chore(release): v0.5.3 — rapikan dokumentasi, CI, dan workflow rilis

- bump versi 0.5.3 (version.txt, package.json) - CHANGELOG: catatan 0.5.3 + arsip 0.5.2 - README: tautan Gitea/Forgejo baru, badge versi, bagian screenshot, fitur baru - docs/RELEASE_NOTES_v0.5.3.md - workflow CI (syntax + unit test) dan Release (buat rilis + asset zip) untuk Gitea & Forgejo
2026-11-05 03:32:03 +07:00
parent 2b35ee3f99
commit 6e2bf3fe93
9 changed files with 274 additions and 15 deletions
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -0,0 +1,33 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install dependencies
+        run: npm ci --no-audit --no-fund
+
+      - name: Check syntax (semua file JS)
+        shell: bash
+        run: |
+          fail=0
+          while IFS= read -r f; do
+            node --check "$f" || { echo "SYNTAX FAIL: $f"; fail=1; }
+          done < <(find . -name '*.js' -not -path './node_modules/*' -not -path './.git/*' -not -path './public/vendor/*')
+          exit $fail
+
+      - name: Unit tests
+        run: node tests/unit/area-access.test.js
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -0,0 +1,45 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Build archive & release
+        shell: bash
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          VERSION="${TAG#v}"
+          NOTES="docs/RELEASE_NOTES_v${VERSION}.md"
+
+          python3 - "$TAG" "$NOTES" > payload.json <<'PY'
+          import json, os, sys
+          tag, notes = sys.argv[1], sys.argv[2]
+          body = open(notes, encoding="utf-8").read() if os.path.exists(notes) else "Rilis " + tag
+          print(json.dumps({"tag_name": tag, "name": tag, "body": body, "draft": False, "prerelease": False}))
+          PY
+
+          git archive --format=zip --prefix="open-isp-${VERSION}/" -o "/tmp/open-isp-${VERSION}.zip" HEAD
+
+          ID=$(curl -fsS -X POST "$API/releases" \
+            -H "Authorization: token $TOKEN" \
+            -H "Content-Type: application/json" \
+            -d @payload.json | python3 -c 'import sys, json; print(json.load(sys.stdin)["id"])')
+
+          curl -fsS -X POST "$API/releases/$ID/assets?name=open-isp-${VERSION}.zip" \
+            -H "Authorization: token $TOKEN" \
+            -H "Content-Type: application/zip" \
+            --data-binary "@/tmp/open-isp-${VERSION}.zip"
+
+          echo "Release $TAG dibuat dengan asset open-isp-${VERSION}.zip"
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,33 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install dependencies
+        run: npm ci --no-audit --no-fund
+
+      - name: Check syntax (semua file JS)
+        shell: bash
+        run: |
+          fail=0
+          while IFS= read -r f; do
+            node --check "$f" || { echo "SYNTAX FAIL: $f"; fail=1; }
+          done < <(find . -name '*.js' -not -path './node_modules/*' -not -path './.git/*' -not -path './public/vendor/*')
+          exit $fail
+
+      - name: Unit tests
+        run: node tests/unit/area-access.test.js
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -0,0 +1,45 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Build archive & release
+        shell: bash
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          VERSION="${TAG#v}"
+          NOTES="docs/RELEASE_NOTES_v${VERSION}.md"
+
+          python3 - "$TAG" "$NOTES" > payload.json <<'PY'
+          import json, os, sys
+          tag, notes = sys.argv[1], sys.argv[2]
+          body = open(notes, encoding="utf-8").read() if os.path.exists(notes) else "Rilis " + tag
+          print(json.dumps({"tag_name": tag, "name": tag, "body": body, "draft": False, "prerelease": False}))
+          PY
+
+          git archive --format=zip --prefix="open-isp-${VERSION}/" -o "/tmp/open-isp-${VERSION}.zip" HEAD
+
+          ID=$(curl -fsS -X POST "$API/releases" \
+            -H "Authorization: token $TOKEN" \
+            -H "Content-Type: application/json" \
+            -d @payload.json | python3 -c 'import sys, json; print(json.load(sys.stdin)["id"])')
+
+          curl -fsS -X POST "$API/releases/$ID/assets?name=open-isp-${VERSION}.zip" \
+            -H "Authorization: token $TOKEN" \
+            -H "Content-Type: application/zip" \
+            --data-binary "@/tmp/open-isp-${VERSION}.zip"
+
+          echo "Release $TAG dibuat dengan asset open-isp-${VERSION}.zip"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,24 @@

