5610 Commits

Author	SHA1	Message	Date
Jonathan Miller	add7c0da4d	feat: make metadata/manifest GET endpoint publicly accessible (#676) ... Remove reqRepoReader auth requirement from GET /repos/{owner}/{repo}/metadata and /manifest endpoints. PUT (update) still requires token + admin.	2026-06-21 10:18:07 -05:00
Jonathan Miller	6d194f9bdf	fix: sort imports in manage.go (stdlib before module imports)	2026-06-20 23:03:44 -05:00
Jonathan Miller	403db405cb	fix: resolve all compile errors in licensing endpoints ... - ctx.BindJSON → json.NewDecoder(ctx.Req.Body).Decode - ctx.Orm() → db.GetEngine(ctx) - ctx.NotFound() → ctx.APIErrorNotFound() - GetAttachmentsByReleaseID → db.GetEngine query	2026-06-20 22:57:19 -05:00
Jonathan Miller	79cc30e9a8	fix: use ctx.APIError instead of ctx.Error in licensing endpoints ... APIContext doesn't have an Error method — use APIError(status, msg) which is the correct 2-arg pattern for Gitea API error responses.	2026-06-20 21:47:02 -05:00
Jonathan Miller	3a405033ae	feat: add product tier admin UI with CRUD and license counts (#627) ... Admin page at /-/admin/license-tiers for managing product tiers: - Tier list with key, name, repos, max domains, license count, sort order - Create new tier form with repo input - Delete tier (blocked if active licenses exist) - Nav item added to admin sidebar	2026-06-20 20:14:24 -05:00
Jonathan Miller	1d1b867df5	feat: add license management API — admin CRUD, user self-service, tier management (#624) ... Admin: POST/GET/PATCH/DELETE /api/v1/licensing/licenses (reqSiteAdmin) User: GET /api/v1/licensing/my/licenses, manage domains (reqToken) Tiers: GET/POST/PATCH/DELETE /api/v1/licensing/tiers (reqSiteAdmin) Includes pagination, entitlement/activation detail in GET, tier change triggers entitlement rebuild, delete-tier blocked if active licenses exist.	2026-06-20 20:04:15 -05:00
Jonathan Miller	5bd449017c	feat: add signed download endpoint with ed25519 tokens (#622) ... GET /api/v1/licensing/download/{product}/{version}.zip?token=XXX&expires=YYY&dlid=ZZZ ed25519 keypair auto-generated on first use, stored in Gitea data dir. Update XML endpoint now generates signed URLs with 5-minute TTL. Download verifies signature + expiry + DLID + entitlement before serving the release ZIP attachment. Downloads logged to audit trail.	2026-06-20 19:59:37 -05:00
Jonathan Miller	3e909df6d4	feat: add license validation API — public validate + authenticated status (#623) ... GET /api/v1/licensing/validate?dlid=XXX&product=YYY&domain=ZZZ (public) GET /api/v1/licensing/{dlid}/status (authenticated, reqToken) Public endpoint returns valid/invalid with reason codes for Joomla plugin and external integration use. Authenticated endpoint returns full license detail with entitlement list and domain usage for admin dashboards.	2026-06-20 19:51:50 -05:00
Jonathan Miller	6f6a8b0f2c	fix: remove invalid SortType field from FindReleasesOptions	2026-06-20 17:18:52 -05:00
Jonathan Miller	212b8c9e6d	feat: add DLID-gated update XML endpoint for Joomla updater (#621) ... GET /api/v1/licensing/updates/{product}.xml?dlid=XXX&domain=YYY Validates DLID format (CRC32), checks license status and entitlement, auto-activates domain, returns Joomla-compatible update XML from the entitled repo's stable release. Invalid/expired returns empty <updates/>.	2026-06-20 17:15:24 -05:00
Jonathan Miller	adb13241ad	Merge remote-tracking branch 'origin/main' into dev ... # Conflicts: # .mokogitea/manifest.xml # .mokogitea/workflows/issue-branch.yml	2026-06-20 13:04:01 -05:00
Jonathan Miller	b98c46e17c	fix: stale error message, add fallback to wiki commit lookup ... - Fix log message in FindOwnerProfileReadme (was "GetRepositoryByName", now "GetDoerRepoPermission") - Add profile repo fallback to findOrgWikiCommit in wiki.go - Extract ProfileRepoFallbacks helper for reuse across packages Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-20 13:00:33 -05:00
Jonathan Miller	65fdbdafd3	feat: support .mokogitea, .profile, and .github as org/user profile repo names (#651) ... Primary profile repo name is now .mokogitea with fallback chain: .mokogitea > .profile > .github (and their -private variants). Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-20 12:55:20 -05:00
