fix: Proper NcAppSidebar on detail pages

.github/workflows/branch-protection.yml

@@ -0,0 +1,10 @@
+name: Branch Protection
+
+on:
+  pull_request:
+    branches: [main, beta]
+
+jobs:
+  protect:
+    uses: ConductionNL/.github/.github/workflows/branch-protection.yml@main
+    secrets: inherit

.github/workflows/code-quality.yml

@@ -1,70 +1,36 @@
 name: Code Quality
 
 on:
+  push:
+    branches: [main, development, feature/**, bugfix/**, hotfix/**]
   pull_request:
     branches: [main, master, development]
-
-concurrency:
-  group: quality-${{ github.head_ref || github.ref }}
-  cancel-in-progress: true
+  workflow_dispatch:
 
 jobs:
-  php-checks:
-    name: ${{ matrix.check.name }}
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        check:
-          - { name: "PHP Lint", command: "composer lint" }
-          - { name: "PHPCS", command: "./vendor/bin/phpcs --standard=phpcs.xml" }
-          - { name: "PHPMD", command: "./vendor/bin/phpmd lib text phpmd.xml" }
-          - { name: "Psalm", command: "./vendor/bin/psalm --threads=1 --no-cache --output-format=github" }
-          - { name: "PHPStan", command: "./vendor/bin/phpstan analyse --memory-limit=1G" }
-          - { name: "PHPUnit", command: "./vendor/bin/phpunit --colors=always" }
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup PHP
-        uses: shivammathur/setup-php@v2
-        with:
-          php-version: '8.1'
-          extensions: mbstring, xml, ctype, iconv, intl, dom, filter, gd, json, posix, zip, soap
-          tools: composer:v2
-
-      - name: Cache Composer dependencies
-        uses: actions/cache@v4
-        with:
-          path: vendor
-          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
-          restore-keys: ${{ runner.os }}-composer-
-
-      - name: Install dependencies
-        run: composer install --no-progress --prefer-dist --optimize-autoloader
-
-      - name: ${{ matrix.check.name }}
-        run: ${{ matrix.check.command }}
-  frontend-quality:
-    name: Frontend Quality
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: ESLint
-        run: npm run lint
-
-      - name: Stylelint
-        run: npm run stylelint
+  quality:
+    uses: ConductionNL/.github/.github/workflows/quality.yml@main
+    with:
+      app-name: procest
+      php-version: "8.3"
+      php-test-versions: '["8.3", "8.4"]'
+      nextcloud-test-refs: '["stable31", "stable32"]'
+      enable-psalm: true
+      enable-phpstan: true
+      enable-phpmetrics: false
+      enable-frontend: true
+      enable-eslint: true
+      enable-phpunit: true
+      # Newman disabled: ZGW compliance tests have 95%+ failure rate because
+      # the ZGW API implementation is still in progress. Re-enable once the
+      # API passes at least the core CRUD assertions.
+      enable-newman: false
+      newman-collection-path: "data"
+      newman-environment-path: "tests/zgw/zgw-environment.json"
+      newman-seed-command: "bash apps/procest/tests/zgw/seed-consumers.sh"
+      additional-apps: '[{"repo":"ConductionNL/openregister","app":"openregister","ref":"feature/php-linting"}]'
+      enable-sbom: true
+      enable-playwright: true
+      enable-playwright-coverage: true
+      playwright-coverage-threshold: 75
+      playwright-seed-command: 'php occ maintenance:repair'

.github/workflows/documentation.yml

@@ -2,66 +2,12 @@ name: Documentation
 
 on:
   push:
-    branches:
-      - development
+    branches: [documentation]
   pull_request:
-    branches:
-      - development
+    branches: [documentation]
 
 jobs:
   deploy:
-    name: Deploy Documentation
-    runs-on: ubuntu-latest
-    # Only deploy on push, not on pull requests
-    if: github.event_name == 'push'
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup Node.js 18
-        uses: actions/setup-node@v3
-        with:
-          node-version: '18'
-
-      - name: Clear build cache and install dependencies
-        timeout-minutes: 3
-        run: |
-          cd docusaurus
-          rm -rf node_modules/.cache
-          rm -rf .docusaurus
-          rm -rf build
-          npm run ci
-
-      - name: Verify build output
-        run: |
-          cd docusaurus/build
-          if [ ! -f index.html ]; then
-            echo "ERROR: index.html not found in build directory!"
-            exit 1
-          fi
-
-      - name: Create .nojekyll and CNAME files
-        run: |
-          cd docusaurus/build
-          touch .nojekyll
-          echo "procest.app" > CNAME
-
-      - name: Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v3
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./docusaurus/build
-          publish_branch: gh-pages
-          user_name: 'github-actions[bot]'
-          user_email: 'github-actions[bot]@users.noreply.github.com'
-          force_orphan: false
-          allow_empty_commit: true
-          keep_files: false
-
-      - name: Verify deployment
-        run: |
-          git fetch origin gh-pages
-          echo "Deployment completed. Latest commit: $(git rev-parse origin/gh-pages)"
+    uses: ConductionNL/.github/.github/workflows/documentation.yml@main
+    with:
+      cname: procest.app

