Tambahkan label kolom pengguna Dasbor SiapPakai atau Lisensi Premium

.gitignore

@@ -28,4 +28,7 @@ yarn-error.log
 .env.e2e
 
 # Ignore AI files
-QWEN.md
+QWEN.md
+.kilocode
+.qwen
+/template_ai/

AGENTS.md

@@ -0,0 +1,80 @@
+# AGENTS.md
+
+This file provides guidance to agents when working with code in this repository.
+
+## Commands
+
+**Testing:**
+- Run PHPUnit tests: `php artisan test` or `./vendor/bin/phpunit`
+- Run single test: `php artisan test --filter TestName`
+- Run E2E tests: `npm run test:e2e` (auto-starts server and runs migrations)
+- Run E2E with UI: `npm run test:e2e:ui`
+- Run E2E in debug mode: `npm run test:e2e:debug`
+
+**Code Quality:**
+- Fix PHP code style: `vendor/bin/php-cs-fixer fix`
+- Check PHP code style: `vendor/bin/php-cs-fixer fix --dry-run`
+
+**Development:**
+- Start server: `php artisan serve`
+- Compile assets: `npm run dev` (development) or `npm run prod` (production)
+
+## Critical Patterns
+
+**Security - GitHub API (MANDATORY):**
+- All GitHub API calls MUST use `lastrelease()` helper which validates URLs via `is_trusted_github_api_url()`
+- Only these endpoints are allowed: `/repos/OpenSID/rilis-premium/releases/latest`, `/repos/OpenSID/rilis-pbb/releases/latest`, `/repos/OpenSID/opendk/releases/latest`, `/repos/OpenSID/rilis-opensid-api/releases/latest`
+- Never make direct HTTP requests to GitHub without this validation (SSRF protection)
+
+**Custom Helpers (Auto-loaded):**
+- `app/Helpers/helper.php` - Core helpers (version checking, domain validation, backup functions)
+- `helpers/general_helper.php` - General helpers (date formatting, image handling, number formatting)
+- Both are auto-loaded via composer.json, no manual imports needed
+
+**Database & Models:**
+- Desa model uses complex scopes: `jumlahDesa()`, `desaValid()`, `filterWilayah()`, `hostingOnline()`, `hostingOffline()`, `aktif()`
+- Region filtering via `FilterWilayahTrait` and `HasRegionAccess` trait
+- Version checking uses cached GitHub API calls with fallback defaults
+- TEMA_PRO themes: ['Silir', 'Batuah', 'Pusako', 'DeNava', 'Lestari']
+
+**E2E Testing:**
+- Configuration loaded from `.env.e2e` file (not `.env`)
+- Test credentials: `eddie.ridwan@gmail.com` / `Admin100%` (from UserSeeder)
+- Authentication state saved in `test-results/storage-state/auth.json`
+- Playwright auto-starts Laravel server via webServer config
+- Global setup runs `php artisan migrate:fresh --seed` automatically
+
+**Code Style:**
+- PHP CS Fixer configured with Laravel preset (`.php-cs-fixer.php`)
+- Single quotes for strings, short array syntax
+- Ordered imports alphabetically
+- No trailing whitespace, specific brace positioning
+- StyleCI config (`.styleci.yml`) overrides: disables `no_unused_imports` rule
+
+**Gotchas:**
+- `sudahInstal()` helper checks for `storage_path('installed')` file existence
+- Domain validation uses `fixDomainName()` to normalize URLs
+- Local IP detection via `is_local()` helper (localhost, 192.168, 127.0, 10.x)
+- Backup functions check for `/usr/bin/rclone` existence for cloud storage sync
+- Log permissions can be changed via `changeLogPermissions()` helper
+
+## Security & Bug Review Focus
+
+**Celah Keamanan yang Perlu Diperiksa:**
+- SQL injection pada query builder raw SQL
+- XSS pada output user input
+- CSRF token validation
+- Command injection pada exec() calls
+- Path traversal pada file operations
+- Authentication bypass pada login
+- Authorization bypass pada Admin Wilayah
+- Hardcoded secrets di config files
+- SSRF pada GitHub API calls (cek `is_trusted_github_api_url()`)
+
+**Bug Logika yang Sering Terjadi:**
+- Race condition pada backup operations
+- Null pointer pada helper functions
+- Memory leak pada large dataset queries
+- Infinite loop pada recursive functions
+- Error handling yang hilang pada HTTP requests
+- Edge case pada date/time calculations

