5573 Commits

Author	SHA1	Message	Date
Jonathan Miller	9ebe1b26b1	feat(custom-fields): pre-fill custom fields from issue template YAML frontmatter ... Add `custom_fields` map to IssueTemplate struct so templates can specify default values (e.g. `Priority: Medium`). On new issue form, org-level issue-scoped fields appear in the sidebar with template defaults pre-selected. NewIssuePost saves the values after issue creation. The API create issue endpoint also accepts `custom_fields` by name. Closes #493 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 21:47:15 -05:00
Jonathan Miller	6bd9548b2a	feat(custom-fields): move to org-level definitions with issue and repo scopes ... - CustomFieldDef now has owner_id (org) and scope (issue/repo) - Issue sidebar loads fields by org owner_id, not repo_id - Org Settings > Custom Fields page for managing field definitions - Repo Settings > Metadata page for filling in repo-scoped values - Migration v345 adds owner_id, scope, entity_id, entity_type columns - Per-repo custom field management replaced by org-level - Replaces .mokogitea/manifest.xml with database-backed metadata Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 19:11:22 -05:00
Jonathan Miller	6575d3fce2	fix(ui): remove package count badge from Licenses tab ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 18:24:20 -05:00
Jonathan Miller	178e8fffe2	fix(licenses): fix key generation modal not passing package_id ... The generate key modal's hidden package_id input was always empty because show-modal doesn't wire data attributes to hidden inputs. Fix: pass package_id via the form action URL query string instead. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 18:13:10 -05:00
Jonathan Miller	5c22bb04b5	fix(licenses): remove master key banner, sort master keys first in list ... Remove the dedicated master key segment at the top of the Licenses page. Master keys now appear first in the keys table via ORDER BY is_internal DESC. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 17:42:05 -05:00
Jonathan Miller	d6d0d5a11f	feat(ui): hide license sections on Update Server page when no gating ... When download_gating is off, the Update Server page only shows feed URLs. License packages, keys, master key, and modals are hidden since they're not relevant without download gating. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 16:43:41 -05:00
Jonathan Miller	c948696488	feat(ui): show Update Server tab when no gating, Licenses tab when gated ... - No gating: tab shows as "Update Server" with broadcast icon - Gated (prerelease/all): tab shows as "Licenses" with key icon and package count badge - Licensing disabled: tab hidden entirely Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 16:38:49 -05:00
Jonathan Miller	4ec0db8658	feat(issues): show custom fields in issue sidebar with inline editing ... - Load custom field definitions and values in ViewIssue handler - New sidebar template displays dropdown fields with onchange submit - POST handler at /issues/{id}/custom-fields/{field_id} saves values - Dropdown options parsed from JSON and passed to template - Non-dropdown fields display as read-only text - Section appears between Labels and Milestone in sidebar Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 13:48:22 -05:00
Jonathan Miller	ee20006b15	fix(ui): rename "Licensing" to "Update Server" across settings UI ... The update server system works without license keys — the primary feature is serving update feeds. Rename all UI labels from "Licensing" to "Update Server" to reflect this. License key management remains under the Licenses tab. - Repo settings nav: "Licensing & Updates" -> "Update Server" - Advanced settings toggle: "Enable licensing" -> "Enable Update Server" - Org settings nav: "Licensing & Update Streams" -> "Update Server" - Icon changed from octicon-key to octicon-broadcast - Updated help text to emphasize update feeds over licensing Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:16:49 -05:00
Jonathan Miller	e4ea1303ea	feat(licenses): add domain restriction to packages and key generation ... - Add DomainRestriction field to LicensePackage model with migration - Packages can define default allowed domains (comma-separated) - Key generation form now includes licensee name, email, and domain fields in a proper modal instead of a tiny inline form - Keys inherit domain restriction from their package if not overridden - Package create/edit forms include domain restriction input - Domain enforcement already exists in heartbeat validation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 09:05:44 -05:00
