MokoSuiteClient 02.35.00 — Rename, ticketing overhaul, security fixes #207

Open

jmiller wants to merge 70 commits from dev into main

pull from: dev

merge into: :main

:main

:dev

:rc

:6b1352d82c2f7a2c5e1f56bd5828660587c787f6

:feature/158-extract-content-sync-handlers-from-core-

:feature/159-extract-demo-mode-handlers-from-core-plu

:feature/151-feat-expanded-ticket-automation-with-joo

:feature/150-feat-privacy-guard-and-data-compliance-g

:feature/135-feat-helpdesk-email-notifications

:feature/136-feat-helpdesk-email-to-ticket-imap-polli

:feature/137-feat-helpdesk-automation-rules-admin-ui

:feature/138-feat-helpdesk-canned-responses-admin-ui

:feature/139-feat-helpdesk-ticket-categories-admin-ui

:feature/140-feat-helpdesk-satisfaction-ratings

:feature/141-feat-helpdesk-file-attachments

:feature/142-feat-helpdesk-rest-api-endpoints

:feature/143-feat-waf-auto-ban-after-repeated-blocks

:feature/144-feat-waf-log-viewer-admin-ui

:feature/145-feat-database-repair-and-optimization-to

:feature/146-feat-scheduled-temp-directory-cleanup

:feature/147-feat-email-based-notifications-for-secur

:feature/148-feat-ssl-certificate-expiry-monitoring

:feature/149-feat-component-config-options-ui

:feature/122-feat-web-application-firewall-waf-full-i

:feature/123-feat-htaccess-nginx-web-config-configura

:feature/124-feat-http-security-headers-manager

:feature/125-feat-php-file-change-scanner

:feature/126-feat-file-and-folder-permissions-fixer

:feature/127-feat-database-repair-optimisation-and-ma

:feature/128-feat-temp-directory-and-cache-cleanup-to

:feature/129-feat-dashboard-data-tables-logins-update

:feature/130-feat-enhanced-cpanel-module-collapsible-

:feature/131-feat-notification-system-email-alerts-lo

:feature/132-feat-settings-import-export-across-sites

:feature/133-feat-admin-secret-url-parameter-and-cust

:feature/121-bug-cpanel-module-escape-crash-not-in-ob

:feature/110-bug-com-mokowaas-dashboard-404-invalid-c

:feature/111-feat-admin-control-panel-dashboard-com-m

:feature/112-feat-firewall-feature-plugin-plg-system-

:feature/113-feat-tenant-restrictions-feature-plugin-

:feature/114-feat-developer-tools-feature-plugin-plg-

:feature/115-feat-health-monitor-feature-plugin-plg-s

:feature/116-feat-plugins-and-dashboard-rest-api-endp

:feature/117-feat-cpanel-module-for-joomla-admin-dash

:feature/118-feat-display-current-ip-wherever-ip-addr

:feature/119-feat-static-updates-xml-licensing-deferr

:feature/120-chore-sync-all-package-version-numbers

Conversation 0 Commits 70 Files Changed 65

+679 -586

jmiller commented 2026-06-18 14:59:56 +00:00

Owner

Copy Link

Copy Source

Summary\n\n- MokoWaaS → MokoSuiteClient rename across all 17 sub-extensions, workflows, docs, and wiki\n- Font Awesome 7 loaded in admin backend\n- MokoWaaS migration — tables, params, old extension cleanup\n- Ticket contact linking and multi-assignee tickets\n- Customizable statuses/priorities — admin-configurable lookup tables\n- Joomla custom fields for tickets\n- Security fixes: SVG upload XSS, header injection, missing ACL on rateTicket, server-side MIME detection\n- Data consistency: AutomationEngine and API now sync both status/priority ENUM and lookup-table ID columns\n- Workflow alignment: auto-bump.yml updated to mokoplatform (no hyphen), full pre-release.yml deployed\n\n## Test plan\n\n- [ ] Fresh install: verify all mokosuiteclient_* tables created correctly\n- [ ] Upgrade from MokoWaaS: verify table migration, param migration, old extension cleanup\n- [ ] Ticket creation with contact, multi-assignee, and custom fields\n- [ ] Custom status/priority CRUD and display in ticket list/detail\n- [ ] Automation rules set both status and status_id correctly\n- [ ] File upload rejects SVG, stores server-detected MIME type\n- [ ] Pre-release workflow fires on workflow_dispatch

## Summary\n\n- **MokoWaaS → MokoSuiteClient rename** across all 17 sub-extensions, workflows, docs, and wiki\n- **Font Awesome 7** loaded in admin backend\n- **MokoWaaS migration** — tables, params, old extension cleanup\n- **Ticket contact linking** and **multi-assignee tickets**\n- **Customizable statuses/priorities** — admin-configurable lookup tables\n- **Joomla custom fields** for tickets\n- **Security fixes**: SVG upload XSS, header injection, missing ACL on rateTicket, server-side MIME detection\n- **Data consistency**: AutomationEngine and API now sync both status/priority ENUM and lookup-table ID columns\n- **Workflow alignment**: auto-bump.yml updated to mokoplatform (no hyphen), full pre-release.yml deployed\n\n## Test plan\n\n- [ ] Fresh install: verify all mokosuiteclient_* tables created correctly\n- [ ] Upgrade from MokoWaaS: verify table migration, param migration, old extension cleanup\n- [ ] Ticket creation with contact, multi-assignee, and custom fields\n- [ ] Custom status/priority CRUD and display in ticket list/detail\n- [ ] Automation rules set both status and status_id correctly\n- [ ] File upload rejects SVG, stores server-detected MIME type\n- [ ] Pre-release workflow fires on workflow_dispatch

jmiller added 70 commits 2026-06-18 14:59:57 +00:00

chore(version): pre-release bump to 02.34.51-dev [skip ci] 6f84af130d

chore(version): pre-release bump to 02.34.52-dev [skip ci] 82c3e96759

feat(menu): restructure sidebar — each component gets own section ... 6aee7353b9

Each installed Moko component now renders as its own top-level
collapsible section instead of being nested under a single MokoSuite
parent. com_mokosuitehq is pinned first, com_mokosuite uses static
views as children, all others auto-discover from #__menu.

