186 Commits

Author	SHA1	Message	Date
gitea-actions[bot]	b64c6f57f6	chore(release): build 02.43.00 [skip ci]	2026-06-20 18:05:52 -05:00
gitea-actions[bot]	970f362378	chore(release): build 02.42.00 [skip ci]	2026-06-20 18:05:49 -05:00
gitea-actions[bot]	5ae2b7590d	chore(version): auto-bump patch 02.41.02-rc [skip ci]	2026-06-20 22:54:48 +00:00
Jonathan Miller	0e03837ec9	fix(heartbeat): align signature headers with HQ expectations ... Rename X-MokoSuiteClient-Signature/Timestamp to X-MokoSuite-Signature/ Timestamp to match what HeartbeatController reads as HTTP_X_MOKOSUITE_*.	2026-06-20 17:53:54 -05:00
Jonathan Miller	7510c9f018	fix(heartbeat): correct API route from mokosuiteclienthq to mokosuitehq ... The HQ component is com_mokosuitehq, not com_mokosuiteclienthq. The heartbeat endpoint was returning 404 because the route prefix was wrong.	2026-06-20 15:52:01 -05:00
gitea-actions[bot]	55df3a8c7c	chore(version): auto-bump patch 02.41.01-rc [skip ci]	2026-06-20 20:04:37 +00:00
Jonathan Miller	0dcd27cece	fix: update heartbeat URL from waas.dev to suite.dev.mokoconsulting.tech ... Domain was renamed — heartbeat was silently failing because the old hostname no longer resolves.	2026-06-20 15:03:49 -05:00
Jonathan Miller	7e6699479f	fix(install): enable and protect backup bridge plugin on install ... Add mokosuiteclient_backup to enablePlugin() and protectExtensions() lists so the backup bridge plugin is enabled on install/update and cannot be accidentally disabled by admins.	2026-06-20 12:15:14 -05:00
Jonathan Miller	bc60161e16	Merge remote-tracking branch 'origin/dev' into rc ... # Conflicts: # source/packages/plg_task_mokosuiteclientdemo/mokosuiteclientdemo.xml # source/packages/plg_task_mokosuiteclientsync/mokosuiteclientsync.xml	2026-06-20 11:59:38 -05:00
Jonathan Miller	fb52d3ed53	fix(heartbeat): add diagnostic logging to all bail-out points ... Log reason when sendHeartbeat() exits early: missing params, empty health token, or unconfigured base URL. Helps diagnose why heartbeat doesn't reach MokoSuiteClientHQ after install/update.	2026-06-20 11:54:24 -05:00
Jonathan Miller	f8c70f2bef	fix(install): migrate monitor params before retiring the plugin ... Move migrateMonitorParams() before removeRetiredExtensions() so the monitor plugin's params (base_url, signing_key) are copied to the core plugin before the monitor row is deleted from #__extensions.	2026-06-20 11:50:53 -05:00
Jonathan Miller	f1d483aa38	fix(heartbeat): add error logging, fix params persistence race ... - Add Log::add() to empty catch blocks in sendHeartbeat(), checkHeartbeat(), and fetchLocalHealth() so failures are diagnosable - Add curl_error() check and non-2xx logging to script.php sendHeartbeat() - Replace $extension->store() with targeted DB update in checkHeartbeat() to avoid overwriting params modified by migrateMonitorParams()	2026-06-20 11:40:17 -05:00
gitea-actions[bot]	99f0901fd2	chore(release): build 02.41.00-rc [skip ci]	2026-06-20 16:38:27 +00:00
Jonathan Miller	72134bba28	fix(install): enable ticket/offline plugins, consolidate monitor into core ... - enablePlugin() handles empty element columns with fallback match by name - Retire monitor plugin: migrate config (base_url, signing_key) to core - Runtime heartbeat moved from monitor plugin to core plugin - DisplayController heartbeat reads from core plugin params - ensureAdminModule() direct DB update for existing modules (fixes checked_out blocking, cpanel access level 6→3, menu ordering -1) - Add missing ticket automation language strings (IMAP, autoclose) - Remove monitor from cpanel plugin grid	2026-06-20 10:33:01 -05:00
gitea-actions[bot]	17d66fcf1e	chore(version): pre-release bump to 02.40.00-rc [skip ci]	2026-06-19 01:14:34 +00:00
gitea-actions[bot]	fab6572777	chore(version): pre-release bump to 02.39.00-rc [skip ci]	2026-06-19 00:11:34 +00:00
Jonathan Miller	bf30c3db5b	fix(api): type-safe update, filtered pagination, status sync, int cast assign ... - API update() now uses getInt/getString instead of raw input - API update() syncs status/status_id and priority/priority_id - API update() returns 404 if ticket not found - Pagination total count now uses filtered query (was unfiltered) - AutomationEngine assign action casts value to int	2026-06-18 19:09:42 -05:00
