forge/routers/init.go

// Copyright 2026 Hanzo AI, Inc. All rights reserved.
// Copyright 2016 The Gitea Authors. All rights reserved.
// SPDX-License-Identifier: MIT

package routers

import (
	"context"
	"net/http"
	"reflect"
	"runtime"

	"github.com/hanzoai/git/models"
	authmodel "github.com/hanzoai/git/models/auth"
	"github.com/hanzoai/git/modules/cache"
	"github.com/hanzoai/git/modules/eventsource"
	"github.com/hanzoai/git/modules/git"
	"github.com/hanzoai/git/modules/git/gitcmd"
	"github.com/hanzoai/git/modules/log"
	"github.com/hanzoai/git/modules/markup"
	"github.com/hanzoai/git/modules/markup/external"
	private_module "github.com/hanzoai/git/modules/private"
	"github.com/hanzoai/git/modules/setting"
	"github.com/hanzoai/git/modules/ssh"
	"github.com/hanzoai/git/modules/storage"
	"github.com/hanzoai/git/modules/svg"
	"github.com/hanzoai/git/modules/system"
	"github.com/hanzoai/git/modules/translation"
	"github.com/hanzoai/git/modules/util"
	"github.com/hanzoai/git/modules/web"
	"github.com/hanzoai/git/modules/web/routing"
	actions_router "github.com/hanzoai/git/routers/api/actions"
	packages_router "github.com/hanzoai/git/routers/api/packages"
	apiv1 "github.com/hanzoai/git/routers/api/v1"
	"github.com/hanzoai/git/routers/common"
	"github.com/hanzoai/git/routers/private"
	web_routers "github.com/hanzoai/git/routers/web"
	"github.com/hanzoai/git/routers/web/healthcheck"
	"github.com/hanzoai/git/routers/web/misc"
	actions_service "github.com/hanzoai/git/services/actions"
	asymkey_service "github.com/hanzoai/git/services/asymkey"
	"github.com/hanzoai/git/services/auth"
	"github.com/hanzoai/git/services/auth/source/oauth2"
	"github.com/hanzoai/git/services/automerge"
	"github.com/hanzoai/git/services/cron"
	feed_service "github.com/hanzoai/git/services/feed"
	indexer_service "github.com/hanzoai/git/services/indexer"
	"github.com/hanzoai/git/services/mailer"
	mailer_incoming "github.com/hanzoai/git/services/mailer/incoming"
	markup_service "github.com/hanzoai/git/services/markup"
	repo_migrations "github.com/hanzoai/git/services/migrations"
	mirror_service "github.com/hanzoai/git/services/mirror"
	"github.com/hanzoai/git/services/oauth2_provider"
	packages_spec "github.com/hanzoai/git/services/packages/pkgspec"
	pull_service "github.com/hanzoai/git/services/pull"
	release_service "github.com/hanzoai/git/services/release"
	repo_service "github.com/hanzoai/git/services/repository"
	"github.com/hanzoai/git/services/repository/archiver"
	"github.com/hanzoai/git/services/task"
	"github.com/hanzoai/git/services/uinotification"
	"github.com/hanzoai/git/services/webhook"
)

func mustInit(fn func() error) {
	err := fn()
	if err != nil {
		ptr := reflect.ValueOf(fn).Pointer()
		fi := runtime.FuncForPC(ptr)
		log.Fatal("%s failed: %v", fi.Name(), err)
	}
}

func mustInitCtx(ctx context.Context, fn func(ctx context.Context) error) {
	err := fn(ctx)
	if err != nil {
		ptr := reflect.ValueOf(fn).Pointer()
		fi := runtime.FuncForPC(ptr)
		log.Fatal("%s(ctx) failed: %v", fi.Name(), err)
	}
}

func syncAppConfForGit(ctx context.Context) error {
	runtimeState := new(system.RuntimeState)
	if err := system.AppState.Get(ctx, runtimeState); err != nil {
		return err
	}

	updated := false
	if runtimeState.LastAppPath != setting.AppPath {
		log.Info("AppPath changed from '%s' to '%s'", runtimeState.LastAppPath, setting.AppPath)
		runtimeState.LastAppPath = setting.AppPath
		updated = true
	}
	if runtimeState.LastCustomConf != setting.CustomConf {
		log.Info("CustomConf changed from '%s' to '%s'", runtimeState.LastCustomConf, setting.CustomConf)
		runtimeState.LastCustomConf = setting.CustomConf
		updated = true
	}

	if updated {
		log.Info("re-sync repository hooks ...")
		mustInitCtx(ctx, repo_service.SyncRepositoryHooks)

		log.Info("re-write ssh public keys ...")
		mustInitCtx(ctx, asymkey_service.RewriteAllPublicKeys)

		return system.AppState.Set(ctx, runtimeState)
	}
	return nil
}

func InitWebInstallPage(ctx context.Context) {
	translation.InitLocales(ctx)
	setting.LoadSettingsForInstall()
	mustInit(svg.Init)
}