feat(dbip): add IP geolocation plugin using DB-IP ... 4e797a5f74

New system plugin plg_system_mokosuite_dbip provides IP geolocation
via DB-IP MMDB databases. Supports CDN auto-download of city DB,
local MMDB file mode, and bundled MaxMind DB reader library.
Registered in package manifest.

ci: add rc-revert workflow for release candidate rollbacks f52df1912d

chore(version): pre-release bump to 02.34.53-dev [skip ci] d2ba5d7123

docs: update changelog with dbip plugin, menu restructure, rc-revert a4d4a39b97

chore(version): pre-release bump to 02.34.54-dev [skip ci] 0183a8dd3e

feat(notifications): add ntfy push for ticket and security events (#205) ... 05be465f96

Adds pushNtfy() alongside existing email notifications in
NotificationService. Sends push via ntfy HTTP API for ticket_created,
ticket_replied, status_changed, ticket_assigned events with emoji
tags, priority levels, and click-through URLs.

Security alerts also pushed via ntfy at priority 5 (urgent).

Configurable via component params: ntfy_enabled, ntfy_server,
ntfy_topic, ntfy_security_topic, ntfy_token.

chore(version): pre-release bump to 02.34.55-dev [skip ci] c1aa9d5213

feat(helpdesk): complete canned responses admin UI (#138) ... 510d3f1f7d

- Edit existing responses via modal (click card to edit)
- Category filter dropdown in list view
- Drag-and-drop reorder with AJAX persistence
- reorderCanned controller task for ordering
- Category badges on response cards

chore(version): pre-release bump to 02.34.56-dev [skip ci] b61e453433

feat(helpdesk): add drag-and-drop reorder to categories (#139) ... cc3d0df2c2

- Drag handle column with icon-menu grip
- HTML5 native drag-and-drop on table rows
- reorderCategory controller task persists ordering via AJAX

chore(version): pre-release bump to 02.34.57-dev [skip ci] c999cc67c4

feat(helpdesk): file attachments on tickets and replies (#141) ... 57534eec9c

- #__mokosuite_ticket_attachments table
- AttachmentService: upload, download, delete with type/size validation
- Allowed: jpg,png,gif,webp,pdf,doc,docx,xls,xlsx,csv,txt,zip (10MB max)
- Secure storage in /media/com_mokosuite/attachments/{ticket_id}/
- Upload field in reply form, auto-uploads after reply creation
- Download links on ticket and reply cards
- Controller tasks: uploadAttachment, downloadAttachment, deleteAttachment

chore(version): pre-release bump to 02.34.58-dev [skip ci] 86a93837f6

feat(helpdesk): satisfaction ratings on resolved tickets (#140) ... fbb467a832

- satisfaction_rating (1-5), satisfaction_feedback, satisfaction_rated_at columns
- Star rating widget in ticket sidebar (appears when resolved/closed)
- Hover highlight + click to select rating
- Optional feedback textarea
- rateTicket controller task persists rating via AJAX
- Displays existing rating with stars + feedback when already rated

chore(version): pre-release bump to 02.34.59-dev [skip ci] 93f9a0f4a2

feat(api): helpdesk tickets REST API endpoints (#142) ... 45077671fa

- GET /v1/mokosuite/tickets — list with status/category/assigned filters
- GET /v1/mokosuite/tickets/{id} — single ticket with replies + attachments
- POST /v1/mokosuite/tickets — create ticket
- PATCH /v1/mokosuite/tickets/{id} — update status/priority/category/assignment
- POST /v1/mokosuite/tickets/{id}/reply — add reply with notification
- Routes registered in plg_webservices_mokosuite

chore(version): pre-release bump to 02.34.60-dev [skip ci] 370505d4a2

feat(config): complete component options UI (#149) ... 3047327d2e

- General: brand name, support email
- Notifications: ntfy push settings (server, topic, security topic, token)
  with showon conditional display when ntfy is enabled
- Helpdesk: satisfaction ratings toggle, max attachment size
- All ntfy fields map to NotificationService config keys

chore(version): pre-release bump to 02.34.61-dev [skip ci] 127aea5e5b

feat(helpdesk): visual automation rule builder with edit + reorder (#137) ... b0ea119b55

- Visual condition builder: field/operator/value dropdowns per row
- Visual action builder: type/value dropdowns per row
- Add/remove rows dynamically, no raw JSON editing
- Click existing rule card to edit in modal
- Drag-and-drop reorder with reorderAutomation task
- Added send_ntfy and ticket_assigned trigger types
- Fixed XSS: replaced innerHTML with safe DOM methods for builder rows

chore(version): pre-release bump to 02.34.62-dev [skip ci] efcdcdcfce

feat(security): admin login and failed login notifications (#147) ... 0e5c7f9396

- onUserAfterLogin: notifies on backend admin logins with IP and username
- onUserLoginFailure: tracks failed attempts, alerts after every 3 failures
- Both use NotificationService::securityAlert (email + ntfy push)

chore(version): pre-release bump to 02.34.63-dev [skip ci] 7234d977b8

feat(helpdesk): automation engine with Joomla event triggers (#151) ... 4349b20e34