Jonathan Miller	bab1acdfe3	fix(licenses): fix master key visibility, package creation, and template structure ... - Always show master key prefix and status in a dedicated segment with a Regenerate button that deactivates the old key and creates a new one - Fix broken <details> structure where </details> was inside an {{if}} block, causing malformed HTML - Move create package form into a proper modal instead of a broken details/summary toggle - Add copy button for all key prefixes (not just full keys) - Add POST /licenses/master-key/regenerate route and handler - Add locale keys for regenerate master key feature Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 08:47:11 -05:00
Jonathan Miller	cbaf289657	fix(settings): add licensing toggle to Advanced Settings, clean up UI ... - Add licensing enable/disable checkbox to Advanced Settings page so users can toggle licensing without needing the separate Licensing settings page - Restore LicensingEnabled gate on Licensing nav item (shows only when licensing is enabled, as intended) - Replace inline dividers with Fomantic UI dividing headers for cleaner visual section separation - Fix redirect after saving advanced settings to go back to /advanced instead of /settings Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 08:09:23 -05:00
Jonathan Miller	64dc6f28fa	fix(settings): always show Licensing nav item in repo settings ... The Licensing nav item was gated behind LicensingEnabled, creating a chicken-and-egg problem: users couldn't reach the settings page to enable licensing because the nav link was hidden until licensing was already enabled. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 07:58:17 -05:00
Jonathan Miller	c7d8f6066f	feat(issues): custom fields foundation — model, migration, settings UI (#8) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-04 06:46:33 -05:00
Jonathan Miller	d0e3b3dfd8	fix(ui): add octicon icons to user settings navbar ... Profile (person), Account (shield-lock), Notifications (bell), Appearance (paintbrush), Security (lock), Blocked Users (blocked), Applications (apps), SSH/GPG Keys (key), Actions (play), Packages (package), Webhooks (webhook), Organizations (organization), Repositories (repo). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 17:10:45 -05:00
Jonathan Miller	ea10e8500c	fix(ui): replace invalid octicon-settings with octicon-gear ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:45:37 -05:00
Jonathan Miller	92bd3f7dc0	fix(ui): clean section headers with dividers instead of accordions, icons on all navbar items ... Advanced settings: replace collapsible accordions with clean h5 section headers (icon + bold text) separated by dividers. All sections always visible — no clicking to expand. Navbar: add octicon icons to every menu item — Options (settings), Advanced (tools), Licensing (key), Public Access (eye), Collaboration (people), Webhooks (webhook), Branches (git-branch), Tags (tag), Git Hooks (terminal), Deploy Keys (key-asterisk), LFS (file-binary), Actions (play). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:33:23 -05:00
Jonathan Miller	89fcbda623	feat(settings): move advanced settings to dedicated /settings/advanced page ... Extract all feature unit settings (Code, Wiki, Issues, Projects, Releases, Packages, Pull Requests) from options.tmpl into a separate advanced.tmpl with its own route at /settings/advanced. Options page now only contains: basic repo settings, avatar, mirror config, signing settings, and danger zone. Navbar updated: Advanced Settings link points to /settings/advanced. Form posts still go through the existing SettingsPost handler. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:23:49 -05:00
Jonathan Miller	dd6ee750f0	fix(build): remove extra {{end}} in settings accordion template ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:17:47 -05:00
Jonathan Miller	ffb9363e3e	feat(settings): accordion layout for advanced settings sections ... Each feature section (Code, Wiki, Issues, Projects, Releases, Packages, Pull Requests) is now wrapped in a collapsible <details> accordion with an icon and bold title. Code section is open by default; others are collapsed. This reduces visual clutter and lets admins focus on the section they need. Licensing section removed from advanced settings (now on its own /settings/licensing page). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:13:32 -05:00
Jonathan Miller	a1ceac6396	feat(settings): separate licensing settings page with navbar entry ... Extract licensing/update feed settings to its own page at /settings/licensing with dedicated template and handler. Navbar additions: - Advanced Settings link (points to existing options page) - Licensing link with key icon (when licensing enabled) New handler: LicensingSettings/LicensingSettingsPost serves the standalone licensing form with all fields (platform, gating, metadata, extensions). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 14:02:53 -05:00
Jonathan Miller	a22fa57ab1	fix(ui): embed login form on 403 Access Denied page ... Anonymous users seeing the 403 page now get an inline login form with username, password, and submit button. After login, redirects back to the page they were trying to access. Compact form centered with tw-max-w-sm, includes CSRF token and redirect_to hidden field pointing to CurrentURL. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:55:52 -05:00
