
+
+ * Executes from: `/dashboard/agents/[agentId]`.
+ */
+export async function remove(page: Page, name: string) {
+    await get(page, name).click();
+    await page.getByRole("button", {name: /Delete Agent/i}).click();
+    await page.getByRole("button", {name: "Delete", exact: true}).click();
+}
+
+
+export async function launch(edgeKey: string) {
+    const output = execSync(
+        `EDGE_KEY=${edgeKey} docker compose -f e2e/helpers/agent/docker-compose.agent-a.yml up -d`,
+        {
+            cwd: process.cwd(),
+            encoding: "utf-8",
+            stdio: ["ignore", "pipe", "pipe"],
+        },
+    );
+    return output;
+}

e2e/helpers/agent/databases.json

@@ -0,0 +1,154 @@
+{
+  "databases": [
+    {
+      "name": "PostgreSQL 18",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-18",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef001"
+    },
+    {
+      "name": "PostgreSQL 17",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-17",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef002"
+    },
+    {
+      "name": "PostgreSQL 16",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-16",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef003"
+    },
+    {
+      "name": "PostgreSQL 15",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-15",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef004"
+    },
+    {
+      "name": "PostgreSQL 14",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-14",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef005"
+    },
+    {
+      "name": "PostgreSQL 13",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-13",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef006"
+    },
+    {
+      "name": "PostgreSQL 12",
+      "database": "backup_e2e",
+      "type": "postgresql",
+      "username": "backup",
+      "password": "backup",
+      "port": 5432,
+      "host": "postgresql-12",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef007"
+    },
+    {
+      "name": "MySQL 8.4",
+      "database": "backup_e2e",
+      "type": "mysql",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mysql-8.4",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef008"
+    },
+    {
+      "name": "MySQL 8.0",
+      "database": "backup_e2e",
+      "type": "mysql",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mysql-8.0",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef009"
+    },
+    {
+      "name": "MariaDB 11.4",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-11.4",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef010"
+    },
+    {
+      "name": "MariaDB 11.3",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-11.3",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef011"
+    },
+    {
+      "name": "MariaDB 11.2",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-11.2",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef012"
+    },
+    {
+      "name": "MariaDB 11.1",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-11.1",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef013"
+    },
+    {
+      "name": "MariaDB 11.0",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-11.0",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef014"
+    },
+    {
+      "name": "MariaDB 10.11",
+      "database": "backup_e2e",
+      "type": "mariadb",
+      "username": "backup",
+      "password": "backup",
+      "port": 3306,
+      "host": "mariadb-10.11",
+      "generated_id": "9f8a5b18-0f45-4b4c-a821-93d7e46ef015"
+    }
+  ]
+}

e2e/helpers/agent/databases.toml

@@ -0,0 +1,139 @@
+[[databases]]
+name = "MongoDB 8.0 Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = "backup"
+password = "backup"
+port = 27017
+host = "mongodb-8.0-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef101"
+
+[[databases]]
+name = "MongoDB 8.0 No Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = ""
+password = ""
+port = 27017
+host = "mongodb-8.0-no-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef102"
+
+[[databases]]
+name = "MongoDB 7.0 Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = "backup"
+password = "backup"
+port = 27017
+host = "mongodb-7.0-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef103"
+
+[[databases]]
+name = "MongoDB 7.0 No Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = ""
+password = ""
+port = 27017
+host = "mongodb-7.0-no-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef104"
+
+[[databases]]
+name = "MongoDB 6.0 Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = "backup"
+password = "backup"
+port = 27017
+host = "mongodb-6.0-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef105"
+
+[[databases]]
+name = "MongoDB 6.0 No Auth"
+database = "backup_e2e"
+type = "mongodb"
+username = ""
+password = ""
+port = 27017
+host = "mongodb-6.0-no-auth"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef106"
+
+[[databases]]
+name = "Redis 8"
+database = "0"
+type = "redis"
+username = ""
+password = ""
+port = 6379
+host = "redis-8"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef107"
+
+[[databases]]
+name = "Redis 7"
+database = "0"
+type = "redis"
+username = ""
+password = ""
+port = 6379
+host = "redis-7"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef108"
+
+[[databases]]
+name = "Valkey 8"
+database = "0"
+type = "valkey"
+username = ""
+password = ""
+port = 6379
+host = "valkey-8"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef109"
+
+[[databases]]
+name = "Valkey 7"
+database = "0"
+type = "valkey"
+username = ""
+password = ""
+port = 6379
+host = "valkey-7"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef110"
+
+[[databases]]
+name = "MSSQL 2022"
+database = "master"
+type = "mssql"
+username = "sa"
+password = "BackupRootPassw0rd!"
+port = 1433
+host = "mssql-2022"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef111"
+
+[[databases]]
+name = "MSSQL 2019"
+database = "master"
+type = "mssql"
+username = "sa"
+password = "BackupRootPassw0rd!"
+port = 1433
+host = "mssql-2019"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef112"
+
+[[databases]]
+name = "SQLite 3.46"
+database = "/data/backup_e2e.db"
+type = "sqlite"
+username = ""
+password = ""
+port = 0
+host = "sqlite-3.46"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef113"
+
+[[databases]]
+name = "SQLite 3.45"
+database = "/data/backup_e2e.db"
+type = "sqlite"
+username = ""
+password = ""
+port = 0
+host = "sqlite-3.45"
+generated_id = "9f8a5b18-0f45-4b4c-a821-93d7e46ef114"

e2e/helpers/agent/docker-compose.agent-a.yml

@@ -0,0 +1,24 @@
+name: portabase-agent-a
+
+services:
+
+  app:
+    container_name: portabase-agent
+    image: portabase/agent:latest
+    restart: unless-stopped
+    volumes:
+      - ./databases.json:/config/config.json
+    environment:
+      LOG: info
+      TZ: "UTC"
+      POLLING: 5
+      EDGE_KEY: "${EDGE_KEY}"
+    networks:
+      - portabase
+    extra_hosts:
+      - "localhost:host-gateway"
+
+networks:
+  portabase:
+    name: portabase
+    external: true

e2e/helpers/agent/docker-compose.agent-b.yml

@@ -0,0 +1,23 @@
+name: portabase-agent-b
+
+services:
+
+  app:
+    container_name: portabase-agent
+    image: portabase/agent:latest
+    restart: unless-stopped
+    volumes:
+      - ./databases.json:/config/config.json
+    environment:
+      LOG: info
+      TZ: "UTC"
+      POLLING: 5
+      DATA_PATH: "/data"
+      EDGE_KEY: "${EDGE_KEY}"
+    networks:
+      - portabase
+
+networks:
+  portabase:
+    name: portabase
+    external: true

e2e/helpers/agent/docker-compose.database.yml

@@ -0,0 +1,390 @@
+name: database
+
+x-postgresql-common: &postgresql-common
+  environment:
+    POSTGRES_DB: backup_e2e
+    POSTGRES_USER: backup
+    POSTGRES_PASSWORD: backup
+  healthcheck:
+    test: ["CMD-SHELL", "pg_isready -U backup -d backup_e2e"]
+    interval: 10s
+    timeout: 5s
+    retries: 5
+  networks:
+    - portabase
+
+x-mysql-common: &mysql-common
+  environment:
+    MYSQL_DATABASE: backup_e2e
+    MYSQL_USER: backup
+    MYSQL_PASSWORD: backup
+    MYSQL_ROOT_PASSWORD: backup-root
+  healthcheck:
+    test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p$$MYSQL_ROOT_PASSWORD"]
+    interval: 10s
+    timeout: 5s
+    retries: 10
+    start_period: 20s
+  networks:
+    - portabase
+
+x-mariadb-common: &mariadb-common
+  environment:
+    MARIADB_DATABASE: backup_e2e
+    MARIADB_USER: backup
+    MARIADB_PASSWORD: backup
+    MARIADB_ROOT_PASSWORD: backup-root
+  healthcheck:
+    test: ["CMD-SHELL", "mariadb-admin ping -h 127.0.0.1 -uroot -p$$MARIADB_ROOT_PASSWORD"]
+    interval: 10s
+    timeout: 5s
+    retries: 10
+    start_period: 20s
+  networks:
+    - portabase
+
+x-mongodb-auth-common: &mongodb-auth-common
+  environment:
+    MONGO_INITDB_ROOT_USERNAME: backup
+    MONGO_INITDB_ROOT_PASSWORD: backup
+    MONGO_INITDB_DATABASE: backup_e2e
+  healthcheck:
+    test:
+      [
+        "CMD-SHELL",
+        "mongosh --quiet --username $$MONGO_INITDB_ROOT_USERNAME --password $$MONGO_INITDB_ROOT_PASSWORD --authenticationDatabase admin --eval \"db.runCommand({ ping: 1 }).ok\" | grep 1",
+      ]
+    interval: 10s
+    timeout: 5s
+    retries: 10
+    start_period: 20s
+  networks:
+    - portabase
+
+x-mongodb-no-auth-common: &mongodb-no-auth-common
+  healthcheck:
+    test:
+      [
+        "CMD-SHELL",
+        "mongosh --quiet --eval \"db.runCommand({ ping: 1 }).ok\" | grep 1",
+      ]
+    interval: 10s
+    timeout: 5s
+    retries: 10
+    start_period: 20s
+  networks:
+    - portabase
+
+x-redis-common: &redis-common
+  command: ["redis-server", "--appendonly", "yes"]
+  healthcheck:
+    test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
+    interval: 10s
+    timeout: 5s
+    retries: 1
+  networks:
+    - portabase
+
+x-valkey-common: &valkey-common
+  command: ["valkey-server", "--appendonly", "yes"]
+  healthcheck:
+    test: ["CMD-SHELL", "valkey-cli ping | grep PONG"]
+    interval: 10s
+    timeout: 5s
+    retries: 10
+  networks:
+    - portabase
+
+x-mssql-common: &mssql-common
+  platform: linux/amd64
+  environment:
+    ACCEPT_EULA: "Y"
+    MSSQL_SA_PASSWORD: "BackupRootPassw0rd!"
+  healthcheck:
+    test:
+      [
+        "CMD-SHELL",
+        "(test -x /opt/mssql-tools18/bin/sqlcmd && /opt/mssql-tools18/bin/sqlcmd -C -S localhost -U sa -P $$MSSQL_SA_PASSWORD -Q \"SELECT 1\") || (test -x /opt/mssql-tools/bin/sqlcmd && /opt/mssql-tools/bin/sqlcmd -S localhost -U sa -P $$MSSQL_SA_PASSWORD -Q \"SELECT 1\")",
+      ]
+    interval: 15s
+    timeout: 10s
+    retries: 20
+    start_period: 40s
+  networks:
+    - portabase
+
+x-sqlite-common: &sqlite-common
+  command: ["/bin/sh", "-lc", "mkdir -p /data && sqlite3 /data/backup_e2e.db 'SELECT 1;' >/dev/null && tail -f /dev/null"]
+  healthcheck:
+    test: ["CMD-SHELL", "sqlite3 /data/backup_e2e.db 'SELECT 1;' | grep 1"]
+    interval: 10s
+    timeout: 5s
+    retries: 1
+  networks:
+    - portabase
+
+services:
+
+  postgresql-18:
+    <<: *postgresql-common
+    image: postgres:18-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-18-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-17:
+    <<: *postgresql-common
+    image: postgres:17-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-17-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-16:
+    <<: *postgresql-common
+    image: postgres:16-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-16-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-15:
+    <<: *postgresql-common
+    image: postgres:15-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-15-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-14:
+    <<: *postgresql-common
+    image: postgres:14-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-14-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-13:
+    <<: *postgresql-common
+    image: postgres:13-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-13-backup-e2e-data:/var/lib/postgresql/data
+
+  postgresql-12:
+    <<: *postgresql-common
+    image: postgres:12-alpine
+    expose:
+      - "5432"
+    volumes:
+      - postgresql-12-backup-e2e-data:/var/lib/postgresql/data
+
+  mysql-8.4:
+    <<: *mysql-common
+    image: mysql:8.4
+    expose:
+      - "3306"
+    volumes:
+      - mysql-8.4-backup-e2e-data:/var/lib/mysql
+
+  mysql-8.0:
+    <<: *mysql-common
+    image: mysql:8.0
+    expose:
+      - "3306"
+    volumes:
+      - mysql-8.0-backup-e2e-data:/var/lib/mysql
+
+  mariadb-11.4:
+    <<: *mariadb-common
+    image: mariadb:11.4
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-11.4-backup-e2e-data:/var/lib/mysql
+
+  mariadb-11.3:
+    <<: *mariadb-common
+    image: mariadb:11.3
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-11.3-backup-e2e-data:/var/lib/mysql
+
+  mariadb-11.2:
+    <<: *mariadb-common
+    image: mariadb:11.2
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-11.2-backup-e2e-data:/var/lib/mysql
+
+  mariadb-11.1:
+    <<: *mariadb-common
+    image: mariadb:11.1
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-11.1-backup-e2e-data:/var/lib/mysql
+
+  mariadb-11.0:
+    <<: *mariadb-common
+    image: mariadb:11.0
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-11.0-backup-e2e-data:/var/lib/mysql
+
+  mariadb-10.11:
+    <<: *mariadb-common
+    image: mariadb:10.11
+    expose:
+      - "3306"
+    volumes:
+      - mariadb-10.11-backup-e2e-data:/var/lib/mysql
+
+  mongodb-8.0-auth:
+    <<: *mongodb-auth-common
+    image: mongo:8.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-8.0-auth-backup-e2e-data:/data/db
+
+  mongodb-8.0-no-auth:
+    <<: *mongodb-no-auth-common
+    image: mongo:8.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-8.0-no-auth-backup-e2e-data:/data/db
+
+  mongodb-7.0-auth:
+    <<: *mongodb-auth-common
+    image: mongo:7.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-7.0-auth-backup-e2e-data:/data/db
+
+  mongodb-7.0-no-auth:
+    <<: *mongodb-no-auth-common
+    image: mongo:7.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-7.0-no-auth-backup-e2e-data:/data/db
+
+  mongodb-6.0-auth:
+    <<: *mongodb-auth-common
+    image: mongo:6.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-6.0-auth-backup-e2e-data:/data/db
+
+  mongodb-6.0-no-auth:
+    <<: *mongodb-no-auth-common
+    image: mongo:6.0
+    expose:
+      - "27017"
+    volumes:
+      - mongodb-6.0-no-auth-backup-e2e-data:/data/db
+
+  redis-8:
+    <<: *redis-common
+    image: redis:8
+    expose:
+      - "6379"
+    volumes:
+      - redis-8-backup-e2e-data:/data
+
+  redis-7:
+    <<: *redis-common
+    image: redis:7
+    expose:
+      - "6379"
+    volumes:
+      - redis-7-backup-e2e-data:/data
+
+  valkey-8:
+    <<: *valkey-common
+    image: valkey/valkey:8
+    expose:
+      - "6379"
+    volumes:
+      - valkey-8-backup-e2e-data:/data
+
+  valkey-7:
+    <<: *valkey-common
+    image: valkey/valkey:7
+    expose:
+      - "6379"
+    volumes:
+      - valkey-7-backup-e2e-data:/data
+
+  mssql-2022:
+    <<: *mssql-common
+    image: mcr.microsoft.com/mssql/server:2022-latest
+    expose:
+      - "1433"
+    volumes:
+      - mssql-2022-backup-e2e-data:/var/opt/mssql
+
+  mssql-2019:
+    <<: *mssql-common
+    image: mcr.microsoft.com/mssql/server:2019-latest
+    expose:
+      - "1433"
+    volumes:
+      - mssql-2019-backup-e2e-data:/var/opt/mssql
+
+  sqlite-3.46:
+    <<: *sqlite-common
+    image: keinos/sqlite3:3.46.1
+    volumes:
+      - sqlite-3.46-backup-e2e-data:/data
+
+  sqlite-3.45:
+    <<: *sqlite-common
+    image: keinos/sqlite3:3.45.3
+    volumes:
+      - sqlite-3.45-backup-e2e-data:/data
+
+volumes:
+  postgresql-18-backup-e2e-data:
+  postgresql-17-backup-e2e-data:
+  postgresql-16-backup-e2e-data:
+  postgresql-15-backup-e2e-data:
+  postgresql-14-backup-e2e-data:
+  postgresql-13-backup-e2e-data:
+  postgresql-12-backup-e2e-data:
+  mysql-8.4-backup-e2e-data:
+  mysql-8.0-backup-e2e-data:
+  mariadb-11.4-backup-e2e-data:
+  mariadb-11.3-backup-e2e-data:
+  mariadb-11.2-backup-e2e-data:
+  mariadb-11.1-backup-e2e-data:
+  mariadb-11.0-backup-e2e-data:
+  mariadb-10.11-backup-e2e-data:
+  mongodb-8.0-auth-backup-e2e-data:
+  mongodb-8.0-no-auth-backup-e2e-data:
+  mongodb-7.0-auth-backup-e2e-data:
+  mongodb-7.0-no-auth-backup-e2e-data:
+  mongodb-6.0-auth-backup-e2e-data:
+  mongodb-6.0-no-auth-backup-e2e-data:
+  redis-8-backup-e2e-data:
+  redis-7-backup-e2e-data:
+  valkey-8-backup-e2e-data:
+  valkey-7-backup-e2e-data:
+  mssql-2022-backup-e2e-data:
+  mssql-2019-backup-e2e-data:
+  sqlite-3.46-backup-e2e-data:
+  sqlite-3.45-backup-e2e-data:
+
+networks:
+  portabase:
+    name: portabase
+    external: true

