chore: sync pr-metadata-check.yml from Template-Joomla

.editorconfig

@@ -0,0 +1,41 @@
+# EditorConfig helps maintain consistent coding styles across different editors and IDEs
+# https://editorconfig.org/
+
+root = true
+
+# Default settings — Tabs preferred, width = 2 spaces
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = tab
+tab_width = 2
+
+# PowerShell scripts — tabs, 2-space visual width
+[*.ps1]
+indent_style = tab
+tab_width = 2
+end_of_line = crlf
+
+# Markdown files — keep trailing whitespace for line breaks
+[*.md]
+trim_trailing_whitespace = false
+
+# JSON / YAML files — tabs, 2-space visual width
+[*.{json,yml,yaml}]
+indent_style = tab
+tab_width = 2
+
+# Makefiles — always tabs, default width
+[Makefile]
+indent_style = tab
+tab_width = 2
+
+# Windows batch scripts — keep CRLF endings
+[*.{bat,cmd}]
+end_of_line = crlf
+
+# Shell scripts — ensure LF endings
+[*.sh]
+end_of_line = lf

.mokogitea/workflows/auto-bump.yml

@@ -1,66 +1,66 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: mokocli.Release
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/auto-bump.yml
-# VERSION: 09.02.00
-# BRIEF: Auto patch-bump version on every push to dev (skips merge commits)
-
-name: "Universal: Auto Version Bump"
-
-on:
-  push:
-    branches:
-      - dev
-      - rc
-      - 'feature/**'
-      - 'patch/**'
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-
-permissions:
-  contents: write
-
-jobs:
-  bump:
-    name: Version Bump
-    runs-on: release
-    if: >-
-      !contains(github.event.head_commit.message, '[skip ci]') &&
-      !contains(github.event.head_commit.message, '[skip bump]') &&
-      !startsWith(github.event.head_commit.message, 'Merge pull request')
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
-          fetch-depth: 1
-
-      - name: Setup mokocli tools
-        run: |
-          if ! command -v composer &> /dev/null; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
-          fi
-          if [ -d "/opt/mokocli/cli" ]; then
-            echo "MOKO_CLI=/opt/mokocli/cli" >> "$GITHUB_ENV"
-          else
-            git clone --depth 1 --branch main --quiet \
-              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/mokocli.git" \
-              /tmp/mokocli
-            cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
-            echo "MOKO_CLI=/tmp/mokocli/cli" >> "$GITHUB_ENV"
-          fi
-
-      - name: Bump version
-        run: |
-          php ${MOKO_CLI}/version_auto_bump.php \
-            --path . --branch "${GITHUB_REF_NAME}" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: mokocli.Release
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# PATH: /.mokogitea/workflows/auto-bump.yml
+# VERSION: 09.02.00
+# BRIEF: Auto patch-bump version on every push to dev (skips merge commits)
+
+name: "Universal: Auto Version Bump"
+
+on:
+  push:
+    branches:
+      - dev
+      - rc
+      - 'feature/**'
+      - 'patch/**'
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+
+permissions:
+  contents: write
+
+jobs:
+  bump:
+    name: Version Bump
+    runs-on: release
+    if: >-
+      !contains(github.event.head_commit.message, '[skip ci]') &&
+      !contains(github.event.head_commit.message, '[skip bump]') &&
+      !startsWith(github.event.head_commit.message, 'Merge pull request')
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          fetch-depth: 1
+
+      - name: Setup mokocli tools
+        run: |
+          if ! command -v composer &> /dev/null; then
+            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+          fi
+          if [ -d "/opt/mokocli/cli" ]; then
+            echo "MOKO_CLI=/opt/mokocli/cli" >> "$GITHUB_ENV"
+          else
+            git clone --depth 1 --branch main --quiet \
+              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/mokocli.git" \
+              /tmp/mokocli
+            cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
+            echo "MOKO_CLI=/tmp/mokocli/cli" >> "$GITHUB_ENV"
+          fi
+
+      - name: Bump version
+        run: |
+          php ${MOKO_CLI}/version_auto_bump.php \
+            --path . --branch "${GITHUB_REF_NAME}" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"

.mokogitea/workflows/auto-release.yml

@@ -27,7 +27,7 @@ name: "Universal: Build & Release"
 
 on:
   pull_request:
-    types: [opened, closed]
+    types: [opened, synchronize, closed]
     branches:
       - main
     paths-ignore:
@@ -52,7 +52,7 @@ on:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
   GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
   GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
 
@@ -66,6 +66,7 @@ jobs:
     runs-on: release
     if: >-
       (github.event.action == 'opened' && github.event.pull_request.merged != true) ||
+      (github.event.action == 'synchronize' && github.event.pull_request.merged != true) ||
       (github.event_name == 'workflow_dispatch' && inputs.action == 'promote-rc')
 
     steps:
@@ -101,7 +102,7 @@ jobs:
           php ${MOKO_CLI}/branch_rename.php \
             --from "${{ github.event.pull_request.head.ref || 'dev' }}" --to rc \
             --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --api-base "${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}" \
+            --api-base "${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}" \
             --pr "${{ github.event.pull_request.number }}"
 
       - name: Checkout rc and configure git
@@ -120,7 +121,7 @@ jobs:
 
       - name: Update RC release notes from CHANGELOG.md
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Extract [Unreleased] section from changelog
@@ -268,7 +269,7 @@ jobs:
           !startsWith(steps.platform.outputs.platform, 'joomla')
         run: |
           VERSION="${{ steps.version.outputs.version }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
           SEMVER_TAG="v${VERSION}"
 
@@ -293,7 +294,7 @@ jobs:
 
       - name: Update release notes and promote changelog
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Get the stable release info (version and ID)
@@ -362,7 +363,7 @@ jobs:
           VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
           RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
           GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           php ${MOKO_CLI}/release_mirror.php \
             --version "$VERSION" --tag "$RELEASE_TAG" \
             --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
@@ -391,7 +392,7 @@ jobs:
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Delete rc branch (ephemeral — created by promote-rc)
@@ -415,7 +416,7 @@ jobs:
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
           VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
           BRANCH_NAME="version/${VERSION}"
@@ -436,7 +437,7 @@ jobs:
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           php ${MOKO_CLI}/version_reset_dev.php \
             --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "${API_BASE}" \
             --branch dev --path . 2>&1 || true
@@ -462,5 +463,5 @@ jobs:
             echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
             echo "| Branch | \`${{ steps.version.outputs.branch }}\` |" >> $GITHUB_STEP_SUMMARY
             echo "| Tag | \`${{ steps.version.outputs.tag }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Release | [View](${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
+            echo "| Release | [View](${MOKOGITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
           fi

.mokogitea/workflows/ci-generic.yml

@@ -13,6 +13,12 @@
 name: "Generic: Project CI"
 
 on:
+  pull_request:
+    branches:
+      - main
+      - dev
+      - dev/**
+      - rc/**
   workflow_dispatch:
 
 permissions:

.mokogitea/workflows/ci-issue-reporter.yml

@@ -0,0 +1,68 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: mokocli.Universal
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# PATH: /.mokogitea/workflows/ci-issue-reporter.yml
+# VERSION: 01.00.00
+# BRIEF: Reusable workflow — creates/updates a Gitea issue when a CI gate fails.
+#        Clones MokoCLI and runs cli/ci_issue_reporter.sh.
+
+name: "Universal: CI Issue Reporter"
+
+on:
+  workflow_call:
+    inputs:
+      gate:
+        description: "CI gate name (e.g. PR Validation, Repository Health)"
+        required: true
+        type: string
+      details:
+        description: "Human-readable failure description"
+        required: true
+        type: string
+      severity:
+        description: "error or warning"
+        required: false
+        type: string
+        default: "error"
+      workflow:
+        description: "Workflow name for the issue title"
+        required: false
+        type: string
+        default: ""
+    secrets:
+      MOKOGITEA_TOKEN:
+        required: true
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  report:
+    name: "Report: ${{ inputs.gate }}"
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Clone MokoCLI
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+        run: |
+          MOKOGITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
+          git clone --depth 1 --filter=blob:none --sparse "${MOKOGITEA_URL}/MokoConsulting/MokoCLI.git" /tmp/mokocli
+          cd /tmp/mokocli && git sparse-checkout set cli/ci_issue_reporter.sh
+
+      - name: Report CI failure
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+        run: |
+          chmod +x /tmp/mokocli/cli/ci_issue_reporter.sh
+          /tmp/mokocli/cli/ci_issue_reporter.sh \
+            --gate "${{ inputs.gate }}" \
+            --details "${{ inputs.details }}" \
+            --severity "${{ inputs.severity }}" \
+            --workflow "${{ inputs.workflow }}"

