5599 Commits

Author	SHA1	Message	Date
Jonathan Miller	1caf26453f	feat: issue metadata API + org wiki tab with internal/external mode ... Issue Status/Priority/Type API: - Expose status_id, priority_id, type_id (with resolved names) on Issue API struct - New endpoints: GET /orgs/{org}/issue-statuses, /issue-priorities, /issue-types - CreateIssue and EditIssue handlers accept status_id, priority_id, type_id - MCP tools: 5 new tools + updated create/update with metadata params Org Wiki Tab: - Convention repos: wiki (public) and wiki-private (members-only) - Inline wiki rendering with markdown pipeline, sidebar, footer, page list - Public/private view dropdown (same UX as org profile README selector) - External wiki mode: link to outside URL from wiki tab - Wiki mode setting in org settings (internal vs external with URL field) - Migration 354: add wiki_mode and wiki_url to user table	2026-06-09 10:20:54 -05:00
Jonathan Miller	d0853b874f	fix(manifest): remove duplicate element name block in template	2026-06-07 13:47:07 -05:00
Jonathan Miller	c26ad626bd	feat(manifest): add distribution metadata fields (phase 1 consolidation) ... Add DisplayName, Maintainer, MaintainerURL, InfoURL, TargetVersion, and PHPMinimum to RepoManifest. These fields were previously only in UpdateStreamConfig and are now in the manifest as the single source of truth. Distribution section shown conditionally for joomla/wordpress/ dolibarr platforms. Closes #582 phase 1.	2026-06-07 13:36:58 -05:00
jmiller	f86527994b	Merge pull request 'fix(manifest): fix template end mismatch in Joomla settings block' (#575) from fix/manifest-template-end into dev	2026-06-07 17:51:45 +00:00
Jonathan Miller	c016c603b4	fix(manifest): fix template end mismatch in Joomla settings block	2026-06-07 12:51:20 -05:00
Jonathan Miller	09aa8d8201	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:24:07 -05:00
Jonathan Miller	33ebcd7726	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:11:24 -05:00
jmiller	b6b4d6f525	Merge pull request 'fix(licensing): hide require-key option for Joomla update servers' (#567) from fix/hide-joomla-require-key into dev	2026-06-07 16:39:09 +00:00
Jonathan Miller	74279c55e3	fix(licensing): hide require-key option for Joomla update servers ... Joomla's update system does not support license key authentication, so hide the "Require license key for update feeds" checkbox when the platform is set to Joomla or Joomla+Dolibarr.	2026-06-07 11:38:05 -05:00
Jonathan Miller	37d59e7b59	feat(cdn): built-in CDN for release asset delivery (#561) ... Add CDN system that serves release assets via a dedicated hostname (e.g., cdn.mokoconsulting.tech) with per-asset public/private toggles, IP/referrer allowlists, and aggressive caching headers. - Host-based routing intercepts CDN domain before auth middleware - Per-attachment cdn_public flag controls CDN visibility - Releases in an update stream are excluded from CDN (update server takes precedence) - CORS, ETag, Cache-Control headers for downstream CDN compatibility - IP/CIDR and referrer domain allowlists for abuse prevention	2026-06-07 11:07:30 -05:00
Jonathan Miller	798d9c3ae0	fix(settings): remove duplicate description from manifest page ... Description is already managed in repo general settings. The manifest now reads it from the repository object instead of a separate form field.	2026-06-06 21:07:39 -05:00
Jonathan Miller	2cc4f7c047	feat: org settings for Issue Types + MCP SSE hosted + npm auto-publish ... - Org settings page for managing Issue Type definitions (CRUD) - MCP SSE endpoint deployed at git.mokoconsulting.tech/mcp/ - npm auto-publish workflow on MCP source changes to main	2026-06-06 19:52:55 -05:00
Jonathan Miller	50c472991a	fix(auth): add login form with OAuth to all error pages ... - 403: OAuth buttons moved below password form (matches regular login) - 404: Login form with OAuth added for unauthenticated users - Both pages load OAuth2 providers and show Sign In with Google etc.	2026-06-06 18:25:51 -05:00
Jonathan Miller	7d03541201	fix(auth): show OAuth providers on 403 login form ... The 403 Access Denied page login form now shows OAuth2 provider buttons (Sign in with Google, etc.) alongside the username/password form. Previously only showed password login even when OAuth was configured.	2026-06-06 18:15:25 -05:00
Jonathan Miller	dd1454c3cf	feat(issues): first-class Type field + status/priority/type badges in issue list ... - IssueTypeDef model with auto-seed defaults (Bug, Feature, Enhancement, Task, Documentation, Security) - Migration v350 adding issue_type_def table + type_id on issues - Type dropdown in issue sidebar - Type, Priority, Status colored badges in issue list view - Status/Priority/Type definitions loaded in issue list handler	2026-06-06 17:12:44 -05:00
Jonathan Miller	135b37edf1	fix(ui): use badge labels instead of strong tags for dashboard issue counts ... The sidebar counts (In your repositories, Assigned to you, etc.) were rendering as bold text concatenated with the label. Now uses ui small label spans for proper badge styling.	2026-06-06 16:54:26 -05:00
Jonathan Miller	72708b5a99	feat(security): add Security tab to repo navigation (#508) ... Add a top-level Security tab in the repo header (visible to admins only) showing alerts, scan controls, and severity badges. Links to settings page for scanner configuration. Alert file paths link directly to the source file.	2026-06-06 16:35:55 -05:00