e2e/helpers/auth.ts

@@ -0,0 +1,50 @@
+import {Page} from "@playwright/test";
+
+export type UserCredentials = {
+    username: string
+    email: string
+    password: string
+}
+
+export const users: Record<string, UserCredentials> = {
+    admin: {username: "Admin", email: "admin@example.com", password: "testPASS123456!"},
+    normal: {username: "John Doe", email: "john.doe@example.com", password: "testPASS123456!"},
+}
+
+/**
+ * Fill and submit the registration form.
+ *
+ * Executes from: `/register`.
+ */
+export async function register(page: Page, name: string, email: string, password: string, confirmPassword: string) {
+    await page.locator('input[name="name"]').fill(name)
+    await page.locator('input[name="email"]').fill(email)
+    await page.locator('input[name="password"]').fill(password)
+    await page.locator('input[name="confirmPassword"]').fill(confirmPassword)
+
+    await page.click('button[type="submit"]')
+}
+
+/**
+ * Fill and submit the login form.
+ *
+ * Executes from: `/login`.
+ */
+export async function login(page: Page, email: string, password: string) {
+    await page.locator('input[name="email"]').fill(email)
+    await page.locator('input[name="password"]').fill(password)
+
+    await page.locator('button:has-text("Login")').click()
+}
+
+/**
+ * Log out the current authenticated user.
+ *
+ * Executes from: any authenticated `/dashboard/**` page.
+ */
+export async function logout(page: Page) {
+    const profileButton = page.getByTestId('profile-dropdown')
+    await profileButton.first().click();
+
+    await page.getByRole("menuitem").filter({hasText: /Logout/i}).click();
+}

e2e/helpers/env.ts

@@ -0,0 +1,62 @@
+const REQUIRED_E2E_ENV_VARS = [
+    "E2E_NOTIFICATION_SMTP_HOST",
+    "E2E_NOTIFICATION_SMTP_PORT",
+    "E2E_NOTIFICATION_SMTP_USER",
+    "E2E_NOTIFICATION_SMTP_PASSWORD",
+    "E2E_NOTIFICATION_SMTP_FROM",
+    "E2E_NOTIFICATION_SMTP_TO",
+    "E2E_NOTIFICATION_SLACK_WEBHOOK",
+    "E2E_NOTIFICATION_DISCORD_WEBHOOK",
+    "E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN",
+    "E2E_NOTIFICATION_TELEGRAM_CHAT_ID",
+    "E2E_NOTIFICATION_TELEGRAM_TOPIC_ID",
+    "E2E_NOTIFICATION_GOTIFY_SERVER_URL",
+    "E2E_NOTIFICATION_GOTIFY_APP_TOKEN",
+    "E2E_NOTIFICATION_NTFY_TOPIC",
+    "E2E_NOTIFICATION_NTFY_SERVER_URL",
+    "E2E_NOTIFICATION_NTFY_TOKEN",
+    "E2E_NOTIFICATION_NTFY_USERNAME",
+    "E2E_NOTIFICATION_NTFY_PASSWORD",
+    "E2E_NOTIFICATION_WEBHOOK_URL",
+    "E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER",
+    "E2E_NOTIFICATION_WEBHOOK_SECRET",
+    "E2E_STORAGE_AWS_S3_ENDPOINT_URL",
+    "E2E_STORAGE_AWS_S3_REGION",
+    "E2E_STORAGE_AWS_S3_ACCESS_KEY",
+    "E2E_STORAGE_AWS_S3_SECRET_KEY",
+    "E2E_STORAGE_AWS_S3_BUCKET_NAME",
+    "E2E_STORAGE_AWS_S3_PORT",
+    "E2E_STORAGE_R2_ENDPOINT_URL",
+    "E2E_STORAGE_R2_REGION",
+    "E2E_STORAGE_R2_ACCESS_KEY",
+    "E2E_STORAGE_R2_SECRET_KEY",
+    "E2E_STORAGE_R2_BUCKET_NAME",
+    "E2E_STORAGE_R2_PORT",
+    "E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID",
+    "E2E_STORAGE_GOOGLE_DRIVE_CLIENT_SECRET",
+    "E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID",
+] as const;
+
+function assertRequiredEnvVars() {
+    const missingVars = REQUIRED_E2E_ENV_VARS.filter((name) => {
+        const value = process.env[name]?.trim();
+        return !value;
+    });
+
+    if (missingVars.length > 0) {
+        throw new Error(
+            `Missing required environment variables:\n${missingVars.map((name) => `- ${name}`).join("\n")}`,
+        );
+    }
+}
+
+assertRequiredEnvVars();
+
+export function getEnv(name: string): string {
+    const value = process.env[name]?.trim();
+    if (!value) {
+        throw new Error(`Missing required environment variable: ${name}`);
+    }
+
+    return value;
+}

e2e/helpers/notification.ts

@@ -0,0 +1,94 @@
+import {Page} from "@playwright/test";
+
+
+/**
+ * Locate a notification channel card in the list.
+ *
+ * Executes from: `/dashboard/notifications/channels`.
+ */
+export function get(page: Page, channelName: string) {
+    return page.locator('div.block.transition-all.duration-200.rounded-xl', {
+        has: page.locator('h3', {hasText: channelName}),
+    }).first();
+}
+
+/**
+ * Open the edit dialog for an existing notification channel.
+ *
+ * Executes from: `/dashboard/notifications/channels`.
+ */
+export async function edit(page: Page, channelName: string) {
+    const card = get(page, channelName);
+    await card.locator("button").nth(1).click();
+}
+
+/**
+ * Delete an existing notification channel.
+ *
+ * Executes from: `/dashboard/notifications/channels`.
+ */
+export async function remove(page: Page, channelName: string) {
+    const card = get(page, channelName);
+    await card.locator("button").nth(2).click();
+    await page.getByRole("button", {name: "Delete"}).click();
+}
+
+/**
+ * Fill the notification channel creation form.
+ *
+ * Available entrypoints:
+ * - `button`: the classic add button.
+ * - `emptyState`: the empty-state CTA.
+ * - `auto` use the classic add button and falls back to the empty-state CTA.
+ *
+ * Executes from: `/dashboard/notifications/channels`.
+ */
+export async function create(
+    page: Page,
+    provider: "Discord" | "Gotify" | "ntfy.sh" | "Slack" | "Email" | "Telegram" | "Webhook",
+    channelName: string,
+    fillConfig: (page: Page) => Promise<void>,
+    entrypoint: "auto" | "emptyState" | "button" = "auto",
+) {
+    if (entrypoint === "auto") {
+        const addButton = page.getByRole("button", {name: /Add notification channel/i});
+        if (await addButton.isVisible()) await page.getByRole("button", {name: /Add notification channel/i}).click();
+        else await page.getByRole("button", {name: /No notification channels configured yet/i}).click();
+    } else if (entrypoint === "button") {
+        await page.getByRole("button", {name: /Add notification channel/i}).click();
+    } else if (entrypoint === "emptyState") {
+        await page.getByRole("button", {name: /No notification channels configured yet/i}).click();
+    }
+
+    await page.getByText(provider, {exact: true}).click();
+    await page.getByLabel(/Channel Name/).fill(channelName);
+    await fillConfig(page);
+}
+
+/**
+ * Submit the notification channel creation form.
+ *
+ * Executes from: the add notification channel dialog opened from `/dashboard/notifications/channels`.
+ */
+export async function submit(page: Page) {
+    await page.getByRole("button", {name: "Add Channel"}).click();
+}
+
+/**
+ * Open the edit dialog for a notification channel and trigger the test action.
+ *
+ * Executes from: `/dashboard/notifications/channels`.
+ */
+export async function testFromEdit(page: Page, channelName: string) {
+    await edit(page, channelName);
+    await page.getByRole("button", {name: /Test Channel/i}).click();
+}
+
+/**
+ * Close the current notification channel dialog without saving.
+ *
+ * Executes from: the add or edit notification channel dialog.
+ */
+export async function cancel(page: Page) {
+    await page.getByRole("button", {name: "Cancel"}).click();
+}

