feat: OpenCodeHub v1.1.0 - Enterprise Features & Storage Adapters

Major release including multiple storage backends, advanced project management, and enhanced CI/CD capabilities.

**New Features:**
- **Storage Adapters:** Added support for S3, GCS, Azure, Dropbox, and FTP.
- **Advanced Issues:** Introduced Epics, Tasks, and Cross-Repository linking.
- **Merge Queue:** Implemented speculative execution and distributed locking.
- **Security:** Added Secret Scanning integration and improved 2FA/MFA setup.
- **Authentication:** Integrated 'arctic' and 'openid-client' for robust OAuth flows; added User Following.
- **Templates:** Repository templates and custom issue fields support.
- **Webhooks:** Native support for Discord and Teams notifications.

**Improvements:**
- **UI/UX:** Redesigned Admin Dashboard, enhanced Issue/PR views, and new Insights charts.
- **CLI:** Improved stack management (sync, log, rebase) and repo creation.
- **Performance:** Optimized rate limiting middleware and database queries.

**Refactoring:**
- Reorganized database schema with new tables for custom fields, automation rules, and more.
- modularized API routes and library functions.

**Chores:**
- Updated dependencies (aws-sdk, drizzle-orm, lucide-react).
- Added comprehensive scripts for maintenance and testing.

Author: swadhinbiswas

.astro/settings.json

@@ -1,5 +1,5 @@
 {
 	"_variables": {
-		"lastUpdateCheck": 1769015135620
+		"lastUpdateCheck": 1770408834603
 	}
 }

.env.example

@@ -52,6 +52,12 @@ SESSION_SECRET=change-this-session-secret-too
 # This secret protects git hooks from unauthorized access
 # Generate with: openssl rand -hex 32
 INTERNAL_HOOK_SECRET=change-this-internal-hook-secret-in-production
+# CRITICAL: Secret for cron endpoints (gc, mirror sync, etc.)
+# Generate with: openssl rand -hex 32
+CRON_SECRET=change-this-cron-secret-in-production
+# CRITICAL: Encryption key for sensitive config blobs (AI provider keys, etc.)
+# Generate with: openssl rand -hex 32
+AI_CONFIG_ENCRYPTION_KEY=change-this-ai-config-encryption-key-in-production
 
 # OAuth Providers (optional)
 OAUTH_GOOGLE_CLIENT_ID=
@@ -100,6 +106,9 @@ RUNNER_WORKSPACE_PATH=./data/runner/workspaces
 RUNNER_ARTIFACTS_PATH=./data/runner/artifacts
 RUNNER_CONCURRENT_JOBS=2
 RUNNER_TIMEOUT=3600
+# CRITICAL: Secret shared between server and runners. Must be the same.
+# Generate with: openssl rand -hex 32
+RUNNER_SECRET=change-this-runner-secret-in-production
 
 # Email Configuration (optional)
 SMTP_HOST=

.github/workflows/sync-roadmap-issues.yml

@@ -0,0 +1,100 @@
+name: Sync Roadmap Issues
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - github-roadmap-issues.json
+      - .github/workflows/sync-roadmap-issues.yml
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Create Missing Roadmap Issues
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('node:fs');
+            const path = require('node:path');
+
+            const issuesPath = path.join(process.env.GITHUB_WORKSPACE, 'github-roadmap-issues.json');
+            const payload = JSON.parse(fs.readFileSync(issuesPath, 'utf8'));
+
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+
+            const labelColors = {
+              'roadmap/ws1': '0e8a16',
+              'roadmap/ws2': '1d76db',
+              'roadmap/ws3': 'b60205',
+              'roadmap/ws4': '5319e7',
+              'roadmap/ws5': 'fbca04',
+              'roadmap/ws6': '0052cc',
+              'status/partial': 'fbca04',
+              'status/missing': 'd93f0b',
+              'priority/high': 'b60205',
+              'priority/medium': 'fbca04',
+              'priority/low': '0e8a16',
+              'docs-required': '0052cc',
+            };
+
+            const ensureLabel = async (name) => {
+              try {
+                await github.rest.issues.getLabel({ owner, repo, name });
+              } catch (error) {
+                if (error.status !== 404) throw error;
+                await github.rest.issues.createLabel({
+                  owner,
+                  repo,
+                  name,
+                  color: labelColors[name] || '6e7781',
+                });
+              }
+            };
+
+            const existingIssues = await github.paginate(github.rest.issues.listForRepo, {
+              owner,
+              repo,
+              state: 'all',
+              per_page: 100,
+            });
+
+            const existingTitleSet = new Set(
+              existingIssues
+                .filter((issue) => !issue.pull_request)
+                .map((issue) => issue.title)
+            );
+
+            let created = 0;
+            let skipped = 0;
+
+            for (const item of payload) {
+              if (existingTitleSet.has(item.title)) {
+                skipped += 1;
+                continue;
+              }
+
+              for (const label of item.labels) {
+                await ensureLabel(label);
+              }
+
+              await github.rest.issues.create({
+                owner,
+                repo,
+                title: item.title,
+                body: item.body,
+                labels: item.labels,
+              });
+
+              created += 1;
+            }
+
+            core.notice(`Roadmap issue sync complete. Created: ${created}, Skipped existing: ${skipped}`);

.gitignore

@@ -34,6 +34,16 @@ coverage/
 tmp/
 temp/
 *.tmp
+*_debug.txt
+*_output.txt
+*_report.txt
+lint_output*
+lint_report*
+cookies.txt
+fix_get_calls.sh
+
+# Artifacts
+pci/
 
 # SSH keys (generated)
 *.pem
@@ -49,4 +59,3 @@ drizzle/meta/
 # Monaco Editor cache
 .monaco/
 .vercel
-scripts/

README.md

@@ -611,6 +611,17 @@ Click buttons to:
 - Add to merge queue
 - View full PR
 
+#### Discord & Microsoft Teams
+
+OpenCodeHub also supports incoming webhooks for Discord and Microsoft Teams.
+
+**Setup:**
+1. **Repository → Settings → Webhooks**
+2. Create a new webhook
+3. Select **Discord** or **Microsoft Teams** as the type
+4. Paste your webhook URL
+5. Select triggers (PR events, Push events, etc.)
+
 ---
 
 ## 💡 Workflow Examples
@@ -740,6 +751,10 @@ INTERNAL_HOOK_SECRET=<run: openssl rand -hex 32>
 SITE_URL=https://your-domain.com  # Must be HTTPS in production
 PORT=3000
 HOST=0.0.0.0
+
+# CI/CD Runner Security (CRITICAL)
+# Must match the secret used by your runners
+RUNNER_SECRET=<run: openssl rand -hex 32>
 ```
 
 ### Database Configuration