- AutomationEngine service: fire/evaluate/execute pattern
- Condition evaluation: eq, neq, gt, lt, in, not_in operators
- Actions: set_status, set_priority, assign, add_note, send_email,
  send_ntfy, close, create_ticket
- Behavior column: append (to existing), always_new, skip_if_open
- New Joomla event triggers: user_login, user_register, content_save,
  extension_install, user_login_failed
- System plugin hooks: onUserAfterSave, onContentAfterSave,
  onExtensionAfterInstall, onUserAfterLogin (also fires automation)
- Visual builder updated with new triggers and behavior dropdown

chore(version): pre-release bump to 02.34.64-dev [skip ci] 370cab8444

docs: update changelog with v02.35.00 helpdesk features 82ea88773b

chore(version): pre-release bump to 02.34.65-dev [skip ci] 9a5421c0fd

feat(helpdesk): IMAP email-to-ticket polling + auto-close (#136) ... d59939a89c

IMAP polling scheduled task:
- Connects via php-imap, reads UNSEEN messages
- Creates tickets from new emails, matches sender to Joomla user
- Detects replies via [#123] in subject line
- Marks processed emails as seen, optionally moves to folder
- IMAP config fields in component options

Auto-close scheduled task:
- Closes resolved tickets after configurable days
- Uses autoclose_days from component params

Both registered as Joomla scheduled task types in
plg_task_mokosuite_tickets alongside existing automation task.

chore(version): pre-release bump to 02.34.66-dev [skip ci] e2c15b5ca2

fix: remove DEFAULT on TEXT columns for MySQL strict mode ... 8b9fff7282

MySQL strict mode rejects DEFAULT values on TEXT/BLOB columns.
Remove DEFAULT '[]' from conditions and actions in automation table.

chore(version): pre-release bump to 02.34.67-dev [skip ci] 3b30007ea2

fix: guard component service calls with class_exists check ... fa918e9bf6

System plugin event handlers fire during install before com_mokosuite
is fully loaded. Guard AutomationEngine and NotificationService calls
with class_exists() to prevent fatal errors during package install.

chore(version): pre-release bump to 02.34.68-dev [skip ci] c57f24c664

fix: remove onExtensionAfterInstall hook — unsafe during package install ... ff069d7e95

The system plugin is loaded before the package installer overwrites
component files, so the old code runs during install and class_exists
still fails because the autoloader has the old paths cached. Removing
the hook entirely — extension_install automation can be triggered on
next page load instead.

chore(version): pre-release bump to 02.34.69-dev [skip ci] 763d2e28d5

fix: ensure modules stay published with correct positions on update ... a7f81e533b

Module setup methods now update position and published state on
reinstall/update instead of returning early when module exists.
Also add mokosuite_dbip to plugin enable list.

Modules: cpanel→top, menu→menu, cache→status

chore(version): pre-release bump to 02.34.70-dev [skip ci] 61b01e3d7a

fix: use Joomla ModuleModel::save() for admin module setup ... c676f0d5d8

Replace raw DB queries with Joomla's ModuleModel to properly handle
module creation, position, published state, and #__modules_menu
assignment. Fixes modules not showing after install despite being
marked as published.

Also fix cpanel default collapsed state to 0 (expanded).

chore(version): pre-release bump to 02.34.71-dev [skip ci] 9f456adf80

fix(cache): set line-height 2rem and fix icon alignment in status bar 07960256c1

chore(version): pre-release bump to 02.34.72-dev [skip ci] 0aa22db2da

feat: self-healing admin modules — check once per session ... 83153ce299

System plugin checks mod_mokosuite_cpanel, menu, and cache on each
admin session. If unpublished, wrong position, or missing menu
mapping, auto-repairs via Joomla's ModuleModel::save(). Runs once
per session (flag in session storage) to avoid repeated DB hits.

chore(version): pre-release bump to 02.34.73-dev [skip ci] e95f294803

fix: recreate admin modules if deleted, not just repair ... 40e215eac4

Self-healing now recreates module instances via ModuleModel::save()
if they were deleted from #__modules, not just if unpublished or
missing position. Checks extension is installed before attempting.

chore(version): pre-release bump to 02.34.74-dev [skip ci] cdda8fc048

fix: enforce ordering=0 for menu module, ensure first position 06535d6e97

chore(version): pre-release bump to 02.34.75-dev [skip ci] 119a6a37b7

feat(monitor): send heartbeat on install/update and version change ... bdbbf6d2a8

- onExtensionAfterInstall: immediate heartbeat after package install
- onAfterInitialise: detect version change on first admin page load,
  send heartbeat if version differs from last sent, store version
  in plugin params to avoid re-sending every session

chore(version): pre-release bump to 02.34.76-dev [skip ci] 9c2474471a

refactor(monitor): replace raw queries and curl with Joomla APIs ... ed5614886c

- Plugin params: use Extension Table::load/store instead of raw UPDATE
- Package version: use Extension Table::load instead of raw SELECT
- HTTP requests: use Joomla HttpFactory instead of curl_* functions
- All three methods now use Joomla's built-in abstractions

chore(version): pre-release bump to 02.34.77-dev [skip ci] 5f07e31aaf

fix(catalog+modules): rename MokoJoomBackup to MokoSuiteBackup, enforce module first-position ordering ... d26b980f43