Jonathan Miller	134b9b3693	fix(security+reliability): address PR review — ACL guards, error logging, path traversal ... Security: - Add return after all jsonForbidden() calls (13 methods) to prevent ACL bypass if $app->close() fails to terminate - Add throw after requireAuth() in REST API controller (same pattern) - Add path traversal guard to AttachmentService::getAbsolutePath() using realpath + prefix check Error handling: - Log install notification email failures instead of empty catch - Log DB errors in getUserEmail(), getNotificationConfig(), getComponentConfig() instead of silent fallbacks - Log PHP upload error codes in AttachmentService - Check Folder::create() return value before upload loop - Fix searchKb() missing return on short query + log DB errors - Fix ntfy push to capture curl_error() on connection failure - Upgrade AutomationEngine inner catch to LOG_ERROR with rule ID	2026-06-18 19:05:57 -05:00
gitea-actions[bot]	ccb76132a5	chore(version): pre-release bump to 02.38.00-rc [skip ci]	2026-06-18 20:52:35 +00:00
Jonathan Miller	6c1ab6607b	fix: rename installer class Pkg_Mokosuite → Pkg_Mokosuiteclient [skip ci]	2026-06-18 15:09:03 -05:00
gitea-actions[bot]	bd39fb487c	chore(version): pre-release bump to 02.37.00-rc [skip ci]	2026-06-18 17:54:58 +00:00
Jonathan Miller	2e00512741	fix: rename all language keys MOKOSUITE→MOKOSUITECLIENT, auto-enable monitor plugin ... - XML manifests used old PLG_SYSTEM_MOKOSUITE_ / MOD_MOKOSUITE_ / COM_MOKOSUITE_ prefixes that didn't match the INI files (PLG_SYSTEM_MOKOSUITECLIENT_ etc.), causing untranslated labels in admin UI - Also fixed PLG_TASK_MOKOSUITEDEMO/SYNC and DBIP language keys - Added mokosuiteclient_monitor to auto-enable list in package install script so heartbeat registration works on fresh install	2026-06-18 12:47:50 -05:00
Jonathan Miller	9b347dd136	fix(backup): send error on failure, use staleDays for cutoff, consistent shape (#208) ... - Send explicit error status when backup data collection fails instead of omitting the key (so HQ can distinguish failure from not-installed) - Add status='ok' to not-installed return for consistent array shape - Use staleDays param instead of hardcoded 7-day cutoff in fallback query	2026-06-18 11:13:29 -05:00
gitea-actions[bot]	42d4f6e553	chore(version): pre-release bump to 02.36.00-rc [skip ci]	2026-06-18 15:45:07 +00:00
Jonathan Miller	b8dfd500e4	fix: swap demo/sync plugin manifests — contents were in wrong files	2026-06-18 10:44:46 -05:00
Jonathan Miller	bca879f0d3	feat(backup): use real MokoSuiteBackup schema and prefer BackupStatusHelper (#208) ... Update bridge to use correct column names (backupstart/backupend, status values: complete/fail/running/pending). Prefer the BackupStatusHelper API when available, with direct table query fallback for older MokoSuiteBackup versions.	2026-06-18 10:41:54 -05:00
Jonathan Miller	0d731eafd0	fix: swap demo/sync plugin manifests — contents were in wrong files ... The merge rename accidentally swapped the XML manifest contents between plg_task_mokosuiteclientdemo and plg_task_mokosuiteclientsync. The demo manifest contained the sync element/name/namespace and vice versa, causing JInstaller to look for mokosuiteclientsync.xml inside the demo plugin zip.	2026-06-18 10:37:22 -05:00
Jonathan Miller	559db324cb	feat(backup): scaffold backup bridge plugin (#208) ... Add plg_system_mokosuiteclient_backup — detects MokoSuiteBackup and collects backup status for heartbeat payloads to MokoSuiteHQ. Scaffolding includes manifest, service provider, extension class, and language files. Table column names are placeholders pending MokoSuiteBackup schema confirmation (MokoSuiteBackup#47).	2026-06-18 10:24:54 -05:00
gitea-actions[bot]	ca37dc9cbd	chore(release): build 02.35.00-rc [skip ci]	2026-06-18 15:00:02 +00:00
Jonathan Miller	8fd50ea580	fix(security+data): address PR review — XSS, header injection, ACL, status sync ... 1. Remove SVG from allowed upload extensions (stored XSS vector) 2. Sanitize Content-Disposition filename (header injection prevention) 3. Add ACL check to rateTicket() (missing authorization) 4. Use server-side MIME detection instead of client-supplied type 5. Sync status_id/priority_id in AutomationEngine and API controller to keep ENUM and lookup-table columns consistent 6. Align auto-bump.yml to use mokoplatform (no hyphen) matching pre-release.yml convention	2026-06-18 09:49:27 -05:00
gitea-actions[bot]	e090cd7092	chore(version): pre-release bump to 02.34.84-dev [skip ci]	2026-06-18 14:19:11 +00:00