.mokogitea/workflows/cleanup.yml

@@ -21,7 +21,7 @@ permissions:
   contents: write
 
 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
 
 jobs:
   cleanup:
@@ -33,17 +33,17 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GA_TOKEN }}
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
 
       - name: Delete merged branches
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Merged Branch Cleanup ==="
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
 
           # List branches via API
-          BRANCHES=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          BRANCHES=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
             "${API}/branches?limit=50" | jq -r '.[].name')
 
           DELETED=0
@@ -56,7 +56,7 @@ jobs:
             # Check if branch is merged into main
             if git merge-base --is-ancestor "origin/${BRANCH}" origin/main 2>/dev/null; then
               echo "  Deleting merged branch: ${BRANCH}"
-              curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+              curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
                 "${API}/branches/${BRANCH}" 2>/dev/null || true
               DELETED=$((DELETED + 1))
             fi
@@ -66,20 +66,20 @@ jobs:
 
       - name: Clean old workflow runs
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Workflow Run Cleanup ==="
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
           CUTOFF=$(date -d "30 days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -v-30d +%Y-%m-%dT%H:%M:%SZ)
 
           # Get old completed runs
-          RUNS=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          RUNS=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
             "${API}/actions/runs?status=completed&limit=50" | \
             jq -r ".workflow_runs[] | select(.created_at < \"${CUTOFF}\") | .id" 2>/dev/null)
 
           DELETED=0
           for RUN_ID in $RUNS; do
-            curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+            curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
               "${API}/actions/runs/${RUN_ID}" 2>/dev/null || true
             DELETED=$((DELETED + 1))
           done

.mokogitea/workflows/deploy-manual.yml

@@ -0,0 +1,126 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: MokoStandards.Deploy
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards-API
+# PATH: /templates/workflows/joomla/deploy-manual.yml.template
+# VERSION: 04.07.00
+# BRIEF: Manual SFTP deploy to dev server for Joomla repos
+
+name: "Universal: Deploy to Dev (Manual)"
+
+on:
+  workflow_dispatch:
+    inputs:
+      clear_remote:
+        description: 'Delete all remote files before uploading'
+        required: false
+        default: 'false'
+        type: boolean
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    name: SFTP Deploy to Dev
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup PHP
+        run: |
+          php -v && composer --version
+
+      - name: Setup MokoStandards tools
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
+          MOKO_CLONE_HOST: ${{ secrets.MOKOGITEA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.MOKOGITEA_TOKEN || github.token }}"}}'
+        run: |
+          git clone --depth 1 --branch main --quiet \
+            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
+            /tmp/mokostandards-api 2>/dev/null || true
+          if [ -d "/tmp/mokostandards-api" ] && [ -f "/tmp/mokostandards-api/composer.json" ]; then
+            cd /tmp/mokostandards-api && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
+          fi
+
+      - name: Check FTP configuration
+        id: check
+        env:
+          HOST: ${{ vars.DEV_FTP_HOST }}
+          PATH_VAR: ${{ vars.DEV_FTP_PATH }}
+          PORT: ${{ vars.DEV_FTP_PORT }}
+        run: |
+          if [ -z "$HOST" ] || [ -z "$PATH_VAR" ]; then
+            echo "DEV_FTP_HOST or DEV_FTP_PATH not configured -- cannot deploy"
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          echo "skip=false" >> "$GITHUB_OUTPUT"
+          echo "host=$HOST" >> "$GITHUB_OUTPUT"
+
+          REMOTE="${PATH_VAR%/}"
+          echo "remote=$REMOTE" >> "$GITHUB_OUTPUT"
+
+          [ -z "$PORT" ] && PORT="22"
+          echo "port=$PORT" >> "$GITHUB_OUTPUT"
+
+      - name: Deploy via SFTP
+        if: steps.check.outputs.skip != 'true'
+        env:
+          SFTP_KEY: ${{ secrets.DEV_FTP_KEY }}
+          SFTP_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
+          SFTP_USER: ${{ vars.DEV_FTP_USERNAME }}
+        run: |
+          SOURCE_DIR="src"
+          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
+          [ ! -d "$SOURCE_DIR" ] && { echo "No src/ or htdocs/ -- nothing to deploy"; exit 0; }
+
+          printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
+            "${{ steps.check.outputs.host }}" "${{ steps.check.outputs.port }}" "$SFTP_USER" "${{ steps.check.outputs.remote }}" \
+            > /tmp/sftp-config.json
+
+          if [ -n "$SFTP_KEY" ]; then
+            echo "$SFTP_KEY" > /tmp/deploy_key
+            chmod 600 /tmp/deploy_key
+            printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
+          else
+            printf ',"password":"%s"}' "$SFTP_PASS" >> /tmp/sftp-config.json
+          fi
+
+          DEPLOY_ARGS=(--path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json)
+          [ "${{ inputs.clear_remote }}" = "true" ] && DEPLOY_ARGS+=(--clear-remote)
+
+          PLATFORM=$(php /tmp/mokostandards-api/cli/platform_detect.php --path . 2>/dev/null || true)
+          if [ "$PLATFORM" = "waas-component" ] && [ -f "/tmp/mokostandards-api/deploy/deploy-joomla.php" ]; then
+            php /tmp/mokostandards-api/deploy/deploy-joomla.php "${DEPLOY_ARGS[@]}"
+          else
+            php /tmp/mokostandards-api/deploy/deploy-sftp.php "${DEPLOY_ARGS[@]}"
+          fi
+
+          rm -f /tmp/deploy_key /tmp/sftp-config.json
+
+      - name: Summary
+        if: always()
+        run: |
+          if [ "${{ steps.check.outputs.skip }}" = "true" ]; then
+            echo "### Deploy Skipped -- FTP not configured" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "### Manual Dev Deploy Complete" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
+            echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
+            echo "| Host | \`${{ steps.check.outputs.host }}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Remote | \`${{ steps.check.outputs.remote }}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Clear | ${{ inputs.clear_remote }} |" >> $GITHUB_STEP_SUMMARY
+          fi

.mokogitea/workflows/issue-branch.yml

@@ -5,7 +5,7 @@
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
 # INGROUP: mokocli.Automation
-# VERSION: 01.08.18
+# VERSION: 01.00.00
 # BRIEF: Auto-create feature branch when an issue is opened
 
 name: "Universal: Issue Branch"
@@ -19,7 +19,7 @@ permissions:
   issues: write
 
 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
 
 jobs:
   create-branch:
@@ -28,8 +28,8 @@ jobs:
     steps:
       - name: Create branch and comment
         run: |
-          TOKEN="${{ secrets.GA_TOKEN }}"
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
           ISSUE_NUM="${{ github.event.issue.number }}"
           ISSUE_TITLE="${{ github.event.issue.title }}"
 
@@ -58,7 +58,7 @@ jobs:
             echo "Created branch: ${BRANCH}"
 