.github/workflows/issue-triage.yml

@@ -0,0 +1,20 @@
+name: Issue Triage
+
+on:
+  issues:
+    types: [opened, labeled]
+  workflow_dispatch:
+    inputs:
+      backlog-existing:
+        description: "Triage all existing untriaged open issues"
+        type: boolean
+        default: true
+
+jobs:
+  triage:
+    uses: ConductionNL/.github/.github/workflows/issue-triage.yml@feature/openspec-project-sync
+    with:
+      app-name: procest
+      backlog-existing: ${{ github.event_name == 'workflow_dispatch' && inputs.backlog-existing || false }}
+    secrets:
+      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}

.github/workflows/openspec-sync.yml

@@ -0,0 +1,15 @@
+name: OpenSpec Sync
+
+on:
+  push:
+    branches: [development]
+    paths: ['openspec/**']
+  workflow_dispatch:
+
+jobs:
+  sync:
+    uses: ConductionNL/.github/.github/workflows/openspec-sync.yml@feature/openspec-project-sync
+    with:
+      app-name: procest
+    secrets:
+      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}

.github/workflows/release-beta.yml

@@ -0,0 +1,12 @@
+name: Beta Release
+
+on:
+  push:
+    branches: [beta]
+
+jobs:
+  release:
+    uses: ConductionNL/.github/.github/workflows/release-beta.yml@main
+    with:
+      app-name: procest
+    secrets: inherit

.github/workflows/release-stable.yml

@@ -0,0 +1,12 @@
+name: Stable Release
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    uses: ConductionNL/.github/.github/workflows/release-stable.yml@main
+    with:
+      app-name: procest
+    secrets: inherit

.github/workflows/sync-to-beta.yml

@@ -0,0 +1,10 @@
+name: Sync to Beta
+
+on:
+  push:
+    branches: [development]
+
+jobs:
+  sync:
+    uses: ConductionNL/.github/.github/workflows/sync-to-beta.yml@main
+    secrets: inherit

.gitignore

@@ -4,3 +4,9 @@
 /docusaurus/node_modules/
 /docusaurus/build/
 /docusaurus/.docusaurus/
+docs/.docusaurus/
+docs/node_modules/
+
+.phpunit.cache/
+coverage/
+phpmetrics/

.phpunit.cache/test-results

@@ -0,0 +1 @@
+{"version":2,"defects":{"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testUpdateSettingsOnlyUpdatesRecognizedKeys":8},"times":{"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testIsOpenRegisterAvailableReturnsTrue":0.001,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testIsOpenRegisterAvailableReturnsFalse":0,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testGetSettingsReturnsAllConfigKeys":0.001,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testUpdateSettingsOnlyUpdatesRecognizedKeys":0.005,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testGetConfigValueDelegatesToAppConfig":0.001,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testSetConfigValueDelegatesToAppConfig":0.001,"OCA\\Procest\\Tests\\Unit\\Service\\SettingsServiceTest::testLoadConfigurationFailsWithoutOpenRegister":0.001}}

README.md

@@ -209,10 +209,25 @@ Full documentation is available at **[procest.app](https://procest.app)**
 - **[OpenRegister](https://github.com/ConductionNL/openregister)** — Object storage layer (required dependency)
 - **[OpenCatalogi](https://github.com/ConductionNL/opencatalogi)** — Application catalogue
 
+## Support
+
+For support, contact us at [support@conduction.nl](mailto:support@conduction.nl).
+
+For a Service Level Agreement (SLA), contact [sales@conduction.nl](mailto:sales@conduction.nl).
+
 ## License
 
-AGPL-3.0-or-later
+This project is licensed under the [EUPL-1.2](LICENSE).
+
+### Dependency license policy
+
+All dependencies (PHP and JavaScript) are automatically checked against an approved license allowlist during CI. The following SPDX license families are approved for use in dependencies:
+
+- **Permissive:** MIT, ISC, BSD-2-Clause, BSD-3-Clause, 0BSD, Apache-2.0, Unlicense, CC0-1.0, CC-BY-3.0, CC-BY-4.0, Zlib, BlueOak-1.0.0, Artistic-2.0, BSL-1.0
+- **Copyleft (EUPL-compatible):** LGPL-2.0/2.1/3.0, GPL-2.0/3.0, AGPL-3.0, EUPL-1.1/1.2, MPL-2.0
+- **Font licenses:** OFL-1.0, OFL-1.1
 
+Dependencies with licenses not on this list will fail CI unless explicitly approved in `.license-overrides.json` with a documented justification.
 ## Authors
 
 Built by [Conduction](https://conduction.nl) — open-source software for Dutch government and public sector organizations.