 Format mengikuti [Keep a Changelog](https://keepachangelog.com/) dan [Semantic Versioning](https://semver.org/).

-## [Unreleased] — setelah v0.5.1
+## [0.5.3] — 2026-11-05 — "forge-lime"
+
+### Ditambahkan
+- **Pembatasan wilayah kerja**: teknisi & kolektor hanya melihat/menangani pelanggan, tiket, perangkat, dan tagihan di area tugasnya (dukung multi-area). Admin/root tetap penuh.
+- **Inventaris gudang**: alur stok keluar (FIFO / serial number), retur barang bekas, stock opname dengan selisih otomatis, detail unit per barang, statistik stok, serta harga & supplier.
+- **Edit slip payroll**: rincian gaji (tunjangan, potongan, bonus, lembur) dapat diubah selama status masih draft; total dihitung ulang otomatis.
+- **AI & Self-Healing**: provider AI OpenAI-compatible (DeepSeek default, OpenAI, Groq, OpenRouter, custom/Ollama), bot Telegram menjawab pertanyaan admin, dan auto-repair jaringan (status isolir vs tagihan, secret PPPoE hilang/tertukar profil, sesi RADIUS menggantung, IP ACS kosong) dengan **toggle on/off** di Pengaturan.
+- **Security Watchdog**: deteksi brute-force login admin/kasir/teknisi/kolektor dan MikroTik, blokir IP sementara, alert suara (TTS soundbox) + notifikasi admin.
+- **Batas sesi login**: admin/kasir/teknisi/kolektor maksimal 2 sesi per akun, pelanggan 3 sesi; sesi lama diputus otomatis dan session ID dirotasi saat login.
+
+### Diperbaiki
+- Tab **Status** di halaman login pelanggan kini mengikuti setting `uptime_url` (sebelumnya selalu menuju URL lama `status.skyfiber.qzz.io`).
+- Kolom API key AI disamarkan (`type=password`) agar tidak tampil di layar/screenshot.
+
+### Dokumentasi
+- 10 screenshot aplikasi (desktop + mobile) di `docs/screenshots/`.
+
+## [0.5.2] — 2026-10-14 — "mirror-gitea"

 ### Diperbaiki
 - Kolom **IP Address** di **GenieACS Pro** kini tampil saat **mode pencarian** (sebelumnya kosong).
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-> 🪞 **Mirror.** Repo asli, pengembangan & **rilis/unduhan** ada di **Gitea**: https://gitea.oxpoe.qzz.io/oxpoe/open-isp/releases · GitHub hanya cermin kode.
+> 🪞 **Repositori utama:** [Gitea](https://gitea.oxpoe.xyz/oxpoe/open-isp) · [Forgejo](https://forgejo.oxpoe.xyz/oxpoe/open-isp) — rilis & unduhan ada di sana. GitHub hanya cermin kode.