app/Enums/Layanan.php

@@ -0,0 +1,48 @@
+<?php
+
+namespace App\Enums;
+
+enum Layanan: string
+{
+    case SIAPPAKAI = 'siappakai';
+    case PREMIUM = 'premium';
+    case UMUM = 'umum';
+
+    /**
+     * Get all available layanan options as an array.
+     *
+     * @return array<string, string>
+     */
+    public static function toArray(): array
+    {
+        return [
+            self::SIAPPAKAI->value => 'Siappakai',
+            self::PREMIUM->value => 'Premium',
+            self::UMUM->value => 'Umum',
+        ];
+    }
+
+    /**
+     * Get the label for the layanan.
+     *
+     * @return string
+     */
+    public function label(): string
+    {
+        return match ($this) {
+            self::SIAPPAKAI => 'Siappakai',
+            self::PREMIUM => 'Premium',
+            self::UMUM => 'Umum',
+        };
+    }
+
+    /**
+     * Get all layanan values.
+     *
+     * @return array<string>
+     */
+    public static function values(): array
+    {
+        return array_column(self::cases(), 'value');
+    }
+}

app/Exports/DesaExport.php

@@ -2,6 +2,7 @@
 
 namespace App\Exports;
 
+use App\Enums\Layanan;
 use Maatwebsite\Excel\Concerns\FromCollection;
 use Maatwebsite\Excel\Concerns\ShouldAutoSize;
 use Maatwebsite\Excel\Concerns\WithHeadings;
@@ -18,7 +19,8 @@ public function __construct($data, $hiddenColumns = [])
 
     public function collection()
     {
-        return $this->data->map(function ($item, $index) {
+        $mapLayanan = Layanan::toArray();
+        return $this->data->map(function ($item, $index) use($mapLayanan) {
             return [
                 'no' => $index + 1,  // Menambahkan nomor urut berdasarkan index
                 'nama_desa' => $item->nama_desa,
@@ -42,6 +44,8 @@ public function collection()
                 'jml_persil' => $item->jml_persil,
                 'jml_dokumen' => $item->jml_dokumen,
                 'jml_keluarga' => $item->jml_keluarga,
+                'layanan' => $mapLayanan[$item->layanan] ?? $item->layanan,
+                'sebutan_desa' => $item->sebutan_desa,
                 'tgl_akses' => $item->tgl_akses,
             ];
         });
@@ -72,6 +76,8 @@ public function headings(): array
             'Persil',
             'Dokumen',
             'Keluarga',
+            'Layanan',
+            'Sebutan Desa',
             'Akses Terakhir',
         ];
     }

app/Helpers/helper.php

@@ -11,7 +11,7 @@
      */
     function pantau_versi()
     {
-        return 'v2603.0.0';
+        return 'v2604.0.0';
     }
 }
 

app/Http/Controllers/LaporanController.php

@@ -2,9 +2,11 @@
 
 namespace App\Http\Controllers;
 
+use App\Enums\Layanan;
 use App\Exports\DesaExport;
 use App\Models\Desa;
 use App\Models\Scopes\RegionAccessScope;
+use App\Services\SebutanDesaService;
 use Illuminate\Http\Request;
 use Maatwebsite\Excel\Facades\Excel;
 use Yajra\DataTables\Facades\DataTables;
@@ -14,9 +16,13 @@ class LaporanController extends Controller
     /** @var Desa */
     protected $desa;
 