e2e/helpers/oidc.ts

@@ -0,0 +1,165 @@
+import {expect, Page} from "@playwright/test";
+import {execSync} from "node:child_process";
+
+
+export const oidcProviders: Array<{ id: string, title: string }> = [
+    {id: "authentik", title: "Authentik"},
+    {id: "pocket-id", title: "Pocket ID"},
+    {id: "keycloak", title: "Keycloak"},
+]
+
+
+export async function loginWithOidc(page: Page, providerId) {
+    await page.goto("/login");
+
+    const provider = oidcProviders.find((entry) => entry.id === providerId);
+    if (!provider) throw new Error(`Unknown OIDC provider: ${providerId}`)
+
+    await expect(page.getByRole("button", {name: provider.title})).toBeVisible();
+
+    const authorizationUrl = await getOidcAuthorizationUrl(page, providerId);
+    await page.goto(authorizationUrl);
+
+    switch (providerId) {
+        case "pocket-id":
+            await loginWithPocketId(page)
+            return
+        case "authentik":
+            await loginWithAuthentik(page)
+            return
+        case "keycloak":
+            await loginWithKeycloak(page)
+            return
+    }
+
+    // if (providerId === "pocket-id") {
+    //     await loginWithPocketId(page);
+    //     return;
+    // }
+    //
+    // const authorizationUrl = await getOidcAuthorizationUrl(page, providerId);
+    // await page.goto(authorizationUrl);
+    //
+    // if (providerId === "authentik") {
+    //     await loginWithAuthentik(page);
+    //     return;
+    // }
+    //
+    // await loginWithKeycloak(page);
+}
+
+
+
+
+
+
+
+
+
+const AUTHENTIK_USER = "admin@example.com";
+const AUTHENTIK_PASSWORD = "testPASS123456!";
+
+const KEYCLOAK_USER = "admin";
+const KEYCLOAK_PASSWORD = "admin";
+
+const oidcHostRewrites: Record<string, string> = {
+    "http://authentik-server:9000": "http://localhost:3057",
+    "http://keycloak:8080": "http://localhost:3056",
+    "http://pocket-id:1411": "http://localhost:3055",
+};
+
+function toBrowserReachableUrl(url: string) {
+    let browserUrl = url;
+
+    for (const [internalOrigin, browserOrigin] of Object.entries(oidcHostRewrites)) {
+        browserUrl = browserUrl.replace(internalOrigin, browserOrigin);
+    }
+
+    return browserUrl;
+}
+
+async function getOidcAuthorizationUrl(page: Page, providerId) {
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const result = await page.evaluate(async ({providerId}) => {
+            const response = await fetch("/api/auth/sign-in/sso", {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    providerId,
+                    providerType: "oidc",
+                    callbackURL: "/dashboard",
+                }),
+            });
+
+            const data = await response.json().catch(() => ({}));
+            return {
+                ok: response.ok,
+                status: response.status,
+                data,
+            };
+        }, {providerId});
+
+        if (result.ok && result.data?.url) {
+            return toBrowserReachableUrl(result.data.url);
+        }
+
+        if (result.status !== 429 || attempt === 2) {
+            throw new Error(`Failed to initiate ${providerId} OIDC sign-in: ${JSON.stringify(result)}`);
+        }
+
+        await page.waitForTimeout(2_000);
+    }
+    throw new Error(`Failed to initiate ${providerId} OIDC sign-in after retries.`);
+}
+
+async function loginWithAuthentik(page: Page) {
+    const usernameField = page.locator('input[name="uidField"], input[type="text"], input[type="email"]').first();
+    await expect(usernameField).toBeVisible();
+    await usernameField.fill(AUTHENTIK_USER);
+    await usernameField.press("Enter").catch(() => undefined);
+    if (await page.getByLabel(/password/i).count() === 0) {
+        await page.getByRole("button", {name: /log in|sign in|continue/i}).click();
+    }
+
+    const passwordField = page.locator('input[name="password"], input[type="password"]').first();
+    await expect(passwordField).toBeVisible();
+    await passwordField.fill(AUTHENTIK_PASSWORD);
+    await page.getByRole("button", {name: /log in|sign in|continue/i}).click();
+}
+
+async function loginWithKeycloak(page: Page) {
+    await page.locator('input[name="username"], #username').fill(KEYCLOAK_USER);
+    await page.locator('input[name="password"], #password').fill(KEYCLOAK_PASSWORD);
+    await page.locator('input[type="submit"], #kc-login').click();
+}
+
+function getPocketIdAccessUrl() {
+    const output = execSync(
+        "docker compose -f docker-compose.oidc.yml exec -T pocket-id ./pocket-id one-time-access-token admin",
+        {
+            cwd: process.cwd(),
+            encoding: "utf-8",
+            stdio: ["ignore", "pipe", "pipe"],
+        },
+    );
+
+    const match = output.match(/https?:\/\/\S+/);
+    if (!match) {
+        throw new Error(`Failed to extract Pocket ID access URL from output:\n${output}`);
+    }
+
+    return match[0];
+}
+
+async function loginWithPocketId(page: Page) {
+    // const accessUrl = getPocketIdAccessUrl();
+    // const authorizationUrl = await getOidcAuthorizationUrl(page, "pocket-id");
+
+    // await page.goto(authorizationUrl);
+    // await page.goto(accessUrl);
+    // await page.goto(authorizationUrl);
+    await page.waitForURL(/\/dashboard\/home(?:\?.*)?$/);
+}
+

e2e/helpers/project.ts

@@ -0,0 +1,59 @@
+import {Page} from "@playwright/test";
+
+
+/**
+ * Locate a project card in the list.
+ *
+ * Executes from: `/dashboard/projects`.
+ */
+export function get(page: Page, projectName: string) {
+    return page.locator('a[href^="/dashboard/projects/"]').filter({hasText: projectName}).first();
+}
+
+/**
+ * Create a project from the selected entrypoint.
+ *
+ * Available entrypoints:
+ * - `emptyState`: the empty-state CTA.
+ * - `button`: the classic create button.
+ *
+ * * Executes from: `/dashboard/projects`.
+ */
+export async function create(page: Page, entrypoint: "emptyState" | "button", projectName: string) {
+    if (entrypoint === "emptyState") {
+        await page.getByText("Create new Project", {exact: true}).click();
+    } else {
+        await page.getByRole("button", {name: /Create Project/i}).click();
+    }
+
+    await page.getByLabel("Name").fill(projectName);
+    await page.getByRole("button", {name: "Create"}).click();
+}
+
+/**
+ * Edit an existing project from its details page.
+ *
+ * Executes from: `/dashboard/projects/[projectId]`.
+ */
+export async function edit(page: Page, currentName: string, updatedName: string) {
+    await get(page, currentName).click();
+
+    await page
+        .getByRole("button", {name: /Delete Project/i})
+        .locator("xpath=ancestor::div[1]/preceding-sibling::div[1]/*[1]")
+        .click();
+
+    await page.getByLabel("Name").fill(updatedName);
+    await page.getByRole("button", {name: "Update"}).click();
+}
+
+/**
+ * Delete an existing project from its details page.
+ *
+ * Executes from: `/dashboard/projects/[projectId]`.
+ * */
+export async function remove(page: Page, projectName: string) {
+    await get(page, projectName).click();
+    await page.getByRole("button", {name: /Delete Project/i}).click();
+    await page.getByRole("button", {name: "Delete", exact: true}).click();
+}

e2e/helpers/session.ts

@@ -0,0 +1 @@
+export const LOCAL_STORAGE_PATH = "./e2e/local-storage.json";

e2e/helpers/storage.ts

@@ -0,0 +1,103 @@
+import {Page} from "@playwright/test";
+
+
+/**
+ * Locate a storage channel card in the channels list.
+ *
+ * Executes from: `/dashboard/storages/channels`.
+ */
+export function get(page: Page, channelName: string) {
+    return page.locator('div.block.transition-all.duration-200.rounded-xl', {
+        has: page.locator('h3', {hasText: channelName}),
+    }).first();
+}
+
+/**
+ * Fill the storage channel creation form.
+ *
+ * Available entrypoints:
+ * - `button`: the classic add button.
+ * - `emptyState`: the empty-state CTA.
+ * - `auto`: uses the classic add button and falls back to the empty-state CTA.
+ *
+ * Executes from: `/dashboard/storages/channels`.
+ */
+export async function create(
+    page: Page,
+    provider: "S3" | "Google Drive",
+    channelName: string,
+    fillConfig: (page: Page) => Promise<void>,
+    entrypoint: "auto" | "emptyState" | "button" = "auto",
+) {
+    if (entrypoint === "auto") {
+        const addButton = page.getByRole("button", {name: /Add storage channel/i});
+        if (await addButton.isVisible()) await page.getByRole("button", {name: /Add storage channel/i}).click();
+        else await page.getByText("No storage channels configured yet", {exact: true}).click();
+    } else if (entrypoint === "button") {
+        await page.getByRole("button", {name: /Add storage channel/i}).click();
+    } else if (entrypoint === "emptyState") {
+        await page.getByText("No storage channels configured yet", {exact: true}).click();
+    }
+
+    await page.getByText(provider, {exact: true}).click();
+    await page.getByLabel(/Channel Name/).fill(channelName);
+    await fillConfig(page);
+}
+
+/**
+ * Open the edit dialog for an existing storage channel.
+ *
+ * Executes from: `/dashboard/storages/channels`.
+ */
+export async function edit(page: Page, channelName: string) {
+    const card = get(page, channelName);
+    await card.locator("button").nth(1).click();
+}
+
+/**
+ * Delete an existing storage channel.
+ *
+ * Executes from: `/dashboard/storages/channels`.
+ */
+export async function remove(page: Page, channelName: string) {
+    const card = get(page, channelName);
+    await card.locator("button").nth(2).click();
+    await page.getByRole("button", {name: "Delete"}).click();
+}
+
+/**
+ * Trigger the storage connection test in the current dialog.
+ *
+ * Executes from: the add or edit storage channel dialog opened from `/dashboard/storages/channels`.
+ */
+export async function testConnection(page: Page) {
+    await page.getByRole("button", {name: /Test Storage/i}).click();
+}
+
+/**
+ * Submit the storage channel creation form.
+ *
+ * Executes from: the add storage channel dialog opened from `/dashboard/storages/channels`.
+ */
+export async function submit(page: Page) {
+    await page.getByRole("button", {name: "Add Channel"}).click();
+}
+
+/**
+ * Open the edit dialog for a storage channel and trigger the test action.
+ *
+ * Executes from: `/dashboard/storages/channels`.
+ */
+export async function testFromEdit(page: Page, channelName: string) {
+    await edit(page, channelName);
+    await testConnection(page);
+}
+
+/**
+ * Close the current storage channel dialog without saving.
+ *
+ * Executes from: the add or edit storage channel dialog.
+ */
+export async function cancel(page: Page) {
+    await page.getByRole("button", {name: "Cancel"}).click();
+}

e2e/notification/discord.spec.ts

@@ -0,0 +1,71 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const validChannelName = "Discord E2E Required";
+const invalidChannelName = "Discord E2E Invalid";
+
+// test.describe.serial("Valid channel", () => {
+//     test("Create and test a valid Discord channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Discord", validChannelName, async (page) => {
+//             await page.getByLabel(/Discord Webhook URL/).fill(getEnv("E2E_NOTIFICATION_DISCORD_WEBHOOK"));
+//         });
+//         await expect(page.getByRole("heading", {name: "Add Notification Channel"})).toBeVisible();
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toBeVisible();
+//         await expect(page.getByText("Sent to Discord")).toBeVisible();
+//         await cancel(page);
+//         await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toHaveCount(0);
+//     });
+//
+//     test("Edit and test a valid Discord channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toBeVisible();
+//         await expect(page.getByText("Sent to Discord")).toBeVisible();
+//         await cancel(page);
+//         await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toHaveCount(0);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Discord channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Discord", invalidChannelName, async (page) => {
+            await page.getByLabel(/Discord Webhook URL/).fill("https://discord.com/api/webhooks/123456789012345678/wrong-discord-webhook-token");
+        });
+        await expect(page.getByRole("heading", {name: "Add Notification Channel"})).toBeVisible();
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toBeVisible();
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+        await expect(page.getByRole("heading", {name: "Edit Notification Channel"})).toHaveCount(0);
+    });
+
+    test("Delete invalid Discord channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/gotify.spec.ts

@@ -0,0 +1,66 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const validChannelName = "Gotify E2E Required";
+const invalidChannelName = "Gotify E2E Invalid";
+
+// test.describe.serial("Valid channel", () => {
+//     test("Create and test a valid Gotify channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Gotify", validChannelName, async (page) => {
+//             await page.getByLabel(/Gotify Server URL/).fill(getEnv("E2E_NOTIFICATION_GOTIFY_SERVER_URL"));
+//             await page.getByLabel(/Application Token/).fill(getEnv("E2E_NOTIFICATION_GOTIFY_APP_TOKEN"));
+//         });
+//         await expect(page.getByRole("heading", {name: "Add Notification Channel"})).toBeVisible();
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText("Sent to Gotify")).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Edit and test a valid Gotify channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText("Sent to Gotify")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Gotify channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Gotify", invalidChannelName, async (page) => {
+            await page.getByLabel(/Gotify Server URL/).fill(getEnv("E2E_NOTIFICATION_GOTIFY_SERVER_URL"));
+            await page.getByLabel(/Application Token/).fill("wrong-gotify-app-token");
+        });
+        await expect(page.getByRole("heading", {name: "Add Notification Channel"})).toBeVisible();
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid Gotify channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/ntfy.spec.ts