             # Comment on issue with branch link
-            REPO_URL="${GITEA_URL}/${{ github.repository }}"
+            REPO_URL="${MOKOGITEA_URL}/${{ github.repository }}"
             BODY="Branch created: [\`${BRANCH}\`](${REPO_URL}/src/branch/${BRANCH})\n\n\`\`\`bash\ngit fetch origin\ngit checkout ${BRANCH}\n\`\`\`"
 
             curl -sf -X POST \

.mokogitea/workflows/pr-metadata-check.yml

@@ -20,7 +20,7 @@ permissions:
   contents: read
 
 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
   GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
   GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
 
@@ -55,14 +55,14 @@ jobs:
 
       - name: Validate metadata against Joomla manifest
         env:
-          GITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           php ${MOKO_CLI}/joomla_metadata_validate.php \
             --path . \
-            --token "${GITEA_TOKEN}" \
+            --token "${MOKOGITEA_TOKEN}" \
             --org "${GITEA_ORG}" \
             --repo "${GITEA_REPO}" \
-            --api-base "${GITEA_URL}/api/v1" \
+            --api-base "${MOKOGITEA_URL}/api/v1" \
             --ci
 
           if [ $? -ne 0 ]; then

.mokogitea/workflows/pre-release.yml

@@ -7,7 +7,7 @@
 # INGROUP: mokocli.Release
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/universal/pre-release.yml.template
-# VERSION: 05.01.00
+# VERSION: 05.02.00
 # BRIEF: Auto pre-release on push to dev/alpha/beta/rc branches
 
 name: "Universal: Pre-Release"
@@ -59,6 +59,11 @@ jobs:
           fetch-depth: 0
           token: ${{ secrets.MOKOGITEA_TOKEN }}
           ref: ${{ github.ref_name }}
+          submodules: recursive
+
+      - name: Update submodules to main
+        run: |
+          git submodule foreach --quiet 'git checkout main && git pull --quiet origin main' 2>/dev/null || true
 
       - name: Setup mokocli tools
         env:

.mokogitea/workflows/rc-revert.yml

@@ -29,12 +29,20 @@ jobs:
 
     steps:
       - name: Rename branch
+        env:
+          BRANCH: ${{ github.event.pull_request.head.ref }}
+          REPO: ${{ github.repository }}
+          GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
-          BRANCH="${{ github.event.pull_request.head.ref }}"
+          set -euo pipefail
+          # BRANCH is attacker-controlled (PR head ref). Strict allowlist before ANY use.
+          if ! printf '%s' "$BRANCH" | grep -Eq '^rc/[A-Za-z0-9._/-]+$'; then
+            echo "::error::Refusing unsafe branch name: $BRANCH"; exit 1
+          fi
           SUFFIX="${BRANCH#rc/}"
           DEV_BRANCH="dev/${SUFFIX}"
-          API="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}/api/v1/repos/${{ github.repository }}/branches"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API="${GITEA_URL}/api/v1/repos/${REPO}/branches"
 
           # Create dev/ branch from rc/ branch
           STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X POST \
@@ -42,25 +50,22 @@ jobs:
             -H "Content-Type: application/json" \
             -d "{\"new_branch_name\": \"${DEV_BRANCH}\", \"old_branch_name\": \"${BRANCH}\"}" \
             "${API}" 2>/dev/null || true)
-
           if [ "$STATUS" = "201" ]; then
-            echo "Created branch: ${DEV_BRANCH}" >> $GITHUB_STEP_SUMMARY
+            echo "Created branch: ${DEV_BRANCH}" >> "$GITHUB_STEP_SUMMARY"
           else
-            echo "::error::Failed to create ${DEV_BRANCH} from ${BRANCH} (HTTP ${STATUS})"
-            exit 1
+            echo "::error::Failed to create ${DEV_BRANCH} from ${BRANCH} (HTTP ${STATUS})"; exit 1
           fi
 
-          # Delete rc/ branch
-          ENCODED=$(php -r "echo rawurlencode('${BRANCH}');")
+          # Read BRANCH from the environment inside PHP (getenv, no string interpolation -> no PHP injection)
+          ENCODED=$(php -r 'echo rawurlencode(getenv("BRANCH"));')
           STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X DELETE \
             -H "Authorization: token ${TOKEN}" \
             "${API}/${ENCODED}" 2>/dev/null || true)
-
           if [ "$STATUS" = "204" ]; then
-            echo "Deleted branch: ${BRANCH}" >> $GITHUB_STEP_SUMMARY
+            echo "Deleted branch: ${BRANCH}" >> "$GITHUB_STEP_SUMMARY"
           else
             echo "::warning::Failed to delete ${BRANCH} (HTTP ${STATUS})"
           fi
 
-          echo "### RC Reverted" >> $GITHUB_STEP_SUMMARY
-          echo "${BRANCH} → ${DEV_BRANCH}" >> $GITHUB_STEP_SUMMARY
+          echo "### RC Reverted" >> "$GITHUB_STEP_SUMMARY"
+          echo "${BRANCH} → ${DEV_BRANCH}" >> "$GITHUB_STEP_SUMMARY"

.mokogitea/workflows/version-set.yml

@@ -48,7 +48,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.MOKOGITEA_TOKEN || secrets.GA_TOKEN || github.token }}
+          token: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
           ref: ${{ inputs.branch || github.ref }}
           fetch-depth: 1
 

.mokogitea/workflows/workflow-sync-trigger.yml

@@ -13,6 +13,7 @@
 name: "Universal: Workflow Sync Trigger"
 
 on:
+  workflow_dispatch:
   pull_request:
     types: [closed]
     branches:
@@ -26,8 +27,9 @@ jobs:
     name: Sync workflows to live repos
     runs-on: ubuntu-latest
     if: >-
-      github.event.pull_request.merged == true &&
-      !contains(github.event.pull_request.title, '[skip sync]')
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.pull_request.merged == true &&
+      !contains(github.event.pull_request.title, '[skip sync]'))
 
     steps:
       - name: Determine platform from repo name
@@ -49,8 +51,14 @@ jobs:
         env:
           MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
-          GITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
-          git clone --depth 1 "${GITEA_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
+          MOKOGITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
+          git clone --depth 1 "${MOKOGITEA_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
+
+      - name: Install PHP
+        run: |
+          if ! command -v php &> /dev/null; then
+            apt-get update -qq && apt-get install -y -qq php-cli php-json php-curl > /dev/null 2>&1
+          fi
 
       - name: Install dependencies
         run: |

CHANGELOG.md

@@ -1,26 +1,9 @@
 # Changelog
 ## [Unreleased]
 
-### Added
-- **Instagram carousel**: Multi-image/video posts via Meta carousel container flow (up to 10 items)
-- **Instagram Reels**: Short-form video publishing via REELS media type
-- **Instagram Stories**: Image and video story publishing via STORIES media type
-- **Instagram alt text**: Alt text support for image containers
-- **Nostr plugin**: Full NIP-01 WebSocket relay publishing with BIP-340 Schnorr signatures (pure PHP, requires ext-gmp)
-- **Nostr**: Publishes kind-1 text note events to multiple relays with automatic failover
-- **Nostr**: Raw WebSocket client using stream_socket_client (no external dependencies)
-- **Nostr**: Public key derivation and event signing via secp256k1 elliptic curve math
-- **Threads carousel**: Support up to 20-item carousel posts via Threads API multi-container flow
-- **Threads polls**: Poll creation support via poll_options parameter (2-4 options)
-- **Threads spoiler tags**: Content warning / spoiler flag support for Threads posts
-- **Threads text-only optimization**: Simplified single-step flow for text-only posts without media
-- **Facebook Reels**: Publish video Reels via Graph API video_reels endpoint (#162)
-- **Facebook Stories**: Publish image and video Stories via photo_stories/video_stories endpoints (#162)
-- **Facebook scheduled posts**: Schedule feed posts with scheduled_publish_time parameter (#162)
-- **Facebook draft posts**: Save feed posts as unpublished drafts (#162)
+## [01.08.00] --- 2026-06-23
 
