5630 Commits

Author	SHA1	Message	Date
jmiller	df9305758f	feat: add issue status presets and cross-org migration (#507) ... 4 built-in presets: default, software-development, support-tickets, bug-tracking. API endpoints to list presets, apply to org, and copy statuses between orgs. Web UI dropdown on org settings page. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:05:14 -05:00
jmiller	4178e7f23e	feat: add delete allowlist for branch protection rules (#696) ... Add configurable per-user/team/deploy-key allowlist for deleting protected branches. Previously, protected branches could never be deleted via git push. Now admins can configure deletion permissions with the same granularity as force-push allowlists. - 6 new model fields: CanDelete, EnableDeleteAllowlist, DeleteAllowlistUserIDs/TeamIDs, DeleteAllowlistDeployKeys, DeleteAllowlistActionsUser - CanUserDelete() method with admin-level default (higher than push) - Migration v361 adds columns to protected_branch table - Pre-receive hook checks delete allowlist instead of unconditional block - CanDeleteBranch service uses CanUserDelete instead of IsBranchProtected - API create/edit endpoints support delete allowlist fields - Web UI settings page with radio buttons and user/team dropdowns - 12 new locale strings for the delete allowlist UI Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-27 15:35:13 -05:00
jmiller	d2d7c0a762	feat: add ability to edit API token scopes (#697) ... Add PATCH /users/{username}/tokens/{id} API endpoint and web UI edit button so token scopes can be modified after creation without having to delete and recreate the token.	2026-06-25 09:57:59 -05:00
Jonathan Miller	1178975be3	feat(wiki): full-text search across wiki pages (#550) ... - Web: WikiSearch handler with case-insensitive search of titles and content - Web: search.tmpl with search form and results display - Web: "Search wiki" link added to wiki dropdown menu - API: GET /wiki/search?q=term endpoint with pagination - Recursive traversal handles nested folder wikis	2026-06-23 12:05:48 -05:00
Jonathan Miller	9dda78da7c	feat(wiki): print view, ZIP export, and folder access control (#674, #675) ... Print view: clean page rendering without navigation chrome for printing. ZIP export: download entire wiki as ZIP archive of markdown files. Folder ACL: _access.yml files control per-folder write permissions. Both accessible from wiki pages dropdown menu.	2026-06-22 08:47:36 -05:00
jmiller	5c9db551dc	feat(wiki): per-folder access control via _access.yml (#674) — template	2026-06-22 00:54:07 +00:00
Jonathan Miller	827025bd17	feat(wiki): enhanced ToC — collapsible, inline, sticky, frontmatter control (#673) ... ToC can be controlled via frontmatter: toc=false disables, toc=inline shows at top of content instead of sidebar. Sidebar ToC is now collapsible via <details> and sticky on scroll. Inline ToC also uses collapsible <details> with "Contents" header.	2026-06-21 19:33:57 -05:00
Jonathan Miller	db596575a0	feat(wiki): page categories via YAML frontmatter (#668) ... Add categories support using frontmatter: categories: [arch, api, ref] Categories render as clickable tags at the bottom of wiki pages. Category index page lists all pages tagged with a given category. Frontmatter is stripped before markdown rendering.	2026-06-21 18:32:07 -05:00
Jonathan Miller	3c56dc8814	feat(wiki): revision diff — view changes for any wiki commit (#667) ... Compare a wiki commit against its parent showing added/removed lines with color-coded diff view. Accessible via diff icon button in wiki page header and from revision history. Shows commit metadata (author, message, timestamp) alongside the diff.	2026-06-21 18:23:09 -05:00
Jonathan Miller	bb7e99ad40	fix: backlinks template pluralization	2026-06-21 18:10:16 -05:00
Jonathan Miller	2a1692d599	fix: resolve code review issues in wiki and status features ... - collectWikiPages: store hyphen-normalized names for flexible lookup - Backlinks: use wiki_service.GitPathToWebPath for subdirectory URLs - issue_statuses.tmpl: fix garbled em-dash bytes (0x97 → hyphen) - backlinks.tmpl: fix pluralization text	2026-06-21 17:57:46 -05:00
Jonathan Miller	b981cf72e3	feat(wiki): recent changes page — cross-page edit activity (#670) ... Shows all recent wiki edits with page name, author, edit summary, and timestamp. Paginated. Accessible via "Recent changes" in the wiki pages dropdown menu.	2026-06-21 17:20:12 -05:00