Jonathan Miller	68736c78a1	fix(ui): float visibility badge to right of title label ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:51:31 -05:00
Jonathan Miller	e2c738a8d8	feat(repos): three-level visibility — Public, Private, Hidden ... Add IsHidden field to Repository model. Three visibility modes: - Public: visible to everyone (green label) - Private: members only, non-members see 403 Access Denied (orange) - Hidden: members only, non-members see 404 Not Found (red) Private mode is for commercial repos — customers know the repo exists and see a styled 403 page with sign-in button. Licensed update feeds and key-gated downloads still work. Hidden mode is for internal/secret repos — complete stealth, as if the repo doesn't exist. Settings UI: radio button selector in danger zone replaces the old binary toggle. Each option shows a colored label with description. Migration v342: adds is_hidden column to repository table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 13:42:25 -05:00
Jonathan Miller	449af83e2b	fix(ui): styled 403 Access Denied page matching the 404 page layout ... Add templates/status/403.tmpl mirroring the 404 page design with a centered error message and sign-in button for anonymous users. New Forbidden() method on Context renders the styled 403 template for HTML requests, falls back to plain text for API/non-HTML. RepoAssignment now calls ctx.Forbidden() instead of raw HTTPError for both anonymous and signed-in users without access. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 10:05:24 -05:00
Jonathan Miller	0fb0aea719	feat(updates): Composer packages.json feed (#354), hide menu items for guests ... Composer feed: new endpoint GET /updates/packages.json serving Composer/Packagist-compatible packages.json. Includes version, dist URL with SHA256, authors, PHP requirement. License key embedded in download URL when provided. Menu visibility: Actions and Licenses tabs in repo header now require .IsSigned — anonymous users no longer see tabs they can't access. Previously the tabs were visible but clicking redirected to login (confusing UX). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 09:02:00 -05:00
Jonathan Miller	eca929f680	feat(licenses): configurable key prefix (#406), header button (#408), open feed button (#409) ... #406: Add KeyPrefix field to UpdateStreamConfig. GenerateKeyString now accepts a prefix parameter, looked up from org config. Default remains MOKO if not set. Auto-uppercased, max 20 chars. #408: Move "New Package" button into the packages header bar, right-aligned. Uses details/summary pattern — clicking the button expands the create form below. Cleaner layout on both repo and org. #409: Add open-in-new-tab button (external link icon) next to every copy button on feed URLs. All four feeds: Joomla XML, Dolibarr JSON, WordPress JSON, Changelog XML. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 08:51:55 -05:00
Jonathan Miller	2799558040	feat(orgs): enterprise sub-org hierarchy with parent-child relationships (#410) ... Add ParentOrgID field to User model for org hierarchy. Parent orgs can have child orgs, enabling enterprise structures like MokoConsulting → client orgs. Model changes: - ParentOrgID int64 on User (INDEX, DEFAULT 0) - GetChildOrgs, GetAncestorOrgIDs, GetParentOrg helpers - Max 10 hierarchy levels with cycle detection License integration: - ListLicensePackagesWithAncestors — shows packages from parent orgs - ListLicenseKeysWithAncestors — shows keys from parent orgs - SearchLicenseKeysWithAncestors — searches across hierarchy - Master keys from parent orgs validate for child org repos UI: - Parent org dropdown in org settings (owners/admins only) - Shows all orgs user owns except self Migration v341: adds parent_org_id column to user table. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 08:14:08 -05:00
Jonathan Miller	37322e4212	feat(updates): manual release-to-stream mapping ... Add release_stream_map table for explicitly assigning releases to update streams. When a mapping exists, it overrides automatic tag detection. When absent, falls back to tag name/suffix matching. New model: ReleaseStreamMap with SetReleaseStream, GetReleaseStream, ResolveReleaseStream (manual first, auto fallback). UI: stream selector dropdown on release create/edit page, shown when licensing is enabled. Options: auto-detect (default) or any configured stream (stable, release-candidate, beta, etc.). All three feed generators (Joomla, Dolibarr, WordPress) now use ResolveReleaseStream instead of MatchStreamFromTag. Migration v340 updated with release_stream_map table creation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 07:37:02 -05:00