Jonathan Miller	2b6684536e	feat: remove display_name, compute from extension_type + name (#650) ... - Remove DisplayName field from RepoMetadata and UpdateStreamConfig - Add DerivedDisplayName() method: "{Type} - {Name}" (e.g. "Package - MokoSuiteBackup") - API returns computed display_name in GET, ignores it on PUT - Update server feeds use DerivedDisplayName() instead of stored value - Remove display_name from web forms (repo licensing, org update streams) - License settings API computes display_name from repo metadata - Migration v358: drop display_name columns from both tables	2026-06-20 10:45:54 -05:00
Jonathan Miller	7ebe6d54be	refactor: rename PackageType → ExtensionType (#646) ... Rename package_type column and Go field to extension_type across model, API, update server, manifest sync, settings UI, and changelog. SQL migration renames the column. XML tag <package-type> in .mokogitea/manifest.xml is unchanged (backward compat). Fixes #646	2026-06-19 02:00:04 -05:00
Jonathan Miller	45caf41499	fix: rename custom fields handlers, clean metadata API naming	2026-06-19 01:14:11 -05:00
Jonathan Miller	1ec0a70c0c	fix: rename API handlers to avoid collision with custom_fields GetRepoMetadata	2026-06-18 21:08:29 -05:00
Jonathan Miller	fb98aac7d2	fix: remove Version field from metadata.go saveMetadata()	2026-06-18 20:06:20 -05:00
Jonathan Miller	9b94c16226	fix: rename GetRepoManifest → GetRepoMetadata in changelog_xml.go	2026-06-18 19:32:19 -05:00
Jonathan Miller	3c9e3ffa13	fix: lowercase Joomla element names, rename Manifest → Metadata (#635) ... AutoElementName() was using m.Name without lowercasing or cleaning, producing elements like pkg_MokoSuiteBackup instead of pkg_mokosuitebackup. Added cleanJoomlaElement() to replicate Joomla's InputFilter::clean('cmd') behavior. Removed incorrect "plugin": "plg_" — Joomla plugins use bare names. Renamed RepoManifest → RepoMetadata across all non-migration Go files. DB table remains repo_manifest for backward compatibility. Migration files unchanged to preserve migration chain. API endpoints /manifest and /metadata both continue to work (backward compat route preserved in api.go). Fixes #635	2026-06-18 16:03:54 -05:00
Jonathan Miller	91e50fe4bf	fix: remove version from manifest first-class fields ... Version is not a required metadata field — it's derived from git tags and releases, not stored in the manifest. Remove from RepoManifest model and the manifest API request/response struct. VersionPrefix, StandardsVersion, and TargetVersion are kept as they serve different purposes (tag parsing, standards compliance, platform targeting).	2026-06-18 11:01:23 -05:00
Jonathan Miller	08f6454dd2	fix: address PR review findings — error handling, type safety, comments ... Review fixes: - Propagate updateDomainRestriction error in grace-period path instead of silently discarding it (was same bug class as the TOCTOU fix) - Propagate IsDomainKnownForKey error inside transaction — discarding it defeated the atomicity guarantee - Wrap updateDomainRestriction error with context message - Use boolean flags for changelog manifest fallback instead of fragile sentinel comparison against strings.ToLower(repo.Name) - Type-assert ctx.Data["RepoUpdatePlatform"] to string instead of comparing interface{} values - Use log.Warn instead of log.Error for manifest fallback (intentional degradation, not a failure) - Clarify comments: doc comment scope, hyphen removal wording	2026-06-18 09:51:33 -05:00
Jonathan Miller	a83d2ee3bd	fix: changelog element mismatch, platform gating, domain race condition ... Three fixes for the Joomla update server system: 1. changelog_xml.go: Resolve element name from manifest first (same priority as updates.xml) so changelog.xml and updates.xml emit matching <element> values. Previously only checked the config table. 2. updateserver.go: Only serve Joomla XML when platform is joomla, both, or unset. Previously only blocked dolibarr, meaning WordPress/ PrestaShop/Drupal/WHMCS repos incorrectly served Joomla XML. 3. license_key.go: Wrap domain auto-association in db.WithTx to prevent TOCTOU race where concurrent requests from different domains could exceed MaxSites. Also removes a duplicate site-limit check that was unreachable dead code.	2026-06-18 09:14:13 -05:00
jmiller	9d45a767e7	Merge pull request 'feat(issues): make status_id, priority_id, type_id required on create (#598)' (#613) from feature/598-required-issue-metadata into main	2026-06-12 02:59:37 +00:00
Jonathan Miller	e0d4f5fd15	fix: handle SetIssueStatusID/PriorityID/TypeID errors on create ... Explicit caller-provided values now return 500 on failure instead of silently discarding the error. Default auto-assignment still uses best-effort (log and continue) since it's a fallback.	2026-06-11 21:57:39 -05:00
