Completed Development Phase 1

.air.toml

@@ -11,8 +11,8 @@ tmp_dir = "tmp"
   cmd = "go build -o ./tmp/main ."
   delay = 1000
   entrypoint = ["./tmp/main"]
-  exclude_dir = ["assets", "tmp", "vendor", "testdata"]
-  exclude_file = []
+  exclude_dir = ["assets", "tmp", "vendor", "testdata", ".agents", ".claude", "db"]
+  exclude_file = ["skills-lock.json"]
   exclude_regex = ["_test.go"]
   exclude_unchanged = false
   follow_symlink = false
@@ -41,6 +41,7 @@ tmp_dir = "tmp"
   watcher = "cyan"
 
 [log]
+  log = "air.log"
   main_only = false
   silent = false
   time = false

.gitignore

@@ -2,4 +2,10 @@ volumes
 tmp
 .idea
 ./gitxyz
-.envs
+.env
+
+.agents
+.claude
+
+docs/superpowers
+gitxyz

AGENTS.md

@@ -0,0 +1,41 @@
+# AGENTS
+
+Panduan ini untuk agent yang bekerja di repo ini. Tujuan utamanya adalah menjaga konsistensi arsitektur, keamanan, dan pengalaman pengembangan untuk backend Go yang menggabungkan auth serta fitur Git hosting.
+
+## Ringkasan repo
+
+- Bahasa: Go
+- Framework HTTP: Gin
+- ORM: GORM
+- Database: PostgreSQL
+- Konfigurasi: Viper dengan file YAML
+- Auth: JWT untuk route yang dilindungi
+
+## Struktur utama
+
+- [main.go](main.go): entry point aplikasi
+- [internal/bootstrap](internal/bootstrap): inisialisasi database dan router
+- [internal/api](internal/api): controller, service, middleware, DTO, dan route
+- [internal/models](internal/models): model domain dan hooks GORM
+- [internal/repository](internal/repository): akses data
+- [modules/githttp](modules/githttp): logika Git HTTP dan protocol terkait
+
+## Aturan kerja penting
+
+1. Pertahankan arsitektur yang ada: controller -> service -> repository.
+2. Pisahkan route publik dan route yang membutuhkan auth.
+3. Gunakan middleware auth untuk route yang dilindungi.
+4. Hindari perubahan besar yang mengganggu kompatibilitas API.
+5. Selalu tangani error secara eksplisit dan jangan sembunyikan error.
+6. Pertahankan validasi input di DTO dan service.
+7. Saat mengubah model atau skema, pikirkan dampaknya pada GORM dan migrasi.
+8. Verifikasi hasil perubahan dengan go test dan, bila perlu, uji endpoint lewat curl atau HTTP client.
+9. Jangan menjalankan aplikasi secara manual dengan go run. Jika pemilik proyek ingin menjalankan server, gunakan Air sesuai instruksi pemilik.
+10. Jika ada kebutuhan menjalankan aplikasi untuk verifikasi, minta izin pemilik terlebih dahulu atau ikuti arahan yang sudah disepakati.
+
+## Dokumen terkait
+
+- [docs/agents/architecture.md](docs/agents/architecture.md)
+- [docs/agents/auth-and-routing.md](docs/agents/auth-and-routing.md)
+- [docs/agents/database-and-models.md](docs/agents/database-and-models.md)
+- [docs/agents/testing-and-verification.md](docs/agents/testing-and-verification.md)

config/gitxyz.yaml

@@ -1,3 +1,4 @@
 database_url: host=localhost user=gitxyz password=gitxyz-kece-banget dbname=gitxyz port=5432 sslmode=disable TimeZone=Asia/Jakarta
 volume_path: ./volumes
-executable: /usr/bin/git
+executable: /usr/bin/git
+log_level: info

db/migrations/000001_create_users_table.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS users;

db/migrations/000001_create_users_table.up.sql

@@ -0,0 +1,19 @@
+CREATE TABLE users (
+    id UUID PRIMARY KEY,
+    full_name VARCHAR(255) NOT NULL,
+    username VARCHAR(255) NOT NULL UNIQUE,
+    email VARCHAR(255) NOT NULL UNIQUE,
+    password VARCHAR(255) NOT NULL,
+    is_active BOOLEAN NOT NULL DEFAULT true,
+    avatar VARCHAR NOT NULL DEFAULT '',
+    bio TEXT,
+    location VARCHAR,
+    last_login_at TIMESTAMP,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    deleted_at TIMESTAMP
+);
+
+CREATE INDEX idx_users_username ON users(username);
+CREATE INDEX idx_users_email ON users(email);
+CREATE INDEX idx_users_deleted_at ON users(deleted_at);

