Refactor overview page, optimize performance, and enhance security

.env.example

@@ -10,48 +10,69 @@
 # When adding additional environment variables, the schema in "/src/env.js"
 # should be updated accordingly.
 
-# App URL
-NEXT_PUBLIC_APP_URL="http://localhost:3000"
-
-# Node environment
+# ──────────────────────────────────────────────
+# Core
+# ──────────────────────────────────────────────
 NODE_ENV="development"
+NEXT_PUBLIC_APP_URL="http://localhost:3000"
 
-# Database
+# ──────────────────────────────────────────────
+# Database (PostgreSQL)
+# ──────────────────────────────────────────────
 DATABASE_URL="postgresql://postgres:password@localhost:5432/trackit-saas"
-# Optional: Prisma Accelerate service URL (leave empty if not using Prisma Accelerate)
-PRISMA_ACCELERATE_URL=""
 
-# Better Auth
+# ──────────────────────────────────────────────
+# Authentication (Better Auth)
+# ──────────────────────────────────────────────
 BETTER_AUTH_SECRET="your_secret_here"
 BETTER_AUTH_URL="http://localhost:3000"
 
-# Inngest (async jobs & schedules)
+# ──────────────────────────────────────────────
+# Email - Primary: Resend (optional, needs paid plan)
+# ──────────────────────────────────────────────
+RESEND_API_KEY="your_resend_api_key"
+EMAIL_FROM="noreply@yourdomain.com"
+
+# ──────────────────────────────────────────────
+# Email - Fallback: SMTP (e.g. Gmail, Mailtrap)
+# ──────────────────────────────────────────────
+SMTP_HOST="smtp.gmail.com"
+SMTP_PORT=587
+SMTP_USER="you@gmail.com"
+SMTP_PASS="your_app_password"
+SMTP_FROM="Trackit <you@gmail.com>"
+
+# ──────────────────────────────────────────────
+# AI (Google Gemini) — server-side only
+# ──────────────────────────────────────────────
+GEMINI_API_KEY="your_gemini_api_key"
+GEMINI_MODEL="gemini-2.5-flash"
+GEMINI_MAX_ROWS=50
+# Client-side row limit (for bulk import UI validation)
+NEXT_PUBLIC_GEMINI_MAX_ROWS=50
+
+# ──────────────────────────────────────────────
+# Background Jobs (Inngest) — optional
+# ──────────────────────────────────────────────
 INNGEST_EVENT_KEY="your_inngest_event_key"
 INNGEST_SIGNING_KEY="your_inngest_signing_key"
 
-# Better Stack Logging
-NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN=<token>
-NEXT_PUBLIC_BETTER_STACK_INGESTING_URL=<url>
-NEXT_PUBLIC_BETTER_STACK_LOG_LEVEL=debug
-
-# ImageKit.io for image uploads
+# ──────────────────────────────────────────────
+# Image Uploads (ImageKit) — optional
+# ──────────────────────────────────────────────
 IMAGEKIT_PRIVATE_KEY="your_imagekit_private_key"
-IMAGEKIT_URL_ENDPOINT="https://ik.imagekit.io/your_imagekit_id"
 NEXT_PUBLIC_IMAGEKIT_PUBLIC_KEY="your_imagekit_public_key"
 NEXT_PUBLIC_IMAGEKIT_URL_ENDPOINT="https://ik.imagekit.io/your_imagekit_id"
 
-# RESEND API for transactional emails
-RESEND_API_KEY="your_resend_api_key"
-EMAIL_FROM="your@email.com"
-
-# Gemini AI Service
-GEMINI_MAX_ROWS=50
-GEMINI_API_KEY='your_gemini_api_key'
-GEMINI_MODEL='gemini-2.5-flash'
-NEXT_PUBLIC_GEMINI_API_KEY='your_gemini_api_key'
-NEXT_PUBLIC_GEMINI_MODEL='gemini-2.5-flash'
-NEXT_PUBLIC_GEMINI_MAX_ROWS=50
+# ──────────────────────────────────────────────
+# Logging (Better Stack / Logtail)
+# ──────────────────────────────────────────────
+NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN="your_source_token"
+NEXT_PUBLIC_BETTER_STACK_INGESTING_URL="https://in.logs.betterstack.com"
+NEXT_PUBLIC_BETTER_STACK_LOG_LEVEL="debug"
 
-# Upstash Redis for rate limiting and caching
+# ──────────────────────────────────────────────
+# Rate Limiting (Upstash Redis) — optional
+# ──────────────────────────────────────────────
 UPSTASH_REDIS_REST_URL="your_upstash_redis_rest_url"
-UPSTASH_REDIS_REST_TOKEN="your_upstash_redis_rest_token"
+UPSTASH_REDIS_REST_TOKEN="your_upstash_redis_rest_token"

.github/workflows/ci.yml

@@ -34,7 +34,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 10
+          version: 10.15.0
 
       - name: Cache pnpm store
         uses: actions/cache@v4
@@ -58,5 +58,10 @@ jobs:
       - name: Type check
         run: pnpm run typecheck
 
-      - name:  Run Format check
+      - name: Run Format check
         run: pnpm run format:check
+
+      - name: Build
+        env:
+          SKIP_ENV_VALIDATION: 'true'
+        run: pnpm run build

.gitignore

@@ -48,4 +48,5 @@ yarn-error.log*
 test-results/
 playwright-report/
 CLAUDE.md
-.claude/
+.claude/
+.planning/