3236 Commits

Author	SHA1	Message	Date
Jonathan Miller	c26ad626bd	feat(manifest): add distribution metadata fields (phase 1 consolidation) ... Add DisplayName, Maintainer, MaintainerURL, InfoURL, TargetVersion, and PHPMinimum to RepoManifest. These fields were previously only in UpdateStreamConfig and are now in the manifest as the single source of truth. Distribution section shown conditionally for joomla/wordpress/ dolibarr platforms. Closes #582 phase 1.	2026-06-07 13:36:58 -05:00
Jonathan Miller	09aa8d8201	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:24:07 -05:00
Jonathan Miller	33ebcd7726	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:11:24 -05:00
Jonathan Miller	6bb6e2ffd8	chore: rename moko-platform to MokoPlatform + changelog for v1.26.1-moko.06.12 ... Rename moko-platform references across locale, changelog, and README. Add changelog entry for dependency scanner, CDN, and Joomla fix. Closes #548	2026-06-07 11:57:26 -05:00
Jonathan Miller	37d59e7b59	feat(cdn): built-in CDN for release asset delivery (#561) ... Add CDN system that serves release assets via a dedicated hostname (e.g., cdn.mokoconsulting.tech) with per-asset public/private toggles, IP/referrer allowlists, and aggressive caching headers. - Host-based routing intercepts CDN domain before auth middleware - Per-attachment cdn_public flag controls CDN visibility - Releases in an update stream are excluded from CDN (update server takes precedence) - CORS, ETag, Cache-Control headers for downstream CDN compatibility - IP/CIDR and referrer domain allowlists for abuse prevention	2026-06-07 11:07:30 -05:00
Jonathan Miller	2cc4f7c047	feat: org settings for Issue Types + MCP SSE hosted + npm auto-publish ... - Org settings page for managing Issue Type definitions (CRUD) - MCP SSE endpoint deployed at git.mokoconsulting.tech/mcp/ - npm auto-publish workflow on MCP source changes to main	2026-06-06 19:52:55 -05:00
Jonathan Miller	dd1454c3cf	feat(issues): first-class Type field + status/priority/type badges in issue list ... - IssueTypeDef model with auto-seed defaults (Bug, Feature, Enhancement, Task, Documentation, Security) - Migration v350 adding issue_type_def table + type_id on issues - Type dropdown in issue sidebar - Type, Priority, Status colored badges in issue list view - Status/Priority/Type definitions loaded in issue list handler	2026-06-06 17:12:44 -05:00
Jonathan Miller	72708b5a99	feat(security): add Security tab to repo navigation (#508) ... Add a top-level Security tab in the repo header (visible to admins only) showing alerts, scan controls, and severity badges. Links to settings page for scanner configuration. Alert file paths link directly to the source file.	2026-06-06 16:35:55 -05:00
Jonathan Miller	f7c1904625	feat(security): built-in security scanning platform (#508) ... Add a pluggable security scanning framework with secret detection as the first scanner module. Scans run on push to default branch and on-demand via the Security settings page. Includes: - Scanner interface for pluggable scanner types - Secret scanner with 15 built-in patterns (AWS, GitHub, Stripe, etc.) - SecurityAlert model with fingerprint-based dedup - SecurityScannerConfig per-repo settings - Migration v349 for security tables - Repo settings Security page with alerts table - Scan Now button for on-demand scanning - Alert resolve/dismiss actions - Push-time scanning in post-receive hook	2026-06-06 16:23:08 -05:00
Jonathan Miller	6010841ee7	feat(wiki): hierarchical folder navigation with sidebar tree (#79) ... Support real subdirectories in wiki instead of escaping / to %2F. When navigating to a folder, tries README.md, Home.md, index.md as index pages. If none found, shows a file/folder listing. Includes: - Stop escaping / in WebPathFromRequest (wiki_path.go) - Folder detection with index file fallback - Auto-generated sidebar folder tree - Breadcrumb navigation for nested paths - Folder listing view when no index page exists - CSS for tree sidebar and folder listing	2026-06-06 15:09:23 -05:00
Jonathan Miller	55c2f81c58	feat(issues): org-level priority field with customizable levels (#509) ... Add org-level issue priority definitions that appear in the issue sidebar. Each priority has a name, color, sort order, and optional default flag. Follows the same architecture as custom statuses (#502). Includes: - IssuePriorityDef model with CRUD operations - Migration v348 adding issue_priority_def table + priority_id on issues - Org settings UI for managing priorities - Issue sidebar dropdown for selecting priority Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 11:52:44 -05:00