@@ -0,0 +1,73 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const requiredChannelName = "Ntfy E2E Required";
+const optionalChannelName = "Ntfy E2E Optional";
+const invalidChannelName = "Ntfy E2E Invalid";
+
+// test.describe.serial("Valid channels", () => {
+//     test("Create and test a valid Ntfy channel with only required fields", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "ntfy.sh", requiredChannelName, async (page) => {
+//             await page.getByLabel(/Topic Name/).fill(getEnv("E2E_NOTIFICATION_NTFY_TOPIC"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, requiredChannelName)).toBeVisible();
+//         await testFromEdit(page, requiredChannelName);
+//         await expect(page.getByText("Sent to ntfy")).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Create and test a valid Ntfy channel with optional fields", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "ntfy.sh", optionalChannelName, async (page) => {
+//             await page.getByLabel(/Topic Name/).fill(getEnv("E2E_NOTIFICATION_NTFY_TOPIC"));
+//             await page.getByLabel(/^Server URL$/).fill(getEnv("E2E_NOTIFICATION_NTFY_SERVER_URL"));
+//             await page.getByLabel(/^Access Token$/).fill(getEnv("E2E_NOTIFICATION_NTFY_TOKEN"));
+//             await page.getByLabel(/^Basic Auth Username$/).fill(getEnv("E2E_NOTIFICATION_NTFY_USERNAME"));
+//             await page.getByLabel(/^Basic Auth Password$/).fill(getEnv("E2E_NOTIFICATION_NTFY_PASSWORD"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, optionalChannelName)).toBeVisible();
+//         await testFromEdit(page, optionalChannelName);
+//         await expect(page.getByText("Sent to ntfy")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Ntfy channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "ntfy.sh", invalidChannelName, async (page) => {
+            await page.getByLabel(/Topic Name/).fill("wrong-ntfy-topic");
+            await page.getByLabel(/^Server URL$/).fill(getEnv("E2E_NOTIFICATION_NTFY_SERVER_URL"));
+            await page.getByLabel(/^Access Token$/).fill("wrong-ntfy-token");
+        });
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid Ntfy channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/slack.spec.ts

@@ -0,0 +1,61 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const validChannelName = "Slack E2E Required";
+const invalidChannelName = "Slack E2E Invalid";
+
+// test.describe.serial("Valid channel", () => {
+//     test("Create and test a valid Slack channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Slack", validChannelName, async (page) => {
+//             await page.getByLabel(/Slack Webhook URL/).fill(getEnv("E2E_NOTIFICATION_SLACK_WEBHOOK"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText("Sent to Slack")).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Edit and test a valid Slack E2E channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText("Sent to Slack")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Slack channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Slack", invalidChannelName, async (page) => {
+            await page.getByLabel(/Slack Webhook URL/).fill("https://WRONG_SLACK_WEBHOOK");
+        });
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid Slack channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/smtp.spec.ts

@@ -0,0 +1,72 @@
+import {expect, test} from "@playwright/test";
+import {getEnv} from "../helpers/env";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const validChannelName = "SMTP E2E Required";
+const invalidChannelName = "SMTP E2E Invalid";
+const successMessage = `Email sent: ${getEnv("E2E_NOTIFICATION_SMTP_TO")}`;
+
+// test.describe.serial("Valid channel", () => {
+//     test("Create and test a valid SMTP channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Email", validChannelName, async (page) => {
+//             await page.getByLabel(/SMTP Host/).fill(getEnv("E2E_NOTIFICATION_SMTP_HOST"));
+//             await page.getByLabel(/SMTP Port/).fill(getEnv("E2E_NOTIFICATION_SMTP_PORT"));
+//             await page.getByLabel(/Username/).fill(getEnv("E2E_NOTIFICATION_SMTP_USER"));
+//             await page.getByLabel(/Password/).fill(getEnv("E2E_NOTIFICATION_SMTP_PASSWORD"));
+//             await page.getByLabel(/From Email/).fill(getEnv("E2E_NOTIFICATION_SMTP_FROM"));
+//             await page.getByLabel(/To Email/).fill(getEnv("E2E_NOTIFICATION_SMTP_TO"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText(successMessage)).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Edit and test a valid SMTP channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await expect(get(page, validChannelName)).toBeVisible();
+//         await testFromEdit(page, validChannelName);
+//         await expect(page.getByText(successMessage)).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid SMTP E2E channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Email", invalidChannelName, async (page) => {
+            await page.getByLabel(/SMTP Host/).fill("smtp.invalid");
+            await page.getByLabel(/SMTP Port/).fill(getEnv("E2E_NOTIFICATION_SMTP_PORT"));
+            await page.getByLabel(/Username/).fill(getEnv("E2E_NOTIFICATION_SMTP_USER"));
+            await page.getByLabel(/Password/).fill("wrong-password");
+            await page.getByLabel(/From Email/).fill(getEnv("E2E_NOTIFICATION_SMTP_FROM"));
+            await page.getByLabel(/To Email/).fill(getEnv("E2E_NOTIFICATION_SMTP_TO"));
+        });
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid SMTP channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/telegram.spec.ts

@@ -0,0 +1,72 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const requiredChannelName = "Telegram E2E Required";
+const optionalChannelName = "Telegram E2E Optional";
+const invalidChannelName = "Telegram E2E Invalid";
+
+// test.describe.serial("Valid channels", () => {
+//     test("Create and test a valid Telegram channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Telegram", requiredChannelName, async (page) => {
+//             await page.getByLabel(/Telegram Bot Token/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN"));
+//             await page.getByLabel(/Telegram Chat ID/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_CHAT_ID"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, requiredChannelName)).toBeVisible();
+//         await testFromEdit(page, requiredChannelName);
+//         await expect(page.getByText("Sent to Telegram")).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Create and test a valid Telegram channel with Topic ID", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Telegram", optionalChannelName, async (page) => {
+//             await page.getByLabel(/Telegram Bot Token/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_BOT_TOKEN"));
+//             await page.getByLabel(/Telegram Chat ID/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_CHAT_ID"));
+//             await page.getByLabel(/Telegram Topic ID/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_TOPIC_ID"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, optionalChannelName)).toBeVisible();
+//         await testFromEdit(page, optionalChannelName);
+//         await expect(page.getByText("Sent to Telegram")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Telegram channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Telegram", invalidChannelName, async (page) => {
+            await page.getByLabel(/Telegram Bot Token/).fill("wrong-telegram-bot-token");
+            await page.getByLabel(/Telegram Chat ID/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_CHAT_ID"));
+            await page.getByLabel(/Telegram Topic ID/).fill(getEnv("E2E_NOTIFICATION_TELEGRAM_TOPIC_ID"));
+        });
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid Telegram channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/notification/webhook.spec.ts

@@ -0,0 +1,71 @@
+import {expect, test} from "@playwright/test";
+import {
+    cancel, create, get, remove, submit, testFromEdit,
+} from "../helpers/notification";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const requiredChannelName = "Webhook E2E Required";
+const optionalChannelName = "Webhook E2E Optional";
+const invalidChannelName = "Webhook E2E Invalid";
+
+// test.describe.serial("Valid channels", () => {
+//     test("Create and test a valid Webhook channel", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Webhook", requiredChannelName, async (page) => {
+//             await page.getByLabel(/Webhook URL/).fill(getEnv("E2E_NOTIFICATION_WEBHOOK_URL"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, requiredChannelName)).toBeVisible();
+//         await testFromEdit(page, requiredChannelName);
+//         await expect(page.getByText("Sent to Webhook")).toBeVisible();
+//         await cancel(page);
+//     });
+//
+//     test("Create and test a valid Webhook channel with optional header", async ({page}) => {
+//         await page.goto("/dashboard/notifications/channels");
+//         await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+//         await create(page, "Webhook", optionalChannelName, async (page) => {
+//             await page.getByLabel(/Webhook URL/).fill(getEnv("E2E_NOTIFICATION_WEBHOOK_URL"));
+//             await page.getByLabel(/^Header Name$/).fill(getEnv("E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER"));
+//             await page.getByLabel(/^Secret Value$/).fill(getEnv("E2E_NOTIFICATION_WEBHOOK_SECRET"));
+//         });
+//         await submit(page);
+//         await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, optionalChannelName)).toBeVisible();
+//         await testFromEdit(page, optionalChannelName);
+//         await expect(page.getByText("Sent to Webhook")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Webhook channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await create(page, "Webhook", invalidChannelName, async (page) => {
+            await page.getByLabel(/Webhook URL/).fill("https://webhook.example.com/api/wrong-webhook");
+            await page.getByLabel(/^Header Name$/).fill(getEnv("E2E_NOTIFICATION_WEBHOOK_SECRET_HEADER"));
+            await page.getByLabel(/^Secret Value$/).fill("wrong-webhook-secret");
+        });
+        await submit(page);
+        await expect(page.getByText("Notification channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await testFromEdit(page, invalidChannelName);
+        await expect(page.getByText("An error occurred while testing the notification channel, check your configuration")).toBeVisible();
+        await cancel(page);
+    });
+
+    test("Delete invalid Webhook E2E channel", async ({page}) => {
+        await page.goto("/dashboard/notifications/channels");
+        await expect(page.getByRole("heading", {name: "Notification channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Notification channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/oidc.spec.ts

@@ -0,0 +1,20 @@
+import {expect, test} from "@playwright/test";
+import {logout} from "./helpers/auth";
+import {loginWithOidc, oidcProviders} from "./helpers/oidc";
+
+
+test.describe.serial("OIDC auth", () => {
+    for (const provider of oidcProviders) {
+        test(`OIDC login/logout with ${provider.title}`, async ({page}) => {
+
+            await loginWithOidc(page, provider.id);
+
+            await expect(page).toHaveURL(/\/dashboard\/home(?:\?.*)?$/);
+            await expect(page.getByRole("link", {name: "Logo Portabase"})).toBeVisible();
+
+            await logout(page);
+
+            await expect(page).toHaveURL(/\/login(?:\?.*)?$/);
+        });
+    }
+});

e2e/project.spec.ts

@@ -0,0 +1,59 @@
+import {expect, test} from "@playwright/test";
+import {create, edit, get, remove} from "./helpers/project";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const project = {
+    emptyStateName: "Project A",
+    buttonName: "Project B",
+    updatedButtonName: "Project B Updated",
+};
+
+test.describe.serial(() => {
+    test("Create a project from empty state", async ({page}) => {
+        await page.goto("/dashboard/projects");
+        await expect(page.getByRole("heading", {name: "Projects"})).toBeVisible();
+        await expect(page.getByText("Create new Project", {exact: true})).toBeVisible();
+
+        await create(page, "emptyState", project.emptyStateName);
+
+        await expect(page.getByText("Project has been successfully created.")).toBeVisible();
+        await expect(get(page, project.emptyStateName)).toBeVisible();
+        await expect(page.getByText("Create new Project", {exact: true})).toHaveCount(0);
+    });
+
+    test("Create a project from classic button", async ({page}) => {
+        await page.goto("/dashboard/projects");
+        await expect(page.getByRole("heading", {name: "Projects"})).toBeVisible();
+        await expect(get(page, project.emptyStateName)).toBeVisible();
+
+        await create(page, "button", project.buttonName);
+
+        await expect(page.getByText("Project has been successfully created.")).toBeVisible();
+        await expect(get(page, project.buttonName)).toBeVisible();
+    });
+
+    test("Edit the second created project", async ({page}) => {
+        await page.goto("/dashboard/projects");
+        await expect(page.getByRole("heading", {name: "Projects"})).toBeVisible();
+        await expect(get(page, project.buttonName)).toBeVisible();
+
+        await edit(page, project.buttonName, project.updatedButtonName);
+
+        await expect(page.getByText("Project has been successfully updated.")).toBeVisible();
+        await expect(page.getByText(project.updatedButtonName, {exact: true})).toBeVisible();
+    });
+
+    test("Delete the second created project", async ({page}) => {
+        await page.goto("/dashboard/projects");
+        await expect(page.getByRole("heading", {name: "Projects"})).toBeVisible();
+        await expect(get(page, project.updatedButtonName)).toBeVisible();
+
+        await remove(page, project.updatedButtonName);
+
+        await expect(page).toHaveURL("/dashboard/projects");
+        await expect(page.getByText("Projects has been successfully archived.")).toBeVisible();
+        await expect(page.getByText(project.updatedButtonName)).toHaveCount(0);
+    });
+});

e2e/setup.spec.ts

@@ -0,0 +1,13 @@
+import {test} from "@playwright/test";
+import fs from "fs";
+import {LOCAL_STORAGE_PATH} from "./helpers/session";
+
+test.describe(() => {
+    test.beforeAll(async () => {
+        if (fs.existsSync(LOCAL_STORAGE_PATH)) fs.unlinkSync(LOCAL_STORAGE_PATH);
+        fs.writeFileSync(LOCAL_STORAGE_PATH, JSON.stringify({}));
+    });
+
+    test("Prepare shared storage state", async () => {
+    });
+});