Jonathan Miller	3e31b662a6	fix(licenses): remove UNIQUE constraint on PaymentRef, use tw-max-w-lg ... PaymentRef UNIQUE constraint causes Error 1062 when creating keys without a payment reference — empty strings collide. Remove the DB constraint; idempotency is enforced in code via GetLicenseKeyByPaymentRef which already filters empty strings. Also replace inline style with tw-max-w-lg class on search box. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 07:12:13 -05:00
Jonathan Miller	774ea3842b	fix(ui): constrain license key search box width to 400px ... The search input was spanning full width (tw-w-full) making it disproportionately large. Cap at 400px to match other search inputs in the Gitea UI. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 07:10:43 -05:00
Jonathan Miller	0e7d3c4a34	fix(security): ownership guards, RepoScope parsing, CSRF tokens, XSS escaping ... SECURITY: Add verifyPackageOwnership/verifyKeyOwnership checks to all API handlers that accept ID parameters. Prevents cross-org access where an admin of org A could modify org B's license data. FIX: RepoScope validation now properly parses JSON arrays using json.Unmarshal instead of strings.Contains. The old approach matched substrings (repo ID "2" matched inside "12"). Now uses typed int64 comparison. FIX: Add {{$.CsrfTokenHtml}} to both delete confirmation modal forms (package and key) in repo and org templates. Without CSRF tokens, the form-fetch-action POST requests would be rejected. FIX: HTML-escape release notes in WordPress changelog to prevent XSS via malicious release note content reaching WP admin dashboards. FIX: Parse AllowedChannels JSON format before comma-split fallback to avoid garbage values from splitting JSON arrays by comma. FIX: Add missing third return value (false) on error path in validateUpdateKey to prevent compile error. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:59:29 -05:00
Jonathan Miller	a20153a0e0	fix(licenses): no-download mode shows release notes but hides files ... In "no-download" feed visibility mode, anonymous users can browse the release listing page and read release notes, but the download section (attachments, source archives) is replaced with a "Sign in to download" message. Only "hidden" mode redirects anonymous users to login entirely. "no-download" keeps the page public — release notes, changelogs, and version info are all visible. Just the actual files are gated. This matches the commercial pattern: let users see what's available to motivate purchase, while protecting the actual deliverables. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:42:44 -05:00
Jonathan Miller	a149edccd3	feat(licenses): feed visibility modes and login-required releases ... Add FeedVisibility field to UpdateStreamConfig with three modes: - public: full feed with download URLs (default) - no-download: version info visible but download URLs stripped - hidden: empty feed returned without a valid license key The "no-download" mode is the key commercial pattern — customers see updates exist (motivating purchase/renewal) but cannot download without a valid key. Joomla shows "update available" in admin. Applied consistently across all update feed endpoints (Joomla XML, Dolibarr JSON, WordPress JSON) via the shared validateUpdateKey() which now returns a stripDownloads flag. Also: when licensing is enabled, the release listing page requires login. Anonymous users are redirected to the login page. This prevents browsing release notes and download links without auth. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:38:09 -05:00
Jonathan Miller	01eb9944ca	feat(licenses): replace channel checkboxes with combolist picker ... Use the existing shared/combolist.tmpl component for channel selection in create and edit package forms. This mimics the issue label picker UI — a searchable dropdown with checkmarks and a selected-items list below. Replaces raw checkboxes (repo + org templates) and Fomantic multiple selection dropdowns (edit templates) with the combo-multiselect component that has proper JS for toggle, search, and clear functionality. Handler parsing updated: combolist sends comma-separated values in a single hidden input (vs multiple checkbox form values). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:30:59 -05:00
Jonathan Miller	e3a8ae2595	feat(settings): add extension metadata to repo settings (#335) ... Repo settings now include extension metadata fields (element name, display name, type, target version, maintainer, PHP minimum) under the Licensing section. These override org-level defaults per-repo. Empty fields inherit from the organization's update stream config. Extension type dropdown includes: package, component, module, plugin, template, library — plus an "(inherit from org)" option. Also adds form fields to the RepoSettingsForm struct for all metadata fields. Closes #335 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 06:19:48 -05:00