Jonathan Miller	3aaa7c0843	feat(settings): repo manifest settings with auto-migration and API (#315) ... Add a "Manifest" page in repo settings that stores moko-platform manifest fields (identity, governance, build) in the database. Includes: - RepoManifest model with all manifest.xml fields - Migration v347 adding repo_manifest table - Auto-detect and migrate .mokogitea/manifest.xml on first settings visit - Repo settings UI with Identity/Governance/Build sections - REST API: GET/PUT /api/v1/repos/{owner}/{repo}/manifest for Actions workflows and moko-platform CLI Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 09:02:23 -05:00
Jonathan Miller	c568e199ed	feat(issues): custom status definitions with automated actions (#502) ... Add org-level custom issue status definitions that appear in the issue sidebar. Each status has a name, color, description, and an optional "closes issue" flag that automatically closes/reopens the issue when the status is selected. Includes: - IssueStatusDef model with CRUD operations - Migration v346 adding issue_status_def table + status_id on issues - Org settings UI for managing statuses - Issue sidebar dropdown for selecting status - Auto close/reopen when status has closes_issue flag Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 08:24:44 -05:00
Jonathan Miller	9313ae2731	feat(ui): tabbed view for root markdown files alongside README (#500) ... Add tabs above the README rendering on the repo home page for well-known root files (LICENSE, CONTRIBUTING, CODE_OF_CONDUCT, SECURITY, CHANGELOG), similar to how GitHub surfaces these files for easy discovery. Tabs only appear when both a README and at least one other well-known file exist. Clicking a tab renders that file inline, replacing the README. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 06:41:05 -05:00
Jonathan Miller	6bd9548b2a	feat(custom-fields): move to org-level definitions with issue and repo scopes ... - CustomFieldDef now has owner_id (org) and scope (issue/repo) - Issue sidebar loads fields by org owner_id, not repo_id - Org Settings > Custom Fields page for managing field definitions - Repo Settings > Metadata page for filling in repo-scoped values - Migration v345 adds owner_id, scope, entity_id, entity_type columns - Per-repo custom field management replaced by org-level - Replaces .mokogitea/manifest.xml with database-backed metadata Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 19:11:22 -05:00
Jonathan Miller	4ec0db8658	feat(issues): show custom fields in issue sidebar with inline editing ... - Load custom field definitions and values in ViewIssue handler - New sidebar template displays dropdown fields with onchange submit - POST handler at /issues/{id}/custom-fields/{field_id} saves values - Dropdown options parsed from JSON and passed to template - Non-dropdown fields display as read-only text - Section appears between Labels and Milestone in sidebar Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 13:48:22 -05:00
Jonathan Miller	ee20006b15	fix(ui): rename "Licensing" to "Update Server" across settings UI ... The update server system works without license keys — the primary feature is serving update feeds. Rename all UI labels from "Licensing" to "Update Server" to reflect this. License key management remains under the Licenses tab. - Repo settings nav: "Licensing & Updates" -> "Update Server" - Advanced settings toggle: "Enable licensing" -> "Enable Update Server" - Org settings nav: "Licensing & Update Streams" -> "Update Server" - Icon changed from octicon-key to octicon-broadcast - Updated help text to emphasize update feeds over licensing Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:16:49 -05:00
Jonathan Miller	e4ea1303ea	feat(licenses): add domain restriction to packages and key generation ... - Add DomainRestriction field to LicensePackage model with migration - Packages can define default allowed domains (comma-separated) - Key generation form now includes licensee name, email, and domain fields in a proper modal instead of a tiny inline form - Keys inherit domain restriction from their package if not overridden - Package create/edit forms include domain restriction input - Domain enforcement already exists in heartbeat validation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:05:44 -05:00