Jonathan Miller	f7c1904625	feat(security): built-in security scanning platform (#508) ... Add a pluggable security scanning framework with secret detection as the first scanner module. Scans run on push to default branch and on-demand via the Security settings page. Includes: - Scanner interface for pluggable scanner types - Secret scanner with 15 built-in patterns (AWS, GitHub, Stripe, etc.) - SecurityAlert model with fingerprint-based dedup - SecurityScannerConfig per-repo settings - Migration v349 for security tables - Repo settings Security page with alerts table - Scan Now button for on-demand scanning - Alert resolve/dismiss actions - Push-time scanning in post-receive hook	2026-06-06 16:23:08 -05:00
Jonathan Miller	6010841ee7	feat(wiki): hierarchical folder navigation with sidebar tree (#79) ... Support real subdirectories in wiki instead of escaping / to %2F. When navigating to a folder, tries README.md, Home.md, index.md as index pages. If none found, shows a file/folder listing. Includes: - Stop escaping / in WebPathFromRequest (wiki_path.go) - Folder detection with index file fallback - Auto-generated sidebar folder tree - Breadcrumb navigation for nested paths - Folder listing view when no index page exists - CSS for tree sidebar and folder listing	2026-06-06 15:09:23 -05:00
Jonathan Miller	1438dc7838	fix(issues): closed issues show reopen-only for non-admins ... Regular users/issue posters see only a Reopen button on closed issues. Admins and team members with write permission get the full status dropdown including Reopen option.	2026-06-06 14:21:39 -05:00
Jonathan Miller	a4b7b5276c	feat(issues): status dropdown replaces close button for issues ... Move the status dropdown from sidebar to the comment form footer, replacing the close/reopen button. Status selections that have closes_issue=true auto-close, non-closing statuses auto-reopen. Falls back to standard close/reopen button for PRs and repos without org statuses.	2026-06-06 14:12:27 -05:00
Jonathan Miller	55c2f81c58	feat(issues): org-level priority field with customizable levels (#509) ... Add org-level issue priority definitions that appear in the issue sidebar. Each priority has a name, color, sort order, and optional default flag. Follows the same architecture as custom statuses (#502). Includes: - IssuePriorityDef model with CRUD operations - Migration v348 adding issue_priority_def table + priority_id on issues - Org settings UI for managing priorities - Issue sidebar dropdown for selecting priority Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 11:52:44 -05:00
Jonathan Miller	3aaa7c0843	feat(settings): repo manifest settings with auto-migration and API (#315) ... Add a "Manifest" page in repo settings that stores moko-platform manifest fields (identity, governance, build) in the database. Includes: - RepoManifest model with all manifest.xml fields - Migration v347 adding repo_manifest table - Auto-detect and migrate .mokogitea/manifest.xml on first settings visit - Repo settings UI with Identity/Governance/Build sections - REST API: GET/PUT /api/v1/repos/{owner}/{repo}/manifest for Actions workflows and moko-platform CLI Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 09:02:23 -05:00
Jonathan Miller	c568e199ed	feat(issues): custom status definitions with automated actions (#502) ... Add org-level custom issue status definitions that appear in the issue sidebar. Each status has a name, color, description, and an optional "closes issue" flag that automatically closes/reopens the issue when the status is selected. Includes: - IssueStatusDef model with CRUD operations - Migration v346 adding issue_status_def table + status_id on issues - Org settings UI for managing statuses - Issue sidebar dropdown for selecting status - Auto close/reopen when status has closes_issue flag Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 08:24:44 -05:00
Jonathan Miller	9313ae2731	feat(ui): tabbed view for root markdown files alongside README (#500) ... Add tabs above the README rendering on the repo home page for well-known root files (LICENSE, CONTRIBUTING, CODE_OF_CONDUCT, SECURITY, CHANGELOG), similar to how GitHub surfaces these files for easy discovery. Tabs only appear when both a README and at least one other well-known file exist. Clicking a tab renders that file inline, replacing the README. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 06:41:05 -05:00
Jonathan Miller	a3c6f54ad3	feat(issues): advanced search with custom field filters (#496) ... Add the ability to filter issues by custom field values throughout the entire search stack: - DB: applyCustomFieldCondition joins custom_field_value with AND semantics (all specified fields must match) - Indexer: CustomFieldFilters map passed through SearchOptions and ToDBOptions - Web: parse cf_{fieldID}={value} query params, show dropdown filters in the issue list sidebar for org-level fields - API: both SearchIssues and ListIssues accept cf_ query params Closes #496 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 06:06:32 -05:00
