feat: Implement enterprise features - white-label branding, license management, and organization hierarchy

.env.example

@@ -0,0 +1,12 @@
+# API Keys (Required to enable respective provider)
+ANTHROPIC_API_KEY="your_anthropic_api_key_here"       # Required: Format: sk-ant-api03-...
+PERPLEXITY_API_KEY="your_perplexity_api_key_here"     # Optional: Format: pplx-...
+OPENAI_API_KEY="your_openai_api_key_here"             # Optional, for OpenAI models. Format: sk-proj-...
+GOOGLE_API_KEY="your_google_api_key_here"             # Optional, for Google Gemini models.
+MISTRAL_API_KEY="your_mistral_key_here"               # Optional, for Mistral AI models.
+XAI_API_KEY="YOUR_XAI_KEY_HERE"                       # Optional, for xAI AI models.
+GROQ_API_KEY="YOUR_GROQ_KEY_HERE"                     # Optional, for Groq models.
+OPENROUTER_API_KEY="YOUR_OPENROUTER_KEY_HERE"         # Optional, for OpenRouter models.
+AZURE_OPENAI_API_KEY="your_azure_key_here"            # Optional, for Azure OpenAI models (requires endpoint in .taskmaster/config.json).
+OLLAMA_API_KEY="your_ollama_api_key_here"             # Optional: For remote Ollama servers that require authentication.
+GITHUB_API_KEY="your_github_api_key_here"             # Optional: For GitHub import/export features. Format: ghp_... or github_pat_...

.env.testing

@@ -0,0 +1,60 @@
+APP_NAME=Coolify
+APP_ENV=testing
+APP_KEY=base64:8dQ7xw/kM9EYMV4cUkzKwVqwvjjwjjwjjwjjwjjwjjw=
+APP_DEBUG=true
+APP_URL=http://localhost
+
+LOG_CHANNEL=stack
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+DB_CONNECTION=testing
+DB_HOST=localhost
+DB_PORT=5432
+DB_DATABASE=coolify
+DB_USERNAME=coolify
+DB_PASSWORD=
+
+BROADCAST_DRIVER=log
+CACHE_DRIVER=array
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=sync
+SESSION_DRIVER=array
+SESSION_LIFETIME=120
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=array
+MAIL_HOST=mailpit
+MAIL_PORT=1025
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+PUSHER_APP_ID=
+PUSHER_APP_KEY=
+PUSHER_APP_SECRET=
+PUSHER_HOST=
+PUSHER_PORT=443
+PUSHER_SCHEME=https
+PUSHER_APP_CLUSTER=mt1
+
+VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
+VITE_PUSHER_HOST="${PUSHER_HOST}"
+VITE_PUSHER_PORT="${PUSHER_PORT}"
+VITE_PUSHER_SCHEME="${PUSHER_SCHEME}"
+VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
+
+TELESCOPE_ENABLED=false

.gitignore

@@ -38,3 +38,27 @@ docker/coolify-realtime/node_modules
 .DS_Store
 CHANGELOG.md
 /.workspaces
+
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+dev-debug.log
+# Dependency directories
+node_modules/
+# Environment variables
+# Editor directories and files
+.idea
+.vscode
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+# OS specific
+
+# Task files
+# tasks.json
+# tasks/

.mcp.json

@@ -1,11 +1,11 @@
 {
-    "mcpServers": {
-        "laravel-boost": {
-            "command": "php",
-            "args": [
-                "artisan",
-                "boost:mcp"
-            ]
-        }
-    }
-}
+	"mcpServers": {
+		"laravel-boost": {
+			"command": "php",
+			"args": [
+				"artisan",
+				"boost:mcp"
+			]
+		}
+	}
+}

app/Console/Commands/ClearGlobalSearchCache.php

@@ -39,7 +39,14 @@ public function handle(): int
             return Command::FAILURE;
         }
 
-        $teamId = auth()->user()->currentTeam()->id;
+        $user = auth()->user();
+        $teamId = $user?->currentTeam()?->id;
+
+        if (! $teamId) {
+            $this->error('Current user has no team assigned. Use --team=ID or --all option.');
+
+            return Command::FAILURE;
+        }
 
