Unify DesktopRepositoryServer into RepositoryServer and add firmware support

Rename DesktopRepositoryServer to RepositoryServer with unified namespace
OpenShock.RepositoryServer. Reorganize controllers into V1 (backwards-compat
desktop endpoints at /v1/) and V2 (desktop at /v2/desktop/, firmware at
/v2/firmware/). Add full firmware repository with chips, boards, versions,
artifacts, and release notes backed by PostgreSQL enums and EF Core entities.
Includes public OTA endpoints and admin CRUD with token auth. Update Docker,
CI/CD workflows, and generate AddFirmwareTables migration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hhvrc

.github/workflows/ci-build.yml

@@ -24,8 +24,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - name: desktop-repository-server-tunit
-            project: DesktopRepositoryServer.Tests/DesktopRepositoryServer.Tests.csproj
+          - name: repository-server-tunit
+            project: RepositoryServer.Tests/RepositoryServer.Tests.csproj
 
     steps:
       - name: Checkout
@@ -47,8 +47,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - dockerfile: docker/DesktopRepositoryServer.Dockerfile
-            image: desktop-repository-server
+          - dockerfile: docker/RepositoryServer.Dockerfile
+            image: repository-server
 
     steps:
       - name: Checkout
@@ -72,7 +72,7 @@ jobs:
           image: ${{ matrix.image }}
           platforms: ${{ inputs.platforms || 'linux/amd64' }}
           tag-prefix: ${{ inputs.tag-prefix  || 'rn' }}
-          
+
   promote-image:
     name: Promote Image (${{ matrix.image }})
     needs: [build, tests]
@@ -82,8 +82,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - image: desktop-repository-server
-    
+          - image: repository-server
+
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -101,7 +101,7 @@ jobs:
           image: ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ matrix.image }}
           run-tag: ${{ inputs.tag-prefix  || 'rn' }}-${{ github.run_number }}-a${{ github.run_attempt }}
           latest: ${{ inputs.latest || false }}
-          
+
   deploy-prod-workflow:
     runs-on: ubuntu-latest
     needs: promote-image
@@ -113,8 +113,8 @@ jobs:
         with:
           token: ${{ secrets.GITOPS_PAT }}
           repository: openshock/kubernetes-cluster-gitops
-          event-type: update-desktop-repository-server-prod
+          event-type: update-repository-server-prod
           client-payload: |
             {
               "tag": "${{ inputs.tag-prefix  || 'rn' }}-${{ github.run_number }}-a${{ github.run_attempt }}"
-            }
+            }

.github/workflows/ci-tag.yml

@@ -8,13 +8,13 @@ name: ci-tag
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository_owner }}/api
+  IMAGE_NAME: ${{ github.repository_owner }}/repository-server
 
 jobs:
-  
+
   build-release:
     runs-on: ubuntu-latest
-    
+
     steps:
 
       - name: Checkout
@@ -42,33 +42,33 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/desktop-repository-server
+          images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/repository-server
           flavor: |
             latest=false
           tags: |
             type=raw,value=latest,enable=${{ steps.latest-tag.outputs.tag == github.ref_name }}
             type=semver,pattern={{major}},enable=${{ !startsWith(github.ref, 'refs/tags/v0.') }}
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}.{{minor}}.{{patch}}
-            
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           context: .
-          file: Dockerfile
+          file: docker/RepositoryServer.Dockerfile
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64
-  
-  
+
+
   release:
     runs-on: ubuntu-latest
     needs: build-release
-    
+
     steps:
       - name: Create release
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ github.ref_name }}
-          prerelease: ${{ contains(github.ref_name, '-rc') }}
+          prerelease: ${{ contains(github.ref_name, '-rc') }}