Jonathan Miller	bab1acdfe3	fix(licenses): fix master key visibility, package creation, and template structure ... - Always show master key prefix and status in a dedicated segment with a Regenerate button that deactivates the old key and creates a new one - Fix broken <details> structure where </details> was inside an {{if}} block, causing malformed HTML - Move create package form into a proper modal instead of a broken details/summary toggle - Add copy button for all key prefixes (not just full keys) - Add POST /licenses/master-key/regenerate route and handler - Add locale keys for regenerate master key feature Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 08:47:11 -05:00
Jonathan Miller	c7d8f6066f	feat(issues): custom fields foundation — model, migration, settings UI (#8) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 06:46:33 -05:00
Jonathan Miller	a1ceac6396	feat(settings): separate licensing settings page with navbar entry ... Extract licensing/update feed settings to its own page at /settings/licensing with dedicated template and handler. Navbar additions: - Advanced Settings link (points to existing options page) - Licensing link with key icon (when licensing enabled) New handler: LicensingSettings/LicensingSettingsPost serves the standalone licensing form with all fields (platform, gating, metadata, extensions). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:02:53 -05:00
Jonathan Miller	e2c738a8d8	feat(repos): three-level visibility — Public, Private, Hidden ... Add IsHidden field to Repository model. Three visibility modes: - Public: visible to everyone (green label) - Private: members only, non-members see 403 Access Denied (orange) - Hidden: members only, non-members see 404 Not Found (red) Private mode is for commercial repos — customers know the repo exists and see a styled 403 page with sign-in button. Licensed update feeds and key-gated downloads still work. Hidden mode is for internal/secret repos — complete stealth, as if the repo doesn't exist. Settings UI: radio button selector in danger zone replaces the old binary toggle. Each option shows a colored label with description. Migration v342: adds is_hidden column to repository table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:42:25 -05:00
Jonathan Miller	449af83e2b	fix(ui): styled 403 Access Denied page matching the 404 page layout ... Add templates/status/403.tmpl mirroring the 404 page design with a centered error message and sign-in button for anonymous users. New Forbidden() method on Context renders the styled 403 template for HTML requests, falls back to plain text for API/non-HTML. RepoAssignment now calls ctx.Forbidden() instead of raw HTTPError for both anonymous and signed-in users without access. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 10:05:24 -05:00
Jonathan Miller	eca929f680	feat(licenses): configurable key prefix (#406), header button (#408), open feed button (#409) ... #406: Add KeyPrefix field to UpdateStreamConfig. GenerateKeyString now accepts a prefix parameter, looked up from org config. Default remains MOKO if not set. Auto-uppercased, max 20 chars. #408: Move "New Package" button into the packages header bar, right-aligned. Uses details/summary pattern — clicking the button expands the create form below. Cleaner layout on both repo and org. #409: Add open-in-new-tab button (external link icon) next to every copy button on feed URLs. All four feeds: Joomla XML, Dolibarr JSON, WordPress JSON, Changelog XML. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 08:51:55 -05:00
Jonathan Miller	2799558040	feat(orgs): enterprise sub-org hierarchy with parent-child relationships (#410) ... Add ParentOrgID field to User model for org hierarchy. Parent orgs can have child orgs, enabling enterprise structures like MokoConsulting → client orgs. Model changes: - ParentOrgID int64 on User (INDEX, DEFAULT 0) - GetChildOrgs, GetAncestorOrgIDs, GetParentOrg helpers - Max 10 hierarchy levels with cycle detection License integration: - ListLicensePackagesWithAncestors — shows packages from parent orgs - ListLicenseKeysWithAncestors — shows keys from parent orgs - SearchLicenseKeysWithAncestors — searches across hierarchy - Master keys from parent orgs validate for child org repos UI: - Parent org dropdown in org settings (owners/admins only) - Shows all orgs user owns except self Migration v341: adds parent_org_id column to user table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 08:14:08 -05:00