e2e/storage/google-drive.spec.ts

@@ -0,0 +1,60 @@
+import {expect, test} from "@playwright/test";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+import {
+    cancel, create, get, remove, submit, testConnection, testFromEdit,
+} from "../helpers/storage";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const requiredChannelName = "Google Drive E2E Required";
+const invalidChannelName = "Google Drive E2E Invalid";
+
+// test.describe.serial("Valid channel", () => {
+//     test("Create and test a valid Google Drive channel", async ({page}) => {
+//         await page.goto("/dashboard/storages/channels");
+//         await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+//         await create(page, "Google Drive", requiredChannelName, async (page) => {
+//             await page.getByLabel(/Client ID/).fill(getEnv("E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID"));
+//             await page.getByLabel(/Client Secret/).fill(getEnv("E2E_STORAGE_GOOGLE_DRIVE_CLIENT_SECRET"));
+//             await page.getByLabel(/Folder ID/).fill(getEnv("E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID"));
+//         });
+//         await expect(page.getByRole("heading", {name: "Add Storage Channel"})).toBeVisible();
+//         await testConnection(page);
+//         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+//         await submit(page);
+//         await expect(page.getByText("Storage channel has been successfully created.")).toBeVisible();
+//         await expect(get(page, requiredChannelName)).toBeVisible();
+//
+//         await testFromEdit(page, requiredChannelName);
+//         await expect(page.getByRole("heading", {name: "Edit Storage Channel"})).toBeVisible();
+//         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+//         await cancel(page);
+//     });
+// });
+
+test.describe.serial("Invalid channel", () => {
+    test("Create and test invalid Google Drive channel", async ({page}) => {
+        await page.goto("/dashboard/storages/channels");
+        await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+        await create(page, "Google Drive", invalidChannelName, async (page) => {
+            await page.getByLabel(/Client ID/).fill(getEnv("E2E_STORAGE_GOOGLE_DRIVE_CLIENT_ID"));
+            await page.getByLabel(/Client Secret/).fill("wrong-google-drive-client-secret");
+            await page.getByLabel(/Folder ID/).fill(getEnv("E2E_STORAGE_GOOGLE_DRIVE_FOLDER_ID"));
+        });
+        await testConnection(page);
+        await expect(page.getByText("An error occurred while testing the storage channel")).toBeVisible();
+        await submit(page);
+        await expect(page.getByText("Storage channel has been successfully created.")).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+    });
+
+    test("Delete invalid Google Drive E2E channel", async ({page}) => {
+        await page.goto("/dashboard/storages/channels");
+        await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+        await expect(get(page, invalidChannelName)).toBeVisible();
+        await remove(page, invalidChannelName);
+        await expect(page.getByText("Storage channel has been successfully removed.")).toBeVisible();
+        await expect(page.getByText(invalidChannelName)).toHaveCount(0);
+    });
+});

e2e/storage/s3.spec.ts

@@ -0,0 +1,121 @@
+import {expect, test} from "@playwright/test";
+import {getEnv} from "../helpers/env";
+import {LOCAL_STORAGE_PATH} from "../helpers/session";
+import {
+    cancel, create, get, remove, submit, testConnection, testFromEdit,
+} from "../helpers/storage";
+
+test.use({storageState: LOCAL_STORAGE_PATH});
+
+const providers = [
+    {
+        title: "AWS S3",
+        requiredChannelName: "AWS S3 E2E Required",
+        optionalChannelName: "AWS S3 E2E Optional",
+        invalidChannelName: "AWS S3 E2E Invalid",
+        endpointUrl: getEnv("E2E_STORAGE_AWS_S3_ENDPOINT_URL"),
+        region: getEnv("E2E_STORAGE_AWS_S3_REGION"),
+        accessKey: getEnv("E2E_STORAGE_AWS_S3_ACCESS_KEY"),
+        secretKey: getEnv("E2E_STORAGE_AWS_S3_SECRET_KEY"),
+        bucketName: getEnv("E2E_STORAGE_AWS_S3_BUCKET_NAME"),
+        port: getEnv("E2E_STORAGE_AWS_S3_PORT"),
+        invalidAccessKey: "wrong-aws-access-key",
+        invalidSecretKey: "wrong-aws-secret-key",
+    },
+    {
+        title: "Cloudflare R2",
+        requiredChannelName: "Cloudflare R2 E2E Required",
+        optionalChannelName: "Cloudflare R2 E2E Optional",
+        invalidChannelName: "Cloudflare R2 E2E Invalid",
+        endpointUrl: getEnv("E2E_STORAGE_R2_ENDPOINT_URL"),
+        region: getEnv("E2E_STORAGE_R2_REGION"),
+        accessKey: getEnv("E2E_STORAGE_R2_ACCESS_KEY"),
+        secretKey: getEnv("E2E_STORAGE_R2_SECRET_KEY"),
+        bucketName: getEnv("E2E_STORAGE_R2_BUCKET_NAME"),
+        port: getEnv("E2E_STORAGE_R2_PORT"),
+        invalidAccessKey: "wrong-r2-access-key",
+        invalidSecretKey: "wrong-r2-secret-key",
+    },
+] as const;
+
+for (const provider of providers) {
+    test.describe(provider.title, () => {
+        // test.describe.serial("Valid channels", () => {
+        //     test(`Create and test a valid ${provider.title} channel`, async ({page}) => {
+        //         await page.goto("/dashboard/storages/channels");
+        //         await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+        //         await create(page, "S3", provider.requiredChannelName, async (page) => {
+        //             await page.getByLabel(/Endpoint URL/).fill(provider.endpointUrl);
+        //             await page.getByLabel(/Access Key/).fill(provider.accessKey);
+        //             await page.getByLabel(/Secret Key/).fill(provider.secretKey);
+        //             await page.getByLabel(/Bucket name/).fill(provider.bucketName);
+        //         });
+        //         await expect(page.getByRole("heading", {name: "Add Storage Channel"})).toBeVisible();
+        //         await testConnection(page);
+        //         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+        //         await submit(page);
+        //         await expect(page.getByText("Storage channel has been successfully created.")).toBeVisible();
+        //         await expect(get(page, provider.requiredChannelName)).toBeVisible();
+        //
+        //         await testFromEdit(page, provider.requiredChannelName);
+        //         await expect(page.getByRole("heading", {name: "Edit Storage Channel"})).toBeVisible();
+        //         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+        //         await cancel(page);
+        //     });
+        //
+        //     test(`Create and test a valid ${provider.title} channel with optional region and port`, async ({page}) => {
+        //         await page.goto("/dashboard/storages/channels");
+        //         await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+        //         await create(page, "S3", provider.optionalChannelName, async (page) => {
+        //             await page.getByLabel(/Endpoint URL/).fill(provider.endpointUrl);
+        //             await page.getByLabel(/^Region$/).fill(provider.region);
+        //             await page.getByLabel(/Access Key/).fill(provider.accessKey);
+        //             await page.getByLabel(/Secret Key/).fill(provider.secretKey);
+        //             await page.getByLabel(/Bucket name/).fill(provider.bucketName);
+        //             await page.getByLabel(/^Port$/).fill(provider.port);
+        //         });
+        //         await expect(page.getByRole("heading", {name: "Add Storage Channel"})).toBeVisible();
+        //         await testConnection(page);
+        //         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+        //         await submit(page);
+        //         await expect(page.getByText("Storage channel has been successfully created.")).toBeVisible();
+        //         await expect(get(page, provider.optionalChannelName)).toBeVisible();
+        //
+        //         await testFromEdit(page, provider.optionalChannelName);
+        //         await expect(page.getByRole("heading", {name: "Edit Storage Channel"})).toBeVisible();
+        //         await expect(page.getByText("Successfully connected to storage channel")).toBeVisible();
+        //         await cancel(page);
+        //     });
+        // });
+
+        test.describe.serial("Invalid channel", () => {
+            test(`Create and test invalid ${provider.title} channel`, async ({page}) => {
+                await page.goto("/dashboard/storages/channels");
+                await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+                await create(page, "S3", provider.invalidChannelName, async (page) => {
+                    await page.getByLabel(/Endpoint URL/).fill(provider.endpointUrl);
+                    await page.getByLabel(/^Region$/).fill(provider.region);
+                    await page.getByLabel(/Access Key/).fill(provider.invalidAccessKey);
+                    await page.getByLabel(/Secret Key/).fill(provider.invalidSecretKey);
+                    await page.getByLabel(/Bucket name/).fill(provider.bucketName);
+                    await page.getByLabel(/^Port$/).fill(provider.port);
+                });
+                await expect(page.getByRole("heading", {name: "Add Storage Channel"})).toBeVisible();
+                await testConnection(page);
+                await expect(page.getByText("An error occurred while testing the storage channel")).toBeVisible();
+                await submit(page);
+                await expect(page.getByText("Storage channel has been successfully created.")).toBeVisible();
+                await expect(get(page, provider.invalidChannelName)).toBeVisible();
+            });
+
+            test(`Delete invalid ${provider.title} channel`, async ({page}) => {
+                await page.goto("/dashboard/storages/channels");
+                await expect(page.getByRole("heading", {name: "Storage channels"})).toBeVisible();
+                await expect(get(page, provider.invalidChannelName)).toBeVisible();
+                await remove(page, provider.invalidChannelName);
+                await expect(page.getByText("Storage channel has been successfully removed.")).toBeVisible();
+                await expect(page.getByText(provider.invalidChannelName)).toHaveCount(0);
+            });
+        });
+    });
+}

helm/templates/deployment.yaml

@@ -27,6 +27,30 @@ spec:
           volumeMounts:
             - name: data
               mountPath: /data
+          startupProbe:
+            httpGet:
+              path: /api/health
+              port: 80
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            failureThreshold: 12
+            timeoutSeconds: 5
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: 80
+            initialDelaySeconds: 0
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /api/health
+              port: 80
+            initialDelaySeconds: 0
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
       volumes:
         - name: data
           persistentVolumeClaim:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "portabase",
-  "version": "1.9.1",
+  "version": "1.15.0",
   "private": true,
   "scripts": {
     "dev": "next dev --turbopack -p 8887",
@@ -15,8 +15,9 @@
     "release": "release-it"
   },
   "dependencies": {
-    "@better-auth/passkey": "^1.5.6",
-    "@better-auth/sso": "^1.5.6",
+    "@better-auth/core": "1.6.2",
+    "@better-auth/passkey": "1.6.2",
+    "@better-auth/sso": "1.6.2",
     "@hookform/resolvers": "^5.2.2",
     "@radix-ui/react-accordion": "^1.2.12",
     "@radix-ui/react-alert-dialog": "^1.1.15",
@@ -48,43 +49,45 @@
     "@radix-ui/react-tooltip": "^1.2.8",
     "@react-email/components": "^0.0.41",
     "@t3-oss/env-nextjs": "^0.13.11",
-    "@tanstack/react-query": "^5.95.2",
+    "@tanstack/react-query": "^5.97.0",
     "@tanstack/react-table": "^8.21.3",
     "@types/nodemailer": "^6.4.23",
     "@types/ws": "^8.18.1",
     "@zenstackhq/runtime": "2.14.2",
     "argon2": "^0.43.1",
     "bcrypt": "^6.0.0",
-    "better-auth": "1.5.6",
+    "better-auth": "1.6.2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
     "date-fns": "^4.1.0",
     "dockerode": "^4.0.10",
     "dotenv": "^16.6.1",
-    "drizzle-orm": "^0.43.1",
-    "drizzle-zod": "^0.7.1",
+    "drizzle-orm": "0.45.2",
+    "drizzle-zod": "0.8.3",
     "embla-carousel-react": "^8.6.0",
     "googleapis": "^170.1.0",
     "input-otp": "^1.4.2",
     "lucide-react": "^0.553.0",
     "minio": "^8.0.7",
     "motion": "^12.38.0",
-    "next": "16.2.1",
+    "next": "16.2.3",
     "next-safe-action": "^7.10.8",
     "next-themes": "^0.4.6",
     "node-cron": "^4.2.1",
     "node-forge": "^1.4.0",
-    "nodemailer": "^7.0.13",
+    "nodemailer": "8.0.5",
     "npm-check-updates": "^18.3.1",
     "pg": "^8.20.0",
-    "prettier": "^3.8.1",
-    "react": "^19.2.4",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3",
+    "prettier": "^3.8.2",
+    "react": "^19.2.5",
     "react-day-picker": "9.7.0",
-    "react-dom": "^19.2.4",
+    "react-dom": "^19.2.5",
     "react-dropzone": "^14.4.1",
     "react-email": "^4.3.2",
-    "react-hook-form": "^7.72.0",
+    "react-hook-form": "^7.72.1",
     "react-qr-code": "^2.0.18",
     "react-resizable-panels": "^3.0.6",
     "react-twc": "^1.5.1",
@@ -99,32 +102,33 @@
     "uuid": "^11.1.0",
     "vaul": "^1.1.2",
     "ws": "^8.20.0",
-    "zod": "^3.25.76"
+    "zod": "4.3.6"
   },
   "devDependencies": {
     "@iconify/react": "^6.0.2",
     "@playwright/test": "1.58.2",
     "@react-email/preview-server": "4.3.2",
-    "@react-email/render": "^2.0.4",
+    "@react-email/render": "^2.0.6",
     "@release-it/bumper": "^7.0.5",
     "@release-it/conventional-changelog": "^10.0.6",
     "@tailwindcss/postcss": "^4.2.2",
     "@types/eslint-plugin-tailwindcss": "^3.17.0",
-    "@types/node": "^22.19.15",
+    "@types/node": "^22.19.17",
     "@types/node-forge": "^1.3.14",
     "@types/pg": "^8.20.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@zenstackhq/openapi": "^2.22.1",
     "@zenstackhq/tanstack-query": "^2.22.2",
-    "baseline-browser-mapping": "^2.10.11",
+    "baseline-browser-mapping": "^2.10.17",
     "drizzle-kit": "^0.31.10",
-    "esbuild": "^0.27.4",
+    "esbuild": "^0.27.7",
     "eslint": "^9.39.4",
-    "eslint-config-next": "^16.2.1",
+    "eslint-config-next": "^16.2.3",
     "eslint-plugin-tailwindcss": "^3.18.2",
     "framer-motion": "^12.38.0",
-    "postcss": "^8.5.8",
+    "node-pty": "^1.1.0",
+    "postcss": "8.5.10",
     "release-it": "^19.2.4",
     "tailwindcss": "^4.2.2",
     "tsx": "^4.21.0",
@@ -132,5 +136,5 @@
     "typescript": "^5.9.3",
     "zenstack": "2.14.2"
   },
-  "packageManager": "pnpm@10.33.0"
+  "packageManager": "pnpm@11.1.2+sha512.415a1cc25974731e75455c1468371be74c5aa5fb7621b50d4056d222451609f11412f23fd602e6169f1e060466641f798597e1be961a10688836a67b16569499"
 }

playwright.config.ts

@@ -1,12 +1,13 @@
 import { defineConfig, devices } from '@playwright/test';
+import dotenv from 'dotenv';
+import path from 'path';
 
