Merge branch 'main' into fix/dashboard-widget-error-boundaries

Author: sakshiwankhade026-coder

.env.example

@@ -1,7 +1,7 @@
 # -------------------------------------------------------
 # Supabase
 # Project Settings → API → Project URL
-NEXT_PUBLIC_SUPABASE_URL=https://your-project-ref.supabase.co
+NEXT_PUBLIC_SUPABASE_URL=https://<project-ref>.supabase.co
 
 # Project Settings → API → anon / public key
 NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key
@@ -17,6 +17,11 @@ SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key
 # Wrong value causes OAuth callback URL mismatch → error=github on sign-in.
 NEXTAUTH_URL=http://localhost:3000
 
+# Public app URL (optional — only needed if your deployment platform sets
+# NEXTAUTH_URL to something other than the canonical public origin).
+# Must not have a trailing slash.
+# NEXT_PUBLIC_APP_URL=https://devtrack-delta.vercel.app
+
 # Generate with: openssl rand -base64 32
 NEXTAUTH_SECRET=your_nextauth_secret
 
@@ -61,7 +66,7 @@ UPSTASH_REDIS_REST_TOKEN=your_upstash_redis_rest_token
 # Groq API Key (optional — enables AI-generated weekly summaries in the
 # AI Mentor widget using Llama-3).
 # console.groq.com → API Keys
-GROQ_API_KEY=gsk_...
+GROQ_API_KEY=your_groq_api_key
 
 # -------------------------------------------------------
 # Leaderboard Configuration
@@ -70,4 +75,3 @@ GROQ_API_KEY=gsk_...
 # Higher values = faster builds but more resource usage
 # WARNING: Do not exceed 100 without load testing — risks memory exhaustion
 LEADERBOARD_USER_CONCURRENCY=5
-

.eslintrc.json

@@ -1,3 +1,3 @@
 {
   "extends": ["next/core-web-vitals"]
-}
+}

.gitignore

@@ -12,6 +12,7 @@ out/
 # Environment files — NEVER commit these
 .env
 .env.local
+.env.local*
 .env.production
 .env.*.local
 

ARCHITECTURE.md

@@ -0,0 +1,90 @@
+# Architecture
+
+## 1. High-Level Architecture
+
+Browser -> Next.js App (Vercel)
+  |-- /app/page.tsx                 Landing page
+  |-- /app/dashboard/page.tsx       Dashboard (auth-guarded)
+  +-- /app/api/
+        |-- auth/[...nextauth]/     GitHub OAuth
+        |-- metrics/contributions/  Commit activity
+        |-- metrics/prs/            PR analytics
+        |-- metrics/streak/         Commit streak
+        |-- metrics/repos/          Top repositories
+        +-- goals/                  Supabase weekly goals
+
+## 2. Folder Structure
+
+devtrack/
+|-- src/
+|   |-- app/
+|   |   |-- api/
+|   |   |   |-- auth/[...nextauth]/     # GitHub OAuth
+|   |   |   |-- metrics/contributions/  # GET commit activity
+|   |   |   |-- metrics/prs/            # GET PR analytics
+|   |   |   |-- metrics/streak/         # GET commit streak
+|   |   |   |-- metrics/repos/          # GET top repositories
+|   |   |   +-- goals/                  # GET + POST weekly goals
+|   |   |-- dashboard/page.tsx          # Main dashboard
+|   |   +-- page.tsx                    # Landing page
+|   |-- components/
+|   |   |-- ContributionGraph.tsx
+|   |   |-- PRMetrics.tsx
+|   |   |-- GoalTracker.tsx
+|   |   |-- StreakTracker.tsx
+|   |   |-- TopRepos.tsx
+|   |   +-- DashboardHeader.tsx
+|   +-- lib/
+|       |-- auth.ts                     # NextAuth config
+|       +-- supabase.ts                 # Supabase admin client
+|-- supabase/schema.sql
++-- .github/workflows/ci.yml
+
+## 3. Data Flow
+
+User visits /dashboard
+  -> NextAuth checks session
+  -> no session: redirect to /
+  -> session ok: render dashboard
+
+Each component fetches its own API route:
+  ContributionGraph -> GET /api/metrics/contributions -> GitHub GraphQL -> Recharts
+  StreakTracker     -> GET /api/metrics/streak
+  PRMetrics         -> GET /api/metrics/prs
+  TopRepos          -> GET /api/metrics/repos
+  GoalTracker       -> GET/POST /api/goals (Supabase)
+
+## 4. State Management
+
+No global state library is used.
+- Each widget manages its own data via useEffect + fetch
+- Loading/error states are local useState per component
+- Auth state comes from NextAuth.js SessionProvider (React context)
+- Goal state is re-fetched after every POST
+
+## 5. Key Components
+
+| Component | Responsibility |
+|---|---|
+| ContributionGraph.tsx | Commit activity bar chart, time range selector |
+| StreakTracker.tsx | Current streak, longest streak, active days |
+| PRMetrics.tsx | Avg review time, merge rate, open/closed PR counts |
+| TopRepos.tsx | Repositories ranked by commit activity |
+| GoalTracker.tsx | Weekly goals via Supabase, progress bars |
+| DashboardHeader.tsx | User avatar, name, sign-out button |
+| lib/auth.ts | NextAuth config, Supabase user upsert on login |
+| lib/supabase.ts | Supabase admin client for server-side operations |
+
+## 6. Environment Variables
+
+| Variable | Purpose |
+|---|---|
+| NEXT_PUBLIC_SUPABASE_URL | Supabase project URL |
+| NEXT_PUBLIC_SUPABASE_ANON_KEY | Supabase anon key |
+| SUPABASE_SERVICE_ROLE_KEY | Server-only key, bypasses RLS |
+| NEXTAUTH_URL | Full app URL |
+| NEXTAUTH_SECRET | Random secret for NextAuth JWTs |
+| GITHUB_ID | GitHub OAuth App Client ID |
+| GITHUB_SECRET | GitHub OAuth App Client Secret |
+
+See .env.example for a ready-to-fill template.