Update catalog entry to point to the correct MokoSuiteBackup repo with
updated description and article URL. Add per-session ordering enforcement
so MokoSuite admin modules are always first in their position slot.

chore(version): pre-release bump to 02.34.78-dev [skip ci] 71da84bc7d

chore(version): pre-release bump to 02.34.79-dev [skip ci] 87ca92d9fc

ci(pre-release): add chore/** branch trigger for pre-release builds 4682c126e1

chore(version): pre-release bump to 02.34.80-dev [skip ci] d64fe83b74

feat(api): add remote user management endpoints (#31) ... b3401836e2

New UsersController with 6 actions, all authenticated via health API token:
- POST /users/reset-passwords — reset all non-master passwords, force change
- POST /users/reset-2fa — disable 2FA/MFA for non-master users
- POST /users/disable-all — block all non-master accounts
- POST /users/enable-all — unblock all accounts
- POST /users/force-logout — terminate all active sessions
- GET /users/export — export user list with groups

Master users are always protected from mass actions.

chore(version): pre-release bump to 02.34.81-dev [skip ci] 5d5972eb7a

fix(tickets): wire contact, assignees through controller + fix status type bug ... 945fe0de93

- Pass contact_id, assign_users, assign_groups, custom_fields from
  controller to model on ticket creation
- Fix updateTicketStatus: getString→getInt (was passing string to int param)
- Add getBackendUsers() and getUserGroups() to TicketsModel
- Add assign users/groups multi-select fields to creation modal

feat(tickets): add status/priority admin CRUD (#206) ... 8c82b39747

New 'ticketsettings' view with inline CRUD for ticket statuses
and priorities:
- Table display with color preview, default/closed flags, ordering
- Inline add/edit form with all fields
- Delete with in-use protection (can't delete if tickets reference it)
- Auto-generates alias from title
- Controller actions: saveStatus, deleteStatus, savePriority, deletePriority
- Gated by core.admin ACL

chore(version): pre-release bump to 02.34.82-dev [skip ci] e03cbc23d6

chore(version): pre-release bump to 02.34.83-dev [skip ci] 5d003b419f

Merge main into dev — apply MokoSuite→MokoSuiteClient rename to dev features ... 27f50468a8

Merges the full element rename from main into dev, resolving conflicts
across 53 files. Migrates new dev-only extensions (com_mokosuite
ticketsettings, plg_system_mokosuite_dbip) to MokoSuiteClient naming.

revert: re-enable auto-bump on dev push [skip ci] 4d813745f1

ci: deploy full pre-release workflow from mokoplatform [skip ci] b6818719e2

chore(version): pre-release bump to 02.34.84-dev [skip ci] e090cd7092

fix(security+data): address PR review — XSS, header injection, ACL, status sync ... 8fd50ea580

1. Remove SVG from allowed upload extensions (stored XSS vector)
2. Sanitize Content-Disposition filename (header injection prevention)
3. Add ACL check to rateTicket() (missing authorization)
4. Use server-side MIME detection instead of client-supplied type
5. Sync status_id/priority_id in AutomationEngine and API controller
   to keep ENUM and lookup-table columns consistent
6. Align auto-bump.yml to use mokoplatform (no hyphen) matching
   pre-release.yml convention

jmiller added 1 commit 2026-06-18 15:04:18 +00:00

ci: add changelog extraction to promote-rc job in auto-release [skip ci] bd37187f0e

jmiller added 6 commits 2026-06-18 19:54:36 +00:00

feat(backup): scaffold backup bridge plugin (#208) ... 559db324cb

Add plg_system_mokosuiteclient_backup — detects MokoSuiteBackup and
collects backup status for heartbeat payloads to MokoSuiteHQ.

Scaffolding includes manifest, service provider, extension class,
and language files. Table column names are placeholders pending
MokoSuiteBackup schema confirmation (MokoSuiteBackup#47).

fix: swap demo/sync plugin manifests — contents were in wrong files ... 0d731eafd0

The merge rename accidentally swapped the XML manifest contents between
plg_task_mokosuiteclientdemo and plg_task_mokosuiteclientsync. The demo
manifest contained the sync element/name/namespace and vice versa,
causing JInstaller to look for mokosuiteclientsync.xml inside the demo
plugin zip.

feat(backup): use real MokoSuiteBackup schema and prefer BackupStatusHelper (#208) ... bca879f0d3

Update bridge to use correct column names (backupstart/backupend,
status values: complete/fail/running/pending). Prefer the
BackupStatusHelper API when available, with direct table query
fallback for older MokoSuiteBackup versions.

fix(backup): send error on failure, use staleDays for cutoff, consistent shape (#208) ... 9b347dd136

- Send explicit error status when backup data collection fails instead
  of omitting the key (so HQ can distinguish failure from not-installed)
- Add status='ok' to not-installed return for consistent array shape
- Use staleDays param instead of hardcoded 7-day cutoff in fallback query

ci: retrigger after runner restart 446539844d

Merge pull request 'feat: backup bridge plugin to detect MokoSuiteBackup (#208)' (#209) from feature/208-backup-bridge into dev 6b1352d82c

jmiller added 1 commit 2026-06-19 00:18:35 +00:00

ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci] ab163dfe06

jmiller added 1 commit 2026-06-19 00:40:42 +00:00

ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci] 74361a4124

jmiller added 1 commit 2026-06-19 01:52:01 +00:00

fix(ci): detect rebuild by branch name not version suffix [skip ci] 888f37c334

jmiller added 23 commits 2026-06-20 17:01:05 +00:00

chore(release): build 02.35.00-rc [skip ci] ca37dc9cbd

fix: swap demo/sync plugin manifests — contents were in wrong files b8dfd500e4

chore(version): pre-release bump to 02.36.00-rc [skip ci] 42d4f6e553

ci: add changelog extraction to promote-rc job in auto-release [skip ci] 823d2e4f0e

fix: rename all language keys MOKOSUITE→MOKOSUITECLIENT, auto-enable monitor plugin ... 2e00512741