db/migrations/000002_create_repositories_table.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS repositories;

db/migrations/000002_create_repositories_table.up.sql

@@ -0,0 +1,18 @@
+CREATE TABLE repositories (
+    id UUID PRIMARY KEY,
+    name VARCHAR(255) NOT NULL,
+    description TEXT,
+    physical_path VARCHAR NOT NULL,
+    is_private BOOLEAN NOT NULL DEFAULT false,
+    is_active BOOLEAN NOT NULL DEFAULT true,
+    user_id UUID NOT NULL,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    deleted_at TIMESTAMP,
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    UNIQUE(name),
+    UNIQUE(physical_path)
+);
+
+CREATE INDEX idx_repositories_user_id ON repositories(user_id);
+CREATE INDEX idx_repositories_deleted_at ON repositories(deleted_at);

db/migrations/000003_create_user_credentials_table.down.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS personal_access_tokens;
+DROP TABLE IF EXISTS ssh_keys;

db/migrations/000003_create_user_credentials_table.up.sql

@@ -0,0 +1,34 @@
+CREATE TABLE ssh_keys (
+    id UUID PRIMARY KEY,
+    title VARCHAR(255) NOT NULL,
+    public_key TEXT NOT NULL,
+    fingerprint VARCHAR(255) NOT NULL,
+    user_id UUID NOT NULL,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    deleted_at TIMESTAMP,
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    UNIQUE(fingerprint)
+);
+
+CREATE INDEX idx_ssh_keys_user_id ON ssh_keys(user_id);
+CREATE INDEX idx_ssh_keys_deleted_at ON ssh_keys(deleted_at);
+
+CREATE TABLE personal_access_tokens (
+    id UUID PRIMARY KEY,
+    name VARCHAR(255) NOT NULL,
+    token_hash VARCHAR(255) NOT NULL,
+    token_prefix VARCHAR(16) NOT NULL,
+    scopes TEXT,
+    last_used_at TIMESTAMP,
+    expires_at TIMESTAMP,
+    user_id UUID NOT NULL,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    deleted_at TIMESTAMP,
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    UNIQUE(token_hash)
+);
+
+CREATE INDEX idx_personal_access_tokens_user_id ON personal_access_tokens(user_id);
+CREATE INDEX idx_personal_access_tokens_deleted_at ON personal_access_tokens(deleted_at);

db/migrations/000004_drop_repositories_physical_path.down.sql

@@ -0,0 +1,2 @@
+ALTER TABLE repositories ADD COLUMN physical_path VARCHAR NOT NULL DEFAULT '';
+ALTER TABLE repositories ADD CONSTRAINT repositories_physical_path_key UNIQUE (physical_path);

db/migrations/000004_drop_repositories_physical_path.up.sql

@@ -0,0 +1,2 @@
+ALTER TABLE repositories DROP CONSTRAINT IF EXISTS repositories_physical_path_key;
+ALTER TABLE repositories DROP COLUMN IF EXISTS physical_path;

db/migrations/000005_add_user_role.down.sql

@@ -0,0 +1,2 @@
+ALTER TABLE users DROP CONSTRAINT IF EXISTS chk_user_role;
+ALTER TABLE users DROP COLUMN IF EXISTS role;

db/migrations/000005_add_user_role.up.sql

@@ -0,0 +1,6 @@
+ALTER TABLE users
+    ADD COLUMN role VARCHAR(20) NOT NULL DEFAULT 'user';
+
+ALTER TABLE users
+    ADD CONSTRAINT chk_user_role
+    CHECK (role IN ('owner', 'admin', 'maintainer', 'user', 'guest'));

db/migrations/000006_create_repository_members.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS repository_members;

db/migrations/000006_create_repository_members.up.sql

@@ -0,0 +1,14 @@
+CREATE TABLE repository_members (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    repo_id UUID NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
+    role VARCHAR(20) NOT NULL,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    UNIQUE(user_id, repo_id),
+    CONSTRAINT chk_repo_member_role
+        CHECK (role IN ('owner', 'maintainer', 'triager', 'reader', 'guest'))
+);
+
+CREATE INDEX idx_repo_members_repo_id ON repository_members(repo_id);
+CREATE INDEX idx_repo_members_user_id ON repository_members(user_id);

db/migrations/000007_create_policies.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS policies;