// InitWebInstalled is for the global configuration of an installed instance
func InitWebInstalled(ctx context.Context) {
	mustInit(git.InitFull)
	log.Info("Git version: %s (home: %s)", git.DefaultFeatures().VersionInfo(), gitcmd.HomeDir())
	if !git.DefaultFeatures().SupportHashSha256 {
		log.Warn("sha256 hash support is disabled - requires Git >= 2.42." + util.Iif(git.DefaultFeatures().UsingGogit, " Gogit is currently unsupported.", ""))
	}

	// Setup i18n
	translation.InitLocales(ctx)

	setting.LoadSettings()
	mustInit(storage.Init)

	mailer.NewContext(ctx)
	mustInit(cache.Init)
	mustInit(feed_service.Init)
	mustInit(uinotification.Init)
	mustInitCtx(ctx, archiver.Init)

	external.RegisterRenderers()
	markup.Init(markup_service.FormalRenderHelperFuncs())

	mustInitCtx(ctx, common.InitDBEngine)
	log.Info("ORM engine initialization successful!")
	mustInit(system.Init)
	mustInitCtx(ctx, oauth2.Init)
	mustInitCtx(ctx, oauth2_provider.Init)
	mustInit(release_service.Init)

	mustInitCtx(ctx, models.Init)
	mustInitCtx(ctx, authmodel.Init)
	mustInitCtx(ctx, repo_service.Init)
	mustInit(packages_spec.InitManager)

	// Booting long running goroutines.
	mustInit(indexer_service.Init)

	mirror_service.InitSyncMirrors()
	mustInit(webhook.Init)
	mustInit(pull_service.Init)
	mustInit(automerge.Init)
	mustInit(task.Init)
	mustInit(repo_migrations.Init)
	eventsource.GetManager().Init()
	mustInitCtx(ctx, mailer_incoming.Init)

	mustInitCtx(ctx, syncAppConfForGit)

	mustInit(ssh.Init)

	auth.Init()
	mustInit(svg.Init)

	mustInitCtx(ctx, actions_service.Init)

	mustInit(repo_service.InitLicenseClassifier)

	// Finally start up the cron
	cron.Init(ctx)
}

// NormalRoutes represents non install routes
func NormalRoutes() *web.Router {
	r := web.NewRouter()
	r.BeforeRouting(common.ProtocolMiddlewares()...)

	r.AfterRouting(common.MaintenanceModeHandler())

	// The whole top-level URL namespace is allocated here and nowhere else:
	// "/" is the browser, "/v1" is every machine surface, "/v2" is the OCI spec.
	// chi routes the most specific mount first, so a "/v1/…" route registered on
	// the web router below would be swallowed by the "/v1" mount — /v1/sync and
	// /v1/healthz therefore live here, not in routers/web.
	r.Mount("/", web_routers.Routes())
	r.Mount("/v1", apiv1.Routes())
	r.Mount(private_module.RoutePrefix, private.Routes())

	// Machine endpoints that authenticate themselves and must skip the session
	// and API-token middleware: sync's credential is the payload HMAC, and a
	// health probe must not touch auth or the database.
	r.Post("/v1/sync", misc.Sync)
	r.Get("/v1/healthz", healthcheck.Check)

	r.Post("/-/fetch-redirect", common.FetchRedirectDelegate)

	if setting.Packages.Enabled {
		// This implements package support for most package managers
		r.Mount("/v1/packages", packages_router.CommonRoutes())
		// This implements the OCI API, this container registry "/v2" endpoint must be in the root of the site.
		// If site admin deploys Gitea in a sub-path, they must configure their reverse proxy to map the "https://host/v2" endpoint to Gitea.
		r.Mount("/v2", packages_router.ContainerRoutes())
	}

	if setting.Actions.Enabled {
		// "/api/actions*" is the act_runner wire protocol, not our API: the runner
		// hardcodes this prefix client-side (and builds ACTIONS_RUNTIME_URL from
		// "/api/actions_pipeline" itself), so it is as fixed as "/v2" above until
		// the runner is changed in lockstep.
		prefix := "/api/actions"
		r.Mount(prefix, actions_router.Routes(prefix))

		// TODO: Pipeline api used for runner internal communication with gitea server. but only artifact is used for now.
		// In Github, it uses ACTIONS_RUNTIME_URL=https://pipelines.actions.githubusercontent.com/fLgcSHkPGySXeIFrg8W8OBSfeg3b5Fls1A1CwX566g8PayEGlg/
		// TODO: this prefix should be generated with a token string with runner ?
		prefix = "/api/actions_pipeline"
		r.Mount(prefix, actions_router.ArtifactsRoutes(prefix))
		prefix = actions_router.ArtifactV4RouteBase
		r.Mount(prefix, actions_router.ArtifactsV4Routes(prefix))
	}

	r.NotFound(func(w http.ResponseWriter, req *http.Request) {
		defer routing.RecordFuncInfo(req.Context(), routing.GetFuncInfo(http.NotFound, "GlobalNotFound"))()
		http.NotFound(w, req)
	})
	return r
}