- XML manifests used old PLG_SYSTEM_MOKOSUITE_ / MOD_MOKOSUITE_ / COM_MOKOSUITE_
  prefixes that didn't match the INI files (PLG_SYSTEM_MOKOSUITECLIENT_ etc.),
  causing untranslated labels in admin UI
- Also fixed PLG_TASK_MOKOSUITEDEMO/SYNC and DBIP language keys
- Added mokosuiteclient_monitor to auto-enable list in package install script
  so heartbeat registration works on fresh install

chore(version): pre-release bump to 02.37.00-rc [skip ci] bd39fb487c

fix: set EXTENSION_NAME=mokosuiteclient in Makefile for updates.xml [skip ci] c2c2f40147

fix: rename installer class Pkg_Mokosuite → Pkg_Mokosuiteclient [skip ci] 6c1ab6607b

chore: remove legacy src/ directory (pre-rename MokoWaaS code) [skip ci] c8a267eed0

chore(version): pre-release bump to 02.38.00-rc [skip ci] ccb76132a5

fix(security+reliability): address PR review — ACL guards, error logging, path traversal ... 134b9b3693

Security:
- Add return after all jsonForbidden() calls (13 methods) to prevent
  ACL bypass if $app->close() fails to terminate
- Add throw after requireAuth() in REST API controller (same pattern)
- Add path traversal guard to AttachmentService::getAbsolutePath()
  using realpath + prefix check

Error handling:
- Log install notification email failures instead of empty catch
- Log DB errors in getUserEmail(), getNotificationConfig(),
  getComponentConfig() instead of silent fallbacks
- Log PHP upload error codes in AttachmentService
- Check Folder::create() return value before upload loop
- Fix searchKb() missing return on short query + log DB errors
- Fix ntfy push to capture curl_error() on connection failure
- Upgrade AutomationEngine inner catch to LOG_ERROR with rule ID

fix(api): type-safe update, filtered pagination, status sync, int cast assign ... bf30c3db5b

- API update() now uses getInt/getString instead of raw input
- API update() syncs status/status_id and priority/priority_id
- API update() returns 404 if ticket not found
- Pagination total count now uses filtered query (was unfiltered)
- AutomationEngine assign action casts value to int

chore(version): pre-release bump to 02.39.00-rc [skip ci] fab6572777

ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci] ... 30d9e1a108

RC rebuilds on the rc branch now get patch bumps (02.37.00-rc →
02.37.01-rc) instead of minor bumps. Minor bumps only happen on
branch elevations (dev→rc, rc→stable).

chore(version): pre-release bump to 02.40.00-rc [skip ci] 17d66fcf1e

fix(ci): detect rebuild by branch name not version suffix [skip ci] c1696bce41

fix(install): enable ticket/offline plugins, consolidate monitor into core ... 72134bba28

- enablePlugin() handles empty element columns with fallback match by name
- Retire monitor plugin: migrate config (base_url, signing_key) to core
- Runtime heartbeat moved from monitor plugin to core plugin
- DisplayController heartbeat reads from core plugin params
- ensureAdminModule() direct DB update for existing modules (fixes
  checked_out blocking, cpanel access level 6→3, menu ordering -1)
- Add missing ticket automation language strings (IMAP, autoclose)
- Remove monitor from cpanel plugin grid

Merge remote-tracking branch 'origin/main' into rc ... 6dcacfb6cc

# Conflicts:
#	.mokogitea/manifest.xml
#	src/packages/com_mokowaas/mokowaas.xml
#	src/packages/plg_system_mokowaas/Extension/MokoWaaS.php
#	src/packages/plg_system_mokowaas/Field/AllowedIpsField.php
#	src/packages/plg_system_mokowaas/Field/CurrentIpField.php
#	src/packages/plg_system_mokowaas/Field/DemoTaskInfoField.php
#	src/packages/plg_system_mokowaas/Field/NextResetField.php
#	src/packages/plg_system_mokowaas/Field/SnapshotTablesField.php
#	src/packages/plg_system_mokowaas/mokowaas.xml

chore(release): build 02.41.00-rc [skip ci] 99f0901fd2

fix(heartbeat): add error logging, fix params persistence race ... f1d483aa38

- Add Log::add() to empty catch blocks in sendHeartbeat(), checkHeartbeat(),
  and fetchLocalHealth() so failures are diagnosable
- Add curl_error() check and non-2xx logging to script.php sendHeartbeat()
- Replace $extension->store() with targeted DB update in checkHeartbeat()
  to avoid overwriting params modified by migrateMonitorParams()

fix(install): migrate monitor params before retiring the plugin ... f8c70f2bef

Move migrateMonitorParams() before removeRetiredExtensions() so the
monitor plugin's params (base_url, signing_key) are copied to the
core plugin before the monitor row is deleted from #__extensions.

fix(heartbeat): add diagnostic logging to all bail-out points ... fb52d3ed53

Log reason when sendHeartbeat() exits early: missing params, empty
health token, or unconfigured base URL. Helps diagnose why heartbeat
doesn't reach MokoSuiteClientHQ after install/update.