 /**
  * Read environment variables from file.
  * https://github.com/motdotla/dotenv
  */
-// import dotenv from 'dotenv';
-// import path from 'path';
-// dotenv.config({ path: path.resolve(__dirname, '.env') });
+dotenv.config({ path: path.resolve(__dirname, '.env.e2e') });
+
 
 /**
  * See https://playwright.dev/docs/test-configuration.
@@ -25,55 +26,59 @@ export default defineConfig({
   reporter: 'html',
   /* Shared settings for all the projects below. See https://playwright.dev/docs/api/class-testoptions. */
   use: {
-    /* Base URL to use in actions like `await page.goto('')`. */
+    ...devices['Desktop Chrome'],
     baseURL: process.env.PROJECT_URL,
 
     /* Collect trace when retrying the failed test. See https://playwright.dev/docs/trace-viewer */
     trace: 'on-first-retry',
   },
 
-  /* Configure projects for major browsers */
-  projects: [
-    {
-      name: 'chromium',
-      use: { ...devices['Desktop Chrome'] },
-    },
+  /* Configure projects and dependency order */
+    projects: [
+        {
+            name: 'setup',
+            testMatch: '**/setup.spec.ts',
+        },
+        {
+            name: 'auth',
+            testMatch: '**/auth.spec.ts',
+            dependencies: ['setup'],
+        },
+        {
+            name: 'oidc',
+            testMatch: '**/oidc.spec.ts',
+            dependencies: ['auth'],
+        },
+        {
+            name: 'access-management',
+            testMatch: '**/access-management.spec.ts',
+            dependencies: ['oidc'],
+        },
+        {
+            name: 'notification',
+            testMatch: '**/notification/**/*.spec.ts',
+            dependencies: ['access-management'],
+        },
+        {
+            name: 'storage',
+            testMatch: '**/storage/**/*.spec.ts',
+            dependencies: ['access-management'],
+        },
+        {
+            name: 'agent',
+            testMatch: '**/agent.spec.ts',
+            dependencies: ['access-management'],
+        },
+        {
+            name: 'project',
+            testMatch: '**/project.spec.ts',
+            dependencies: ['agent'],
+        },
+        {
+            name: 'cleanup',
+            testMatch: '**/cleanup.spec.ts',
+            dependencies: ['agent', 'storage', 'notification', 'project'],
+        },
+    ]
 
-    {
-      name: 'firefox',
-      use: { ...devices['Desktop Firefox'] },
-    },
-
-    {
-      name: 'webkit',
-      use: { ...devices['Desktop Safari'] },
-    },
-
-    /* Test against mobile viewports. */
-    {
-      name: 'Mobile Chrome',
-      use: { ...devices['Pixel 5'] },
-    },
-    {
-      name: 'Mobile Safari',
-      use: { ...devices['iPhone 12'] },
-    },
-
-    /* Test against branded browsers. */
-    // {
-    //   name: 'Microsoft Edge',
-    //   use: { ...devices['Desktop Edge'], channel: 'msedge' },
-    // },
-    // {
-    //   name: 'Google Chrome',
-    //   use: { ...devices['Desktop Chrome'], channel: 'chrome' },
-    // },
-  ],
-
-  /* Run your local dev server before starting the tests */
-  // webServer: {
-  //   command: 'docker compose up -d && make up',
-  //   url: 'http://localhost:8887',
-  //   reuseExistingServer: !process.env.CI,
-  // },
 });

pnpm-workspace.yaml

@@ -1,3 +1,19 @@
+allowBuilds:
+  '@prisma/client': true
+  '@prisma/engines': true
+  argon2: true
+  bcrypt: true
+  cpu-features: true
+  esbuild: true
+  node-pty: true
+  prisma: true
+  protobufjs: true
+  sharp: true
+  ssh2: true
+  unrs-resolver: true
+  zenstack: true
+ignoredBuiltDependencies:
+  - node-pty
 onlyBuiltDependencies:
   - '@prisma/client'
   - '@prisma/engines'

proxy.ts

@@ -71,6 +71,7 @@ function checkRouteExists(pathname: string) {
     /^\/api\/tus\/hooks\/?$/,
     /^\/api\/events\/?$/,
     /^\/api\/config\/?$/,
+    /^\/api\/health\/?$/,
     /^\/api\/google\/drive\/callback\/?$/,
   ];
   return routePatterns.some((pattern) => pattern.test(pathname));

seeds/authentik/README.md

@@ -0,0 +1,62 @@
+# Authentik seed contract
+
+This directory defines the deterministic Authentik seed used by the local OIDC stack in `docker-compose.oidc.yml`.
+
+## Bootstrap contract
+
+The compose stack must provide these first-start bootstrap values on the `authentik-worker` container:
+
+- `AUTHENTIK_BOOTSTRAP_PASSWORD`
+- `AUTHENTIK_BOOTSTRAP_TOKEN`
+- `AUTHENTIK_BOOTSTRAP_EMAIL`
+
+Per Authentik's automated install flow, those values are only read on the first startup of a fresh Authentik database volume.
+
+## Mounted assets
+
+- `blueprints/portabase-oidc.yaml`
+  - mounted into `/blueprints/portabase-oidc.yaml`
+  - auto-discovered by the Authentik worker
+  - kept as an in-repo reference blueprint for the intended provider/application shape
+- `bootstrap.sh`
+  - executed by the dedicated `authentik-bootstrap` compose service
+  - waits for the server and required default Authentik objects
+  - grants the bootstrap admin deterministic `authentik Admins` membership from inside Authentik
+  - resolves the required default flow, scope-mapping, and signing-key objects from inside Authentik with `ak shell`
+  - then reconciles the deterministic Portabase seed objects through Authentik's ORM before proving the public discovery URL over HTTP
+
+## Seeded objects
+
+The bootstrap flow is expected to reconcile, idempotently:
+
+- an OAuth2/OIDC provider named `portabase`
+- an application named `Portabase` with slug `portabase`
+- a confidential client id `portabase`
+- a client secret `portabase-e2e-secret`
+- a strict redirect URI `http://localhost:8887/api/auth/sso/callback/authentik`
+- an internal test user:
+  - username: `admin@example.com`
+  - email: `admin@example.com`
+  - password: `testPASS123456!`
+- an `admin` group containing the test user
+
+## Expected runtime outputs
+
+After a fresh `docker compose -f docker-compose.oidc.yml up`, the seeded Authentik instance should expose:
+
+- `http://localhost:3057/-/health/live/`
+- `http://localhost:3057/application/o/portabase/.well-known/openid-configuration`
+
+That discovery document is the canonical proof that the bootstrap completed successfully. The runtime source of truth is `bootstrap.sh`, which first normalizes the bootstrap admin's permissions inside Authentik and then reconciles the provider, application, user, and group directly inside Authentik even if blueprint auto-application semantics or bootstrap-token permissions change between Authentik releases.
+
+## Portabase env contract
+
+This seed is aligned with the current E2E environment:
+
+- `AUTH_OIDC_AUTHENTIK_ID=authentik`
+- `AUTH_OIDC_AUTHENTIK_CLIENT=portabase`
+- `AUTH_OIDC_AUTHENTIK_SECRET=portabase-e2e-secret`
+- `AUTH_OIDC_AUTHENTIK_DISCOVERY_ENDPOINT=http://authentik-server:9000/application/o/portabase/.well-known/openid-configuration`
+- `AUTH_OIDC_AUTHENTIK_HOST=authentik-server:9000`
+- `AUTH_OIDC_AUTHENTIK_SCOPES=openid profile email`
+- `AUTH_OIDC_AUTHENTIK_ALLOWED_GROUP=admin`

seeds/authentik/blueprints/portabase-oidc.yaml

@@ -0,0 +1,44 @@
+# yaml-language-server: $schema=https://goauthentik.io/blueprints/schema.json
+version: 1
+metadata:
+  name: portabase-oidc
+  labels:
+    blueprints.goauthentik.io/instantiate: "false"
+    blueprints.goauthentik.io/description: "Reference Portabase OIDC shape; the deterministic runtime seed is applied by seeds/authentik/bootstrap.sh."
+entries:
+  - model: authentik_providers_oauth2.oauth2provider
+    state: present
+    identifiers:
+      name: portabase
+    attrs:
+      name: portabase
+      authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
+      authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
+      invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
+      property_mappings:
+        - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]]
+        - !Find [authentik_providers_oauth2.scopemapping, [scope_name, profile]]
+        - !Find [authentik_providers_oauth2.scopemapping, [scope_name, email]]
+      client_type: confidential
+      client_id: portabase
+      client_secret: portabase-e2e-secret
+      access_code_validity: minutes=1
+      access_token_validity: hours=1
+      refresh_token_validity: days=7
+      include_claims_in_id_token: true
+      signing_key: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]]
+      redirect_uris:
+        - matching_mode: strict
+          url: http://localhost:8887/api/auth/sso/callback/authentik
+      sub_mode: user_email
+      issuer_mode: global
+
+  - model: authentik_core.application
+    state: present
+    identifiers:
+      slug: portabase
+    attrs:
+      name: Portabase
+      slug: portabase
+      policy_engine_mode: any
+      provider: !Find [authentik_providers_oauth2.oauth2provider, [name, portabase]]