 <p align="center">
  <img src="docs/assets/banner.png" alt="OPEN-ISP" width="100%">
@@ -11,18 +11,34 @@

 <p align="center">
  <img src="https://img.shields.io/badge/lisensi-ISC-ADFF2F" alt="Lisensi: ISC">
-  <img src="https://img.shields.io/badge/versi-0.5.1_pickle--lime-ADFF2F" alt="Versi 0.5.1 (pickle-lime)">
+  <img src="https://img.shields.io/badge/versi-0.5.3_forge--lime-ADFF2F" alt="Versi 0.5.3 (forge-lime)">
  <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-339933" alt="Node.js >= 20">
  <img src="https://img.shields.io/badge/docker-ready-2496ED?logo=docker&logoColor=white" alt="Docker">
-  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.qzz.io%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.stars_count&label=stars&style=flat&color=blue&logo=gitea" alt="Stars">
-  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.qzz.io%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.forks_count&label=forks&style=flat&color=lightgrey&logo=gitea" alt="Forks">
-  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.qzz.io%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.open_issues_count&label=issues&style=flat&color=orange&logo=gitea" alt="Issues">
+  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.xyz%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.stars_count&label=stars&style=flat&color=blue&logo=gitea" alt="Stars">
+  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.xyz%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.forks_count&label=forks&style=flat&color=lightgrey&logo=gitea" alt="Forks">
+  <img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgitea.oxpoe.xyz%2Fapi%2Fv1%2Frepos%2Foxpoe%2Fopen-isp&query=%24.open_issues_count&label=issues&style=flat&color=orange&logo=gitea" alt="Issues">
 </p>

 ---

 **OPEN-ISP** adalah aplikasi billing dan manajemen ISP yang lengkap: tagihan otomatis, isolir otomatis, pembayaran (QRIS/webhook), perangkat MikroTik (PPPoE & hotspot), OLT PON multi-vendor, TR-069 (GenieACS/ACS), RADIUS, peta jaringan, notifikasi WhatsApp & Telegram, hingga portal self-service pelanggan dalam satu platform — semuanya berjalan mandiri (self-hosted) dengan SQLite sebagai basis data. **NOTE:** dibuat dan ditulis oleh AI ([Deepseek](https://github.com/deepseek-ai)), on [opencode](https://github.com/anomalyco/opencode).

+## Tangkapan Layar
+
+| Dashboard Admin | Daftar Pelanggan |
+|---|---|
+| ![Dashboard](docs/screenshots/03-admin-dashboard.png) | ![Pelanggan](docs/screenshots/04-admin-customers.png) |
+
+| Inventaris & Stok Keluar | Pengaturan AI & Self-Healing |
+|---|---|
+| ![Inventaris](docs/screenshots/05-admin-inventory.png) | ![AI](docs/screenshots/07-admin-settings-ai.png) |
+
+| Login Pelanggan | Dashboard Pelanggan |
+|---|---|
+| ![Login](docs/screenshots/08-customer-login.png) | ![Dashboard Pelanggan](docs/screenshots/09-customer-dashboard.png) |
+
+Selengkapnya (10 gambar, desktop + mobile): [`docs/screenshots/`](docs/screenshots/).
+
 ## Fitur

 - **Billing & pembayaran** — tagihan bulanan otomatis (cron tanggal 1), promo & prorata per paket, kode unik/QRIS, konfirmasi bukti transfer, webhook notifikasi pembayaran, cetak invoice, bayar tunggal/massal, void/unpay.
@@ -37,7 +53,11 @@
 - **Speed test** — server internal maupun eksternal (preset provider diatur admin), mode embed/tab, tombol Muat Ulang & Bersihkan Cache.
 - **PWA** — dapat dipasang di HP, offline, pembaruan otomatis (bar "versi baru tersedia").
 - **Bilingual** — antarmuka Indonesia / English (bisa diganti dari UI).
- **Lain-lain** — inventaris gudang, tiket dukungan, laporan, monitoring sistem (CPU/RAM/disk), ODP, backup/restore database, audit log.
+- **Inventaris gudang** — stok masuk, keluar (FIFO / serial number), retur, stock opname, detail unit, harga & supplier, statistik stok.
+- **AI & otomatisasi** — provider AI OpenAI-compatible (DeepSeek/OpenAI/Groq/OpenRouter/custom), bot Telegram AI, dan **self-healing** jaringan dengan toggle on/off.
+- **Keamanan** — security watchdog brute-force (app + MikroTik), batas sesi login per akun (staff 2, pelanggan 3), rotasi session ID, alert suara/Telegram.
+- **Pembatasan wilayah** — teknisi & kolektor hanya mengakses pelanggan/tiket/perangkat di area tugasnya.
+- **Lain-lain** — tiket dukungan, laporan, monitoring sistem (CPU/RAM/disk), ODP, backup/restore database, audit log.