-### Fixed
-- Webservices plugin Joomla 6 compatibility — `onBeforeApiRoute` receives `BeforeApiRouteEvent` object, extract router via `$event->getRouter()`
+## [01.08.00] --- 2026-06-23
 
 ## [01.07.00] --- 2026-06-23
 
@@ -33,7 +16,6 @@
 
 ### Fixed
 - **License warning**: Removed duplicate from system plugin (install script already shows it)
-- **Content plugin**: Fixed func_get_arg crash when non-article content is saved (e.g. update sites, installer)
 
 ## [01.05.00] --- 2026-06-23
 
@@ -70,24 +52,3 @@
 - **Bluesky**: Replaced md5() with hash('sha256', ...) for cache key
 - **ServiceController**: Exception details no longer exposed to client
 - **License warning**: Removed duplicate from system plugin -- install script already shows it with direct edit link
-
-## [01.04.01] --- 2026-06-21
-
-
-## [01.04.01] --- 2026-06-21
-
-
-## [01.04.00] --- 2026-06-21
-
-### Fixed
-- **Package manifest**: Added missing `plg_system_mokosuitecross_events` and `plg_system_mokosuitecross_gallery` to `pkg_mokosuitecross.xml` — these system plugins were not installed with the package
-- **Cleanup**: Removed old `src/` directory (pre-rename cruft with `mokojoomcross` files)
-
-## [01.03.00] --- 2026-06-21
-
-
-<!-- VERSION: 01.08.18 -->
-
-All notable changes to MokoSuiteCross will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

CODE_OF_CONDUCT.md

@@ -0,0 +1,46 @@
+<!--	Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+
+	This file is part of a Moko Consulting project.
+
+	SPDX-LICENSE-IDENTIFIER: GPL-3.0-or-later
+
+	This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version.
+
+	This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
+
+	You should have received a copy of the GNU General Public License (./LICENSE).
+
+	# FILE INFORMATION
+	DEFGROUP: Template-Joomla
+	INGROUP: Template-Joomla.Documentation
+	REPO: https://github.com/mokoconsulting-tech/Template-Joomla/
+  VERSION: 01.01.00
+  PATH: ./CODE_OF_CONDUCT.md
+  BRIEF: Community expectations and enforcement guidelines
+  NOTE: Adapted with attribution from the Contributor Covenant v2.1
+-->
+
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone.
+
+## Our Standards
+- Be empathetic and kind
+- Be respectful of differing opinions
+- Accept constructive feedback
+- Own mistakes and learn from them
+
+Unacceptable behavior includes sexualized language/imagery, trolling, harassment, doxing, and other inappropriate conduct.
+
+## Enforcement
+Report incidents to **hello@mokoconsulting.tech** or through GitHub Discussions if you prefer a community-visible approach. Private complaints will be reviewed promptly and fairly.
+
+## Enforcement Guidelines
+1. **Correction** — Private warning  
+2. **Warning** — Formal warning and limited interaction  
+3. **Temporary Ban** — Time-boxed exclusion  
+4. **Permanent Ban** — Removal from the community
+
+## Attribution
+Adapted from the Contributor Covenant v2.1.

GOVERNANCE.md

@@ -0,0 +1,119 @@
+<!--
+ Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+
+ This file is part of a Moko Consulting project.
+
+ SPDX-License-Identifier: GPL-3.0-or-later
+
+ This program is free software; you can redistribute it and/or modify it under the terms of
+ the GNU General Public License as published by the Free Software Foundation; either version 3
+ of the License, or (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
+ without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License (./LICENSE).
+
+ FILE INFORMATION
+ DEFGROUP: mokoconsulting-tech.Template-Joomla
+ INGROUP: MokoStandards.Governance
+ REPO: https://github.com/mokoconsulting-tech/Template-Joomla
+ VERSION: 01.01.00
+ PATH: /GOVERNANCE.md
+ BRIEF: Project governance rules, roles, and decision process for Template-Joomla
+-->
+
+[![MokoStandards](https://img.shields.io/badge/MokoStandards-04.00.04-blue)](https://github.com/mokoconsulting-tech/MokoStandards)
+
+# Project Governance
+
+## Overview
+
+This document defines the governance model for the `Template-Joomla` repository within the
+`mokoconsulting-tech` organization. It is automatically maintained by
+[MokoStandards](https://github.com/mokoconsulting-tech/MokoStandards) v04.00.04.
+
+Full governance policy is defined in the MokoStandards source repository:
+[docs/policy/GOVERNANCE.md](https://github.com/mokoconsulting-tech/MokoStandards/blob/main/docs/policy/GOVERNANCE.md)
+
+---
+
+## Roles and Responsibilities
+
+### Maintainer
+
+**GitHub**: @mokoconsulting-tech
+
+**Authority**: Final decision-making authority on all matters for this repository.
+
+**Responsibilities**:
+- Review and merge pull requests
+- Maintain code quality and standards compliance
+- Manage releases and versioning
+- Respond to issues and security reports
+
+### Contributors
+
+**Authority**: Submit changes via pull requests.
+
+**Requirements**:
+- Read and accept `CODE_OF_CONDUCT.md`
+- Follow `CONTRIBUTING.md` guidelines
+
+---
+
+## Decision-Making
+
+All changes must be submitted as pull requests. The maintainer (@mokoconsulting-tech)
+reviews and approves all changes before they are merged.
+
+### Sole Operator Policy
+
+This organization operates under a **sole operator** model. The maintainer (@mokoconsulting-tech)
+is the sole employee and owner and may self-approve pull requests when no second reviewer is
+available. The following requirements remain mandatory regardless:
+
+1. **Pull Requests Required** — all changes to protected branches go through a PR.
+2. **Automated Checks** — all CI checks must pass before merging.
+3. **Audit Trail** — issues, pull requests, and commit history are preserved.
+4. **Documentation** — changes are documented in `CHANGELOG.md`.
+
+See the full policy:
+[Sole Operator Policy](https://github.com/mokoconsulting-tech/MokoStandards/blob/main/docs/policy/GOVERNANCE.md#sole-operator-policy)
+
+---
+
+## Change Management
+
+| Change Type | Approval | Process |
+|-------------|----------|---------|
+| Routine (docs, bug fixes) | Maintainer | PR → CI pass → merge |
+| Significant (new features) | Maintainer | PR with description → CI pass → merge |
+| Major (breaking, architecture) | Maintainer | Issue discussion → PR → CI pass → merge |
+| Emergency (security) | Maintainer | Labelled `EMERGENCY` → immediate merge → post-mortem |
+
+---
+
+## Reporting Issues
+
+- **Bugs / Features**: Open a [GitHub Issue](https://github.com/mokoconsulting-tech/Template-Joomla/issues)
+- **Security vulnerabilities**: See [SECURITY.md](./SECURITY.md)
+- **Code of Conduct**: See [CODE_OF_CONDUCT.md](./CODE_OF_CONDUCT.md)
+- **Contact**: dev@mokoconsulting.tech
+
+---
+
+## Metadata
+
+| Field         | Value                                           |
+| ------------- | ----------------------------------------------- |
+| Document Type | Policy                                          |
+| Domain        | Governance                                      |
+| Applies To    | mokoconsulting-tech/Template-Joomla                           |
+| Jurisdiction  | Tennessee, USA                                  |
+| Maintainer    | @mokoconsulting-tech                            |
+| Standards     | MokoStandards v04.00.04            |
+| Repo          | https://github.com/mokoconsulting-tech/Template-Joomla        |
+| Path          | /GOVERNANCE.md                                  |
+| Status        | Active — auto-maintained by MokoStandards       |

README.md

@@ -1,6 +1,6 @@
 # MokoSuiteCross
 
-<!-- VERSION: 01.08.18 -->
+<!-- VERSION: 01.08.00 -->
 
 Cross-posting Joomla content to social media, email marketing, and chat platforms for Joomla 5/6.
 

