2 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	98437cb999	fix(web): /api/docs accepts web cookie OR x-webhook-secret (not both required) ... Web UI login sets mcpedia_admin cookie; /api/docs/route.ts required the x-webhook-secret header which the browser form also sends, but the dual-auth path was brittle. Now accepts either: header (API/MCP style) OR cookie (web login). Also set ADMIN_PASSWORD on VPS .env and restart web.	2026-08-20 13:30:22 +07:00
asepharyana	57f90018da	feat: Phase 11 — CRUD (create/update/delete) + auth + web UI ... - Core: createDocument/updateDocument/deleteDocument (file + DB + revision + chunks) - Parser: stringifyFile (serialize markdown with frontmatter to disk) - API: tRPC CRUD routers (auth-gated via requireWriteAuth middleware) - API: createContext now passes expectedSecret from deps (request-scoped auth) - MCP: 3 new write tools (create_document, update_document, delete_document) - Web: /create page + ?edit=1 form, /api/auth/login (cookie-based), /api/docs REST CRUD - Web: Edit buttons on homepage + doc pages (auth-gated) - Tests: 8 new tests (5 tRPC CRUD + 3 MCP CRUD auth), 40 total all green	2026-08-20 13:08:27 +07:00