erangel1
edf3c9824e
Phase 3C — Commit Summary
...
feat: workspaces — collaborative repo namespaces
Backend
- internal/models/workspace.go — Workspace (handle, displayName,
description, createdBy) + WorkspaceMember (workspaceId, userId,
username, role: owner/admin/member)
- internal/models/repo.go — added nullable workspace_id column; existing
user repos unaffected
- internal/models/migrations/011_workspaces.go — syncs both tables +
adds column to repository
- internal/api/handlers/workspace.go — ListWorkspaces, CreateWorkspace,
GetWorkspace, UpdateWorkspace, DeleteWorkspace (blocks if repos
remain), ListRepos, ListMembers, AddMember, UpdateMember, RemoveMember
- internal/api/handlers/repos.go — lookupRepo resolves workspace
handles; Create accepts workspace field; List includes workspace
member repos; withOwnerName uses workspace handle for workspace-owned
repos
- internal/api/handlers/dashboard.go — recentRuns + repo list include
workspace repos the user is a member of
- internal/api/router.go — /workspaces, /workspaces/:handle/* routes
Workspace rules enforced:
- Handle globally unique across usernames + workspace handles (409 on
collision)
- Creator auto-assigned owner role
- Delete blocked if repos exist
- Last owner cannot be demoted/removed
---
feat: secret management hierarchy (Global → Workspace → Repo → Env)
Backend
- internal/models/secret.go — Secret struct +
EncryptSecret/DecryptSecret with AES-256-GCM (key = SHA-256 of
SESSION_SECRET); values never serialised to JSON
- internal/models/migrations/012_secrets.go — syncs secret table
- internal/api/handlers/secret.go — List/Upsert/Delete for all four
scopes; ResolveSecretsForRun builds merged env map for CI
- internal/domain/ci/executor.go — JobContext.Secrets field; secrets
injected as --env KEY=VALUE into docker run; buildJobContext calls
resolveSecrets(Global < Workspace < Repo < Env)
- internal/domain/ci/runner_manager.go — passes cfg.SessionSecret to
buildJobContext
- internal/api/router.go — /repos/:owner/:repo/secrets,
/environments/:envName/secrets, /workspaces/:handle/secrets,
/admin/secrets
---
feat: workspace + secret management UI
Frontend
- types/api.ts — Workspace, WorkspaceWithMeta, WorkspaceMember,
SecretListItem types
- api/queries/workspaces.ts — full CRUD hooks + WorkspaceRepo type
- api/queries/secrets.ts — repo/env/workspace secret hooks
- pages/WorkspacesPage.tsx — list + create modal
- pages/WorkspacePage.tsx — workspace dashboard with repo list
- pages/WorkspaceSettingsPage.tsx — general settings, members CRUD,
workspace secrets, danger zone
- pages/RepoSecretsPage.tsx — repo secrets + per-environment secret
sections with priority hierarchy callout
- pages/CreateRepoPage.tsx — ?workspace= query param pre-fills owner
selector; only admin/owner workspaces shown
- components/layout/Sidebar.tsx — "Workspaces" global nav item +
workspace quick-links; "Secrets" in RepoSubNav; new SecretsIcon,
WorkspaceIcon
- App.tsx — routes for /workspaces, /workspaces/:handle,
/workspaces/:handle/settings, /repos/:owner/:repo/secrets
2026-05-11 23:34:46 +02:00
erangel1
7436679eac
Backend — GET /api/v1/dashboard (single authenticated request):
...
Aggregates repos, open PRs, review queue, open issues server-side
Per-repo PR and issue counts computed in one pass
Review queue pulls PRs where the user is an assigned reviewer (from pr_reviewers table), excluding their own PRs
Frontend — complete redesign of DashboardPage.tsx:
Section What it shows
Stats bar Repo count · My PRs · Reviews awaiting · Open issues — each a clickable nav pill
⌘K Command palette Fuzzy search across repos, PRs, issues with keyboard nav (↑↓ / Enter / Esc), quick-nav shortcuts when empty
Needs attention Only appears when review queue is non-empty; badges each PR as "Review requested"
My pull requests Open PRs I authored, with source→target branch, repo context, relative timestamp
My open issues Issues I filed, linked to the repo issue list
Workspaces My repos, prioritising recently visited (from useRecentRepos), with PR/issue count badges
CI/CD Honest placeholder until pipeline integration lands
Quick actions New repo · Import · Explore · Settings — always one click away
Empty state Shows only when user has zero repos
2026-05-07 16:36:45 +02:00