Jonathan Miller	f87f904a21	fix: remove Version field from metadata settings template ... Version is no longer stored in RepoMetadata struct — it comes from the metadata API. The template reference caused a 500 error.	2026-06-21 15:42:46 -05:00
Jonathan Miller	fc72d8e90a	feat(wiki): add backlinks — "What links here" for wiki pages (#669) ... Scan all wiki pages for references to the current page and display them on a dedicated backlinks page. Uses content search across markdown files (no database needed). Adds cross-reference button to wiki page header.	2026-06-21 11:45:20 -05:00
Jonathan Miller	71d52e432e	feat: enforce required baseline issue statuses (#681) ... Add IsRequired field to IssueStatusDef. Open and Closed statuses are seeded as required and cannot be deleted. Delete attempts return an error flash in the web UI and ErrStatusRequired in the model layer. API response now includes is_required field.	2026-06-21 11:29:49 -05:00
Jonathan Miller	bfb4b53da3	feat: add folder-based tree sidebar to org wiki (#680) ... Replace flat page list with hierarchical folder tree in org wiki sidebar. _Sidebar.md takes precedence when present; otherwise auto-generates collapsible folder menus up to 2 levels deep.	2026-06-21 11:00:18 -05:00
Jonathan Miller	3a405033ae	feat: add product tier admin UI with CRUD and license counts (#627) ... Admin page at /-/admin/license-tiers for managing product tiers: - Tier list with key, name, repos, max domains, license count, sort order - Create new tier form with repo input - Delete tier (blocked if active licenses exist) - Nav item added to admin sidebar	2026-06-20 20:14:24 -05:00
Jonathan Miller	08e441d7c8	fix: rename package_type to extension_type in metadata template ... The Go handler reads extension_type but the template was still sending package_type, causing every save to silently clear the field.	2026-06-20 10:45:55 -05:00
Jonathan Miller	2b6684536e	feat: remove display_name, compute from extension_type + name (#650) ... - Remove DisplayName field from RepoMetadata and UpdateStreamConfig - Add DerivedDisplayName() method: "{Type} - {Name}" (e.g. "Package - MokoSuiteBackup") - API returns computed display_name in GET, ignores it on PUT - Update server feeds use DerivedDisplayName() instead of stored value - Remove display_name from web forms (repo licensing, org update streams) - License settings API computes display_name from repo metadata - Migration v358: drop display_name columns from both tables	2026-06-20 10:45:54 -05:00
Jonathan Miller	245b5a8e6a	feat(custom-fields): add required flag UI and API validation (#597) ... - Add required checkbox to org custom field settings form - Show red asterisk (*) indicator on required fields in the list - Validate required custom fields on API issue create (return 422) - Add locale strings for required field UI The Required column already exists in the DB (migration v343) and is already validated in the web form. This adds the missing org settings UI checkbox and API-side validation. Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 21:46:24 -05:00
Jonathan Miller	c1604e96cf	fix(security): add rel="noopener noreferrer" to target="_blank" links ... Prevents reverse tabnabbing on raw file links opened in new tabs.	2026-06-11 16:01:07 -05:00
Jonathan Miller	998f971246	fix(ui): open raw file links in new tab (#581) ... Raw and View Raw links now open in a new tab so the user stays on the file view page. Updated in view_file, blame, filetoolarge, and LFS file templates. Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 15:30:34 -05:00
Jonathan Miller	4ed6e0175d	feat(settings): SPDX license dropdown with auto-name, clean up metadata ... - License field is now a dropdown with common SPDX identifiers - License name auto-derived from SPDX (spdxToName map) - Preserve hidden fields (element_name, display_name, maintainer, etc.) when saving from the simplified UI - Remove unused updateserver_model import from metadata handler	2026-06-10 04:08:12 -05:00
Jonathan Miller	a86350eebb	fix(settings): remove auto-derived fields from metadata UI ... Remove fields that are auto-derived at runtime: - Standards source/version (internal) - Maintainer/maintainer URL (from org profile) - Display name (auto: ExtensionType - RepoName) - Element name full (auto: prefix_reponame_lowercase) - Language (auto-detected by Gitea) Rename "Package Type" to "Extension Type". Build section only shown for Joomla platform.	2026-06-10 00:48:13 -05:00
