chore: import upstream snapshot with attribution

apps/sim/app/api/help/integration-request/route.ts

@@ -0,0 +1,103 @@
+import { createLogger } from '@sim/logger'
+import { type NextRequest, NextResponse } from 'next/server'
+import { integrationRequestContract } from '@/lib/api/contracts/common'
+import { parseRequest, validationErrorResponse } from '@/lib/api/server'
+import { env } from '@/lib/core/config/env'
+import type { TokenBucketConfig } from '@/lib/core/rate-limiter'
+import { RateLimiter } from '@/lib/core/rate-limiter'
+import { generateRequestId, getClientIp } from '@/lib/core/utils/request'
+import { getEmailDomain } from '@/lib/core/utils/urls'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { sendEmail } from '@/lib/messaging/email/mailer'
+import { getFromEmailAddress } from '@/lib/messaging/email/utils'
+
+const logger = createLogger('IntegrationRequestAPI')
+
+const rateLimiter = new RateLimiter()
+
+const PUBLIC_ENDPOINT_RATE_LIMIT: TokenBucketConfig = {
+  maxTokens: 10,
+  refillRate: 5,
+  refillIntervalMs: 60_000,
+}
+
+export const POST = withRouteHandler(async (req: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const ip = getClientIp(req)
+    const storageKey = `public:integration-request:${ip}`
+
+    const { allowed, remaining, resetAt } = await rateLimiter.checkRateLimitDirect(
+      storageKey,
+      PUBLIC_ENDPOINT_RATE_LIMIT
+    )
+
+    if (!allowed) {
+      logger.warn(`[${requestId}] Rate limit exceeded for IP ${ip}`, { remaining, resetAt })
+      return NextResponse.json(
+        { error: 'Too many requests. Please try again later.' },
+        {
+          status: 429,
+          headers: { 'Retry-After': String(Math.ceil((resetAt.getTime() - Date.now()) / 1000)) },
+        }
+      )
+    }
+
+    const parsed = await parseRequest(
+      integrationRequestContract,
+      req,
+      {},
+      {
+        validationErrorResponse: (err) => validationErrorResponse(err, 'Invalid request data'),
+      }
+    )
+    if (!parsed.success) return parsed.response
+
+    const { integrationName, email, useCase } = parsed.data.body
+
+    logger.info(`[${requestId}] Processing integration request`, {
+      integrationName,
+      email: `${email.substring(0, 3)}***`,
+    })
+
+    const emailText = `Integration: ${integrationName}
+From: ${email}
+Submitted: ${new Date().toISOString()}
+
+${useCase ? `Use Case:\n${useCase}` : 'No use case provided.'}
+`
+
+    const emailResult = await sendEmail({
+      to: [`help@${env.EMAIL_DOMAIN || getEmailDomain()}`],
+      subject: `[INTEGRATION REQUEST] ${integrationName}`,
+      text: emailText,
+      from: getFromEmailAddress(),
+      replyTo: email,
+      emailType: 'transactional',
+    })
+
+    if (!emailResult.success) {
+      logger.error(`[${requestId}] Error sending integration request email`, emailResult.message)
+      return NextResponse.json({ error: 'Failed to send request' }, { status: 500 })
+    }
+
+    logger.info(`[${requestId}] Integration request email sent successfully`)
+
+    return NextResponse.json(
+      { success: true, message: 'Integration request submitted successfully' },
+      { status: 200 }
+    )
+  } catch (error) {
+    if (error instanceof Error && error.message.includes('not configured')) {
+      logger.error(`[${requestId}] Email service configuration error`, error)
+      return NextResponse.json(
+        { error: 'Email service is temporarily unavailable. Please try again later.' },
+        { status: 500 }
+      )
+    }
+
+    logger.error(`[${requestId}] Error processing integration request`, error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+})