SECURITY.md

@@ -0,0 +1,241 @@
+<!--
+Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+
+This file is part of a Moko Consulting project.
+
+SPDX-License-Identifier: GPL-3.0-or-later
+
+This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+# FILE INFORMATION
+DEFGROUP: Template-Joomla
+INGROUP: Template-Joomla.Documentation
+REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Joomla
+PATH: /SECURITY.md
+VERSION: 01.01.00
+BRIEF: Security vulnerability reporting and handling policy
+-->
+
+# Security Policy
+
+## Purpose and Scope
+
+This document defines the security vulnerability reporting, response, and disclosure policy for this Joomla Plugin template repository. It establishes the authoritative process for responsible disclosure, assessment, remediation, and communication of security issues.
+
+## Supported Versions
+
+Security updates are provided for the following versions:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 01.x.x  | :white_check_mark: |
+| < 01.0  | :x:                |
+
+Only the current major version receives security updates. Users should upgrade to the latest supported version to receive security patches.
+
+## Reporting a Vulnerability
+
+### Where to Report
+
+**DO NOT** create public GitHub issues for security vulnerabilities.
+
+Report security vulnerabilities privately to:
+
+**Email**: `security@mokoconsulting.tech`
+
+**Subject Line**: `[SECURITY] Template-Joomla - Brief Description`
+
+### What to Include
+
+A complete vulnerability report should include:
+
+1. **Description**: Clear explanation of the vulnerability
+2. **Impact**: Potential security impact and severity assessment
+3. **Affected Versions**: Which versions are vulnerable
+4. **Reproduction Steps**: Detailed steps to reproduce the issue
+5. **Proof of Concept**: Code, configuration, or demonstration (if applicable)
+6. **Suggested Fix**: Proposed remediation (if known)
+7. **Disclosure Timeline**: Your expectations for public disclosure
+
+### Response Timeline
+
+* **Initial Response**: Within 3 business days
+* **Assessment Complete**: Within 7 business days
+* **Fix Timeline**: Depends on severity (see below)
+* **Disclosure**: Coordinated with reporter
+
+## Severity Classification
+
+Vulnerabilities are classified using the following severity levels:
+
+### Critical
+* Remote code execution
+* Authentication bypass
+* Data breach or exposure of sensitive information
+* **Fix Timeline**: 7 days
+
+### High
+* Privilege escalation
+* SQL injection or command injection
+* Cross-site scripting (XSS) with significant impact
+* **Fix Timeline**: 14 days
+
+### Medium
+* Information disclosure (limited scope)
+* Denial of service
+* Security misconfigurations with moderate impact
+* **Fix Timeline**: 30 days
+
+### Low
+* Security best practice violations
+* Minor information leaks
+* Issues requiring user interaction or complex preconditions
+* **Fix Timeline**: 60 days or next release
+
+## Remediation Process
+
+1. **Acknowledgment**: Security team confirms receipt and begins investigation
+2. **Assessment**: Vulnerability is validated, severity assigned, and impact analyzed
+3. **Development**: Security patch is developed and tested
+4. **Review**: Patch undergoes security review and validation
+5. **Release**: Fixed version is released with security advisory
+6. **Disclosure**: Public disclosure follows coordinated timeline
+
+## Security Advisories
+
+Security advisories are published via:
+
+* GitHub Security Advisories
+* Release notes and CHANGELOG.md
+* Email notification to project users (if mailing list is established)
+
+Advisories include:
+
+* CVE identifier (if applicable)
+* Severity rating
+* Affected versions
+* Fixed versions
+* Mitigation steps
+* Attribution (with reporter consent)
+
+## Security Best Practices
+
+For projects using this template:
+
+### Required Controls
+
+* Enable GitHub security features (Dependabot, code scanning)
+* Implement branch protection on `main`
+* Require code review for all changes
+* Enforce signed commits (recommended)
+* Use secrets management (never commit credentials)
+* Maintain security documentation
+* Follow secure coding standards defined in MokoStandards
+
+### Joomla Plugin Security
+
+* Follow Joomla security best practices
+* Validate and sanitize all user input
+* Use Joomla's database API to prevent SQL injection
+* Properly escape output to prevent XSS
+* Implement proper access control checks
+* Use Joomla's session and authentication APIs
+* Keep Joomla and dependencies up to date
+
+### CI/CD Security
+
+* Validate all inputs
+* Sanitize outputs
+* Use least privilege access
+* Pin dependencies with hash verification
+* Scan for vulnerabilities in dependencies
+* Audit third-party actions and tools
+
+#### Automated Security Scanning
+
+All repositories SHOULD implement:
+
+**CodeQL Analysis**:
+* Enabled for PHP and other supported languages
+* Runs on: push to main, pull requests, weekly schedule
+* Query sets: `security-extended` and `security-and-quality`
+* Configuration: `.github/workflows/codeql-analysis.yml`
+
+**Dependabot Security Updates**:
+* Weekly scans for vulnerable dependencies
+* Automated pull requests for security patches
+* Configuration: `.github/dependabot.yml`
+
+**Secret Scanning**:
+* Enabled by default with push protection
+* Prevents accidental credential commits
+
+### Dependency Management
+
+* Keep dependencies up to date
+* Monitor security advisories for dependencies
+* Remove unused dependencies
+* Audit new dependencies before adoption
+* Document security-critical dependencies
+
+## Compliance and Governance
+
+This security policy is aligned with MokoStandards. Deviations require documented justification.
+
+Security policies are reviewed and updated at least annually or following significant security incidents.
+
+## Attribution and Recognition
+
+We acknowledge and appreciate responsible disclosure. With your permission, we will:
+
+* Credit you in security advisories
+* List you in CHANGELOG.md for the fix release
+* Recognize your contribution publicly (if desired)
+
+## Contact and Escalation
+
+* **Security Team**: security@mokoconsulting.tech
+* **Primary Contact**: hello@mokoconsulting.tech
+* **Escalation**: For urgent matters requiring immediate attention, contact the maintainer directly via GitHub
+
+## Out of Scope
+
+The following are explicitly out of scope:
+
+* Issues in third-party dependencies (report directly to maintainers)
+* Social engineering attacks
+* Physical security issues
+* Denial of service via resource exhaustion without amplification
+* Issues requiring physical access to systems
+* Theoretical vulnerabilities without proof of exploitability
+
+---
+
+## Metadata
+
+| Field        | Value                                                                                                         |
+| ------------ | ------------------------------------------------------------------------------------------------------------ |
+| Document     | Security Policy                                                                                               |
+| Path         | /SECURITY.md                                                                                                  |
+| Repository   | [https://github.com/mokoconsulting-tech/Template-Joomla](https://github.com/mokoconsulting-tech/Template-Joomla) |
+| Owner        | Moko Consulting                                                                                              |
+| Scope        | Security vulnerability handling                                                                              |
+| Status       | Active                                                                                                       |
+| Effective    | 2026-01-16                                                                                                   |
+
+## Revision History
+
+| Date       | Change Description                                | Author          |
+| ---------- | ------------------------------------------------- | --------------- |
+| 2026-01-16 | Initial creation for template repository          | Moko Consulting |

composer.json

@@ -1,6 +1,6 @@
 {
-    "name": "mokoconsulting/mokosuitecross",
-    "description": "Cross-posting Joomla content to social media, email marketing, and chat platforms",
+    "name": "mokoconsulting/mokojoomgallery",
+    "description": "Photo gallery management for Joomla — galleries, images, thumbnails, lightbox, and frontend display",
     "type": "joomla-package",
     "version": "01.00.00",
     "license": "GPL-3.0-or-later",
@@ -17,8 +17,10 @@
     "require-dev": {
         "squizlabs/php_codesniffer": "^3.7",
         "phpstan/phpstan": "^1.10",
-        "joomla/coding-standards": "^4.0"
+        "joomla/coding-standards": "3.0.x-dev"
     },
+    "minimum-stability": "dev",
+    "prefer-stable": true,
     "config": {
         "sort-packages": true
     }

