Merge branch 'main' into rbac/add_schema_docs

Author: VeljkoMaksimovic

.github/CODEOWNERS

@@ -1,41 +1,41 @@
 * @DamjanBecirovic @lucaspin @skipi
 /artifacthub/ @lucaspin @dexyk @DamjanBecirovic
-/auth/ @VeljkoMaksimovic @lucaspin @forestileao
-/badge/ @VeljkoMaksimovic @skipi @forestileao
-/bootstrapper/ @VeljkoMaksimovic @lucaspin @forestileao
+/auth/ @hamir-suspect @lucaspin @forestileao
+/badge/ @hamir-suspect @skipi @forestileao
+/bootstrapper/ @skipi @lucaspin @forestileao
 /branch_hub/ @skipi @lucaspin @forestileao
 /dashboardhub/ @hamir-suspect @skipi @forestileao
-/docs/ @TomFern @skipi @hamir-suspect @dexyk @VeljkoMaksimovic @DamjanBecirovic 
+/docs/ @TomFern @skipi @hamir-suspect @dexyk @DamjanBecirovic 
 /ee/audit/ @hamir-suspect @dexyk @lucaspin
 /ee/gofer/ @DamjanBecirovic @dexyk @lucaspin
-/ee/pre_flight_checks/ @DamjanBecirovic @VeljkoMaksimovic @skipi
-/ee/rbac/ @VeljkoMaksimovic @forestileao @lucaspin
+/ee/pre_flight_checks/ @DamjanBecirovic @dexyk @skipi
+/ee/rbac/ @dexyk @forestileao @lucaspin
 /ee/velocity/ @skipi @dexyk @lucaspin
-/encryptor/ @VeljkoMaksimovic @lucaspin @forestileao
-/ephemeral_environment/ @VeljkoMaksimovic @lucaspin @hamir-suspect
+/encryptor/ @DamjanBecirovic @lucaspin @forestileao
+/ephemeral_environment/ @skipi @lucaspin @hamir-suspect
 /feature_provider/ @skipi @hamir-suspect @dexyk
-/front/ @hamir-suspect @skipi @VeljkoMaksimovic @forestileao
-/github_hooks/ @VeljkoMaksimovic @skipi @darkofabijan
-/github_notifier/ @VeljkoMaksimovic @hamir-suspect @skipi
-/guard/ @VeljkoMaksimovic @forestileao @lucaspin
+/front/ @hamir-suspect @skipi @DamjanBecirovic @forestileao
+/github_hooks/ @hamir-suspect @skipi @darkofabijan
+/github_notifier/ @forestileao @hamir-suspect @skipi
+/guard/ @dexyk @forestileao @lucaspin
 /helm-chart/ @lucaspin @dexyk @DamjanBecirovic
 /hooks_processor/ @hamir-suspect @DamjanBecirovic @forestileao
 /hooks_receiver/ @hamir-suspect @DamjanBecirovic @forestileao
-/keycloak/ @skipi @hamir-suspect @VeljkoMaksimovic
+/keycloak/ @skipi @hamir-suspect
 /loghub2/ @lucaspin @hamir-suspect @DamjanBecirovic
-/notifications/ @hamir-suspect @VeljkoMaksimovic @DamjanBecirovic
+/notifications/ @hamir-suspect @dexyk @DamjanBecirovic
 /periodic_scheduler/ @DamjanBecirovic @dexyk @skipi
 /plumber/ @DamjanBecirovic @dexyk @skipi
 /projecthub-rest-api/ @hamir-suspect @lucaspin @forestileao
 /projecthub/ @skipi @hamir-suspect @forestileao
 /public-api-gateway/ @hamir-suspect @lucaspin
 /public-api/v2 @hamir-suspect @DamjanBecirovic @dexyk
 /public-api/v1alpha @hamir-suspect @DamjanBecirovic @dexyk
-/rbac/ @VeljkoMaksimovic @forestileao @lucaspin
+/rbac/ @skipi @forestileao @lucaspin
 /repohub/ @skipi @lucaspin @DamjanBecirovic
 /repository_hub/ @skipi @hamir-suspect @forestileao
 /scouter/ @skipi @hamir-suspect @forestileao
-/secrethub/ @hamir-suspect @lucaspin @VeljkoMaksimovic
-/self_hosted_hub/ @lucaspin @dexyk @VeljkoMaksimovic
+/secrethub/ @hamir-suspect @lucaspin @skipi
+/self_hosted_hub/ @lucaspin @dexyk @skipi
 /statsd/ @hamir-suspect @dexyk @DamjanBecirovic
 /zebra/ @lucaspin @hamir-suspect @DamjanBecirovic