Jonathan Miller	37322e4212	feat(updates): manual release-to-stream mapping ... Add release_stream_map table for explicitly assigning releases to update streams. When a mapping exists, it overrides automatic tag detection. When absent, falls back to tag name/suffix matching. New model: ReleaseStreamMap with SetReleaseStream, GetReleaseStream, ResolveReleaseStream (manual first, auto fallback). UI: stream selector dropdown on release create/edit page, shown when licensing is enabled. Options: auto-detect (default) or any configured stream (stable, release-candidate, beta, etc.). All three feed generators (Joomla, Dolibarr, WordPress) now use ResolveReleaseStream instead of MatchStreamFromTag. Migration v340 updated with release_stream_map table creation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 07:37:02 -05:00
Jonathan Miller	a20153a0e0	fix(licenses): no-download mode shows release notes but hides files ... In "no-download" feed visibility mode, anonymous users can browse the release listing page and read release notes, but the download section (attachments, source archives) is replaced with a "Sign in to download" message. Only "hidden" mode redirects anonymous users to login entirely. "no-download" keeps the page public — release notes, changelogs, and version info are all visible. Just the actual files are gated. This matches the commercial pattern: let users see what's available to motivate purchase, while protecting the actual deliverables. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:42:44 -05:00
Jonathan Miller	a149edccd3	feat(licenses): feed visibility modes and login-required releases ... Add FeedVisibility field to UpdateStreamConfig with three modes: - public: full feed with download URLs (default) - no-download: version info visible but download URLs stripped - hidden: empty feed returned without a valid license key The "no-download" mode is the key commercial pattern — customers see updates exist (motivating purchase/renewal) but cannot download without a valid key. Joomla shows "update available" in admin. Applied consistently across all update feed endpoints (Joomla XML, Dolibarr JSON, WordPress JSON) via the shared validateUpdateKey() which now returns a stripDownloads flag. Also: when licensing is enabled, the release listing page requires login. Anonymous users are redirected to the login page. This prevents browsing release notes and download links without auth. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:38:09 -05:00
Jonathan Miller	e3a8ae2595	feat(settings): add extension metadata to repo settings (#335) ... Repo settings now include extension metadata fields (element name, display name, type, target version, maintainer, PHP minimum) under the Licensing section. These override org-level defaults per-repo. Empty fields inherit from the organization's update stream config. Extension type dropdown includes: package, component, module, plugin, template, library — plus an "(inherit from org)" option. Also adds form fields to the RepoSettingsForm struct for all metadata fields. Closes #335 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:19:48 -05:00
Jonathan Miller	1fabdb94ec	feat(updates): WordPress PUC-compatible update feed (#351) ... New endpoint: GET /{owner}/{repo}/updates/wordpress.json Generates JSON compatible with the YahnisElsts plugin-update-checker library — the standard for commercial WordPress plugin self-hosted updates. Returns name, slug, version, download_url, homepage, requires_php, author, sections (changelog HTML), icons, and banners. License key validation: reads from ?license_key=, ?dlid=, or ?key= query params (PUC sends these via addQueryArgFilter). When RequireKey is enabled, returns minimal empty response without download_url. Changelog section built from release notes (last 10 stable releases), converting markdown list items to HTML <ul>/<li> elements. Icon/banner URLs point to conventional paths in the repo: assets/icon-128x128.png, assets/icon-256x256.png assets/banner-772x250.png, assets/banner-1544x500.png Route registered at /updates/wordpress.json alongside existing /updates.xml (Joomla) and /updates/dolibarr.json. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 00:01:16 -05:00