seeds/authentik/bootstrap.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env sh
+set -eu
+
+python - <<'PY'
+import os
+import sys
+import time
+import urllib.error
+import urllib.request
+
+BASE_URL = os.environ.get("AUTHENTIK_BASE_URL", "http://authentik-server:9000")
+LIVE_URL = os.environ.get("AUTHENTIK_LIVE_URL", f"{BASE_URL}/-/health/live/")
+ATTEMPTS = int(os.environ.get("AUTHENTIK_BOOTSTRAP_ATTEMPTS", "90"))
+SLEEP_SECONDS = int(os.environ.get("AUTHENTIK_BOOTSTRAP_SLEEP_SECONDS", "2"))
+
+
+def wait_for_live() -> None:
+    for attempt in range(1, ATTEMPTS + 1):
+        try:
+            with urllib.request.urlopen(LIVE_URL, timeout=10) as response:
+                if response.status == 200:
+                    print("Authentik live health is reachable")
+                    return
+        except Exception:
+            pass
+        print(f"Waiting for Authentik live health ({attempt}/{ATTEMPTS})")
+        time.sleep(SLEEP_SECONDS)
+    raise SystemExit(f"Timed out waiting for Authentik live health at {LIVE_URL}")
+
+
+wait_for_live()
+PY
+
+ak shell -c "import os; from authentik.core.models import Group, User; user = User.objects.get(email=os.environ['AUTHENTIK_BOOTSTRAP_EMAIL']); group = Group.objects.get(name='authentik Admins'); group.users.add(user); print(f'Granted {user.username} authentik Admins membership')" >/dev/null
+
+BOOTSTRAP_ATTEMPTS="${AUTHENTIK_BOOTSTRAP_ATTEMPTS:-90}"
+BOOTSTRAP_SLEEP_SECONDS="${AUTHENTIK_BOOTSTRAP_SLEEP_SECONDS:-2}"
+
+reconcile_seed_objects() {
+  attempt=1
+  while [ "$attempt" -le "$BOOTSTRAP_ATTEMPTS" ]; do
+    if ak shell -c "import os; from authentik.core.models import Application, Group, User; from authentik.crypto.models import CertificateKeyPair; from authentik.flows.models import Flow; from authentik.providers.oauth2.models import OAuth2Provider, ScopeMapping; bootstrap_admin = User.objects.get(email=os.environ['AUTHENTIK_BOOTSTRAP_EMAIL']); authentik_admins = Group.objects.get(name='authentik Admins'); authentik_admins.users.add(bootstrap_admin); user, user_created = User.objects.get_or_create(username=os.environ['AUTHENTIK_TEST_USER_USERNAME'], defaults={'email': os.environ['AUTHENTIK_TEST_USER_EMAIL'], 'name': os.environ['AUTHENTIK_TEST_USER_NAME']}); user.email = os.environ['AUTHENTIK_TEST_USER_EMAIL']; user.name = os.environ['AUTHENTIK_TEST_USER_NAME']; user.is_active = True; user.save(); user.set_password(os.environ['AUTHENTIK_TEST_USER_PASSWORD']); user.save(); group, group_created = Group.objects.get_or_create(name=os.environ['AUTHENTIK_TEST_GROUP']); group.is_superuser = False; group.save(); group.users.add(user); auth_flow = Flow.objects.get(slug='default-authentication-flow'); authorization_flow = Flow.objects.get(slug='default-provider-authorization-implicit-consent'); invalidation_flow = Flow.objects.get(slug='default-provider-invalidation-flow'); openid_scope = ScopeMapping.objects.get(scope_name='openid'); profile_scope = ScopeMapping.objects.get(scope_name='profile'); email_scope = ScopeMapping.objects.get(scope_name='email'); signing_key = CertificateKeyPair.objects.get(name='authentik Self-signed Certificate'); provider, provider_created = OAuth2Provider.objects.update_or_create(name=os.environ['AUTHENTIK_PROVIDER_NAME'], defaults={'authentication_flow': auth_flow, 'authorization_flow': authorization_flow, 'invalidation_flow': invalidation_flow, 'client_type': 'confidential', 'client_id': os.environ['AUTHENTIK_CLIENT_ID'], 'client_secret': os.environ['AUTHENTIK_CLIENT_SECRET'], 'access_code_validity': 'minutes=1', 'access_token_validity': 'hours=1', 'refresh_token_validity': 'days=7', 'include_claims_in_id_token': True, 'signing_key': signing_key, 'sub_mode': 'user_email', 'issuer_mode': 'global', '_redirect_uris': [{'matching_mode': 'strict', 'url': os.environ['AUTHENTIK_REDIRECT_URI']}],}); provider.property_mappings.set([openid_scope, profile_scope, email_scope]); application, application_created = Application.objects.update_or_create(slug=os.environ['AUTHENTIK_APPLICATION_SLUG'], defaults={'name': os.environ['AUTHENTIK_APPLICATION_NAME'], 'provider': provider.provider_ptr, 'policy_engine_mode': 'any'}); print(f\"Reconciled Authentik seed user={user.username} group={group.name} provider={provider.name} application={application.slug}\")" >/dev/null 2>&1; then
+      return 0
+    fi
+    echo "Waiting for Authentik seed reconciliation (${attempt}/${BOOTSTRAP_ATTEMPTS})"
+    attempt=$((attempt + 1))
+    sleep "$BOOTSTRAP_SLEEP_SECONDS"
+  done
+  return 1
+}
+
+reconcile_seed_objects
+
+python - <<'PY'
+import json
+import os
+import time
+import urllib.error
+import urllib.request
+
+BASE_URL = os.environ.get("AUTHENTIK_BASE_URL", "http://authentik-server:9000")
+DISCOVERY_PATH = os.environ.get("AUTHENTIK_DISCOVERY_PATH", "/application/o/portabase/.well-known/openid-configuration")
+DISCOVERY_URL = os.environ.get("AUTHENTIK_DISCOVERY_URL", f"{BASE_URL}{DISCOVERY_PATH}")
+ATTEMPTS = int(os.environ.get("AUTHENTIK_BOOTSTRAP_ATTEMPTS", "90"))
+SLEEP_SECONDS = int(os.environ.get("AUTHENTIK_BOOTSTRAP_SLEEP_SECONDS", "2"))
+
+
+def http_request(path: str):
+    url = f"{BASE_URL}{path}"
+    request = urllib.request.Request(url, method="GET")
+    try:
+        with urllib.request.urlopen(request, timeout=15) as response:
+            body = response.read().decode("utf-8")
+            return response.status, body
+    except urllib.error.HTTPError as exc:
+        body = exc.read().decode("utf-8")
+        return exc.code, body
+
+def wait_for_discovery() -> dict:
+    for attempt in range(1, ATTEMPTS + 1):
+        status, body = http_request(DISCOVERY_PATH)
+        if status == 200:
+            parsed = json.loads(body)
+            if "issuer" in parsed and "authorization_endpoint" in parsed:
+                print(f"Portabase discovery document is reachable at {DISCOVERY_URL}")
+                return parsed
+        print(f"Waiting for Portabase discovery document ({attempt}/{ATTEMPTS})")
+        time.sleep(SLEEP_SECONDS)
+    raise SystemExit(f"Timed out waiting for discovery document at {DISCOVERY_URL}")
+wait_for_discovery()
+
+print(f"Authentik bootstrap verification completed at {DISCOVERY_URL}")
+PY

src/components/wrappers/auth/login/forgot-password-form/forgot-password.actions.ts

@@ -6,7 +6,7 @@ import z from "zod";
 import { db } from "@/db";
 import {action} from "@/lib/safe-actions/actions";
 
-//todo: to be continued...
+//TODO: to be continued...
 export const forgotPasswordAction = action
     .schema(
         z.object({

src/components/wrappers/auth/social-buttons.tsx

@@ -37,6 +37,7 @@ export function SocialAuthButtons({ providers }: { providers: AuthProviderConfig
                     providerType: "oidc",
                     callbackURL: "/dashboard",
                 });
+                console.log(result);
             } else {
                 result = await authClient.signIn.social({
                     // eslint-disable-next-line @typescript-eslint/no-explicit-any

src/components/wrappers/common/bread-crumbs/bread-crumbs.tsx

@@ -44,7 +44,7 @@ export function BreadCrumbsWrapper() {
     )
 }
 
-const FORBIDDEN_LINKS = ["organization", "dashboard", "database", "admin", "settings", "notifications"];
+const FORBIDDEN_LINKS = ["organization", "dashboard", "database", "admin", "notifications", "storages"];
 
 
 export function BreadCrumbs({}: BreadCrumbsProps) {

src/components/wrappers/common/cards-with-pagination.tsx

@@ -4,6 +4,7 @@ import React, { ComponentType, useState } from "react";
 import { cn } from "@/lib/utils";
 
 import { PaginationNavigation } from "@/components/wrappers/common/pagination/pagination-navigation";
+import { PaginationSize } from "@/components/wrappers/common/pagination/pagination-size";
 
 interface CardsWithPaginationProps<T> {
     className?: string;
@@ -13,19 +14,21 @@ interface CardsWithPaginationProps<T> {
     cardsPerPage?: number;
     numberOfColumns?: number;
     maxVisiblePages?: number;
+    pageSizeOptions?: number[];
     [key: string]: any;
 }
 
 export function CardsWithPagination<T>(props: CardsWithPaginationProps<T>) {
-    const { className, organizationSlug, data, cardItem, cardsPerPage = 5, numberOfColumns = 1, maxVisiblePages = 3, ...rest } = props;
+    const { className, organizationSlug, data, cardItem, cardsPerPage = 5, numberOfColumns = 1, maxVisiblePages = 3, pageSizeOptions, ...rest } = props;
 
     const CardItem = cardItem;
 
+    const [pageSize, setPageSize] = useState(cardsPerPage);
     const [currentPage, setCurrentPage] = useState(1);
-    const totalPages = Math.ceil(data.length / cardsPerPage);
+    const totalPages = Math.ceil(data.length / pageSize);
 
-    const indexOfLastCard = currentPage * cardsPerPage;
-    const indexOfFirstCard = indexOfLastCard - cardsPerPage;
+    const indexOfLastCard = currentPage * pageSize;
+    const indexOfFirstCard = indexOfLastCard - pageSize;
     const currentCards = data.slice(indexOfFirstCard, indexOfLastCard);
 
     const goToPage = (pageNumber: number) => {
@@ -40,6 +43,14 @@ export function CardsWithPagination<T>(props: CardsWithPaginationProps<T>) {
         goToPage(Math.min(totalPages, currentPage + 1));
     };
 
+    const handlePageSizeChange = (newSize: number) => {
+        if (!Number.isFinite(newSize) || newSize < 1) return;
+        setPageSize(newSize);
+        setCurrentPage(1);
+    };
+
+    const showSizeSelector = pageSizeOptions && pageSizeOptions.length > 0;
+
     return (
         <div className={cn("flex flex-col h-full justify-between", className)}>
             <div className={cn(`grid h-max auto-rows-min gap-4 md:grid-cols-${numberOfColumns}`)}>
@@ -47,15 +58,24 @@ export function CardsWithPagination<T>(props: CardsWithPaginationProps<T>) {
                     <CardItem key={key} data={card} organizationSlug={organizationSlug}  {...rest} />
                 ))}
             </div>
-            <PaginationNavigation
-                className="justify-end mt-4"
-                totalPages={totalPages}
-                currentPage={currentPage}
-                goToPage={goToPage}
-                goToPrevPage={goToPrevPage}
-                goToNextPage={goToNextPage}
-                maxVisiblePages={maxVisiblePages}
-            />
+            <div className="flex items-center justify-end mt-4 gap-4">
+                {showSizeSelector && (
+                    <PaginationSize
+                        pageSize={pageSize}
+                        onPageSizeChange={handlePageSizeChange}
+                        pageSizeOptions={pageSizeOptions}
+                    />
+                )}
+                <PaginationNavigation
+                    className="justify-end"
+                    totalPages={totalPages}
+                    currentPage={currentPage}
+                    goToPage={goToPage}
+                    goToPrevPage={goToPrevPage}
+                    goToNextPage={goToNextPage}
+                    maxVisiblePages={maxVisiblePages}
+                />
+            </div>
         </div>
     );
 }

src/components/wrappers/common/empty-state-placeholder.tsx

@@ -1,6 +1,6 @@
 import Link from "next/link";
 import {cn} from "@/lib/utils";
-import {Plus} from "lucide-react";
+import {CircleSlash2, Plus} from "lucide-react";
 import {forwardRef, HTMLAttributes} from "react";
 
 type EmptyStatePlaceholderProps = {
@@ -8,25 +8,32 @@ type EmptyStatePlaceholderProps = {
     onClick?: () => void;
     text: string;
     className?: string;
+    state?: string
 } & HTMLAttributes<HTMLDivElement>;
 
 export const EmptyStatePlaceholder = forwardRef<HTMLDivElement, EmptyStatePlaceholderProps>(({
-                                          url,
-                                          onClick,
-                                          text,
-                                          className,
-                                          ...props
-                                      }, ref) => {
+                                                                                                 url,
+                                                                                                 onClick,
+                                                                                                 text,
+                                                                                                 state,
+                                                                                                 className,
+                                                                                                 ...props
+                                                                                             }, ref) => {
     const Container = (
         <div
             className={cn(
                 "flex h-full flex-col items-center justify-center w-full rounded-2xl border border-dashed border-muted p-6 lg:p-10",
-                "hover:bg-muted/50 transition-colors text-muted-foreground hover:text-primary text-center space-y-4",
+                "transition-colors text-muted-foreground text-center space-y-4",
+                state != "empty" && "hover:bg-muted/50 hover:text-primary",
                 (onClick || url) && "cursor-pointer"
             )}
             onClick={onClick}
         >
-            <Plus className="w-5 h-5 lg:w-6 lg:h-6" />
+            {state == "empty" ?
+                <CircleSlash2 className="w-5 h-5 lg:w-6 lg:h-6"/>
+                :
+                <Plus className="w-5 h-5 lg:w-6 lg:h-6"/>
+            }
             <p className="text-sm">{text}</p>
         </div>
     );

src/components/wrappers/common/pagination/pagination-size.tsx

@@ -0,0 +1,35 @@
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
+import { cn } from "@/lib/utils";
+
+export type PaginationSizeProps = {
+    className?: string;
+    pageSize: number;
+    onPageSizeChange: (size: number) => void;
+    pageSizeOptions?: number[];
+};
+
+export const PaginationSize = (props: PaginationSizeProps) => {
+    const { className, onPageSizeChange, pageSizeOptions = [10, 20, 30, 40, 50] } = props;
+    const effectivePageSize = pageSizeOptions.includes(props.pageSize) ? props.pageSize : pageSizeOptions[0];
+
+    return (
+        <div className={cn("flex items-center justify-end sm:justify-center space-x-2", className)}>
+            <p className="whitespace-nowrap text-sm font-medium hidden md:block">Cards per page</p>
+            <Select
+                value={`${effectivePageSize}`}
+                onValueChange={(value) => onPageSizeChange(Number(value))}
+            >
+                <SelectTrigger className="h-8 w-[4.5rem]" aria-label="Cards per page">
+                    <SelectValue placeholder={effectivePageSize} />
+                </SelectTrigger>
+                <SelectContent side="top">
+                    {pageSizeOptions.map((size) => (
+                        <SelectItem key={size} value={`${size}`}>
+                            {size}
+                        </SelectItem>
+                    ))}
+                </SelectContent>
+            </Select>
+        </div>
+    );
+};

src/components/wrappers/dashboard/admin/channels/channel/channel-form/channel-form.tsx

@@ -202,9 +202,9 @@ export const ChannelForm = ({onSuccessAction, organization, defaultValues, kind}
                 name="name"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Channel Name</FormLabel>
+                        <FormLabel>Channel Name *</FormLabel>
                         <FormControl>
-                            <Input {...field} placeholder={`My ${selectedProviderDetails?.label} Channel`}
+                            <Input {...field} placeholder={`e.g. ${selectedProviderDetails?.label} Channel`}
                                    value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
@@ -252,4 +252,3 @@ export const ChannelForm = ({onSuccessAction, organization, defaultValues, kind}
         </Form>
     );
 };
-

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/discord.form.tsx

@@ -22,11 +22,11 @@ export const NotifierDiscordForm = ({ form }: NotifierDiscordFormProps) => {
         name="config.discordWebhook"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Discord Webhook URL</FormLabel>
+            <FormLabel>Discord Webhook URL *</FormLabel>
             <FormControl>
               <PasswordInput
                 {...field}
-                placeholder="https://discord.com/api/webhooks/..."
+                placeholder="e.g. https://discord.com/api/webhooks/..."
               />
             </FormControl>
             <FormMessage />

