7 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	a67a8c6469	feat: complete search REST route, restore disk sync, and extraFields support across API/MCP	2026-08-21 11:03:04 +07:00
asepharyana	ceb53adba4	fix: preserve value types in extraFields (no string coercion) ... - DocumentMeta.extraFields type -> Record<string, unknown> - API routes pass extraFields through without JSON.stringify coercion - CustomFieldBadges auto-styles by value type/content (number->purple, boolean->green/red, etc.) - DocForm help text: generic (no hardcoded field examples)	2026-08-21 00:45:32 +07:00
asepharyana	c760c3c087	feat(core): dynamic custom frontmatter fields for CTF writeup metadata ... - Add extra_fields JSONB column to documents table (migration 0003) - CreateDocInput/UpdateDocInput: extraFields?: Record<string, string> - parseFile: extracts non-standard frontmatter keys as extraFields - stringifyFile: writes extraFields dynamically to YAML frontmatter - toMeta: spreads extraFields from DB row into DocumentMeta - DocForm: '+ Add field' UI for content creators to add any metadata - API routes: splitPayload() separates standard vs custom fields - Doc page: CustomFieldBadges dynamically renders any custom field - Add db:migrate / db:push scripts + deploy workflow migration step - Add CTF writeup template (content/writeups/ctf/template/) - Add sample DEF CON writeup with event/challenge/category/difficulty/points - Add @tailwindcss/typography for table rendering (prose classes) - Add remark-gfm for GitHub Flavored Markdown table parsing	2026-08-20 23:18:57 +07:00
asepharyana	050ca518c0	fix(web): Sidebar as client component (no DB during SSG) ... - Sidebar.tsx is now "use client" — fetches /api/docs at runtime instead of calling listDocuments() during SSG (CI has no DB, causes ECONNREFUSED) - GET /api/docs added to route.ts (returns doc list for sidebar) - Removed SidebarContent.tsx (merged into Sidebar.tsx) - Fixed isAuthorized double-brace typo	2026-08-20 17:06:16 +07:00
asepharyana	8ed8c677e8	fix(web): split PUT/DELETE into /api/docs/[...slug]/route.ts ... Next.js App Router doesn't match DELETE/PUT on /api/docs/route.ts for nested paths; need a dynamic segment. POST stays at /api/docs, PUT+DELETE move to /api/docs/[...slug]. Verified DELETE works locally + via Caddy.	2026-08-20 13:38:26 +07:00
asepharyana	98437cb999	fix(web): /api/docs accepts web cookie OR x-webhook-secret (not both required) ... Web UI login sets mcpedia_admin cookie; /api/docs/route.ts required the x-webhook-secret header which the browser form also sends, but the dual-auth path was brittle. Now accepts either: header (API/MCP style) OR cookie (web login). Also set ADMIN_PASSWORD on VPS .env and restart web.	2026-08-20 13:30:22 +07:00
asepharyana	57f90018da	feat: Phase 11 — CRUD (create/update/delete) + auth + web UI ... - Core: createDocument/updateDocument/deleteDocument (file + DB + revision + chunks) - Parser: stringifyFile (serialize markdown with frontmatter to disk) - API: tRPC CRUD routers (auth-gated via requireWriteAuth middleware) - API: createContext now passes expectedSecret from deps (request-scoped auth) - MCP: 3 new write tools (create_document, update_document, delete_document) - Web: /create page + ?edit=1 form, /api/auth/login (cookie-based), /api/docs REST CRUD - Web: Edit buttons on homepage + doc pages (auth-gated) - Tests: 8 new tests (5 tRPC CRUD + 3 MCP CRUD auth), 40 total all green	2026-08-20 13:08:27 +07:00