Jonathan Miller	c67e7373fb	fix: move required custom field validation before issue creation ... Validation now runs before NewIssue() to prevent orphaned issues when a required field is missing. Reuses the defs query for both validation and saving.	2026-06-11 21:56:14 -05:00
Jonathan Miller	cbaca15cda	feat(issues): make status_id, priority_id, type_id required on create (#598) ... - Change CreateIssueOption fields from *int64 (optional) to int64 - API auto-assigns org defaults when value is 0 - MCP gitea_issue_create now requires status_id, priority_id, type_id (pass 0 for org default) - Keep optional on gitea_issue_update (partial updates) Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 21:49:37 -05:00
Jonathan Miller	245b5a8e6a	feat(custom-fields): add required flag UI and API validation (#597) ... - Add required checkbox to org custom field settings form - Show red asterisk (*) indicator on required fields in the list - Validate required custom fields on API issue create (return 422) - Add locale strings for required field UI The Required column already exists in the DB (migration v343) and is already validated in the web form. This adds the missing org settings UI checkbox and API-side validation. Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 21:46:24 -05:00
Jonathan Miller	0f1002f3c9	fix: address review findings for wiki API ... - Log warning when wiki blob exceeds max size (was silent empty return) - Fix stale WebPathFromRequest test to match folder-based wiki behavior	2026-06-11 17:03:21 -05:00
Jonathan Miller	3a7b07590f	fix: wiki API sub-page support and content response (#606, #607) ... - Change wiki API routes from {pageName} to wildcard (*) to support pages with path separators (e.g. mcp/fleet-overview) - Use ListEntriesRecursiveFast() in ListWikiPages to include pages in subdirectories, not just root-level files - Add error logging in wikiContentsByEntry for diagnosing empty content_base64 responses - Fix pagination to count only regular files, not directories Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 16:56:10 -05:00
Jonathan Miller	7ed335e6c3	feat(api): add /metadata API route alongside /manifest for backward compat	2026-06-10 04:33:58 -05:00
Jonathan Miller	4ed6e0175d	feat(settings): SPDX license dropdown with auto-name, clean up metadata ... - License field is now a dropdown with common SPDX identifiers - License name auto-derived from SPDX (spdxToName map) - Preserve hidden fields (element_name, display_name, maintainer, etc.) when saving from the simplified UI - Remove unused updateserver_model import from metadata handler	2026-06-10 04:08:12 -05:00
Jonathan Miller	faef50ec4d	fix(settings): update server page shows only visibility and gating	2026-06-09 23:36:21 -05:00
Jonathan Miller	9b9e5ae964	feat(settings): separate update server page from metadata ... - /settings/metadata: project identity + custom fields - /settings/updateserver: enable, platform, visibility, gating, keys - Update server nav link shown when LicensingEnabled - Old /settings/licensing and /settings/manifest redirect	2026-06-09 23:34:26 -05:00
Jonathan Miller	82a48d69cc	chore: remove old manifest files (consolidated into metadata)	2026-06-09 23:26:19 -05:00
Jonathan Miller	e1ca5cdfc4	feat(settings): consolidate manifest + custom fields into metadata page ... - Merge project identity (manifest), update server config, and custom fields into single /settings/metadata page - Three sections: Project Identity, Update Server, Custom Fields - Old /settings/manifest and /settings/licensing redirect to /metadata - Single nav link replaces two separate entries	2026-06-09 23:24:35 -05:00
Jonathan Miller	704d9d10be	feat(issues): status/priority/type dropdowns on new issue form (#598) ... - Add type, priority, status dropdowns to new issue sidebar - Pre-select org defaults (is_default for type/priority, first open status) - Auto-assign defaults on API create when not provided - Required indicators (*) on dropdowns and custom fields - Validate required custom fields on submit (#597) - Add feed_visibility to update server settings on manifest page	2026-06-09 23:19:19 -05:00
Jonathan Miller	549e890cd0	refactor: rename models/licenses to models/updateserver ... Rename the licensing/update server model package to better reflect its purpose. All imports updated from licenses_model to updateserver_model. License key management UI files kept (only imports updated).	2026-06-09 20:29:03 -05:00