Jonathan Miller	faef50ec4d	fix(settings): update server page shows only visibility and gating	2026-06-09 23:36:21 -05:00
Jonathan Miller	9b9e5ae964	feat(settings): separate update server page from metadata ... - /settings/metadata: project identity + custom fields - /settings/updateserver: enable, platform, visibility, gating, keys - Update server nav link shown when LicensingEnabled - Old /settings/licensing and /settings/manifest redirect	2026-06-09 23:34:26 -05:00
Jonathan Miller	82a48d69cc	chore: remove old manifest files (consolidated into metadata)	2026-06-09 23:26:19 -05:00
Jonathan Miller	e1ca5cdfc4	feat(settings): consolidate manifest + custom fields into metadata page ... - Merge project identity (manifest), update server config, and custom fields into single /settings/metadata page - Three sections: Project Identity, Update Server, Custom Fields - Old /settings/manifest and /settings/licensing redirect to /metadata - Single nav link replaces two separate entries	2026-06-09 23:24:35 -05:00
Jonathan Miller	704d9d10be	feat(issues): status/priority/type dropdowns on new issue form (#598) ... - Add type, priority, status dropdowns to new issue sidebar - Pre-select org defaults (is_default for type/priority, first open status) - Auto-assign defaults on API create when not provided - Required indicators (*) on dropdowns and custom fields - Validate required custom fields on submit (#597) - Add feed_visibility to update server settings on manifest page	2026-06-09 23:19:19 -05:00
Jonathan Miller	857c51e030	feat(settings): consolidate update server settings into manifest page ... - Move licensing/update server form into manifest settings page - Remove separate licensing nav link (redirect old URL for compat) - Extension metadata fields already in manifest section (no duplication) - Closes #582	2026-06-09 19:35:47 -05:00
Jonathan Miller	be6f3091af	fix: switch org wiki tab to .profile wiki sidecars (#595) ... Fixes #594	2026-06-09 15:05:05 -05:00
Jonathan Miller	1caf26453f	feat: issue metadata API + org wiki tab with internal/external mode ... Issue Status/Priority/Type API: - Expose status_id, priority_id, type_id (with resolved names) on Issue API struct - New endpoints: GET /orgs/{org}/issue-statuses, /issue-priorities, /issue-types - CreateIssue and EditIssue handlers accept status_id, priority_id, type_id - MCP tools: 5 new tools + updated create/update with metadata params Org Wiki Tab: - Convention repos: wiki (public) and wiki-private (members-only) - Inline wiki rendering with markdown pipeline, sidebar, footer, page list - Public/private view dropdown (same UX as org profile README selector) - External wiki mode: link to outside URL from wiki tab - Wiki mode setting in org settings (internal vs external with URL field) - Migration 354: add wiki_mode and wiki_url to user table	2026-06-09 10:20:54 -05:00
Jonathan Miller	d0853b874f	fix(manifest): remove duplicate element name block in template	2026-06-07 13:47:07 -05:00
Jonathan Miller	c26ad626bd	feat(manifest): add distribution metadata fields (phase 1 consolidation) ... Add DisplayName, Maintainer, MaintainerURL, InfoURL, TargetVersion, and PHPMinimum to RepoManifest. These fields were previously only in UpdateStreamConfig and are now in the manifest as the single source of truth. Distribution section shown conditionally for joomla/wordpress/ dolibarr platforms. Closes #582 phase 1.	2026-06-07 13:36:58 -05:00
jmiller	f86527994b	Merge pull request 'fix(manifest): fix template end mismatch in Joomla settings block' (#575) from fix/manifest-template-end into dev	2026-06-07 17:51:45 +00:00
Jonathan Miller	c016c603b4	fix(manifest): fix template end mismatch in Joomla settings block	2026-06-07 12:51:20 -05:00
Jonathan Miller	09aa8d8201	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:24:07 -05:00
Jonathan Miller	33ebcd7726	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:11:24 -05:00
jmiller	b6b4d6f525	Merge pull request 'fix(licensing): hide require-key option for Joomla update servers' (#567) from fix/hide-joomla-require-key into dev	2026-06-07 16:39:09 +00:00
Jonathan Miller	74279c55e3	fix(licensing): hide require-key option for Joomla update servers ... Joomla's update system does not support license key authentication, so hide the "Require license key for update feeds" checkbox when the platform is set to Joomla or Joomla+Dolibarr.	2026-06-07 11:38:05 -05:00