-    public function __construct(Desa $desa)
+    /** @var SebutanDesaService */
+    protected $sebutanDesaService;
+
+    public function __construct(Desa $desa, SebutanDesaService $sebutanDesaService)
     {
         $this->desa = $desa;
+        $this->sebutanDesaService = $sebutanDesaService;
     }
 
     public function desa(Request $request)
@@ -36,43 +42,49 @@ public function desa(Request $request)
             'versi_hosting' => $request->versi_hosting,
             'tte' => $request->tte,
             'tipe_pengguna' => $request->tipe_pengguna,
+            'layanan' => $request->layanan,
+            'sebutan_desa' => $request->sebutan_desa,
         ];
         $hiddenColumns = [];
         $adminWilayah = auth()->check() && auth()->user()->isAdminWilayah();
         if ($adminWilayah) {
             $hiddenColumns[] = 'aksi';
-            $hiddenColumns[] = 'kontak';            
+            $hiddenColumns[] = 'kontak';
         }
 
         if ($request->ajax() || $request->excel) {
             $query = DataTables::of($this->desa->fillter($fillters)->laporan());
             if ($request->excel) {
                 $query->filtering();
-                if(in_array('aksi', $hiddenColumns)){
+                if (in_array('aksi', $hiddenColumns)) {
                     unset($hiddenColumns['aksi']);
-                }                
+                }
                 return Excel::download(new DesaExport($query->results(), $hiddenColumns), 'Desa-yang-memasang-OpenSID.xlsx');
             }
 
             return $query->addIndexColumn()
                 ->editColumn('kontak', function ($q) {
                     $identitas = $q->kontak;
                     if ($identitas) {
-                        return '<div><div>'.$identitas['nama'].'</div><div>'.$identitas['hp'].'</div></div>';
+                        // Escape output untuk mencegah XSS
+                        $nama = e($identitas['nama'] ?? '-');
+                        $hp = e($identitas['hp'] ?? '-');
+                        return '<div><div>' . $nama . '</div><div>' . $hp . '</div></div>';                        
                     }
 
                     return '';
                 })
                 ->addColumn('action', function ($data) {
-                    $delete = '<button data-href="'.url('laporan/desa/'.$data->id).'" class="btn btn-sm btn-danger" data-toggle="modal" data-target="#confirm-delete"><i class="fas fa-trash"></i></button>';
+                    $delete = '<button data-href="' . url('laporan/desa/' . $data->id) . '" class="btn btn-sm btn-danger" data-toggle="modal" data-target="#confirm-delete"><i class="fas fa-trash"></i></button>';
 
-                    return '<div class="btn btn-group">'.$delete.'</div>';
-                })
-                ->rawColumns(['action', 'kontak'])
+                    return '<div class="btn btn-group">' . $delete . '</div>';
+                })->editColumn('layanan', function ($data) {
+                    return (Layanan::tryFrom($data->layanan))?->label() ?? '-';
+                })->rawColumns(['action', 'kontak'])
                 ->make(true);
         }
-
-        return view('laporan.desa', compact('fillters', 'hiddenColumns'));
+        $sebutanDesaList = (new SebutanDesaService())->getSebutanDesaList();
+        return view('laporan.desa', compact('fillters', 'hiddenColumns', 'sebutanDesaList'));
     }
 
     public function deleteDesa(Desa $desa)

app/Http/Requests/TrackRequest.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Requests;
 
+use App\Enums\Layanan;
 use App\Models\Region;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
@@ -58,6 +59,13 @@ public function rules()
                 'sometimes',
                 Rule::in(['0', '1']),
             ],
+            'sebutan_desa' => 'nullable|string|max:255',
+            'layanan' => [
+                'nullable',
+                'string',
+                'max:255',
+                Rule::enum(Layanan::class),
+            ],
         ];
     }
 
@@ -183,6 +191,8 @@ public function requestData()
             'anjungan',
             'kontak',
             'tema',
+            'sebutan_desa',
+            'layanan',
         ]);
     }
 }

app/Models/Desa.php

@@ -31,6 +31,8 @@ class Desa extends Model
         'kontak' => 'array',
         'anjungan' => 'bool',
         'tema' => 'string',
+        'sebutan_desa' => 'string',
+        'layanan' => 'string',
     ];
 