Jonathan Miller	1fabdb94ec	feat(updates): WordPress PUC-compatible update feed (#351) ... New endpoint: GET /{owner}/{repo}/updates/wordpress.json Generates JSON compatible with the YahnisElsts plugin-update-checker library — the standard for commercial WordPress plugin self-hosted updates. Returns name, slug, version, download_url, homepage, requires_php, author, sections (changelog HTML), icons, and banners. License key validation: reads from ?license_key=, ?dlid=, or ?key= query params (PUC sends these via addQueryArgFilter). When RequireKey is enabled, returns minimal empty response without download_url. Changelog section built from release notes (last 10 stable releases), converting markdown list items to HTML <ul>/<li> elements. Icon/banner URLs point to conventional paths in the repo: assets/icon-128x128.png, assets/icon-256x256.png assets/banner-772x250.png, assets/banner-1544x500.png Route registered at /updates/wordpress.json alongside existing /updates.xml (Joomla) and /updates/dolibarr.json. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-02 00:01:16 -05:00
Jonathan Miller	93d18ab25f	feat(licenses): double confirmation modals for permanent deletion (#391) ... Replace link-action delete buttons with show-modal pattern that opens a Fomantic UI modal with a form. Package deletion requires typing the package name in a required field before the submit button works. Key deletion shows a warning modal with confirmation. Uses Gitea's existing form-fetch-action + modal_actions_confirm pattern, matching how repo deletion works in settings. Both repo and org templates updated with matching modals. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:23:56 -05:00
Jonathan Miller	3e8124a2b7	feat(licenses): API package CRUD, settings API, and repo scope UI ... API package endpoints (#388): - PATCH /license-packages/{id} — edit package (master protected) - DELETE /license-packages/{id} — delete package (master protected) - POST /license-packages/{id}/archive — archive package - POST /license-packages/{id}/unarchive — restore package Settings API (#349): - GET /license-settings — read licensing/update stream config - PUT /license-settings — update config (all metadata fields) - New LicenseSettings struct in API types Repo scope UI (#395): - Dropdown in create/edit package forms listing org repos - "All repositories" default option - RepoScope read from form in both repo and org handlers - OrgRepos loaded via GetOrgRepositories in Licenses handlers Refs #341, #346, #349, #388, #395 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:21:09 -05:00
Jonathan Miller	53a5d0b97b	feat(licenses): domain lock timer, infourl fix, Akeeba-compatible XML format ... Domain lock timer: add DomainLockHours to LicensePackage and FirstUsedUnix to LicenseKey. During the grace period after first use, any domain is accepted and auto-added to the restriction list. After the grace period, only listed domains are allowed. Set 0 for immediate lock-on-first-use (default). Fix infourl: default to /releases listing page instead of specific tag page. Falls back to SupportURL or InfoURL if configured. Match Akeeba Backup Pro XML format: downloadkey prefix is "dlid=" (not "&dlid="), matching how Joomla stores extra_query. Verified against production Akeeba/JCE/AdminTools manifests via SSH. Update migration v340 with FirstUsedUnix and DomainLockHours columns. Add DomainLockHours field to create/edit package forms for both repo and org levels with help text. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 05:00:50 -05:00
Jonathan Miller	448b7d3ab0	feat(licenses): archive, search, download gating, changelog XML, and expanded permissions ... Migration v340: sync all missing columns (key_raw, payment_ref, last_heartbeat_unix, is_archived, licensing_enabled, download_gating, support_url, and all extension metadata fields). Package archiving (#384): add IsArchived field with archive/unarchive handlers and collapsible "Archived Packages" section in templates. Existing keys from archived packages continue to work. Expanded delete permissions (#385): org owners and site admins can permanently delete packages and keys (previously site admin only). Search (#392): server-side search across key_prefix, key_raw, licensee_name, licensee_email, domain_restriction, and payment_ref via ?q= query parameter on both repo and org licenses pages. Sortable tables (#390): Fomantic UI sortable class on keys table with new Domain column showing DomainRestriction per key. Download gating (#347): three modes — none, prerelease-only, and all downloads. CheckDownloadGating() intercepts both release attachment and git archive download handlers. Support URL (#393): configurable SupportURL field on UpdateStreamConfig for wiki or external site links. Changelog XML (#343): ServeChangelogXML endpoint at /changelog.xml generates Joomla-compatible changelog from release notes. Parses Keep-a-Changelog markdown sections into <security>, <fix>, <addition>, <change>, <remove>, <note> XML elements. API renew (#387): POST /license-keys/{id}/renew endpoint extends key expiration by package duration. Closes #384, #385, #386, #387, #389, #390, #392, #393 Refs #343, #346, #347 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-01 04:45:20 -05:00
