4 Commits

Include renames

Author	SHA1	Message	Date
sneak	cdcf527b25	Fix four deployability blockers found by QA (closes #189, closes #190, closes #191, closes #192) ... - CSRF over plain HTTP (#189): gorilla/csrf assumed https for its same-origin check, so setup and every POST returned 403 over plain HTTP. Gate csrf.PlaintextHTTPRequest on a new UPAAS_PLAINTEXT_HTTP config value; the default keeps https, correct for a TLS-terminating reverse proxy. The README plain-HTTP recipe now sets it. - git image never pulled (#190): ensureImage pulls alpine/git (pinned digest unchanged) when absent, before the clone container is created. - port-mapping 500 (#192): the ports delete form used {{ .CSRFField }} inside {{range .Ports}}, where the dot is a *models.Port; use {{ $.CSRFField }} like the labels and volumes blocks. - env-var 403 (#191): the editor read the CSRF token from $el (the submitting form, which has none) instead of $root, sending an empty token; read from $root. Model: opus-4-8	2026-09-09 14:12:09 +00:00
4 people	fd110e69db	feat: monolithic env var editing with bulk save (#158) ... This PR fixes env var handling by consolidating individual add/edit/delete operations into a single monolithic bulk save. ## Changes - **Template**: Restored original table-based UI with key/value rows, edit/delete buttons, and add form. Uses Alpine.js to manage the env var list client-side. On form submit, all env vars are collected into a hidden textarea and POSTed as a single bulk request. - **Handler**: `HandleEnvVarSave` atomically replaces all env vars (DELETE all + INSERT full set). - **Routes**: Single `POST /apps/{id}/env` endpoint replaces individual env var CRUD routes. - **Models**: Added `DeleteEnvVarsByAppID` and `FindEnvVarsByAppID` for bulk operations. closes #156 closes #163 Co-authored-by: clawbot <clawbot@noreply.git.eeqj.de> Co-authored-by: Jeffrey Paul <sneak@noreply.example.org> Co-authored-by: user <user@Mac.lan guest wan> Reviewed-on: #158 Co-authored-by: clawbot <clawbot@noreply.example.org> Co-committed-by: clawbot <clawbot@noreply.example.org>	2026-03-11 12:06:56 +01:00
3 people	49ff625ac4	fix: add missing Makefile targets (docker, hooks) and test timeout (#159) ... ## Changes - Add `docker` target (`docker build .`) - Add `hooks` target (installs pre-commit hook running `make check`) - Add 30-second timeout to `test` target (`-timeout 30s`) - Update `.PHONY` to include new targets - Update README to document all Makefile targets (`fmt-check`, `docker`, `hooks`) - Run `make fmt` to fix JS formatting via prettier `docker build .` passes ✅ closes #136, closes #137 <!-- session: agent:sdlc-manager:subagent:44375174-444b-43bf-a341-2def7ebb9fdf --> Co-authored-by: clawbot <clawbot@noreply.git.eeqj.de> Co-authored-by: Jeffrey Paul <sneak@noreply.example.org> Reviewed-on: #159 Co-authored-by: clawbot <clawbot@noreply.example.org> Co-committed-by: clawbot <clawbot@noreply.example.org>	2026-03-10 01:09:15 +01:00
user	5fe11f24d4	refactor: break up app.js into smaller modules ... Split static/js/app.js (581 lines) into 5 focused modules: - utils.js: global utilities store + legacy compat - components.js: reusable Alpine.js components (copy, confirm, dismiss, time) - app-detail.js: app detail page logic (status polling, logs) - deployment.js: deployment card + deployments history page - dashboard.js: dashboard relative time updates Closes #128	2026-02-23 11:52:41 -08:00