apps/sim/app/api/help/route.ts

@@ -0,0 +1,169 @@
+import { createLogger } from '@sim/logger'
+import { type NextRequest, NextResponse } from 'next/server'
+import { renderHelpConfirmationEmail } from '@/components/emails'
+import { helpFormBodySchema } from '@/lib/api/contracts/common'
+import { validationErrorResponse } from '@/lib/api/server'
+import { getSession } from '@/lib/auth'
+import { generateRequestId } from '@/lib/core/utils/request'
+import {
+  isPayloadSizeLimitError,
+  MAX_MULTIPART_OVERHEAD_BYTES,
+  readFormDataWithLimit,
+} from '@/lib/core/utils/stream-limits'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { sendEmail } from '@/lib/messaging/email/mailer'
+import { getFromEmailAddress, getHelpEmailAddress } from '@/lib/messaging/email/utils'
+import { MAX_WORKSPACE_FORMDATA_FILE_SIZE } from '@/lib/uploads/shared/types'
+
+const logger = createLogger('HelpAPI')
+
+/**
+ * The form can carry several image attachments with no server-side count
+ * cap, so this reuses the repo's largest existing per-request form-data
+ * bound (see files/upload route) rather than an arbitrary smaller limit
+ * that could reject a legitimate multi-image submission.
+ */
+const MAX_HELP_FORM_BYTES = MAX_WORKSPACE_FORMDATA_FILE_SIZE + MAX_MULTIPART_OVERHEAD_BYTES
+
+export const POST = withRouteHandler(async (req: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const session = await getSession()
+    if (!session?.user?.email) {
+      logger.warn(`[${requestId}] Unauthorized help request attempt`)
+      return NextResponse.json({ error: 'Authentication required' }, { status: 401 })
+    }
+
+    const email = session.user.email
+
+    const formData = await readFormDataWithLimit(req, {
+      maxBytes: MAX_HELP_FORM_BYTES,
+      label: 'Help request form data',
+    })
+
+    const subject = formData.get('subject') as string
+    const message = formData.get('message') as string
+    const type = formData.get('type') as string
+    const workflowId = formData.get('workflowId') as string | null
+    const workspaceId = formData.get('workspaceId') as string
+    const userAgent = formData.get('userAgent') as string | null
+
+    logger.info(`[${requestId}] Processing help request`, {
+      type,
+      email: `${email.substring(0, 3)}***`, // Log partial email for privacy
+    })
+
+    const validationResult = helpFormBodySchema.safeParse({
+      subject,
+      message,
+      type,
+    })
+
+    if (!validationResult.success) {
+      logger.warn(`[${requestId}] Invalid help request data`, {
+        issues: validationResult.error.issues,
+      })
+      return validationErrorResponse(validationResult.error)
+    }
+
+    const images: { filename: string; content: Buffer; contentType: string }[] = []
+
+    for (const [key, value] of formData.entries()) {
+      if (key.startsWith('image_') && typeof value !== 'string') {
+        if (value && 'arrayBuffer' in value) {
+          const buffer = Buffer.from(await value.arrayBuffer())
+          const filename = value.name || `image_${key.split('_')[1]}`
+
+          images.push({
+            filename,
+            content: buffer,
+            contentType: value.type || 'application/octet-stream',
+          })
+        }
+      }
+    }
+
+    const userId = session.user.id
+    let emailText = `
+Type: ${type}
+From: ${email}
+User ID: ${userId}
+Workspace ID: ${workspaceId ?? 'N/A'}
+Workflow ID: ${workflowId ?? 'N/A'}
+Browser: ${userAgent ?? 'N/A'}
+
+${message}
+    `
+
+    if (images.length > 0) {
+      emailText += `\n\n${images.length} image(s) attached.`
+    }
+
+    const emailResult = await sendEmail({
+      to: [getHelpEmailAddress()],
+      subject: `[${type.toUpperCase()}] ${subject}`,
+      text: emailText,
+      from: getFromEmailAddress(),
+      replyTo: email,
+      emailType: 'transactional',
+      attachments: images.map((image) => ({
+        filename: image.filename,
+        content: image.content.toString('base64'),
+        contentType: image.contentType,
+        disposition: 'attachment',
+      })),
+    })
+
+    if (!emailResult.success) {
+      logger.error(`[${requestId}] Error sending help request email`, emailResult.message)
+      return NextResponse.json({ error: 'Failed to send email' }, { status: 500 })
+    }
+
+    logger.info(`[${requestId}] Help request email sent successfully`)
+
+    try {
+      const confirmationHtml = await renderHelpConfirmationEmail(
+        type as 'bug' | 'feedback' | 'feature_request' | 'other',
+        images.length
+      )
+
+      await sendEmail({
+        to: [email],
+        subject: `Your ${type} request has been received: ${subject}`,
+        html: confirmationHtml,
+        from: getFromEmailAddress(),
+        replyTo: getHelpEmailAddress(),
+        emailType: 'transactional',
+      })
+    } catch (err) {
+      logger.warn(`[${requestId}] Failed to send confirmation email`, err)
+    }
+
+    return NextResponse.json(
+      { success: true, message: 'Help request submitted successfully' },
+      { status: 200 }
+    )
+  } catch (error) {
+    if (isPayloadSizeLimitError(error)) {
+      logger.warn(`[${requestId}] Help request form data too large`, { message: error.message })
+      return NextResponse.json(
+        { error: `Request body exceeds the maximum allowed size of ${MAX_HELP_FORM_BYTES} bytes` },
+        { status: 413 }
+      )
+    }
+    if (error instanceof Error && error.message.includes('not configured')) {
+      logger.error(`[${requestId}] Email service configuration error`, error)
+      return NextResponse.json(
+        {
+          error:
+            'Email service configuration error. Please check your email service configuration.',
+        },
+        { status: 500 }
+      )
+    }
+
+    logger.error(`[${requestId}] Error processing help request`, error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+})