Jonathan Miller	1ed8e463df	chore: remove stale TODO comments (#328, #332) ... - Remove TODO from OAuth2 regenerate secret template — the functionality was already fully implemented - Remove stub TODO test comments for TestMerge, TestNewPullRequest, TestAddTestPullRequestTask — stale for years - Remove stale GetProjectsMode TODO — method is needed by templates Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 13:38:18 -05:00
Jonathan Miller	cd0a803341	fix(issues): deprecate Issue.Ref branch selector UI (#307) ... Remove the branch/tag selector from the issue sidebar and new issue form. The Issue.Ref field was added 8 years ago and provides minimal value — it only saves a branch name and optionally restricts which branch's commits can auto-close the issue. Removed: - Branch selector template (branch_selector_field.tmpl) - Sidebar and new-form includes - Ref badge from issue lists - POST /{index}/ref web route and UpdateIssueRef handler - GetRefEndNamesAndURLs calls from list renderers - JS handler for branch selector dropdown Preserved: - DB column (Issue.Ref) — still used by commit-close logic - API response still includes ref for backward compatibility Closes #307 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 13:31:11 -05:00
Jonathan Miller	79724b5bc9	feat(ui): add generic combo-multiselect component ... Add a reusable multiselect dropdown component inspired by the issue sidebar label picker, but decoupled from issue-specific logic. Components: - templates/shared/combolist.tmpl — generic template accepting Items, Name, Title, SelectedValues parameters - web_src/js/features/combo-multiselect.ts — lightweight JS init that handles check/uncheck, search, and hidden input updates - web_src/css/modules/combo-multiselect.css — check-mark visibility and selected-items list styling Usage in any template: {{template "shared/combolist" dict "Name" "channels" "Title" "Update Channels" "Items" .AvailableChannels "SelectedValues" .SelectedChannelIDs }} Items must have .Value and .Label fields. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 11:41:08 -05:00
Jonathan Miller	c07443aa87	fix: resolve tech-debt batch 5 — CSS cleanup ... - fix(css): use calc(infinity * 1px) for --border-radius-full instead of magic 99999px value (supported in all modern browsers) - fix(css): remove legacy .center class from 2015, replace 6 usages with tw-text-center utility class Refs #318 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 11:19:01 -05:00
Jonathan Miller	b9b3026122	fix: resolve tech-debt batch 3 — remove deprecated functions, use stdlib ... - refactor(go): replace ValuesRepository with maps.Values (Go 1.21+) - refactor(go): remove CanEnableEditor wrapper, use CanContentChange directly - chore: remove stale TODO comments about project column route naming Refs #311, #317 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 11:03:42 -05:00
Jonathan Miller	d30e7d7a5a	feat(updates): extension metadata settings for update feed generation ... - Add configurable fields: element name, display name, description, extension type, maintainer, maintainer URL, info URL, target version, PHP minimum - Add platform dropdown: joomla, dolibarr, wordpress, prestashop, drupal, composer, both - Update Joomla XML generator to use metadata from config (falls back to repo-derived values when not set) - Add GetEffectiveConfig() for resolving repo → org → nil config chain - Add locale keys for all new settings fields Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:58:45 -05:00
Jonathan Miller	e0c69d792c	fix(licenses): only show licenses tab when licensing is enabled ... Uses LicensingEnabled (org config) instead of EnableLicenses/IsRepoAdmin. Tab is now hidden when the org hasn't enabled the licensing system. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:53:06 -05:00
Jonathan Miller	d74ae92e5b	fix: resolve tech-debt batch 2 — dropdown validation, editor cleanup, rename ... - fix(templates): add required validation to issue dropdown fields - refactor(ts): remove redundant `handled` field from MarkdownHandleIndentionResult - refactor(go): rename HasOrgOrUserVisible to IsOwnerVisibleToDoer for clarity Refs #311, #334 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:50:33 -05:00
Jonathan Miller	9a5720e8ad	chore: rename Go module from git. to code.mokoconsulting.tech (#336) ... Full namespace migration: update the Go module path and all import statements from git.mokoconsulting.tech to code.mokoconsulting.tech. Also updates all URL references in templates, workflows, configs, tests, and documentation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-05-31 10:28:25 -05:00