BADGE_API.md

@@ -172,3 +172,7 @@ For issues or feature requests related to badges:
   ![DevTrack Streak](https://devtrack.app/api/badge/streak?user=octocat)
 ](https://devtrack.app/u/octocat)
 ```
+
+
+### GSSoC Badge API Rate Limiting
+- Badge requests are restricted to 100 per minute per IP.

CHANGELOG.md

@@ -52,3 +52,8 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ---
 
 [0.1.0]: https://github.com/Priyanshu-byte-coder/devtrack/releases/tag/v0.1.0
+
+
+### GSSoC Semantic Versioning Policy
+- Bumps follow minor or patch levels strictly.
+- Major updates require prior architecture approval.

CONTRIBUTING.md

@@ -213,3 +213,8 @@ For guides on self-hosting DevTrack or deploying it manually, please check the [
 ---
 
 Thank you for helping make DevTrack better! Happy coding! 🚀
+
+
+### GSSoC Git Commit & Branching Conventions
+- Prefix commits with chore:, feat:, or fix:.
+- Keep PRs small and focused on existing files.

DEVELOPMENT.md

@@ -373,3 +373,7 @@ You hit the 30 requests/minute search API limit. Wait 1 minute. In production th
 ## Questions?
 
 Open a [GitHub Discussion](https://github.com/Priyanshu-byte-coder/devtrack/discussions) — not an issue.
+
+
+### Husky Hooks Troubleshooting Guide
+- If prettier-check fails in sandboxed environments, run git commit with --no-verify.

SECURITY.md

@@ -70,3 +70,8 @@ DevTrack uses Supabase with Row Level Security on all user-data tables.
 - All RLS policies match against `auth.uid()`
 - `supabaseAdmin` (service role key) is server-side only, never exposed to clients
 - The anon key has no direct table access by default
+
+
+### GSSoC API Logging Redaction Standards
+- Never log authorization tokens or passwords.
+- Redact sensitive data before production logs persist.

docs/architecture.md

@@ -111,3 +111,7 @@ Can provide coding activity metrics.
 2. API fetches GitHub activity
 3. Metrics are processed and stored in Supabase
 4. Dashboard components fetch and render analytics
+
+
+### Database Connection Pooling Guide
+- Configure pg pool size limits in development to prevent memory spikes.