4 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	050ca518c0	fix(web): Sidebar as client component (no DB during SSG) ... - Sidebar.tsx is now "use client" — fetches /api/docs at runtime instead of calling listDocuments() during SSG (CI has no DB, causes ECONNREFUSED) - GET /api/docs added to route.ts (returns doc list for sidebar) - Removed SidebarContent.tsx (merged into Sidebar.tsx) - Fixed isAuthorized double-brace typo	2026-08-20 17:06:16 +07:00
asepharyana	8ed8c677e8	fix(web): split PUT/DELETE into /api/docs/[...slug]/route.ts ... Next.js App Router doesn't match DELETE/PUT on /api/docs/route.ts for nested paths; need a dynamic segment. POST stays at /api/docs, PUT+DELETE move to /api/docs/[...slug]. Verified DELETE works locally + via Caddy.	2026-08-20 13:38:26 +07:00
asepharyana	98437cb999	fix(web): /api/docs accepts web cookie OR x-webhook-secret (not both required) ... Web UI login sets mcpedia_admin cookie; /api/docs/route.ts required the x-webhook-secret header which the browser form also sends, but the dual-auth path was brittle. Now accepts either: header (API/MCP style) OR cookie (web login). Also set ADMIN_PASSWORD on VPS .env and restart web.	2026-08-20 13:30:22 +07:00
asepharyana	57f90018da	feat: Phase 11 — CRUD (create/update/delete) + auth + web UI ... - Core: createDocument/updateDocument/deleteDocument (file + DB + revision + chunks) - Parser: stringifyFile (serialize markdown with frontmatter to disk) - API: tRPC CRUD routers (auth-gated via requireWriteAuth middleware) - API: createContext now passes expectedSecret from deps (request-scoped auth) - MCP: 3 new write tools (create_document, update_document, delete_document) - Web: /create page + ?edit=1 form, /api/auth/login (cookie-based), /api/docs REST CRUD - Web: Edit buttons on homepage + doc pages (auth-gated) - Tests: 8 new tests (5 tRPC CRUD + 3 MCP CRUD auth), 40 total all green	2026-08-20 13:08:27 +07:00