db/migrations/000007_create_policies.up.sql

@@ -0,0 +1,15 @@
+CREATE TABLE policies (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    subject_type VARCHAR(20) NOT NULL,
+    subject_id VARCHAR(255) NOT NULL,
+    action VARCHAR(50) NOT NULL,
+    resource_type VARCHAR(20) NOT NULL,
+    resource_id VARCHAR(255) NOT NULL DEFAULT '*',
+    effect VARCHAR(10) NOT NULL DEFAULT 'allow',
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    UNIQUE(subject_type, subject_id, action, resource_type, resource_id),
+    CONSTRAINT chk_policy_effect CHECK (effect IN ('allow', 'deny'))
+);
+
+CREATE INDEX idx_policies_lookup
+    ON policies(subject_type, subject_id, action, resource_type, resource_id);

db/migrations/000008_create_issues_table.down.sql

@@ -0,0 +1,5 @@
+DROP TABLE IF EXISTS issue_assignees;
+DROP TABLE IF EXISTS issue_comments;
+DROP TABLE IF EXISTS issue_labels;
+DROP TABLE IF EXISTS labels;
+DROP TABLE IF EXISTS issues;

db/migrations/000008_create_issues_table.up.sql

@@ -0,0 +1,63 @@
+CREATE TABLE issues (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    number INTEGER NOT NULL,
+    repo_id UUID NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
+    title VARCHAR(255) NOT NULL,
+    body TEXT,
+    state VARCHAR(10) NOT NULL DEFAULT 'open',
+    author_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    assignee_id UUID REFERENCES users(id) ON DELETE SET NULL,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    closed_at TIMESTAMPTZ,
+    deleted_at TIMESTAMPTZ,
+    UNIQUE(repo_id, number),
+    CONSTRAINT chk_issue_state CHECK (state IN ('open', 'closed'))
+);
+
+CREATE INDEX idx_issues_repo_id ON issues(repo_id);
+CREATE INDEX idx_issues_state ON issues(state);
+CREATE INDEX idx_issues_deleted_at ON issues(deleted_at);
+
+CREATE TABLE labels (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    repo_id UUID NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
+    name VARCHAR(50) NOT NULL,
+    color VARCHAR(7) NOT NULL DEFAULT '#cccccc',
+    description TEXT,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    deleted_at TIMESTAMPTZ,
+    UNIQUE(repo_id, name)
+);
+
+CREATE INDEX idx_labels_repo_id ON labels(repo_id);
+CREATE INDEX idx_labels_deleted_at ON labels(deleted_at);
+
+CREATE TABLE issue_labels (
+    issue_id UUID NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
+    label_id UUID NOT NULL REFERENCES labels(id) ON DELETE CASCADE,
+    PRIMARY KEY (issue_id, label_id)
+);
+
+CREATE TABLE issue_comments (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    issue_id UUID NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
+    author_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    body TEXT NOT NULL,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    deleted_at TIMESTAMPTZ
+);
+
+CREATE INDEX idx_issue_comments_issue_id ON issue_comments(issue_id);
+
+CREATE TABLE issue_assignees (
+    issue_id UUID NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
+    user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    PRIMARY KEY (issue_id, user_id)
+);
+
+CREATE INDEX idx_issue_assignees_issue_id ON issue_assignees(issue_id);
+CREATE INDEX idx_issue_assignees_user_id ON issue_assignees(user_id);

db/migrations/000009_add_deleted_at_to_issues.down.sql

@@ -0,0 +1,3 @@
+ALTER TABLE issues DROP COLUMN deleted_at;
+ALTER TABLE labels DROP COLUMN deleted_at;
+ALTER TABLE issue_comments DROP COLUMN deleted_at;

db/migrations/000009_add_deleted_at_to_issues.up.sql

@@ -0,0 +1,8 @@
+ALTER TABLE issues ADD COLUMN deleted_at TIMESTAMPTZ;
+CREATE INDEX idx_issues_deleted_at ON issues(deleted_at);
+
+ALTER TABLE labels ADD COLUMN deleted_at TIMESTAMPTZ;
+CREATE INDEX idx_labels_deleted_at ON labels(deleted_at);
+
+ALTER TABLE issue_comments ADD COLUMN deleted_at TIMESTAMPTZ;
+CREATE INDEX idx_issue_comments_deleted_at ON issue_comments(deleted_at);

db/migrations/000010_create_patches_table.down.sql

@@ -0,0 +1,8 @@
+DROP TABLE IF EXISTS patch_comments;
+DROP TABLE IF EXISTS patch_reviews;
+DROP TABLE IF EXISTS patch_reviewers;
+DROP TABLE IF EXISTS patch_files;
+DROP TABLE IF EXISTS patch_commits;
+DROP TABLE IF EXISTS patch_requests;
+
+ALTER TABLE repositories DROP COLUMN IF EXISTS last_item_number;