Jonathan Miller	93d18ab25f	feat(licenses): double confirmation modals for permanent deletion (#391) ... Replace link-action delete buttons with show-modal pattern that opens a Fomantic UI modal with a form. Package deletion requires typing the package name in a required field before the submit button works. Key deletion shows a warning modal with confirmation. Uses Gitea's existing form-fetch-action + modal_actions_confirm pattern, matching how repo deletion works in settings. Both repo and org templates updated with matching modals. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:23:56 -05:00
Jonathan Miller	3e8124a2b7	feat(licenses): API package CRUD, settings API, and repo scope UI ... API package endpoints (#388): - PATCH /license-packages/{id} — edit package (master protected) - DELETE /license-packages/{id} — delete package (master protected) - POST /license-packages/{id}/archive — archive package - POST /license-packages/{id}/unarchive — restore package Settings API (#349): - GET /license-settings — read licensing/update stream config - PUT /license-settings — update config (all metadata fields) - New LicenseSettings struct in API types Repo scope UI (#395): - Dropdown in create/edit package forms listing org repos - "All repositories" default option - RepoScope read from form in both repo and org handlers - OrgRepos loaded via GetOrgRepositories in Licenses handlers Refs #341, #346, #349, #388, #395 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:21:09 -05:00
Jonathan Miller	53a5d0b97b	feat(licenses): domain lock timer, infourl fix, Akeeba-compatible XML format ... Domain lock timer: add DomainLockHours to LicensePackage and FirstUsedUnix to LicenseKey. During the grace period after first use, any domain is accepted and auto-added to the restriction list. After the grace period, only listed domains are allowed. Set 0 for immediate lock-on-first-use (default). Fix infourl: default to /releases listing page instead of specific tag page. Falls back to SupportURL or InfoURL if configured. Match Akeeba Backup Pro XML format: downloadkey prefix is "dlid=" (not "&dlid="), matching how Joomla stores extra_query. Verified against production Akeeba/JCE/AdminTools manifests via SSH. Update migration v340 with FirstUsedUnix and DomainLockHours columns. Add DomainLockHours field to create/edit package forms for both repo and org levels with help text. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:00:50 -05:00
Jonathan Miller	448b7d3ab0	feat(licenses): archive, search, download gating, changelog XML, and expanded permissions ... Migration v340: sync all missing columns (key_raw, payment_ref, last_heartbeat_unix, is_archived, licensing_enabled, download_gating, support_url, and all extension metadata fields). Package archiving (#384): add IsArchived field with archive/unarchive handlers and collapsible "Archived Packages" section in templates. Existing keys from archived packages continue to work. Expanded delete permissions (#385): org owners and site admins can permanently delete packages and keys (previously site admin only). Search (#392): server-side search across key_prefix, key_raw, licensee_name, licensee_email, domain_restriction, and payment_ref via ?q= query parameter on both repo and org licenses pages. Sortable tables (#390): Fomantic UI sortable class on keys table with new Domain column showing DomainRestriction per key. Download gating (#347): three modes — none, prerelease-only, and all downloads. CheckDownloadGating() intercepts both release attachment and git archive download handlers. Support URL (#393): configurable SupportURL field on UpdateStreamConfig for wiki or external site links. Changelog XML (#343): ServeChangelogXML endpoint at /changelog.xml generates Joomla-compatible changelog from release notes. Parses Keep-a-Changelog markdown sections into <security>, <fix>, <addition>, <change>, <remove>, <note> XML elements. API renew (#387): POST /license-keys/{id}/renew endpoint extends key expiration by package duration. Closes #384, #385, #386, #387, #389, #390, #392, #393 Refs #343, #346, #347 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 04:45:20 -05:00
Jonathan Miller	278645113b	fix(cron): add missing translation for cleanup_expired_license_keys ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 13:14:45 -05:00
Jonathan Miller	d30e7d7a5a	feat(updates): extension metadata settings for update feed generation ... - Add configurable fields: element name, display name, description, extension type, maintainer, maintainer URL, info URL, target version, PHP minimum - Add platform dropdown: joomla, dolibarr, wordpress, prestashop, drupal, composer, both - Update Joomla XML generator to use metadata from config (falls back to repo-derived values when not set) - Add GetEffectiveConfig() for resolving repo → org → nil config chain - Add locale keys for all new settings fields Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:58:45 -05:00