Jonathan Miller	27f50468a8	Merge main into dev — apply MokoSuite→MokoSuiteClient rename to dev features ... Merges the full element rename from main into dev, resolving conflicts across 53 files. Migrates new dev-only extensions (com_mokosuite ticketsettings, plg_system_mokosuite_dbip) to MokoSuiteClient naming.	2026-06-16 13:09:14 -05:00
Jonathan Miller	4b9a675d0f	Rename MokoSuite → MokoSuiteClient (full element rename) ... All Joomla element names, PHP classes, language files, folder structure, and manifest references renamed from mokosuite to mokosuiteclient. This repo is now the client-facing tracker for the MokoSuite platform.	2026-06-15 05:19:13 -05:00
gitea-actions[bot]	5d003b419f	chore(version): pre-release bump to 02.34.83-dev [skip ci]	2026-06-12 02:55:44 +00:00
gitea-actions[bot]	e03cbc23d6	chore(version): pre-release bump to 02.34.82-dev [skip ci]	2026-06-12 02:54:29 +00:00
Jonathan Miller	8c82b39747	feat(tickets): add status/priority admin CRUD (#206) ... New 'ticketsettings' view with inline CRUD for ticket statuses and priorities: - Table display with color preview, default/closed flags, ordering - Inline add/edit form with all fields - Delete with in-use protection (can't delete if tickets reference it) - Auto-generates alias from title - Controller actions: saveStatus, deleteStatus, savePriority, deletePriority - Gated by core.admin ACL	2026-06-11 21:53:01 -05:00
Jonathan Miller	945fe0de93	fix(tickets): wire contact, assignees through controller + fix status type bug ... - Pass contact_id, assign_users, assign_groups, custom_fields from controller to model on ticket creation - Fix updateTicketStatus: getString→getInt (was passing string to int param) - Add getBackendUsers() and getUserGroups() to TicketsModel - Add assign users/groups multi-select fields to creation modal	2026-06-11 21:53:00 -05:00
gitea-actions[bot]	5d5972eb7a	chore(version): pre-release bump to 02.34.81-dev [skip ci]	2026-06-12 02:09:56 +00:00
Jonathan Miller	b3401836e2	feat(api): add remote user management endpoints (#31) ... New UsersController with 6 actions, all authenticated via health API token: - POST /users/reset-passwords — reset all non-master passwords, force change - POST /users/reset-2fa — disable 2FA/MFA for non-master users - POST /users/disable-all — block all non-master accounts - POST /users/enable-all — unblock all accounts - POST /users/force-logout — terminate all active sessions - GET /users/export — export user list with groups Master users are always protected from mass actions.	2026-06-11 21:09:22 -05:00
gitea-actions[bot]	d64fe83b74	chore(version): pre-release bump to 02.34.80-dev [skip ci]	2026-06-11 20:22:50 +00:00
gitea-actions[bot]	87ca92d9fc	chore(version): pre-release bump to 02.34.79-dev [skip ci]	2026-06-10 05:44:15 +00:00
gitea-actions[bot]	71da84bc7d	chore(version): pre-release bump to 02.34.78-dev [skip ci]	2026-06-10 04:32:48 +00:00
Jonathan Miller	d26b980f43	fix(catalog+modules): rename MokoJoomBackup to MokoSuiteBackup, enforce module first-position ordering ... Update catalog entry to point to the correct MokoSuiteBackup repo with updated description and article URL. Add per-session ordering enforcement so MokoSuite admin modules are always first in their position slot.	2026-06-09 23:32:21 -05:00
gitea-actions[bot]	5f07e31aaf	chore(version): pre-release bump to 02.34.77-dev [skip ci]	2026-06-09 17:35:57 +00:00
Jonathan Miller	ed5614886c	refactor(monitor): replace raw queries and curl with Joomla APIs ... - Plugin params: use Extension Table::load/store instead of raw UPDATE - Package version: use Extension Table::load instead of raw SELECT - HTTP requests: use Joomla HttpFactory instead of curl_* functions - All three methods now use Joomla's built-in abstractions	2026-06-09 12:35:39 -05:00
gitea-actions[bot]	9c2474471a	chore(version): pre-release bump to 02.34.76-dev [skip ci]	2026-06-09 17:32:51 +00:00
Jonathan Miller	bdbbf6d2a8	feat(monitor): send heartbeat on install/update and version change ... - onExtensionAfterInstall: immediate heartbeat after package install - onAfterInitialise: detect version change on first admin page load, send heartbeat if version differs from last sent, store version in plugin params to avoid re-sending every session	2026-06-09 12:32:38 -05:00
gitea-actions[bot]	119a6a37b7	chore(version): pre-release bump to 02.34.75-dev [skip ci]	2026-06-09 17:24:26 +00:00
Jonathan Miller	06535d6e97	fix: enforce ordering=0 for menu module, ensure first position	2026-06-09 12:24:03 -05:00
gitea-actions[bot]	cdda8fc048	chore(version): pre-release bump to 02.34.74-dev [skip ci]	2026-06-09 17:18:06 +00:00