 ## Tangkapan Layar

@@ -56,7 +76,7 @@
 </tr>
 </table>

-Selengkapnya: **[Wiki OPEN-ISP](https://gitea.oxpoe.qzz.io/oxpoe/open-isp/wiki)**.
+Selengkapnya: **[Wiki OPEN-ISP](https://gitea.oxpoe.xyz/oxpoe/open-isp/wiki)**.

 ## Mulai Cepat

@@ -69,7 +89,7 @@ Klik badge di atas untuk membuka **Codespaces** — dependensi & data demo disia
 ### Docker (disarankan)

 ```bash
-git clone https://gitea.oxpoe.qzz.io/oxpoe/open-isp.git
+git clone https://gitea.oxpoe.xyz/oxpoe/open-isp.git
 cd open-isp
 docker compose up -d
 ```
@@ -105,8 +125,8 @@ Dukungan sukarela tetap diterima lewat menu **Dukung OPEN-ISP** di aplikasi.
 ## Dokumentasi

 - [`docs/`](docs/) — referensi teknis (skema database, OID OLT, integrasi RADIUS/MikroTik, checklist backup, dll.).
- [Wiki](https://gitea.oxpoe.qzz.io/oxpoe/open-isp/wiki) — panduan instalasi, konfigurasi, tutorial, FAQ (sedang disusun).
- [Issues](https://gitea.oxpoe.qzz.io/oxpoe/open-isp/issues) — laporan bug & permintaan fitur.
+- [Wiki](https://gitea.oxpoe.xyz/oxpoe/open-isp/wiki) — panduan instalasi, konfigurasi, tutorial, FAQ (sedang disusun).
+- [Issues](https://gitea.oxpoe.xyz/oxpoe/open-isp/issues) — laporan bug & permintaan fitur.

 ## Teknologi

@@ -118,7 +138,7 @@ Dirilis dengan lisensi **ISC** — bebas digunakan, dimodifikasi, dan didistribu

 - **Base kode &amp; repo**: [alijayanet/billing-rtrw](https://github.com/alijayanet/billing-rtrw) — dibuat oleh **Alijaya Net**. Terima kasih banyak atas base kode dan repo yang bermanfaat.
 - **Add-on**: GoWA (WhatsApp gateway), LibreSpeed & OpenSpeedTest (speed test), Uptime Kuma (monitoring, opsional), notification-forwarder.
- **Dikembangkan oleh** [oxpoe](https://gitea.oxpoe.qzz.io/oxpoe) — **code by DeepSeek V4.1 Flash — max, on opencode**.
+- **Dikembangkan oleh** [oxpoe](https://gitea.oxpoe.xyz/oxpoe) — **code by DeepSeek V4.1 Flash — max, on opencode**.
 - Terima kasih untuk para kontributor dan komunitas ISP Indonesia.