Jonathan Miller	682ab42888	fix: resolve three tech-debt FIXME/TODO items ... - fix(blame): set HasSourceRenderedToggle for renderable files so that permalinks include ?display=source for correct line-number linking - fix(settings): translate team permission strings using data-locale attributes instead of raw API values - fix(dropzone): use relative path for non-image attachment markdown links for consistency with image attachments Refs #318, #334 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:13:51 -05:00
Jonathan Miller	809c387054	feat(licenses): store keys in plaintext, show full key with copy button ... License keys are domain-locked so hashing is unnecessary. Store the full key in KeyRaw column for permanent visibility. Keys table now shows the complete key with a clipboard copy button per row. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:07:20 -05:00
Jonathan Miller	4efc679c8b	feat(licenses): platform enforcement, key deletion, expired key cleanup ... - Block update feed endpoints based on repo platform setting: Joomla-only repos return 404 on /updates/dolibarr.json and vice versa - Show feed URLs section only when licensing is enabled - Add delete button for license keys (site admin only) - Add weekly cron job to purge expired keys older than 1 year - Add DeleteLicenseKey and DeleteExpiredKeys model functions Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:03:23 -05:00
Jonathan Miller	ed79a48119	feat(licenses): UI/UX cleanup, permissions, renew, auto-domain, custom keys ... - Replace confirm() with Gitea modal system (link-action + data-modal-confirm) - Add confirmation modal to revoke key action - Fix clipboard copy to use data-clipboard-target with tooltip feedback - Localize all hardcoded English strings (feed labels, "unlimited", "Master") - Improve key creation flash with security-focused message + copy button - Add count badge to org licenses nav tab - Add icon to org settings navbar for update streams - Add help text to "Active" checkboxes explaining deactivation impact - Fix empty state message to reference UI creation (not just API) - Compact tables for denser license data display - Add orange "Master" label to master package rows - Conditional feed buttons on release page (only when licensing enabled) - Add TypeLicenses unit type with Read/Write/Admin team permissions - Route-level permission enforcement via RequireUnitReader/Writer - Add "Renew" action for license keys (extends by package duration) - Auto-associate domain on first heartbeat (lock-on-first-use) - Enforce max_sites limit during domain auto-association - Allow site admins and org owners to set custom license key values Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 08:54:29 -05:00
Jonathan Miller	b77da17f38	feat(licenses): implement full commercial license management system ... Add key editing, domain enforcement, purchase webhooks, public validation API, channels multiselect, Joomla downloadkey element, licensing feature toggle, unified update system, release tag enforcement, heartbeat tracking, and improved settings UX. Phase 1: Full key display with AbsoluteShort dates, master package protection (hide edit/delete in UI, reject in handlers). Phase 2: Key edit page with template, handlers, and routes for both repo and org levels. Master keys redirect away. Phase 3: Domain restriction checking against CSV allowlist, MaxSites enforcement via CountUniqueDomainsByKey and IsDomainKnownForKey, dlid query param support for Joomla. Phase 4: Purchase webhook (POST /license-keys/purchase) with PaymentRef idempotency. Public validation endpoint (POST /license-keys/validate) outside auth middleware. PATCH /license-keys/{id} for API key editing. Phase 5: Channels multiselect using org UpdateStreamConfig streams rendered as checkboxes, stored as JSON arrays. Additional: downloadkey XML element, LicensingEnabled toggle on UpdateStreamConfig, Dolibarr endpoint unified with key validation, release tag suffix enforcement, LastHeartbeatUnix field with TouchHeartbeat, and cleaned-up settings pages. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 01:31:51 -05:00