phpstan.neon

@@ -0,0 +1,32 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# PHPStan configuration for Joomla extension repositories.
+# Extends the base MokoStandards config and adds Joomla framework class stubs
+# so PHPStan can resolve Factory, CMSApplication, User, Table, etc.
+# without requiring a full Joomla installation.
+
+parameters:
+    level: 5
+
+    paths:
+        - src
+
+    excludePaths:
+        - vendor
+        - node_modules
+
+    # Joomla framework stubs — resolved via the enterprise package from vendor/
+    stubFiles:
+        - vendor/mokoconsulting-tech/enterprise/templates/stubs/joomla.php
+
+    # Suppress errors that are structural in Joomla's service-container architecture
+    ignoreErrors:
+        # Joomla's service-based dependency injection returns mixed from getApplication()
+        - '#Cannot call method .+ on Joomla\\CMS\\Application\\CMSApplication\|null#'
+        # Factory::getX() patterns are safe at runtime even when nullable in stubs
+        - '#Call to static method [a-zA-Z]+\(\) on an interface#'
+
+    reportUnmatchedIgnoredErrors: false
+    checkMissingIterableValueType: false
+    checkGenericClassInNonGenericObjectType: false

source/language/en-GB/pkg_mokosuitecross.sys.ini

@@ -3,6 +3,6 @@
 ; License: GPL-3.0-or-later
 
 PKG_MOKOSUITECROSS="MokoSuiteCross"
-PKG_MOKOSUITECROSS_DESCRIPTION="Cross-post Joomla articles to 38 platforms including Facebook, Instagram, X/Twitter, LinkedIn, Threads, Mastodon, Bluesky, Nostr, TikTok, YouTube, Pinterest, Reddit, Medium, Telegram, Discord, Slack, Teams, Mailchimp, SendGrid, Brevo, and more. Features scheduled posting, template placeholders, UTM tagging, link shortening, caption rotation, and per-article service selection."
+PKG_MOKOSUITECROSS_DESCRIPTION="Cross-posting Joomla content to social media, email marketing, and chat platforms. Automatically publish articles to Facebook, X/Twitter, LinkedIn, Mastodon, Bluesky, Mailchimp, Telegram, Discord, and Slack."
 PKG_MOKOSUITECROSS_PHP_VERSION_ERROR="MokoSuiteCross requires PHP %s or later."
 PKG_MOKOSUITECROSS_MIGRATION_DETECTED="Perfect Publisher Pro detected! Navigate to Components → MokoSuiteCross → Dashboard to migrate your settings."

source/packages/com_mokosuitecross/mokosuitecross.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="component" method="upgrade">
     <name>com_mokosuitecross</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.05.sql

@@ -1 +0,0 @@
-/* 01.08.05 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.07.sql

@@ -1 +0,0 @@
-/* 01.08.07 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.08.sql

@@ -1 +0,0 @@
-/* 01.08.08 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.09.sql

@@ -1 +0,0 @@
-/* 01.08.09 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.10.sql

@@ -1 +0,0 @@
-/* 01.08.10 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.11.sql

@@ -1 +0,0 @@
-/* 01.08.11 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.12.sql

@@ -1 +0,0 @@
-/* 01.08.12 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.13.sql

@@ -1 +0,0 @@
-/* 01.08.13 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.14.sql

@@ -1 +0,0 @@
-/* 01.08.14 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.15.sql

@@ -1 +0,0 @@
-/* 01.08.15 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.16.sql

@@ -1 +0,0 @@
-/* 01.08.16 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.17.sql

@@ -1 +0,0 @@
-/* 01.08.17 — no schema changes */

source/packages/com_mokosuitecross/sql/updates/mysql/01.08.18.sql

@@ -1 +0,0 @@
-/* 01.08.18 — no schema changes */

source/packages/plg_content_mokosuitecross/mokosuitecross.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="content" method="upgrade">
     <name>Content - MokoSuiteCross</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_content_mokosuitecross/src/Extension/MokoSuiteCrossContent.php

@@ -270,11 +270,25 @@ XML;
 
     /**
      * Add cross-post status badges before article content in admin.
+     *
+     * Joomla 5/6 compatible — accepts both BeforeDisplayEvent and legacy parameters.
      */
-    public function onContentBeforeDisplay(\Joomla\CMS\Event\Content\BeforeDisplayEvent $event): string
+    public function onContentBeforeDisplay($event): string
     {
-        $context = $event->getContext();
-        $article = $event->getItem();
+        // Joomla 5/6 compatibility
+        if ($event instanceof \Joomla\CMS\Event\Content\BeforeDisplayEvent) {
+            $context = $event->getContext();
+            $article = $event->getItem();
+        } elseif (is_string($event)) {
+            $context = $event;
+            $article = func_get_arg(1);
+        } else {
+            return '';
+        }
+
+        if ($context !== 'com_content.article') {
+            return '';
+        }
 
         $app = $this->getApplication();
 
@@ -316,18 +330,26 @@ XML;
 
     /**
      * Dispatch cross-post when an article is saved and published.
+     *
+     * Joomla 5/6 compatible — accepts both AfterSaveEvent and legacy parameters.
      */
-    public function onContentAfterSave(\Joomla\CMS\Event\Content\AfterSaveEvent $event): void
+    public function onContentAfterSave($event): void
     {
-        $context = $event->getContext();
+        // Joomla 5/6 compatibility
+        if ($event instanceof \Joomla\CMS\Event\Content\AfterSaveEvent) {
+            $context = $event->getContext();
+            $article = $event->getItem();
+            $isNew   = $event->getIsNew();
+        } else {
+            $context = $event;
+            $article = func_get_arg(1);
+            $isNew   = func_get_arg(2);
+        }
 
         if ($context !== 'com_content.article') {
             return;
         }
 
-        $article = $event->getItem();
-        $isNew   = $event->getIsNew();
-
         if ((int) ($article->state ?? 0) !== 1) {
             return;
         }
@@ -353,18 +375,25 @@ XML;
 
     /**
      * Dispatch cross-post when article state changes to published.
+     *
+     * Joomla 5/6 compatible — accepts both ContentChangeStateEvent and legacy parameters.
      */
-    public function onContentChangeState(\Joomla\CMS\Event\Content\ContentChangeStateEvent $event): void
+    public function onContentChangeState($event): void
     {
-        $context = $event->getContext();
+        if ($event instanceof \Joomla\CMS\Event\Content\ContentChangeStateEvent) {
+            $context = $event->getContext();
+            $pks     = $event->getPks();
+            $value   = $event->getValue();
+        } else {
+            $context = $event;
+            $pks     = func_get_arg(1);
+            $value   = func_get_arg(2);
+        }
 
         if ($context !== 'com_content.article') {
             return;
         }
 
-        $pks   = $event->getPks();
-        $value = $event->getValue();
-
         $params = ComponentHelper::getParams('com_mokosuitecross');
 
         // Unpublish/trash: delete from platforms if configured

source/packages/plg_mokosuitecross_activitypub/activitypub.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - ActivityPub (Fediverse)</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_blogger/blogger.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Google Blogger</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_bluesky/bluesky.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Bluesky</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_brevo/brevo.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Brevo (Sendinblue)</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_constantcontact/constantcontact.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Constant Contact</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_convertkit/convertkit.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - ConvertKit</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_devto/devto.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Dev.to</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_discord/discord.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Discord</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_facebook/facebook.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Facebook / Meta</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_facebook/src/Extension/FacebookService.php

@@ -18,10 +18,22 @@ use Joomla\Component\MokoSuiteCross\Administrator\Service\MokoSuiteCrossDeleteIn
 use Joomla\Component\MokoSuiteCross\Administrator\Service\MokoSuiteCrossServiceInterface;
 use Joomla\Event\SubscriberInterface;
 
