Release: merge development into beta

.github/workflows/code-quality.yml

@@ -154,29 +154,9 @@ jobs:
     with:
       app-name: launchpad
       php-version: "8.3"
-      # Pinned, because the shared workflow's DEFAULT is '["stable31", "stable32"]'
-      # and stable31 CANNOT WORK here. `additional-apps` below installs
-      # openregister, which declares min-version="32" (its
-      # lib/ContextChat/ContentProvider.php implements
-      # OCP\ContextChat\IContentProvider, absent from core before NC32). On NC31
-      # `occ app:enable openregister` fails with
-      #   App "Open Register" cannot be installed because it is not compatible
-      #   with this version of the server.
-      # and the run continues anyway, because that failure is only a ::warning::.
-      # Every /apps/openregister/... call then returns Nextcloud's HTML 404 page.
-      #
-      # Order matters as much as membership: newman, playwright and
-      # journeydoc-capture all check out `fromJSON(nextcloud-test-refs)[0]` as
-      # their single server, so with the inherited default those three jobs ran
-      # entirely on the version openregister cannot load.
-      #
-      # THE LIST IS THE WHOLE DECLARED RANGE. This comment previously said
-      # "launchpad's own appinfo/info.xml floor stays at 29 … the NC32 constraint
-      # here is a property of the CI fixture, not of launchpad's code" — that is
-      # no longer true of the file it describes. info.xml on this branch declares
-      # <nextcloud min-version="32" max-version="34"/>, so 32 is the app's own
-      # floor, not a fixture artefact, and 32, 33 and 34 each get a leg.
-      nextcloud-test-refs: '["stable34", "stable32", "stable33"]'
+      # nextcloud-test-refs is deliberately not set: the shared quality.yml
+      # derives the Nextcloud matrix from appinfo/info.xml (min-version 32 to
+      # max-version 35), so the tested range follows the declared range.
       enable-psalm: true
       enable-phpstan: true
       enable-phpmetrics: true

.procedure-code-baseline.json

@@ -0,0 +1 @@
+{"count": 0}

appinfo/info.xml

@@ -52,7 +52,7 @@ Ideaal voor organisaties die consistente, samengestelde dashboards willen voor h
 
 Vrij en open source onder de EUPL-1.2-licentie.
     ]]></description>
-	<version>1.1.6-beta.20261002211709</version>
+	<version>1.1.7-unstable.20261005190000</version>
 	<licence>EUPL-1.2</licence>
 	<author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
 	<namespace>LaunchPad</namespace>
@@ -80,7 +80,7 @@ Vrij en open source onder de EUPL-1.2-licentie.
 	     dependency here. -->
 	<dependencies>
 		<php min-version="8.3"/>
-		<nextcloud min-version="32" max-version="34"/>
+		<nextcloud min-version="32" max-version="35"/>
 	</dependencies>
 
 	<!-- Surface dashboards, widget content, and metadata in NC unified search
@@ -95,6 +95,8 @@ Vrij en open source onder de EUPL-1.2-licentie.
 		<job>OCA\LaunchPad\BackgroundJob\OrphanedDataCleanupJob</job>
 		<!-- service-health-ping REQ-HPING-003: refresh due ping-enabled tiles. -->
 		<job>OCA\LaunchPad\BackgroundJob\HealthPingRefreshJob</job>
+		<!-- widgets-people-expertise-and-fields REQ-PEX-001/004: daily LDAP and profile mirror sync. -->
+		<job>OCA\LaunchPad\BackgroundJob\ProfileFieldsSyncJob</job>
 	</background-jobs>
 
 	<repair-steps>
@@ -162,6 +164,7 @@ Vrij en open source onder de EUPL-1.2-licentie.
 		<!-- REQ-DEMO-009: bundled demo showcase install / list. -->
 		<command>OCA\LaunchPad\Command\DemoShowcasesInstallCommand</command>
 		<command>OCA\LaunchPad\Command\DemoShowcasesListCommand</command>
+		<command>OCA\LaunchPad\Command\TemplateInstallCommand</command>
 		<!-- REQ-WIZ-010: setup wizard via `php occ launchpad:setup`. -->
 		<command>OCA\LaunchPad\Command\SetupCommand</command>
 	</commands>
@@ -172,6 +175,15 @@ Vrij en open source onder de EUPL-1.2-licentie.
 	</settings>
 