Jonathan Miller	37d59e7b59	feat(cdn): built-in CDN for release asset delivery (#561) ... Add CDN system that serves release assets via a dedicated hostname (e.g., cdn.mokoconsulting.tech) with per-asset public/private toggles, IP/referrer allowlists, and aggressive caching headers. - Host-based routing intercepts CDN domain before auth middleware - Per-attachment cdn_public flag controls CDN visibility - Releases in an update stream are excluded from CDN (update server takes precedence) - CORS, ETag, Cache-Control headers for downstream CDN compatibility - IP/CIDR and referrer domain allowlists for abuse prevention	2026-06-07 11:07:30 -05:00
Jonathan Miller	798d9c3ae0	fix(settings): remove duplicate description from manifest page ... Description is already managed in repo general settings. The manifest now reads it from the repository object instead of a separate form field.	2026-06-06 21:07:39 -05:00
Jonathan Miller	2cc4f7c047	feat: org settings for Issue Types + MCP SSE hosted + npm auto-publish ... - Org settings page for managing Issue Type definitions (CRUD) - MCP SSE endpoint deployed at git.mokoconsulting.tech/mcp/ - npm auto-publish workflow on MCP source changes to main	2026-06-06 19:52:55 -05:00
Jonathan Miller	50c472991a	fix(auth): add login form with OAuth to all error pages ... - 403: OAuth buttons moved below password form (matches regular login) - 404: Login form with OAuth added for unauthenticated users - Both pages load OAuth2 providers and show Sign In with Google etc.	2026-06-06 18:25:51 -05:00
Jonathan Miller	7d03541201	fix(auth): show OAuth providers on 403 login form ... The 403 Access Denied page login form now shows OAuth2 provider buttons (Sign in with Google, etc.) alongside the username/password form. Previously only showed password login even when OAuth was configured.	2026-06-06 18:15:25 -05:00
Jonathan Miller	dd1454c3cf	feat(issues): first-class Type field + status/priority/type badges in issue list ... - IssueTypeDef model with auto-seed defaults (Bug, Feature, Enhancement, Task, Documentation, Security) - Migration v350 adding issue_type_def table + type_id on issues - Type dropdown in issue sidebar - Type, Priority, Status colored badges in issue list view - Status/Priority/Type definitions loaded in issue list handler	2026-06-06 17:12:44 -05:00
Jonathan Miller	135b37edf1	fix(ui): use badge labels instead of strong tags for dashboard issue counts ... The sidebar counts (In your repositories, Assigned to you, etc.) were rendering as bold text concatenated with the label. Now uses ui small label spans for proper badge styling.	2026-06-06 16:54:26 -05:00
Jonathan Miller	72708b5a99	feat(security): add Security tab to repo navigation (#508) ... Add a top-level Security tab in the repo header (visible to admins only) showing alerts, scan controls, and severity badges. Links to settings page for scanner configuration. Alert file paths link directly to the source file.	2026-06-06 16:35:55 -05:00
Jonathan Miller	f7c1904625	feat(security): built-in security scanning platform (#508) ... Add a pluggable security scanning framework with secret detection as the first scanner module. Scans run on push to default branch and on-demand via the Security settings page. Includes: - Scanner interface for pluggable scanner types - Secret scanner with 15 built-in patterns (AWS, GitHub, Stripe, etc.) - SecurityAlert model with fingerprint-based dedup - SecurityScannerConfig per-repo settings - Migration v349 for security tables - Repo settings Security page with alerts table - Scan Now button for on-demand scanning - Alert resolve/dismiss actions - Push-time scanning in post-receive hook	2026-06-06 16:23:08 -05:00
Jonathan Miller	6010841ee7	feat(wiki): hierarchical folder navigation with sidebar tree (#79) ... Support real subdirectories in wiki instead of escaping / to %2F. When navigating to a folder, tries README.md, Home.md, index.md as index pages. If none found, shows a file/folder listing. Includes: - Stop escaping / in WebPathFromRequest (wiki_path.go) - Folder detection with index file fallback - Auto-generated sidebar folder tree - Breadcrumb navigation for nested paths - Folder listing view when no index page exists - CSS for tree sidebar and folder listing	2026-06-06 15:09:23 -05:00