Jonathan Miller	021ddbb17a	feat(licenses): edit and delete license packages via web UI ... Add edit and delete actions for license packages: - Edit button (pencil icon) opens edit form with all package fields - Delete button (trash icon) with confirmation dialog - Edit form includes active/inactive toggle - Routes: GET/POST /licenses/packages/{id}/edit, POST /licenses/packages/{id}/delete Ref #239 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 23:03:44 -05:00
Jonathan Miller	3a5ca580db	feat(updates): per-repo platform, require-key, platform-aware buttons ... - Repo settings: platform dropdown (Joomla/Dolibarr/Both) + require key - Releases page buttons change based on platform setting - Update feed enforces require-key (empty response without valid key) - key_plain column stores full key for copy functionality - DB migrations v337 (key_plain) + v338 (platform, require_key) Ref #239 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 22:55:55 -05:00
Jonathan Miller	df06e11704	fix(ui): always-visible create package form + clearer labels + org locale strings ... Replace toggle button with always-visible "Create New License Package" section. Added org settings locale strings for Update Streams page. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 22:47:29 -05:00
Jonathan Miller	689173ecab	feat(licenses): auto-create master key for org/repo ... When an admin first visits the Licenses page, a master license package and key are automatically created: - Master package: lifetime, unlimited, all channels, all repos - Master key: IsInternal=true, never expires - Raw key shown once with copy instructions - If master key is revoked, a new one is created on next visit The master key is always present — revoking it and revisiting the page generates a fresh one. Ref #239 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 22:26:24 -05:00
Jonathan Miller	30197e4e97	feat(licenses): web UI for package creation, key generation, and revocation ... Add full license management web forms to the Licenses page: - "New Package" form: name, description, duration, max sites, channels - "Generate Key" button per package: creates key with auto-expiry - "Revoke" button per key: deactivates the key - New key display: shows raw key once with copy instructions - Update Feed URLs section: copyable Joomla/Dolibarr endpoint URLs - Admin-only controls: forms only visible to repo admins Ref #239 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 21:27:12 -05:00
Jonathan Miller	381952f6d2	feat(licenses): add Licenses tab and page for repos ... Add a Licenses tab in the repo header that shows when license packages exist for the repo's owner. The tab displays: - License packages with name, duration, allowed channels, key count - Issued keys with prefix, licensee, expiry, and status Also includes: - Org-level default update streams with per-repo override (#265) - Full Joomla channel names in update feeds - Update Feed button on releases page - DB migration v336 for update_stream_config table The Licenses tab appears after Packages in the repo header, gated by whether any license packages exist for the owner. Ref #239, #265 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 21:03:52 -05:00
Jonathan Miller	4ce332d031	feat(ui): add Update Feed button on releases page ... Add an "Update Feed" button next to the RSS link on the releases page that links to the repo's updates.xml endpoint. Only shown on the releases view (not tags). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 20:23:51 -05:00
Jonathan Miller	fc895aa70d	feat(settings): add help text for releases visibility and update feeds ... Clarify that update feeds (updates.xml, dolibarr.json) are always accessible regardless of the releases visibility setting. The visibility dropdown controls whether the releases page is browsable by anonymous visitors. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 19:59:02 -05:00
Jonathan Miller	a99af91ab4	feat(settings): inline visibility controls on repo settings page ... Add per-unit visibility dropdown (Private / Public) directly on the repo settings page next to each unit's enable checkbox. This replaces the need to navigate to a separate Public Access settings page. Supported units: Code, Wiki, Issues, Releases. Each gets a dropdown that controls AnonymousAccessMode — when set to Public, the unit is readable by anonymous visitors even on private repos. Closes #238 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-30 19:35:56 -05:00