CLAUDE.md

@@ -0,0 +1,86 @@
+# OpenShock Repository Server
+
+## Project Overview
+Unified repository server for distributing OpenShock desktop app modules and firmware OTA updates. ASP.NET Core Web API with PostgreSQL/EF Core backend.
+
+## Tech Stack
+- .NET 10, ASP.NET Core (SlimBuilder)
+- PostgreSQL via Npgsql + EF Core (with DbContext pooling)
+- Serilog (console + Grafana Loki)
+- OpenTelemetry (Prometheus exporter)
+- API Versioning (Asp.Versioning) — URL-based: `/v1/`, `/v2/desktop/`, `/v2/firmware/`
+- FlexLabs.EntityFrameworkCore.Upsert for upserts
+- MiniValidation for config validation
+- Semver NuGet package for semver parsing
+- TUnit for tests
+- Scalar for API docs UI
+- Docker (Alpine) with self-signed HTTPS cert generation
+
+## Project Structure
+```
+RepositoryServer/                    # Main web API project
+  AuthenticationHandlers/            # Custom AdminToken auth handler
+  Config/                            # ApiConfig, DbConfig, RepoConfig, MetricsConfig, FirmwareConfig
+  Controllers/
+    OpenShockControllerBase.cs       # Shared base controller
+    V1/                              # Legacy desktop endpoints (backwards compat)
+      RepoController.cs             # GET /v1/ — desktop module manifest
+      AdminController.cs            # /v1/admin/... — desktop module CRUD
+    V2/
+      Desktop/                       # Same as V1 under new prefix
+        RepoController.cs           # GET /v2/desktop/
+        AdminController.cs          # /v2/desktop/admin/...
+      Firmware/
+        LatestController.cs          # GET /v2/firmware/latest/{channel}
+        VersionsController.cs        # GET /v2/firmware/versions[/{version}]
+        BoardsController.cs          # GET /v2/firmware/boards
+        ChipsController.cs           # GET /v2/firmware/chips
+        AdminController.cs           # /v2/firmware/admin/... CRUD
+  Errors/                            # Static error factories (AuthResultError, ExceptionError)
+  ExceptionHandler/                  # Global IExceptionHandler + RequestInfo logging
+  Migrations/                        # EF Core migrations (Initial + AddFirmwareTables)
+  Models/                            # Desktop module DTOs
+  Models/Firmware/                   # Firmware DTOs (response + admin request)
+  Problems/                          # RFC 7807 problem details (OpenShockProblem base)
+  RepoServerDb/                      # EF Core entities + RepoServerContext
+  Utils/                             # ByteArrayHexConverter, SemVersionConverter, etc.
+  Program.cs                         # App startup and middleware pipeline
+
+RepositoryServer.Tests/              # TUnit test project
+docker/
+  RepositoryServer.Dockerfile
+  entrypoint.sh                      # Cert gen + `dotnet OpenShock.RepositoryServer.dll`
+  appsettings.Container.json
+```
+
+## Namespace
+`OpenShock.RepositoryServer` (renamed from `OpenShock.Desktop.RepositoryServer`)
+
+## Key Patterns
+- **Auth**: Custom `AdminTokenAuthentication` handler, `AuthSchemas.AdminToken` scheme
+- **Error Handling**: `OpenShockProblem` base class → `ToObjectResult()` for RFC 7807
+- **Config**: Bind root config to `ApiConfig`, validated with MiniValidator, registered as singleton
+- **DB Migrations**: `MigrationOpenShockContext` subclass for migration tooling, auto-applied on startup
+- **JSON**: CamelCase, custom `SemVersionConverter` + `ByteArrayHexConverter`
+- **Upsert**: FlexLabs `.Upsert().On().RunAsync()` pattern
+- **CORS**: Allow all origins/methods/headers
+- **Metrics**: Prometheus at `/metrics`, restricted to private networks
+
+## Database
+- PostgreSQL, connection in `ApiConfig.Db.Conn`
+- Desktop tables: `modules` (PK: id), `versions` (composite PK: version+module, FK→modules CASCADE)
+- Firmware tables: `firmware_chips`, `firmware_boards`, `firmware_versions`, `firmware_artifacts`, `firmware_release_notes`
+- Firmware enums: `firmware_channel`, `firmware_artifact_type`, `firmware_release_note_type`, `firmware_chip_architecture`
+- URL convention for firmware artifacts: `{CdnBaseUrl}/{version}/{boardId}/{artifactType}.bin`
+
+## CI/CD
+- `ci-build.yml`: Test + build Docker + promote image + deploy prod (on master)
+- `ci-tag.yml`: Release builds on semver tags, multi-arch (amd64+arm64)
+- Image: `ghcr.io/openshock/repository-server`
+- GitOps dispatch: `update-repository-server-prod` → `openshock/kubernetes-cluster-gitops`
+
+## Commands
+- Build: `dotnet build RepositoryServer/RepositoryServer.csproj`
+- Test: `dotnet test RepositoryServer.Tests/RepositoryServer.Tests.csproj`
+- Docker: `docker build -f docker/RepositoryServer.Dockerfile .`
+- Migration: `dotnet ef migrations add <Name> --project RepositoryServer`