Jonathan Miller	857c51e030	feat(settings): consolidate update server settings into manifest page ... - Move licensing/update server form into manifest settings page - Remove separate licensing nav link (redirect old URL for compat) - Extension metadata fields already in manifest section (no duplication) - Closes #582	2026-06-09 19:35:47 -05:00
Jonathan Miller	47ac97d284	debug: add error logging to OrgWikiRepoExists	2026-06-09 16:16:51 -05:00
Jonathan Miller	be6f3091af	fix: switch org wiki tab to .profile wiki sidecars (#595) ... Fixes #594	2026-06-09 15:05:05 -05:00
Jonathan Miller	1caf26453f	feat: issue metadata API + org wiki tab with internal/external mode ... Issue Status/Priority/Type API: - Expose status_id, priority_id, type_id (with resolved names) on Issue API struct - New endpoints: GET /orgs/{org}/issue-statuses, /issue-priorities, /issue-types - CreateIssue and EditIssue handlers accept status_id, priority_id, type_id - MCP tools: 5 new tools + updated create/update with metadata params Org Wiki Tab: - Convention repos: wiki (public) and wiki-private (members-only) - Inline wiki rendering with markdown pipeline, sidebar, footer, page list - Public/private view dropdown (same UX as org profile README selector) - External wiki mode: link to outside URL from wiki tab - Wiki mode setting in org settings (internal vs external with URL field) - Migration 354: add wiki_mode and wiki_url to user table	2026-06-09 10:20:54 -05:00
Jonathan Miller	c26ad626bd	feat(manifest): add distribution metadata fields (phase 1 consolidation) ... Add DisplayName, Maintainer, MaintainerURL, InfoURL, TargetVersion, and PHPMinimum to RepoManifest. These fields were previously only in UpdateStreamConfig and are now in the manifest as the single source of truth. Distribution section shown conditionally for joomla/wordpress/ dolibarr platforms. Closes #582 phase 1.	2026-06-07 13:36:58 -05:00
Jonathan Miller	2eb2ed67bf	fix(licensing): allow disabling update server by deleting repo-level config ... When the update server checkbox is unchecked, delete the repo-level config override instead of saving it with LicensingEnabled=false. This allows the org-level config to take effect properly and fixes the issue where the update server could not be turned off once enabled.	2026-06-07 13:12:24 -05:00
Jonathan Miller	09aa8d8201	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:24:07 -05:00
Jonathan Miller	33ebcd7726	feat(manifest): add version prefix + fix platform dropdown values ... - Add version_prefix field for fork versioning (e.g., v1.26.1-moko.) - Change platform dropdown from programming languages to deployment targets (Joomla, Dolibarr, WordPress, Generic, etc.) so template repos can be mapped to platforms - Available in settings UI and REST API	2026-06-07 12:11:24 -05:00
Jonathan Miller	37d59e7b59	feat(cdn): built-in CDN for release asset delivery (#561) ... Add CDN system that serves release assets via a dedicated hostname (e.g., cdn.mokoconsulting.tech) with per-asset public/private toggles, IP/referrer allowlists, and aggressive caching headers. - Host-based routing intercepts CDN domain before auth middleware - Per-attachment cdn_public flag controls CDN visibility - Releases in an update stream are excluded from CDN (update server takes precedence) - CORS, ETag, Cache-Control headers for downstream CDN compatibility - IP/CIDR and referrer domain allowlists for abuse prevention	2026-06-07 11:07:30 -05:00
Jonathan Miller	798d9c3ae0	fix(settings): remove duplicate description from manifest page ... Description is already managed in repo general settings. The manifest now reads it from the repository object instead of a separate form field.	2026-06-06 21:07:39 -05:00
Jonathan Miller	2cc4f7c047	feat: org settings for Issue Types + MCP SSE hosted + npm auto-publish ... - Org settings page for managing Issue Type definitions (CRUD) - MCP SSE endpoint deployed at git.mokoconsulting.tech/mcp/ - npm auto-publish workflow on MCP source changes to main	2026-06-06 19:52:55 -05:00
Jonathan Miller	dd1454c3cf	feat(issues): first-class Type field + status/priority/type badges in issue list ... - IssueTypeDef model with auto-seed defaults (Bug, Feature, Enhancement, Task, Documentation, Security) - Migration v350 adding issue_type_def table + type_id on issues - Type dropdown in issue sidebar - Type, Priority, Status colored badges in issue list view - Status/Priority/Type definitions loaded in issue list handler	2026-06-06 17:12:44 -05:00