Merge remote-tracking branch 'origin/dev' into rc ... bc60161e16

# Conflicts:
#	source/packages/plg_task_mokosuiteclientdemo/mokosuiteclientdemo.xml
#	source/packages/plg_task_mokosuiteclientsync/mokosuiteclientsync.xml

jmiller added 1 commit 2026-06-20 23:37:41 +00:00

fix(heartbeat): rotate RSA keys, fix backup bridge StatusHelper path ... 9326e2d11a

- Replace broken RSA key pair (had Windows \r\n line endings in PEM)
  with fresh Unix-style keys that pass OpenSSL verify
- Fix backup bridge: use correct Helper\BackupStatusHelper path and
  getStatusSummary() method per MokoSuite convention
- Align fallback query output with StatusHelper return format
  (latest/totals structure instead of flat keys)

jmiller added 1 commit 2026-06-20 23:37:54 +00:00

chore(version): auto-bump patch 02.44.01-dev [skip ci] 738c878067

jmiller added 3 commits 2026-06-20 23:55:16 +00:00

chore(version): auto-bump patch 02.44.01-rc [skip ci] aa5f3ab06a

fix(heartbeat): show success/error notification to admin on install/update ... 49cc5becf6

Both install-time and runtime heartbeat now enqueue visible messages
for all outcomes — success, HTTP error, and connection failure — so
the admin always knows whether the heartbeat registered.

Merge remote-tracking branch 'origin/dev' into rc c913f12621

jmiller added 1 commit 2026-06-20 23:55:33 +00:00

chore(version): auto-bump patch 02.44.02-dev [skip ci] 2db043412f

jmiller added 5 commits 2026-06-21 00:15:13 +00:00

chore(version): auto-bump patch 02.44.02-rc [skip ci] 772c40bb56

style(menu): simplify sidebar child item indent 71f5d161e9

fix(menu): pin com_mokosuitehq at top of sidebar menu ... 61f96cba64

The element name is com_mokosuitehq not com_mokosuiteclienthq.
The sort logic was checking the wrong name so HQ was never pinned.

Merge remote-tracking branch 'origin/rc' into rc 07482df7b9

Merge remote-tracking branch 'origin/dev' into rc 579b0f13d8

jmiller added 1 commit 2026-06-21 00:15:33 +00:00

chore(version): auto-bump patch 02.44.03-dev [skip ci] c0adfe41dd

jmiller added 4 commits 2026-06-21 00:38:27 +00:00

chore(version): auto-bump patch 02.44.03-rc [skip ci] 2b7913f6e1

fix(cpanel): always start collapsed, remove setting ... 072297a75d

Cpanel module is always collapsed by default. Removed the collapsed
toggle from module settings since it should not be configurable.

Merge remote-tracking branch 'origin/rc' into rc 6ed0a9f221

Merge remote-tracking branch 'origin/dev' into rc e55acc464a

jmiller added 1 commit 2026-06-21 00:39:09 +00:00

chore(version): auto-bump patch 02.44.04-dev [skip ci] 5a5a5713d6

jmiller added 1 commit 2026-06-21 01:31:00 +00:00

feat: MokoGitea LicenseValidator — core DRM enforcement, cache table, task scheduler 6bb1b43195

jmiller added 1 commit 2026-06-21 01:31:18 +00:00

chore(version): auto-bump patch 02.44.05-dev [skip ci] 1ab721cbe3

jmiller added 1 commit 2026-06-21 01:31:35 +00:00

chore(version): pre-release bump to 02.44.06-dev [skip ci] 9e22a4c49c

jmiller added 1 commit 2026-06-21 01:38:54 +00:00

feat(support-pin): daily-rotating PIN via HMAC(token, date) ... 64a8504794

PIN is derived from HMAC-SHA256(health_api_token, YYYY-MM-DD) so both
client and HQ compute the same value independently. Rotates at UTC
midnight. Shown on cpanel module header and component dashboard.

jmiller added 1 commit 2026-06-21 01:39:09 +00:00

chore(version): auto-bump patch 02.44.07-dev [skip ci] 3f0d45438c

jmiller added 1 commit 2026-06-21 01:39:22 +00:00

chore(version): pre-release bump to 02.44.08-dev [skip ci] d030a5d886

jmiller added 1 commit 2026-06-21 02:01:56 +00:00

chore(version): pre-release bump to 02.44.09-dev [skip ci] 29d17dee8f

jmiller added 2 commits 2026-06-21 02:17:26 +00:00

chore(version): bump to 02.46.00 (above stable 02.45.00) ... 56bdcf66ec

Dev version must be higher than stable for Joomla updater to show it.