 	<activity>
+		<!-- REQ-DIGE-001: one setting per digest-worthy event, in the
+		     "LaunchPad" group. Without a setting the activity app never
+		     queues a LaunchPad event for the email digest. -->
+		<settings>
+			<setting>OCA\LaunchPad\Activity\Settings\DashboardSharedSetting</setting>
+			<setting>OCA\LaunchPad\Activity\Settings\DashboardPublishedSetting</setting>
+			<setting>OCA\LaunchPad\Activity\Settings\DashboardUpdatedSetting</setting>
+			<setting>OCA\LaunchPad\Activity\Settings\DashboardAcknowledgedSetting</setting>
+		</settings>
 		<!-- REQ-ACT-001: register the LaunchPad Activity provider that
 		     surfaces the 13-event catalogue defined in
 		     OCA\LaunchPad\Activity\Extension. The <provider> entry must be

appinfo/routes.php

@@ -402,6 +402,17 @@
 		['name' => 'template#gallery', 'url' => '/api/templates/gallery', 'verb' => 'GET'],
 
 		// Admin endpoints
+		// Templates LaunchPad ships with (REQ-TMPL-018). Registered BEFORE
+		// the `/api/admin/templates/{id}` wildcard routes so the literal
+		// `shipped` segment wins.
+		['name' => 'adminShippedTemplate#index', 'url' => '/api/admin/templates/shipped', 'verb' => 'GET'],
+		['name' => 'adminShippedTemplate#install',
+		 'url' => '/api/admin/templates/shipped/{id}/install', 'verb' => 'POST',
+		 'requirements' => ['id' => '[a-z0-9\\-]+']],
+		// Update an installed shipped template in place (REQ-TMPL-020).
+		['name' => 'adminShippedTemplate#update',
+		 'url' => '/api/admin/templates/shipped/{id}/update', 'verb' => 'POST',
+		 'requirements' => ['id' => '[a-z0-9\\-]+']],
 		['name' => 'admin#listTemplates', 'url' => '/api/admin/templates', 'verb' => 'GET'],
 		['name' => 'admin#createTemplate', 'url' => '/api/admin/templates', 'verb' => 'POST'],
 		// Preview-image upload — REQ-TMPL-017. Registered BEFORE the
@@ -455,14 +466,20 @@
 		// returns `{users, total, hasMore}` with offset-based pagination.
 		['name' => 'peopleWidget#getUsers', 'url' => '/api/people', 'verb' => 'GET'],
 
+		// Custom profile fields (REQ-PEX-001, REQ-PEX-002): own values for
+		// every signed-in person, definitions for administrators.
+		['name' => 'profileFields#getOwn', 'url' => '/api/profile-fields/me', 'verb' => 'GET'],
+		['name' => 'profileFields#saveOwn', 'url' => '/api/profile-fields/me', 'verb' => 'PUT'],
+		['name' => 'profileFields#getDefinitions', 'url' => '/api/profile-fields/definitions', 'verb' => 'GET'],
+		['name' => 'profileFields#saveDefinitions', 'url' => '/api/profile-fields/definitions', 'verb' => 'PUT'],
+
 		// Setup wizard endpoints (REQ-WIZ-008, REQ-WIZ-009, REQ-WIZ-003).
 		// Admin-only via runtime `IGroupManager::isAdmin` check inside the
 		// controller. The state endpoint also drives the "Run setup wizard"
 		// banner gate on the admin page; the storage endpoint persists the
 		// Step 2 choice immediately on `Next`.
 		['name' => 'admin#getWizardState', 'url' => '/api/admin/setup-wizard/state', 'verb' => 'GET'],
 		['name' => 'admin#completeWizard', 'url' => '/api/admin/setup-wizard/complete', 'verb' => 'POST'],
-		['name' => 'admin#setWizardStorage', 'url' => '/api/admin/setup-wizard/storage', 'verb' => 'POST'],
 
 		// Confluence HTML export importer (REQ-CFLI-001..012). Admin-only
 		// via runtime `IGroupManager::isAdmin` check inside the
@@ -580,6 +597,10 @@
 		 'url' => '/api/admin/demo-showcases/{id}', 'verb' => 'DELETE',
 		 'requirements' => ['id' => '[a-z0-9\-]+']],
 
+		// Attention feed: what the user's apps declare as needing attention
+		// (REQ-ATT-002). Declarations only; the widget runs the counts.
+		['name' => 'attention#sources', 'url' => '/api/attention/sources', 'verb' => 'GET'],
+
 		// Weather widget — cached reading for one placement (REQ-WEATHER-001).
 		// View-time ACL guarded in the controller; never returns the provider
 		// API key or raw provider URL.

composer.json

@@ -16,7 +16,7 @@
         "conduction/hydra-gates": "^1.10.0",
         "cyclonedx/cyclonedx-php-composer": "^6.2",
         "edgedesign/phpqa": "^1.27",
-        "nextcloud/ocp": "^34.0",
+        "nextcloud/ocp": "^35.0",
         "phpcsstandards/phpcsextra": "^1.4",
         "phpmd/phpmd": "^2.15",
         "phpmetrics/phpmetrics": "^2.8",