docs/AGENTS.md

@@ -0,0 +1,33 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+The docs site runs on Docusaurus. Author new or updated guides in `docs/` and keep contributor-facing notes in `docs-contributing/`. Historical content lives in `versioned_docs/`, paired with `versioned_sidebars/` for navigation metadata. Custom React or styling tweaks reside in `src/` (`components/`, `pages/`, `theme/`), while shared assets such as images, downloads, and redirects belong under `static/`. Park work-in-progress material inside `docs-drafts/` to prevent accidental publication.
+
+## Build, Test, and Development Commands
+
+Run `npm start` (or `make npm.dev`) to spin up the live-reloading docs server on `localhost:3000`. `npm run build` (mirrored by `make npm.build`) generates the production-ready static bundle in `build/` and surfaces MDX or sidebar errors. Enforce content quality with `npm run lint` or `make npm.lint`, which executes `markdownlint-cli2` across `docs/**` and `versioned_docs/**`.
+
+```bash
+npm run lint
+```
+
+Ensure `npm run build` exits without error before committing any changes.
+
+## Coding Style & Naming Conventions
+
+Use YAML front matter with at least `title` and `description` (and `slug` or `sidebar_position` when needed) to keep navigation orderly. Write concise Markdown/MDX in sentence case headings, wrap prose near 100 characters to ease reviews, and prefer lists or tables for procedural steps. Tag code fences with a language hint and surface commands with shell blocks. Name reusable MDX components in PascalCase and place them under `src/components/`, and store shared assets in kebab-case filenames (for example `rolling-deploy.png`).
+
+Further coding and style guidelines are stated on `docs-contributing/STYLE_GUIDE.md`
+
+## Testing Guidelines
+
+Run `npm run lint` before pushing; suppress rules only when `.markdownlint.json` documents the exception. Follow with `npm run build` to catch broken imports, invalid images, or sidebar regressions. For parity with containerized checks, `make test` executes the nginx configuration validation used in CI.
+
+## Commit & Pull Request Guidelines
+
+Use the Conventional Commits style seen in history—`docs(scope): concise summary`—to keep automation predictable. Reference issues or Linear tickets in the body, describe the user-facing impact, and call out the docs sections affected. Include screenshots or GIFs when the UI or illustrations change, and add deploy preview URLs so reviewers can validate navigation, search, and syntax highlighting interactively.
+
+## Versioning
+
+The versioning schema for new releases in the `versioned_docs` and `versioned_sidebars` as detailed in the `docs-contributing/VERSIONING.md`.