Merge remote-tracking branch 'origin/dev' into dev 7b5231d7f7

jmiller added 1 commit 2026-06-21 02:17:45 +00:00

chore(version): auto-bump patch 02.46.01-dev [skip ci] b6f4b1f505

jmiller added 1 commit 2026-06-21 02:17:58 +00:00

chore(version): pre-release bump to 02.46.02-dev [skip ci] 09153a04c4

jmiller added 1 commit 2026-06-21 02:19:03 +00:00

chore(version): pre-release bump to 02.46.03-dev [skip ci] d03c479aa4

jmiller added 2 commits 2026-06-21 02:56:24 +00:00

fix(menu): pin Client below HQ, strip MokoSuite prefix from titles ... 76d9fdd944

Menu order: HQ first, Client second, then alphabetical.
Display titles have "MokoSuite" prefix removed for cleaner sidebar.

fix(menu): MokoSuiteClient→MokoClient, strip MokoSuite from others ... 8c21553137

- HQ and Client keep "Moko" prefix: MokoHQ, MokoClient
- All other extensions drop MokoSuite entirely: Backup, OpenGraph, etc.
- Component menu title changed to MokoClient

jmiller added 1 commit 2026-06-21 02:56:41 +00:00

chore(version): auto-bump patch 02.46.04-dev [skip ci] 1b316ecc40

jmiller added 1 commit 2026-06-21 02:57:00 +00:00

chore(version): pre-release bump to 02.46.05-dev [skip ci] 035fe6d619

jmiller added 1 commit 2026-06-21 03:02:53 +00:00

fix(menu): MokoSuiteClient displays as MokoSuite in menu 520422db8c

jmiller added 1 commit 2026-06-21 03:03:08 +00:00

chore(version): auto-bump patch 02.46.06-dev [skip ci] d273f2e615

jmiller added 1 commit 2026-06-21 03:03:22 +00:00

chore(version): pre-release bump to 02.46.07-dev [skip ci] 206239ab7d

jmiller added 1 commit 2026-06-21 03:11:01 +00:00

feat(support): show domain as support key in status bar with click-to-copy ... aa61834e61

Domain is displayed in the status bar next to cache buttons. Click to
copy to clipboard for easy sharing with support agents. HQ looks up
the site by domain.

jmiller added 1 commit 2026-06-21 03:11:21 +00:00

chore(version): auto-bump patch 02.46.08-dev [skip ci] b63779a675

jmiller added 1 commit 2026-06-21 03:11:34 +00:00

chore(version): pre-release bump to 02.46.09-dev [skip ci] 348aaf1d8b

jmiller added 1 commit 2026-06-21 03:15:55 +00:00

chore(version): pre-release bump to 02.46.10-dev [skip ci] e34f52fb23

jmiller added 2 commits 2026-06-21 04:27:55 +00:00

chore: remove retired monitor plugin source files 62e5cf6fb5

Merge remote-tracking branch 'origin/dev' into dev ... 0067835a17

# Conflicts:
#	source/packages/plg_system_mokosuiteclient_monitor/mokosuiteclient_monitor.xml

jmiller added 1 commit 2026-06-21 04:28:12 +00:00

chore(version): auto-bump patch 02.46.11-dev [skip ci] bfb28a2050

jmiller added 1 commit 2026-06-21 04:28:25 +00:00

chore(version): pre-release bump to 02.46.12-dev [skip ci] a053cc8631

jmiller added 1 commit 2026-06-21 04:31:55 +00:00

chore(version): pre-release bump to 02.46.13-dev [skip ci] 3858869b24

jmiller added 1 commit 2026-06-21 04:49:37 +00:00

chore(version): pre-release bump to 02.46.14-dev [skip ci] 560035655a

jmiller added 1 commit 2026-06-21 04:58:43 +00:00

fix(install): skip enablePlugin when plugin files not on disk ... ab21d17563

Prevents enabling plugins whose extension record exists in the DB
but whose files were never deployed (e.g. backup bridge when package
build fails). Avoids fatal class-not-found errors on next page load.

jmiller added 1 commit 2026-06-21 04:58:57 +00:00

chore(version): auto-bump patch 02.46.15-dev [skip ci] d5cd995a79

jmiller added 1 commit 2026-06-21 04:59:10 +00:00

chore(version): pre-release bump to 02.46.16-dev [skip ci] e8dad8541e

jmiller added 1 commit 2026-06-21 05:01:13 +00:00

chore(version): pre-release bump to 02.46.17-dev [skip ci] ffbb46f5e8

jmiller added 1 commit 2026-06-21 05:06:17 +00:00

fix(install): remove backup bridge from package until build is fixed ... d97695a858

The backup bridge plugin deploys files to plugins/system/ root instead
of plugins/system/mokosuiteclient_backup/, causing a fatal error on
every page load. Removed from package manifest, enablePlugin, and
protectExtensions until the build pipeline correctly packages it.

jmiller added 1 commit 2026-06-21 05:06:57 +00:00

chore(version): auto-bump patch 02.46.18-dev [skip ci] c31ac0f4bf

jmiller added 1 commit 2026-06-21 05:07:12 +00:00

chore(version): pre-release bump to 02.46.19-dev [skip ci] 8d77ca9dd4

jmiller added 1 commit 2026-06-21 05:07:33 +00:00

chore(version): pre-release bump to 02.46.20-dev [skip ci] 1320a567f8

jmiller added 1 commit 2026-06-21 05:30:14 +00:00

fix(health): add verbose messages to all health checks ... d1cc81624f

- Config check: message lists specific issues (Debug ON, Force SSL OFF)
- Security/backup/cron: message explains "Not installed" clearly
- Backup: also checks for MokoSuiteBackup tables, not just Akeeba
- Removed issues array from config — message field replaces it

jmiller added 1 commit 2026-06-21 05:30:30 +00:00

chore(version): auto-bump patch 02.46.21-dev [skip ci] 1811e080ad

jmiller added 1 commit 2026-06-21 05:30:46 +00:00

chore(version): pre-release bump to 02.46.22-dev [skip ci] 2927e7420a

jmiller added 1 commit 2026-06-21 05:36:03 +00:00

fix(install): remove ALTER TABLE DEFAULT '' that breaks plugin installs ... 9a8d395cc8

