Freshta

Local fresh-produce marketplace: browse featured products, register/login with credentials, and (when signed in) upload items with images.

Stack

• Next.js 15 App Router, React 19, TypeScript, Tailwind CSS 3
• Auth.js (next-auth v5 beta) — Credentials + JWT (auth.ts)
• MongoDB Atlas via Mongoose (mongodb+srv)
• Firebase Storage for product images

Prerequisites

• Node.js ≥ 18.18 (devcontainer uses Node 20)
• A MongoDB Atlas cluster (mongodb+srv host)
• A Firebase project with Storage enabled

Setup

npm install
cp .env.example .env.local

Fill in .env.local (see .env.example).

Required:

• AUTH_SECRET — generate with npx auth secret or openssl rand -base64 32
• DB_USER, DB_PASSWORD, DB_CLUSTER (Atlas SRV host, e.g. cluster0.xxxxx.mongodb.net)
• NEXT_PUBLIC_FIREBASE_*

AUTH_URL is optional. Prefer omitting it locally so Auth.js follows the browser origin (trustHost in auth.ts).

npm run dev

Open http://localhost:3000. To pin a port: npm run dev -- -p 3001.

Optional: open the repo in a dev container (npm install runs on create; port 3000 is forwarded).

Scripts

Script	Purpose
npm run dev	Development server
npm run build / npm start	Production build and serve
npm run lint	ESLint
npm test	Jest unit / API tests
npm run test:watch	Jest in watch mode
npm run test:e2e	Playwright end-to-end smokes
npm run backfill:ownerId	Dry-run orphan product ownerId backfill (see Known limits)

Routes and APIs

Pages

Path	Notes
/	Home — hero, featured products
/account/login	Sign in
/account/register	Create account
/upload	Post a product (session required; redirects to login)

APIs

Path	Notes
POST /api/auth/signup	Register user
/api/auth/[...nextauth]	Auth.js handlers
GET / POST /api/products	List / create products (POST requires a session; sets ownerId)
PATCH / DELETE /api/products/[id]	Update / delete a product (session required; owner only). Firebase images are not removed on delete.

Product create / update / delete from the upload UI go through Server Actions in app/actions/products.ts (same ownership rules). Success/error feedback uses sonner toasts.

Architecture (brief)

• app/ — App Router pages and route handlers
• app/actions/ — Server Actions (product mutations)
• auth.ts — Auth.js config (handlers, auth, signIn, signOut)
• components/ — UI
• utils/ — DB, models, helpers, types
• utils/products/ — shared product mutation helpers used by actions and API routes

More agent/env detail: AGENTS.md.

Testing

• Unit / API (Jest): npm test — no real MongoDB; DB calls are mocked in examples
• E2E (Playwright): npm run test:e2e — first time: npx playwright install chromium. Chromium OS libraries are installed in .devcontainer/Dockerfile; rebuild the Dev Container if e2e fails with missing shared libraries (e.g. libglib-2.0)

Examples:

• Unit: utils/helpers/toTitleCase.test.ts
• API: app/api/products/route.test.ts, app/api/products/[id]/route.test.ts (mocked mongoose)
• E2E: e2e/home.spec.ts, e2e/auth-gate.spec.ts (logged-out /upload → login)

Full register/login e2e needs a dedicated test user and stable Atlas — deferred for now.

Known limits

• Shop, cart, How It Works, Blog, Contact, and /myAccount nav targets are mostly stubs
• Product image replace on edit is not wired; deleting a product does not remove its Firebase Storage object
• Products created before ownership was added have no ownerId and will not appear under “Your listings” until backfilled: npm run backfill:ownerId (dry-run), then npm run backfill:ownerId -- --ownerId <userId> --apply
• Leftover scaffold: GET /api/hello

Security

• Never commit .env / .env.local
• Firebase web config is public by design; lock down Storage rules in the Firebase console
• Rotate AUTH_SECRET and DB credentials if they may have been exposed