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/gotify.form.tsx

@@ -23,9 +23,9 @@ export const NotifierGotifyForm = ({ form }: NotifierGotifyFormProps) => {
         name="config.gotifyServerUrl"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Gotify Server URL</FormLabel>
+            <FormLabel>Gotify Server URL *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="https://gotify.example.com" />
+              <Input {...field} placeholder="e.g. https://gotify.example.com" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -36,9 +36,9 @@ export const NotifierGotifyForm = ({ form }: NotifierGotifyFormProps) => {
         name="config.gotifyAppToken"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Application Token</FormLabel>
+            <FormLabel>Application Token *</FormLabel>
             <FormControl>
-              <PasswordInput {...field} placeholder="A1b2C3d4E5f6G7h" />
+              <PasswordInput {...field} placeholder="e.g. gotify-app-token" />
             </FormControl>
             <FormMessage />
           </FormItem>

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/ntfy.form.tsx

@@ -18,9 +18,9 @@ export const NotifierNtfyForm = ({form}: NotifierNtfyFormProps) => {
                 name="config.ntfyTopic"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Topic Name</FormLabel>
+                        <FormLabel>Topic Name *</FormLabel>
                         <FormControl>
-                            <Input {...field} placeholder="my-secret-topic"/>
+                            <Input {...field} placeholder="e.g. team-alerts"/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -32,9 +32,9 @@ export const NotifierNtfyForm = ({form}: NotifierNtfyFormProps) => {
                 name="config.ntfyServerUrl"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Server URL (Optional)</FormLabel>
+                        <FormLabel>Server URL</FormLabel>
                         <FormControl>
-                            <Input {...field} placeholder="https://ntfy.sh (default)"/>
+                            <Input {...field} placeholder="e.g. https://ntfy.example.com"/>
                         </FormControl>
                         <p className="text-xs text-muted-foreground">Leave empty to use the official ntfy.sh server.</p>
                         <FormMessage/>
@@ -47,9 +47,9 @@ export const NotifierNtfyForm = ({form}: NotifierNtfyFormProps) => {
                 name="config.ntfyToken"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Access Token (Optional)</FormLabel>
+                        <FormLabel>Access Token</FormLabel>
                         <FormControl>
-                            <PasswordInput {...field} placeholder="tk_..."/>
+                            <PasswordInput {...field} placeholder="e.g. tk_xxxxx"/>
                         </FormControl>
                         <p className="text-xs text-muted-foreground">Only required for protected topics or self-hosted instances with auth.</p>
                         <FormMessage/>
@@ -64,9 +64,9 @@ export const NotifierNtfyForm = ({form}: NotifierNtfyFormProps) => {
                 name="config.ntfyUsername"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Basic Auth Username (Optional)</FormLabel>
+                        <FormLabel>Basic Auth Username</FormLabel>
                         <FormControl>
-                            <Input {...field} placeholder="username"/>
+                            <Input {...field} placeholder="e.g. notifier-user"/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -78,9 +78,9 @@ export const NotifierNtfyForm = ({form}: NotifierNtfyFormProps) => {
                 name="config.ntfyPassword"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Basic Auth Password (Optional)</FormLabel>
+                        <FormLabel>Basic Auth Password</FormLabel>
                         <FormControl>
-                            <PasswordInput placeholder="password" {...field} />
+                            <PasswordInput placeholder="e.g. notifier-password" {...field} />
                         </FormControl>
                         <FormMessage/>
                     </FormItem>

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/slack.form.tsx

@@ -22,11 +22,11 @@ export const NotifierSlackForm = ({ form }: NotifierSmtpFormProps) => {
         name="config.slackWebhook"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Slack Webhook URL</FormLabel>
+            <FormLabel>Slack Webhook URL *</FormLabel>
             <FormControl>
               <PasswordInput
                 {...field}
-                placeholder="https://hooks.slack.com/services/..."
+                placeholder="e.g. https://hooks.slack.com/services/..."
               />
             </FormControl>
             <FormMessage />

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/smtp.form.tsx

@@ -19,9 +19,9 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.host"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>SMTP Host</FormLabel>
+                        <FormLabel>SMTP Host *</FormLabel>
                         <FormControl>
-                            <Input placeholder="smtp.gmail.com" {...field} value={field.value ?? ""}/>
+                            <Input placeholder="e.g. smtp.example.com" {...field} value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -32,9 +32,9 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.port"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>SMTP Port</FormLabel>
+                        <FormLabel>SMTP Port *</FormLabel>
                         <FormControl>
-                            <Input placeholder="456" type="number" {...field} value={field.value ?? ""}/>
+                            <Input placeholder="e.g. 587" type="number" {...field} value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -45,9 +45,9 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.user"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Username</FormLabel>
+                        <FormLabel>Username *</FormLabel>
                         <FormControl>
-                            <Input placeholder="contact@example.com" {...field} value={field.value ?? ""}/>
+                            <Input placeholder="e.g. noreply@example.com" {...field} value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -58,7 +58,7 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.password"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Password</FormLabel>
+                        <FormLabel>Password *</FormLabel>
                         <FormControl>
                             <PasswordInput
                                 {...field}
@@ -75,9 +75,9 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.from"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>From Email</FormLabel>
+                        <FormLabel>From Email *</FormLabel>
                         <FormControl>
-                            <Input placeholder={`"Portabase" <example@portabase.io>`} {...field}
+                            <Input placeholder={`e.g. "Portabase" <noreply@example.com>`} {...field}
                                    value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
@@ -90,9 +90,9 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
                 name="config.to"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>To Email</FormLabel>
+                        <FormLabel>To Email *</FormLabel>
                         <FormControl>
-                            <Input placeholder={"contact@portabase.io, contact2@portabase.io"} {...field}
+                            <Input placeholder={"e.g. alerts@example.com, team@example.com"} {...field}
                                    value={field.value ?? ""}/>
                         </FormControl>
                         <FormMessage/>
@@ -102,4 +102,4 @@ export const NotifierSmtpForm = ({form}: NotifierSmtpFormProps) => {
 
         </>
     )
-}
+}

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/telegram.form.tsx

@@ -23,11 +23,11 @@ export const NotifierTelegramForm = ({ form }: NotifierTelegramFormProps) => {
         name="config.telegramBotToken"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Telegram Bot Token</FormLabel>
+            <FormLabel>Telegram Bot Token *</FormLabel>
             <FormControl>
               <PasswordInput
                 {...field}
-                placeholder="123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11"
+                placeholder="e.g. 123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11"
               />
             </FormControl>
             <FormMessage />
@@ -39,9 +39,9 @@ export const NotifierTelegramForm = ({ form }: NotifierTelegramFormProps) => {
         name="config.telegramChatId"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Telegram Chat ID</FormLabel>
+            <FormLabel>Telegram Chat ID *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="-100123456789 or 123456789" />
+              <Input {...field} placeholder="e.g. -100123456789 or 123456789" />
             </FormControl>
             <p className="text-xs text-muted-foreground">
               You must start the conversation with the bot first (
@@ -69,7 +69,7 @@ export const NotifierTelegramForm = ({ form }: NotifierTelegramFormProps) => {
           <FormItem>
             <FormLabel>Telegram Topic ID</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="123456" />
+              <Input {...field} placeholder="e.g. 123456" />
             </FormControl>
             <p className="text-xs text-muted-foreground">
               Unique identifier for the target message thread (topic) of the

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/notifications/forms/webhook.form.tsx

@@ -23,9 +23,9 @@ export const NotifierWebhookForm = ({ form }: NotifierWebhookFormProps) => {
         name="config.webhookUrl"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Webhook URL</FormLabel>
+            <FormLabel>Webhook URL *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="https://example.com/api/webhook" />
+              <Input {...field} placeholder="e.g. https://example.com/api/webhook" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -38,9 +38,9 @@ export const NotifierWebhookForm = ({ form }: NotifierWebhookFormProps) => {
             name="config.webhookSecretHeader"
             render={({ field }) => (
               <FormItem>
-                <FormLabel>Header Name (Optional)</FormLabel>
+                <FormLabel>Header Name</FormLabel>
                 <FormControl>
-                  <Input {...field} placeholder="X-Webhook-Secret" />
+                  <Input {...field} placeholder="e.g. X-Webhook-Secret" />
                 </FormControl>
                 <FormMessage />
               </FormItem>
@@ -53,9 +53,9 @@ export const NotifierWebhookForm = ({ form }: NotifierWebhookFormProps) => {
             name="config.webhookSecret"
             render={({ field }) => (
               <FormItem>
-                <FormLabel>Secret Value (Optional)</FormLabel>
+                <FormLabel>Secret Value</FormLabel>
                 <FormControl>
-                  <PasswordInput {...field} placeholder="Secret value..." />
+                  <PasswordInput {...field} placeholder="e.g. webhook-secret" />
                 </FormControl>
                 <FormMessage />
               </FormItem>

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/storages/forms/google-drive.form.tsx

@@ -96,9 +96,9 @@ export const StorageGoogleDriveForm = ({form}: StorageGoogleDriveFormProps) => {
                 name="config.clientId"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Client ID</FormLabel>
+                        <FormLabel>Client ID *</FormLabel>
                         <FormControl>
-                            <Input {...field} placeholder="xxxx.apps.googleusercontent.com"/>
+                            <Input {...field} placeholder="e.g. xxxx.apps.googleusercontent.com"/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>
@@ -110,7 +110,7 @@ export const StorageGoogleDriveForm = ({form}: StorageGoogleDriveFormProps) => {
                 name="config.clientSecret"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Client Secret</FormLabel>
+                        <FormLabel>Client Secret *</FormLabel>
                         <FormControl>
                             <PasswordInput {...field} />
                         </FormControl>
@@ -124,9 +124,9 @@ export const StorageGoogleDriveForm = ({form}: StorageGoogleDriveFormProps) => {
                 name="config.folderId"
                 render={({field}) => (
                     <FormItem>
-                        <FormLabel>Folder ID</FormLabel>
+                        <FormLabel>Folder ID *</FormLabel>
                         <FormControl>
-                            <Input {...field} />
+                            <Input {...field} placeholder="e.g. 1AbCdEfGhIjKlMnOpQrStUvWxYz"/>
                         </FormControl>
                         <FormMessage/>
                     </FormItem>

src/components/wrappers/dashboard/admin/channels/channel/channel-form/providers/storages/forms/s3.form.tsx

@@ -24,9 +24,9 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
         name="config.endPointUrl"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Endpoint URL</FormLabel>
+            <FormLabel>Endpoint URL *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="s3.amazonaws.com" />
+              <Input {...field} placeholder="e.g. s3.amazonaws.com" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -39,7 +39,7 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
           <FormItem>
             <FormLabel>Region</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="us-east-1" />
+              <Input {...field} placeholder="e.g. us-east-1" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -50,9 +50,9 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
         name="config.accessKey"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Access Key</FormLabel>
+            <FormLabel>Access Key *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="A1b2C3d4E5f6G7h" />
+              <Input {...field} placeholder="e.g. AKIA..." />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -63,9 +63,9 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
         name="config.secretKey"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Secret Key</FormLabel>
+            <FormLabel>Secret Key *</FormLabel>
             <FormControl>
-              <PasswordInput {...field} placeholder="A1b2C3d4E5f6G7h" />
+              <PasswordInput {...field} placeholder="e.g. s3-secret-key" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -76,9 +76,9 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
         name="config.bucketName"
         render={({ field }) => (
           <FormItem>
-            <FormLabel>Bucket name</FormLabel>
+            <FormLabel>Bucket name *</FormLabel>
             <FormControl>
-              <Input {...field} placeholder="portabase-dev" />
+              <Input {...field} placeholder="e.g. backups-prod" />
             </FormControl>
             <FormMessage />
           </FormItem>
@@ -91,7 +91,7 @@ export const StorageS3Form = ({ form }: StorageS3FormProps) => {
           <FormItem>
             <FormLabel>Port</FormLabel>
             <FormControl>
-              <Input {...field} type="number" placeholder="443" />
+              <Input {...field} type="number" placeholder="e.g. 443" />
             </FormControl>
             <FormMessage />
           </FormItem>

src/components/wrappers/dashboard/admin/channels/organization/channels-organization.schema.ts

@@ -1,7 +1,7 @@
 import {z} from "zod";
 
 export const ChannelsOrganizationSchema = z.object({
-    organizations: z.array(z.string())
+    organizations: z.array(z.string().uuid())
 });
 
 export type ChannelsOrganizationType = z.infer<typeof ChannelsOrganizationSchema>;

src/components/wrappers/dashboard/admin/settings/email/email-form/email-form.action.ts

@@ -5,6 +5,7 @@ import { eq } from "drizzle-orm";
 import { db } from "@/db";
 import * as drizzleDb from "@/db";
 import {userAction} from "@/lib/safe-actions/actions";
+import {withUpdatedAt} from "@/db/utils";
 
 export const updateEmailSettingsAction = userAction
     .schema(
@@ -18,9 +19,9 @@ export const updateEmailSettingsAction = userAction
 
         const [updatedSettings] = await db
             .update(drizzleDb.schemas.setting)
-            .set({
+            .set(withUpdatedAt({
                 ...data,
-            })
+            }))
             .where(eq(drizzleDb.schemas.setting.name, name))
             .returning();