The preflight ALTER TABLE set element column to DEFAULT '', causing
Joomla to install sub-extension files to plugins/{group}/ root instead
of plugins/{group}/{element}/. This overwrote services/provider.php
across plugins, causing fatal class-not-found errors on every page.

jmiller added 1 commit 2026-06-21 05:36:17 +00:00

chore(version): auto-bump patch 02.46.23-dev [skip ci] c0b03ac5f4

jmiller added 1 commit 2026-06-21 05:36:32 +00:00

chore(version): pre-release bump to 02.46.24-dev [skip ci] e3bc5a0f42

jmiller added 1 commit 2026-06-21 05:47:30 +00:00

chore(install): remove update server URL migration and ALTER TABLE ... 8bbae58d83

- Remove migrateUpdateServerUrls, cleanupStaleUpdateSites,
  fixUpdateRecords, enableUpdateServer calls from postflight
- Remove ALTER TABLE DEFAULT '' from preflight (caused plugin files
  to install to wrong directory)
- Dead method bodies left in file (harmless, never called)

jmiller added 1 commit 2026-06-21 05:47:47 +00:00

chore(version): auto-bump patch 02.46.25-dev [skip ci] 6704138998

jmiller added 1 commit 2026-06-21 05:48:06 +00:00

chore(version): pre-release bump to 02.46.26-dev [skip ci] dcaee3e9ca

jmiller added 1 commit 2026-06-21 05:49:50 +00:00

chore(version): pre-release bump to 02.46.27-dev [skip ci] f7311a8583

jmiller added 1 commit 2026-06-21 05:54:53 +00:00

fix(install): revert element column DEFAULT '' on existing sites 6af960d1f0

jmiller added 1 commit 2026-06-21 05:55:09 +00:00

chore(version): auto-bump patch 02.46.28-dev [skip ci] f1f9b7eb73

jmiller added 1 commit 2026-06-21 05:55:27 +00:00

chore(version): pre-release bump to 02.46.29-dev [skip ci] 70fb6e04b2

jmiller added 1 commit 2026-06-21 05:55:53 +00:00

chore(version): pre-release bump to 02.46.30-dev [skip ci] 28bcf014bc

jmiller added 1 commit 2026-06-21 06:08:45 +00:00

chore(version): pre-release bump to 02.46.31-dev [skip ci] 90410c3add

jmiller added 1 commit 2026-06-21 06:32:09 +00:00

chore(version): pre-release bump to 02.46.32-dev [skip ci] b8a1b9769a

This pull request has changes conflicting with the target branch.

• .mokogitea/workflows/issue-branch.yml
• CHANGELOG.md
• CODE_OF_CONDUCT.md
• GOVERNANCE.md
• LICENSE.md
• README.md
• SECURITY.md
• docs/guides/build-guide.md
• docs/guides/configuration-guide.md
• docs/guides/installation-guide.md

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dev:dev

git checkout dev

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

automation

Automated processes or scripts

breaking-change

Breaking API or functionality change

bug

build

Build system changes

ci-cd

CI/CD pipeline changes

config

Configuration file changes

css

CSS/styling changes

dependencies

Dependency updates

deploy-failure

Automated deploy failure tracking

docker

Docker configuration changes

documentation

Documentation changes

dolibarr

Dolibarr module or extension

duplicate

enhancement

generic

Generic project or library

good first issue

Good for newcomers

health-check

Repository health check results

health: excellent

Health score 90-100

health: fair

Health score 50-69

health: good

Health score 70-89

health: poor

Health score below 50

help wanted

Extra attention needed

html

HTML template changes

invalid

javascript

JavaScript code changes

joomla

Joomla extension or component

major-release

Major version release (breaking changes)

minor-release

Minor version release (XX.YY.00)

mokostandards

MokoStandards compliance

needs-review

Awaiting code review

needs-testing

Requires manual or automated testing

patch-release

Patch version release (XX.YY.ZZ)

php

PHP code changes

priority: critical

priority: high

priority: low

priority: medium

push-failure

File push failure requiring attention

python

Python code changes

question

regression

Regression from a previous working state

release-candidate

Release candidate build

security

Security-related changes

size/l

Large change (101-300 lines)

size/m

Medium change (31-100 lines)

size/s

Small change (11-30 lines)

size/xl

Extra large change (301-1000 lines)

size/xs

Extra small change (1-10 lines)

size/xxl

Extremely large change (1000+ lines)

standards-drift

Repository drifted from MokoStandards

standards-update

MokoStandards sync update

standards-violation

Standards compliance failure

status: blocked

status: in-progress

status: needs-review

status: on-hold

Temporarily on hold

status: pending

Pending action or decision

status: wontfix

This will not be worked on

sync-failure

Bulk sync failure requiring attention

sync-report

Bulk sync run report

template-validation-failure

Template workflow validation failure

test-failure

Automated test failure

tests

Test suite changes

type: bug

Something isn't working

type: chore

Maintenance tasks

type: enhancement

Enhancement to existing feature

type: feature

New feature or request

type: refactor

Code refactoring

type: release

Release preparation or tracking

type: test

Test suite additions or changes

type: version

Version-related change

typescript

TypeScript code changes

version

Version bump or release

version-branch

Version branch related

version-drift

Version mismatch detected

work-in-progress

Work in progress, not ready for merge

No labels

Priority -

Type -

Milestone

No items

No Milestone

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuiteClient#207