Jonathan Miller	9ebe1b26b1	feat(custom-fields): pre-fill custom fields from issue template YAML frontmatter ... Add `custom_fields` map to IssueTemplate struct so templates can specify default values (e.g. `Priority: Medium`). On new issue form, org-level issue-scoped fields appear in the sidebar with template defaults pre-selected. NewIssuePost saves the values after issue creation. The API create issue endpoint also accepts `custom_fields` by name. Closes #493 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 21:47:15 -05:00
Jonathan Miller	6bd9548b2a	feat(custom-fields): move to org-level definitions with issue and repo scopes ... - CustomFieldDef now has owner_id (org) and scope (issue/repo) - Issue sidebar loads fields by org owner_id, not repo_id - Org Settings > Custom Fields page for managing field definitions - Repo Settings > Metadata page for filling in repo-scoped values - Migration v345 adds owner_id, scope, entity_id, entity_type columns - Per-repo custom field management replaced by org-level - Replaces .mokogitea/manifest.xml with database-backed metadata Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 19:11:22 -05:00
Jonathan Miller	6575d3fce2	fix(ui): remove package count badge from Licenses tab ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 18:24:20 -05:00
Jonathan Miller	178e8fffe2	fix(licenses): fix key generation modal not passing package_id ... The generate key modal's hidden package_id input was always empty because show-modal doesn't wire data attributes to hidden inputs. Fix: pass package_id via the form action URL query string instead. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 18:13:10 -05:00
Jonathan Miller	5c22bb04b5	fix(licenses): remove master key banner, sort master keys first in list ... Remove the dedicated master key segment at the top of the Licenses page. Master keys now appear first in the keys table via ORDER BY is_internal DESC. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 17:42:05 -05:00
Jonathan Miller	d6d0d5a11f	feat(ui): hide license sections on Update Server page when no gating ... When download_gating is off, the Update Server page only shows feed URLs. License packages, keys, master key, and modals are hidden since they're not relevant without download gating. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 16:43:41 -05:00
Jonathan Miller	c948696488	feat(ui): show Update Server tab when no gating, Licenses tab when gated ... - No gating: tab shows as "Update Server" with broadcast icon - Gated (prerelease/all): tab shows as "Licenses" with key icon and package count badge - Licensing disabled: tab hidden entirely Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 16:38:49 -05:00
Jonathan Miller	4ec0db8658	feat(issues): show custom fields in issue sidebar with inline editing ... - Load custom field definitions and values in ViewIssue handler - New sidebar template displays dropdown fields with onchange submit - POST handler at /issues/{id}/custom-fields/{field_id} saves values - Dropdown options parsed from JSON and passed to template - Non-dropdown fields display as read-only text - Section appears between Labels and Milestone in sidebar Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 13:48:22 -05:00
Jonathan Miller	ee20006b15	fix(ui): rename "Licensing" to "Update Server" across settings UI ... The update server system works without license keys — the primary feature is serving update feeds. Rename all UI labels from "Licensing" to "Update Server" to reflect this. License key management remains under the Licenses tab. - Repo settings nav: "Licensing & Updates" -> "Update Server" - Advanced settings toggle: "Enable licensing" -> "Enable Update Server" - Org settings nav: "Licensing & Update Streams" -> "Update Server" - Icon changed from octicon-key to octicon-broadcast - Updated help text to emphasize update feeds over licensing Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:16:49 -05:00
Jonathan Miller	e4ea1303ea	feat(licenses): add domain restriction to packages and key generation ... - Add DomainRestriction field to LicensePackage model with migration - Packages can define default allowed domains (comma-separated) - Key generation form now includes licensee name, email, and domain fields in a proper modal instead of a tiny inline form - Keys inherit domain restriction from their package if not overridden - Package create/edit forms include domain restriction input - Domain enforcement already exists in heartbeat validation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:05:44 -05:00
Jonathan Miller	bab1acdfe3	fix(licenses): fix master key visibility, package creation, and template structure ... - Always show master key prefix and status in a dedicated segment with a Regenerate button that deactivates the old key and creates a new one - Fix broken <details> structure where </details> was inside an {{if}} block, causing malformed HTML - Move create package form into a proper modal instead of a broken details/summary toggle - Add copy button for all key prefixes (not just full keys) - Add POST /licenses/master-key/regenerate route and handler - Add locale keys for regenerate master key feature Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 08:47:11 -05:00
Jonathan Miller	cbaf289657	fix(settings): add licensing toggle to Advanced Settings, clean up UI ... - Add licensing enable/disable checkbox to Advanced Settings page so users can toggle licensing without needing the separate Licensing settings page - Restore LicensingEnabled gate on Licensing nav item (shows only when licensing is enabled, as intended) - Replace inline dividers with Fomantic UI dividing headers for cleaner visual section separation - Fix redirect after saving advanced settings to go back to /advanced instead of /settings Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 08:09:23 -05:00