+/**
+ * Facebook/Meta service plugin for MokoSuiteCross.
+ *
+ * Supports two modes:
+ *   1. Default MokoSuite App — pre-configured app credentials (hidden from admin UI)
+ *   2. Custom App — user provides their own Facebook App ID and Page Access Token
+ *
+ * Credentials format:
+ *   {
+ *     "mode": "default" | "custom",
+ *     "page_access_token": "...",  // Only for custom mode
+ *     "page_id": "..."             // Required — Facebook Page ID
+ *   }
+ */
 class FacebookService extends CMSPlugin implements SubscriberInterface, MokoSuiteCrossServiceInterface, MokoSuiteCrossDeleteInterface
 {
-    private const VIDEO_EXTENSIONS = ['mp4', 'mov', 'avi', 'wmv', 'webm'];
-
     public static function getSubscribedEvents(): array
     {
         return [
@@ -53,84 +65,18 @@ class FacebookService extends CMSPlugin implements SubscriberInterface, MokoSuit
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Missing token or page_id']];
         }
 
-        $contentType = $params['content_type'] ?? 'feed';
-
-        return match ($contentType) {
-            'reel'  => $this->publishReel($message, $media, $token, $pageId, $params),
-            'story' => $this->publishStory($media, $token, $pageId),
-            default => $this->publishFeed($message, $token, $pageId, $params),
-        };
-    }
-
-    private function publishFeed(string $message, string $token, string $pageId, array $params): array
-    {
         $apiUrl = 'https://graph.facebook.com/v19.0/' . $pageId . '/feed';
 
         $postData = [
             'message' => $message,
         ];
 
+        // Attach link if provided in params
         if (!empty($params['link'])) {
             $postData['link'] = $params['link'];
         }
 
-        if (!empty($params['scheduled_at'])) {
-            $timestamp = is_numeric($params['scheduled_at'])
-                ? (int) $params['scheduled_at']
-                : strtotime($params['scheduled_at']);
-
-            if ($timestamp !== false && $timestamp > 0) {
-                $postData['scheduled_publish_time'] = $timestamp;
-                $postData['published'] = 'false';
-            }
-        } elseif (!empty($params['draft'])) {
-            $postData['published'] = 'false';
-        }
-
-        return $this->apiPost($apiUrl, $postData, $token);
-    }
-
-    private function publishReel(string $message, array $media, string $token, string $pageId, array $params): array
-    {
-        if (empty($media[0])) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Reel requires a video URL']];
-        }
-
-        $apiUrl = 'https://graph.facebook.com/v19.0/' . $pageId . '/video_reels';
-
-        $postData = [
-            'upload_phase' => 'finish',
-            'video_url'    => $media[0],
-            'description'  => $message,
-        ];
-
-        return $this->apiPost($apiUrl, $postData, $token);
-    }
-
-    private function publishStory(array $media, string $token, string $pageId): array
-    {
-        if (empty($media[0])) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Story requires a media URL']];
-        }
-
-        $mediaUrl  = $media[0];
-        $extension = strtolower(pathinfo(parse_url($mediaUrl, PHP_URL_PATH) ?: $mediaUrl, PATHINFO_EXTENSION));
-        $isVideo   = in_array($extension, self::VIDEO_EXTENSIONS, true);
-
-        if ($isVideo) {
-            $apiUrl  = 'https://graph.facebook.com/v19.0/' . $pageId . '/video_stories';
-            $postData = ['video_url' => $mediaUrl];
-        } else {
-            $apiUrl  = 'https://graph.facebook.com/v19.0/' . $pageId . '/photo_stories';
-            $postData = ['photo_url' => $mediaUrl];
-        }
-
-        return $this->apiPost($apiUrl, $postData, $token);
-    }
-
-    private function apiPost(string $url, array $postData, string $token): array
-    {
-        $ch = curl_init($url);
+        $ch = curl_init($apiUrl);
         curl_setopt_array($ch, [
             CURLOPT_POST           => true,
             CURLOPT_POSTFIELDS     => http_build_query($postData),
@@ -142,18 +88,20 @@ class FacebookService extends CMSPlugin implements SubscriberInterface, MokoSuit
         $response = curl_exec($ch);
 
         if ($response === false) {
+
             $curlError = curl_error($ch);
+
             curl_close($ch);
 
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
-        }
 
+        }
         $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         curl_close($ch);
 
         $data = json_decode($response, true) ?: [];
 
-        if ($httpCode >= 200 && $httpCode < 300 && !empty($data['id'])) {
+        if ($httpCode === 200 && !empty($data['id'])) {
             return ['success' => true, 'platform_post_id' => $data['id'], 'response' => $data];
         }
 
@@ -195,7 +143,7 @@ class FacebookService extends CMSPlugin implements SubscriberInterface, MokoSuit
 
     public function getMaxLength(): int
     {
-        return 0;
+        return 0; // No practical limit
     }
 
     public function supportsMedia(): bool

source/packages/plg_mokosuitecross_ghost/ghost.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Ghost</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_googlebusiness/googlebusiness.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Google Business Profile</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_googlechat/googlechat.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Google Chat</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_hashnode/hashnode.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Hashnode</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_instagram/instagram.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Instagram</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-06-23</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_instagram/src/Extension/InstagramService.php

@@ -20,7 +20,7 @@ use Joomla\Event\SubscriberInterface;
 /**
  * Instagram service plugin for MokoSuiteCross.
  *
- * Uses the Meta Content Publishing API -- a 2-step flow:
+ * Uses the Meta Content Publishing API — a 2-step flow:
  * 1. Create a media container via POST /{ig_user_id}/media
  * 2. Publish the container via POST /{ig_user_id}/media_publish
  */
@@ -50,128 +50,24 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Missing access token or Instagram account ID.']];
         }
 
-        if (empty($media)) {
+        // Step 1: Create media container
+        $containerUrl = 'https://graph.facebook.com/v19.0/' . urlencode($accountId) . '/media';
+        $containerData = [
+            'caption'      => mb_substr($message, 0, 2200),
+            'access_token' => $token,
+        ];
+
+        // Attach image if provided
+        if (!empty($media[0])) {
+            $containerData['image_url'] = $media[0];
+        } else {
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Instagram requires at least one image or video.']];
         }
 