docs/DOCUMENTATION.md

@@ -0,0 +1,50 @@
+# Docs Workspace Architecture
+
+## Tech Stack Snapshot
+
+- Docusaurus 3 (`@docusaurus/core` 3.9.x) with the classic preset, Algolia search, Mermaid diagrams, and `docusaurus-theme-openapi-docs`.
+- React 18 components backed by Prism for code highlighting (GitHub/Dracula themes plus Elixir, Java, Groovy extra languages).
+- Builds require Node ≥18 and rely on `markdownlint-cli2` for Markdown quality checks.
+- The Dockerfile performs a multi-stage build: Node-based asset compilation followed by an Nginx runtime image that serves `/usr/share/nginx/html`.
+
+## Directory Layout & Ownership
+
+- `docs/`: Active Cloud (current) documentation. Keep front matter (`title`, optional `slug`, `sidebar_position`) with sentence-case headings. Subfolders mirror sidebar categories (see `sidebars.js`).
+- `versioned_docs/`: Frozen snapshots per edition (`version-CE`, `version-EE`, etc.). Generated via `npm run docusaurus docs:version <label>` and tracked in `versions.json`, `versioned_sidebars/` and `docusaurus.config.js`.
+- `docs-contributing/`: Meta documentation—contribution flow, reviewing steps, style guide, UI inventory. Reference these before editing content.
+- `docs-drafts/`: Sandbox for WIP material; not routed to production. Move items into `docs/` or versioned folders once approved.
+- `src/`: React/MDX enhancements. `components/` stores reusable blocks, `theme/` overrides Docusaurus theme components, `pages/` hosts custom routes, and `css/` contains `custom.css`.
+- `static/`: Assets copied verbatim to the output (images, downloads, redirects). Use kebab-case filenames.
+- `default.conf`: Nginx config used both locally (Docker) and in deploy artifacts to mount the generated static site.
+
+## Content & Navigation Workflow
+
+1. Draft in `docs-drafts/` or an edition-specific folder with required front matter.
+2. Wire navigation via `sidebars.js` for curated sections or rely on autogenerated categories (see existing patterns).
+3. Re-run `npm run lint` to enforce Markdown style; `.markdownlint.json` relaxes line length but keeps other defaults.
+4. Execute `npm start` for live preview (`localhost:3000`) and validate links visually.
+5. Build with `npm run build` (or `make npm.build`) before hand-off; build throws on broken images/links.
+6. For release branches, snapshot content with `npm run docusaurus docs:version <Edition>` and commit the generated folder plus `versions.json`.
+
+## Tooling & Commands
+
+- `npm start` / `make npm.dev`: Dev server with hot reload and local search.
+- `npm run build` / `make npm.build`: Production bundle under `build/`.
+- `npm run lint` / `make npm.lint`: Runs `markdownlint-cli2` across `docs/**` and `versioned_docs/**`; suppressions must be justified.
+- `make test`: Invokes the repo-wide Docker image to validate `nginx -t`, mirroring CI smoke checks.
+- `npm run docusaurus ...`: Access the Docusaurus CLI (e.g., `write-heading-ids`, `swizzle` for component overrides).
+
+## Theming, Integrations & Data Sources
+
+- Configured in `docusaurus.config.js`: base URL defaults to `/`, production URL `https://docs.semaphore.io`.
+- Editions and labels defined under `presets[0].docs.versions`; the `docsVersionDropdown` in the navbar reads from here.
+- OpenAPI integration fetches `https://docs.semaphore.io/v2/api-spec/openapi.yaml` at build time and emits content in `docs/openapi-spec/`; offline builds need the spec cached manually.
+- PostHog and Google Analytics tags are wired for production only; no extra steps needed locally.
+- Algolia search (index `v2-sxmoon`) is configured but relies on back-end indexing jobs; run `npm run build` to generate crawlable markup.
+
+## Troubleshooting Notes
+
+- Sandbox environments without network access will cause the OpenAPI plugin to fail; temporarily comment the plugin block or pre-populate `docs/openapi-spec/` if necessary.
+- If Markdown build errors point to broken images, ensure assets exist under `static/` and are addressed with absolute `/img/...` paths.
+- Sidebar mismatches typically stem from identifier changes; keep doc IDs stable or update references in `sidebars.js` and cross-links.
+- Remember this docs app lives under `docs/` in the mono-repo; the top-level `Makefile` (included via `include ../Makefile`) may inject additional CI targets—review upstream when debugging pipeline issues.