 ## Dukungan &amp; Donasi
--- a/docs/RELEASE_NOTES_v0.5.3.md
+++ b/docs/RELEASE_NOTES_v0.5.3.md
@@ -0,0 +1,66 @@
+# OPEN-ISP v0.5.3 — "forge-lime"
+
+Rilis ini menggabungkan pembaruan fitur dari repo upstream (`alijayanet/billing-rtrw`) yang relevan untuk fork ini, plus perbaikan bug login/sesi.
+
+## Yang baru
+
+### 1. Pembatasan wilayah kerja
+- Teknisi hanya melihat/mengambil tiket, pelanggan, perangkat, dan peta di area tugasnya.
+- Kolektor hanya melihat & menagih pelanggan di area/tugasnya, termasuk lewat APK (dashboard & pay-bill).
+- Mendukung multi-area (`area` dipisah koma), kosong/`semua` = tanpa batas.
+- Pelanggan baru yang didaftarkan teknisi otomatis masuk area teknisi tersebut.
+
+### 2. Inventaris gudang
+- Stok keluar dengan FIFO atau serial number spesifik.
+- Retur barang bekas/copotan.
+- Stock opname (sesuaikan stok sistem dengan fisik, selisih dicatat).
+- Detail unit per barang, daftar serial tersedia, statistik stok, harga & supplier.
+- Semua transaksi tercatat dengan sisa stok di log.
+
+### 3. Edit slip payroll
+- Rincian gaji bisa diubah selama berstatus draft; gross, potongan, dan net dihitung ulang otomatis.
+
+### 4. AI & Self-Healing
+- Provider AI lewat satu jalur OpenAI-compatible: **DeepSeek (default)**, OpenAI, Groq, OpenRouter, atau custom (Ollama/LM Studio).
+- Bot Telegram menjawab pertanyaan admin (termasuk tool: cek pelanggan, perangkat, dll).
+- Self-healing memeriksa & memperbaiki:
+  - pelanggan terisolir padahal tagihan lunas,
+  - secret PPPoE hilang / tertukar profil isolir,
+  - pelanggan terisolir tapi masih aktif di MikroTik,
+  - sesi RADIUS menggantung,
+  - IP modem ACS kosong.
+- **Toggle on/off di Pengaturan** (default nonaktif) + tombol Diagnosa / Perbaiki Sekarang.
+
+### 5. Security Watchdog
+- Deteksi brute-force login admin/kasir/teknisi/kolektor dan login MikroTik.
+- Blokir IP sementara 15 menit setelah 5 percobaan gagal.
+- Alert suara (TTS) via soundbox + notifikasi admin.
+
+### 6. Batas sesi login
+- Admin/kasir/teknisi/kolektor: maksimal **2** sesi per akun.
+- Pelanggan: maksimal **3** sesi per akun.
+- Sesi tertua diputus otomatis saat melebihi batas; session ID dirotasi saat login (anti session fixation).
+- Sesi tetap tersimpan saat service restart (cookie 30 hari, rolling).
+
+## Perbaikan
+- Tab **Status** di login pelanggan kini mengikuti setting `uptime_url`, bukan URL lama.
+- Kolom API key AI disamarkan di halaman Pengaturan.
+
+## Dokumentasi
+- 10 screenshot (desktop + mobile) di `docs/screenshots/`.
+
+## Cara upgrade
+
+```bash
+git pull
+npm install
+# restart service (pm2 / systemd / docker compose)
+```
+
+Migrasi database berjalan otomatis saat aplikasi start (kolom inventaris & tabel sesi login).
+
+Pengaturan AI (opsional): **Pengaturan → AI & Self-Healing** — pilih provider, isi API key/model, lalu nyalakan auto-repair bila sudah yakin.
+
+---
+
+**Full changelog:** [CHANGELOG.md](../CHANGELOG.md)
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
  "name": "open-isp",
-  "version": "0.5.2",
-  "description": "OPEN-ISP — sistem billing & manajemen ISP open-source (PWA pelanggan, multi-OLT, RADIUS, WhatsApp, QRIS)",
+  "version": "0.5.3",
+  "description": "OPEN-ISP \u2014 sistem billing & manajemen ISP open-source (PWA pelanggan, multi-OLT, RADIUS, WhatsApp, QRIS)",
  "main": "app-customer.js",
  "scripts": {
    "start": "node app-customer.js",
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-0.5.2
+0.5.3
@@ -1 +1 @@
 .5.2
 .5.3