         return $this->clearTeamCache($teamId);
     }

app/Console/Commands/DemoOrganizationService.php

@@ -0,0 +1,162 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Contracts\OrganizationServiceInterface;
+use App\Models\EnterpriseLicense;
+use App\Models\Organization;
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+
+class DemoOrganizationService extends Command
+{
+    protected $signature = 'demo:organization-service';
+
+    protected $description = 'Demonstrate the OrganizationService functionality';
+
+    public function handle()
+    {
+        $this->info('🚀 Demonstrating OrganizationService functionality...');
+
+        $organizationService = app(OrganizationServiceInterface::class);
+
+        DB::transaction(function () use ($organizationService) {
+            // 1. Create a top branch organization
+            $this->info('📁 Creating Top Branch organization...');
+            $topBranch = $organizationService->createOrganization([
+                'name' => 'Acme Corporation',
+                'hierarchy_type' => 'top_branch',
+            ]);
+            $this->line("✅ Created: {$topBranch->name} (ID: {$topBranch->id})");
+
+            // 2. Create a master branch under the top branch
+            $this->info('📂 Creating Master Branch organization...');
+            $masterBranch = $organizationService->createOrganization([
+                'name' => 'Acme Hosting Division',
+                'hierarchy_type' => 'master_branch',
+            ], $topBranch);
+            $this->line("✅ Created: {$masterBranch->name} (Parent: {$masterBranch->parent->name})");
+
+            // 3. Create a sub user under the master branch
+            $this->info('📄 Creating Sub User organization...');
+            $subUser = $organizationService->createOrganization([
+                'name' => 'Client Services Team',
+                'hierarchy_type' => 'sub_user',
+            ], $masterBranch);
+            $this->line("✅ Created: {$subUser->name} (Level: {$subUser->hierarchy_level})");
+
+            // 4. Create an end user under the sub user
+            $this->info('👤 Creating End User organization...');
+            $endUser = $organizationService->createOrganization([
+                'name' => 'Customer ABC Inc',
+                'hierarchy_type' => 'end_user',
+            ], $subUser);
+            $this->line("✅ Created: {$endUser->name} (Level: {$endUser->hierarchy_level})");
+
+            // 5. Create some users and attach them to organizations
+            $this->info('👥 Creating users and assigning roles...');
+
+            $owner = User::factory()->create(['name' => 'John Owner', 'email' => 'owner@acme.com']);
+            $admin = User::factory()->create(['name' => 'Jane Admin', 'email' => 'admin@acme.com']);
+            $member = User::factory()->create(['name' => 'Bob Member', 'email' => 'member@acme.com']);
+
+            $organizationService->attachUserToOrganization($topBranch, $owner, 'owner');
+            $organizationService->attachUserToOrganization($topBranch, $admin, 'admin');
+            $organizationService->attachUserToOrganization($masterBranch, $member, 'member');
+
+            $this->line('✅ Attached users to organizations');
+
+            // 6. Create a license for the top branch
+            $this->info('📜 Creating enterprise license...');
+            $license = EnterpriseLicense::factory()->create([
+                'organization_id' => $topBranch->id,
+                'features' => [
+                    'infrastructure_provisioning',
+                    'domain_management',
+                    'white_label_branding',
+                    'payment_processing',
+                ],
+                'limits' => [
+                    'max_users' => 50,
+                    'max_servers' => 100,
+                    'max_domains' => 25,
+                ],
+            ]);
+            $this->line("✅ Created license: {$license->license_key}");
+
+            // 7. Test permission checking
+            $this->info('🔐 Testing permission system...');
+
+            $canOwnerDelete = $organizationService->canUserPerformAction($owner, $topBranch, 'delete_organization');
+            $canAdminDelete = $organizationService->canUserPerformAction($admin, $topBranch, 'delete_organization');
+            $canMemberView = $organizationService->canUserPerformAction($member, $masterBranch, 'view_servers');
+
+            $this->line('✅ Owner can delete org: '.($canOwnerDelete ? 'Yes' : 'No'));
+            $this->line('✅ Admin can delete org: '.($canAdminDelete ? 'Yes' : 'No'));
+            $this->line('✅ Member can view servers: '.($canMemberView ? 'Yes' : 'No'));
+
+            // 8. Test organization switching
+            $this->info('🔄 Testing organization switching...');
+            $organizationService->switchUserOrganization($owner, $topBranch);
+            $owner->refresh();
+            $this->line("✅ Owner switched to: {$owner->currentOrganization->name}");
+
+            // 9. Get organization hierarchy
+            $this->info('🌳 Building organization hierarchy...');
+            $hierarchy = $organizationService->getOrganizationHierarchy($topBranch);
+            $this->displayHierarchy($hierarchy);
+
+            // 10. Get usage statistics
+            $this->info('📊 Getting usage statistics...');
+            $usage = $organizationService->getOrganizationUsage($topBranch);
+            $this->line('✅ Top Branch Usage:');
+            $this->line("   - Users: {$usage['users']}");
+            $this->line("   - Servers: {$usage['servers']}");
+            $this->line("   - Applications: {$usage['applications']}");
+            $this->line("   - Children: {$usage['children']}");
+
+            // 11. Test moving organization
+            $this->info('📦 Testing organization move...');
+            $newTopBranch = $organizationService->createOrganization([
+                'name' => 'New Parent Corp',
+                'hierarchy_type' => 'top_branch',
+            ]);
+
+            $movedOrg = $organizationService->moveOrganization($masterBranch, $newTopBranch);
+            $this->line("✅ Moved '{$movedOrg->name}' to '{$movedOrg->parent->name}'");
+
+            // 12. Test user role updates
+            $this->info('🔧 Testing role updates...');
+            $organizationService->updateUserRole($topBranch, $admin, 'member', ['view_servers', 'deploy_applications']);
+            $this->line('✅ Updated admin role to member with custom permissions');
+
+            // 13. Get accessible organizations for a user
+            $this->info('Getting user accessible organizations...');
+            $userOrgs = $organizationService->getUserOrganizations($owner);
+            $this->line("✅ Owner has access to {$userOrgs->count()} organizations:");
+            foreach ($userOrgs as $org) {
+                $this->line("   - {$org->name} ({$org->hierarchy_type})");
+            }
+
+            $this->info('🎉 OrganizationService demonstration completed successfully!');
+
+            // Clean up (rollback transaction)
+            throw new \Exception('Rolling back demo data...');
+        });
+
+        $this->info('🧹 Demo data cleaned up (transaction rolled back)');
+
+        return 0;
+    }
+
+    private function displayHierarchy(array $hierarchy, int $indent = 0)
+    {
+        $prefix = str_repeat('  ', $indent);
+        $this->line("{$prefix}📁 {$hierarchy['name']} ({$hierarchy['hierarchy_type']}) - {$hierarchy['user_count']} users");
+
+        foreach ($hierarchy['children'] as $child) {
+            $this->displayHierarchy($child, $indent + 1);
+        }
+    }
+}