     /** {@inheritdoc} */
@@ -378,9 +380,9 @@ public function scopeLaporan($query)
     {
         return $query
             // ->select(['*'])
-            ->select(['nama_desa', 'kode_desa', 'nama_kecamatan', 'nama_kabupaten', 'kode_kecamatan', 'kode_kabupaten', 'nama_provinsi', 'kode_provinsi', 'versi_lokal', 'versi_hosting', 'jml_surat_tte', 'modul_tte', 'jml_penduduk', 'jml_artikel', 'jml_surat_keluar', 'jml_bantuan', 'jml_mandiri', 'jml_pengguna', 'jml_unsur_peta', 'jml_persil', 'jml_dokumen', 'jml_keluarga', 'kontak', 'tema'])
+            ->select(['nama_desa', 'kode_desa', 'nama_kecamatan', 'nama_kabupaten', 'kode_kecamatan', 'kode_kabupaten', 'nama_provinsi', 'kode_provinsi', 'versi_lokal', 'versi_hosting', 'jml_surat_tte', 'modul_tte', 'jml_penduduk', 'jml_artikel', 'jml_surat_keluar', 'jml_bantuan', 'jml_mandiri', 'jml_pengguna', 'jml_unsur_peta', 'jml_persil', 'jml_dokumen', 'jml_keluarga', 'kontak', 'tema', 'layanan', 'sebutan_desa'])
             ->selectRaw('greatest(coalesce(tgl_akses_lokal, 0), coalesce(tgl_akses_hosting, 0)) as tgl_akses')
-            ->when(auth()->check() == true, function ($query) {
+            ->when(auth()->check() === true, function ($query) {
                 $query->selectRaw('url_lokal, url_hosting');
             })
             ->when(session('provinsi'), function ($query, $provinsi) {
@@ -403,6 +405,8 @@ public function scopeFillter($query, array $fillters)
             'versi_hosting' => null,
             'tte' => null,
             'tipe_pengguna' => null,
+            'layanan' => null,
+            'sebutan_desa' => null,
         ], $fillters);
 
         return $query->select(['*'])
@@ -466,6 +470,12 @@ public function scopeFillter($query, array $fillters)
                     $sub->where($this->getTable().'.versi_lokal', 'NOT LIKE', '%-premium%')
                         ->orWhereNull($this->getTable().'.versi_lokal');
                 });
+            })
+            ->when($fillters['layanan'], function ($query, $layanan) {
+                $query->layanan($layanan);
+            })
+            ->when($fillters['sebutan_desa'], function ($query, $sebutanDesa) {
+                $query->sebutanDesa($sebutanDesa);
             });
     }
 
@@ -624,6 +634,38 @@ public function scopeHostingOffline($query)
         return $query->whereNotNull($this->getTable() . '.versi_lokal')->whereNull($this->getTable() . '.versi_hosting');
     }
 
+    /**
+     * Scope a query by layanan.
+     *
+     * @param  \Illuminate\Database\Eloquent\Builder  $query
+     * @param  string|null  $layanan
+     * @return \Illuminate\Database\Eloquent\Builder
+     */
+    public function scopeLayanan($query, $layanan = null)
+    {
+        if ($layanan === null) {
+            return $query;
+        }
+
+        return $query->where($this->getTable() . '.layanan', $layanan);
+    }
+
+    /**
+     * Scope a query by sebutan desa.
+     *
+     * @param  \Illuminate\Database\Eloquent\Builder  $query
+     * @param  string|null  $sebutanDesa
+     * @return \Illuminate\Database\Eloquent\Builder
+     */
+    public function scopeSebutanDesa($query, $sebutanDesa = null)
+    {
+        if ($sebutanDesa === null) {
+            return $query;
+        }
+
+        return $query->where($this->getTable() . '.sebutan_desa', $sebutanDesa);
+    }
+
     /**
      * Scope a query kecamatan OpenSID.
      *