Jonathan Miller	64dc6f28fa	fix(settings): always show Licensing nav item in repo settings ... The Licensing nav item was gated behind LicensingEnabled, creating a chicken-and-egg problem: users couldn't reach the settings page to enable licensing because the nav link was hidden until licensing was already enabled. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 07:58:17 -05:00
Jonathan Miller	c7d8f6066f	feat(issues): custom fields foundation — model, migration, settings UI (#8) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 06:46:33 -05:00
Jonathan Miller	d0e3b3dfd8	fix(ui): add octicon icons to user settings navbar ... Profile (person), Account (shield-lock), Notifications (bell), Appearance (paintbrush), Security (lock), Blocked Users (blocked), Applications (apps), SSH/GPG Keys (key), Actions (play), Packages (package), Webhooks (webhook), Organizations (organization), Repositories (repo). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 17:10:45 -05:00
Jonathan Miller	ea10e8500c	fix(ui): replace invalid octicon-settings with octicon-gear ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:45:37 -05:00
Jonathan Miller	92bd3f7dc0	fix(ui): clean section headers with dividers instead of accordions, icons on all navbar items ... Advanced settings: replace collapsible accordions with clean h5 section headers (icon + bold text) separated by dividers. All sections always visible — no clicking to expand. Navbar: add octicon icons to every menu item — Options (settings), Advanced (tools), Licensing (key), Public Access (eye), Collaboration (people), Webhooks (webhook), Branches (git-branch), Tags (tag), Git Hooks (terminal), Deploy Keys (key-asterisk), LFS (file-binary), Actions (play). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:33:23 -05:00
Jonathan Miller	89fcbda623	feat(settings): move advanced settings to dedicated /settings/advanced page ... Extract all feature unit settings (Code, Wiki, Issues, Projects, Releases, Packages, Pull Requests) from options.tmpl into a separate advanced.tmpl with its own route at /settings/advanced. Options page now only contains: basic repo settings, avatar, mirror config, signing settings, and danger zone. Navbar updated: Advanced Settings link points to /settings/advanced. Form posts still go through the existing SettingsPost handler. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:23:49 -05:00
Jonathan Miller	dd6ee750f0	fix(build): remove extra {{end}} in settings accordion template ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:17:47 -05:00
Jonathan Miller	ffb9363e3e	feat(settings): accordion layout for advanced settings sections ... Each feature section (Code, Wiki, Issues, Projects, Releases, Packages, Pull Requests) is now wrapped in a collapsible <details> accordion with an icon and bold title. Code section is open by default; others are collapsed. This reduces visual clutter and lets admins focus on the section they need. Licensing section removed from advanced settings (now on its own /settings/licensing page). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:13:32 -05:00
Jonathan Miller	a1ceac6396	feat(settings): separate licensing settings page with navbar entry ... Extract licensing/update feed settings to its own page at /settings/licensing with dedicated template and handler. Navbar additions: - Advanced Settings link (points to existing options page) - Licensing link with key icon (when licensing enabled) New handler: LicensingSettings/LicensingSettingsPost serves the standalone licensing form with all fields (platform, gating, metadata, extensions). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:02:53 -05:00
Jonathan Miller	a22fa57ab1	fix(ui): embed login form on 403 Access Denied page ... Anonymous users seeing the 403 page now get an inline login form with username, password, and submit button. After login, redirects back to the page they were trying to access. Compact form centered with tw-max-w-sm, includes CSRF token and redirect_to hidden field pointing to CurrentURL. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:55:52 -05:00
Jonathan Miller	68736c78a1	fix(ui): float visibility badge to right of title label ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:51:31 -05:00
Jonathan Miller	e2c738a8d8	feat(repos): three-level visibility — Public, Private, Hidden ... Add IsHidden field to Repository model. Three visibility modes: - Public: visible to everyone (green label) - Private: members only, non-members see 403 Access Denied (orange) - Hidden: members only, non-members see 404 Not Found (red) Private mode is for commercial repos — customers know the repo exists and see a styled 403 page with sign-in button. Licensed update feeds and key-gated downloads still work. Hidden mode is for internal/secret repos — complete stealth, as if the repo doesn't exist. Settings UI: radio button selector in danger zone replaces the old binary toggle. Each option shows a colored label with description. Migration v342: adds is_hidden column to repository table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:42:25 -05:00