-        $caption   = mb_substr($message, 0, 2200);
-        $mediaType = $params['media_type'] ?? '';
-        $altText   = $params['alt_text'] ?? '';
-
-        if ($mediaType === 'reels') {
-            return $this->publishReels($accountId, $token, $caption, $media[0]);
-        }
-
-        if ($mediaType === 'stories') {
-            return $this->publishStories($accountId, $token, $media[0]);
-        }
-
-        if (\count($media) > 1) {
-            return $this->publishCarousel($accountId, $token, $caption, $media, $altText);
-        }
-
-        $fields = [
-            'caption'   => $caption,
-            'image_url' => $media[0],
-        ];
-
-        if ($altText !== '') {
-            $fields['alt_text'] = $altText;
-        }
-
-        $container = $this->createContainer($accountId, $token, $fields);
-
-        if (!$container['success']) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => $container['data'] ?? ['error' => $container['error']]];
-        }
-
-        return $this->publishContainer($accountId, $token, $container['id']);
-    }
-
-    private function publishCarousel(string $accountId, string $token, string $caption, array $media, string $altText): array
-    {
-        $media    = \array_slice($media, 0, 10);
-        $childIds = [];
-
-        foreach ($media as $url) {
-            $fields = ['is_carousel_item' => 'true'];
-
-            if ($this->isVideoUrl($url)) {
-                $fields['video_url'] = $url;
-            } else {
-                $fields['image_url'] = $url;
-
-                if ($altText !== '') {
-                    $fields['alt_text'] = $altText;
-                }
-            }
-
-            $child = $this->createContainer($accountId, $token, $fields);
-
-            if (!$child['success']) {
-                return ['success' => false, 'platform_post_id' => '', 'response' => $child['data'] ?? ['error' => $child['error']]];
-            }
-
-            $childIds[] = $child['id'];
-        }
-
-        $carousel = $this->createContainer($accountId, $token, [
-            'media_type' => 'CAROUSEL',
-            'caption'    => $caption,
-            'children'   => implode(',', $childIds),
-        ]);
-
-        if (!$carousel['success']) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => $carousel['data'] ?? ['error' => $carousel['error']]];
-        }
-
-        return $this->publishContainer($accountId, $token, $carousel['id']);
-    }
-
-    private function publishReels(string $accountId, string $token, string $caption, string $videoUrl): array
-    {
-        $container = $this->createContainer($accountId, $token, [
-            'media_type' => 'REELS',
-            'video_url'  => $videoUrl,
-            'caption'    => $caption,
-        ]);
-
-        if (!$container['success']) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => $container['data'] ?? ['error' => $container['error']]];
-        }
-
-        return $this->publishContainer($accountId, $token, $container['id']);
-    }
-
-    private function publishStories(string $accountId, string $token, string $mediaUrl): array
-    {
-        $fields = ['media_type' => 'STORIES'];
-
-        if ($this->isVideoUrl($mediaUrl)) {
-            $fields['video_url'] = $mediaUrl;
-        } else {
-            $fields['image_url'] = $mediaUrl;
-        }
-
-        $container = $this->createContainer($accountId, $token, $fields);
-
-        if (!$container['success']) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => $container['data'] ?? ['error' => $container['error']]];
-        }
-
-        return $this->publishContainer($accountId, $token, $container['id']);
-    }
-
-    private function createContainer(string $accountId, string $token, array $fields): array
-    {
-        $url = 'https://graph.facebook.com/v19.0/' . urlencode($accountId) . '/media';
-
-        $fields['access_token'] = $token;
-
-        $ch = curl_init($url);
+        $ch = curl_init($containerUrl);
         curl_setopt_array($ch, [
             CURLOPT_POST           => true,
-            CURLOPT_POSTFIELDS     => http_build_query($fields),
+            CURLOPT_POSTFIELDS     => http_build_query($containerData),
             CURLOPT_RETURNTRANSFER => true,
             CURLOPT_TIMEOUT        => 30,
         ]);
@@ -179,34 +75,36 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
         $response = curl_exec($ch);
 
         if ($response === false) {
-            $curlError = curl_error($ch);
-            curl_close($ch);
-            return ['success' => false, 'error' => 'Connection error: ' . $curlError];
-        }
 
+            $curlError = curl_error($ch);
+
+            curl_close($ch);
+
+            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
+
+        }
         $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         curl_close($ch);
 
         $data = json_decode($response, true) ?: [];
 
         if ($httpCode < 200 || $httpCode >= 300 || empty($data['id'])) {
-            return ['success' => false, 'error' => $data['error']['message'] ?? 'Container creation failed', 'data' => $data];
+            return ['success' => false, 'platform_post_id' => '', 'response' => $data];
         }
 
-        return ['success' => true, 'id' => $data['id'], 'data' => $data];
-    }
+        $containerId = $data['id'];
 
-    private function publishContainer(string $accountId, string $token, string $containerId): array
-    {
-        $url = 'https://graph.facebook.com/v19.0/' . urlencode($accountId) . '/media_publish';
+        // Step 2: Publish the container
+        $publishUrl = 'https://graph.facebook.com/v19.0/' . urlencode($accountId) . '/media_publish';
+        $publishData = [
+            'creation_id'  => $containerId,
+            'access_token' => $token,
+        ];
 
-        $ch = curl_init($url);
+        $ch = curl_init($publishUrl);
         curl_setopt_array($ch, [
             CURLOPT_POST           => true,
-            CURLOPT_POSTFIELDS     => http_build_query([
-                'creation_id'  => $containerId,
-                'access_token' => $token,
-            ]),
+            CURLOPT_POSTFIELDS     => http_build_query($publishData),
             CURLOPT_RETURNTRANSFER => true,
             CURLOPT_TIMEOUT        => 30,
         ]);
@@ -214,11 +112,14 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
         $response = curl_exec($ch);
 
         if ($response === false) {
-            $curlError = curl_error($ch);
-            curl_close($ch);
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
-        }
 
+            $curlError = curl_error($ch);
+
+            curl_close($ch);
+
+            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
+
+        }
         $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         curl_close($ch);
 
@@ -231,11 +132,6 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
         return ['success' => false, 'platform_post_id' => '', 'response' => $data];
     }
 
-    private function isVideoUrl(string $url): bool
-    {
-        return (bool) preg_match('/\.(mp4|mov|avi|wmv|webm)(\?|$)/i', $url);
-    }
-
     public function validateCredentials(array $credentials): array
     {
         $token     = $this->resolveCredential($credentials, 'access_token');
@@ -254,9 +150,13 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
         $response = curl_exec($ch);
 
         if ($response === false) {
+
             $curlError = curl_error($ch);
+
             curl_close($ch);
+
             return ['valid' => false, 'message' => 'Connection error: ' . $curlError, 'account_name' => ''];
+
         }
         curl_close($ch);
 
@@ -283,6 +183,6 @@ class InstagramService extends CMSPlugin implements SubscriberInterface, MokoSui
 
     public function getSupportedMediaTypes(): array
     {
-        return ['image', 'video', 'carousel', 'reels', 'stories'];
+        return ['image', 'video'];
     }
 }

source/packages/plg_mokosuitecross_linkedin/linkedin.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - LinkedIn</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_mailchimp/mailchimp.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Mailchimp</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_mastodon/mastodon.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Mastodon</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_matrix/matrix.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Matrix / Element</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_medium/medium.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Medium</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_mokosuitecalendar/mokosuitecalendar.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - MokoSuiteCalendar Events</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_mokosuitegallery/mokosuitegallery.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - MokoSuiteGallery</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_nostr/language/en-GB/plg_mokosuitecross_nostr.ini

@@ -1,2 +1,2 @@
 PLG_MOKOSUITECROSS_NOSTR="MokoSuiteCross - Nostr"
-PLG_MOKOSUITECROSS_NOSTR_DESCRIPTION="Cross-post Joomla articles to Nostr relays via NIP-01 WebSocket protocol. Requires PHP ext-gmp for secp256k1 Schnorr signing."
+PLG_MOKOSUITECROSS_NOSTR_DESCRIPTION="Cross-post Joomla articles to Nostr."

source/packages/plg_mokosuitecross_nostr/nostr.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Nostr</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_nostr/src/Extension/NostrService.php

@@ -20,18 +20,12 @@ use Joomla\Event\SubscriberInterface;
 /**
  * Nostr service plugin for MokoSuiteCross.
  *
- * Publishes kind-1 text note events to NIP-01 WebSocket relays.
- * Uses BIP-340 Schnorr signatures over secp256k1 (requires ext-gmp).
- *
- * Credentials: private_key (64-char hex nsec), relays (comma-separated wss:// URLs)
+ * Nostr uses NIP-01 WebSocket relays for event publishing.
+ * This is a stub — full WebSocket implementation is deferred.
+ * Events are signed with the private key and sent to configured relays.
  */
 class NostrService extends CMSPlugin implements SubscriberInterface, MokoSuiteCrossServiceInterface
 {
-    private const SECP256K1_P  = 'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F';
-    private const SECP256K1_N  = 'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141';
-    private const SECP256K1_GX = '79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798';
-    private const SECP256K1_GY = '483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8';
-
     public static function getSubscribedEvents(): array
     {
         return ['onMokoSuiteCrossGetServices' => 'onMokoSuiteCrossGetServices'];
@@ -49,10 +43,6 @@ class NostrService extends CMSPlugin implements SubscriberInterface, MokoSuiteCr
 
     public function publish(string $message, array $media, array $credentials, array $params): array
     {
-        if (!extension_loaded('gmp')) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'PHP ext-gmp is required for Nostr signing.']];
-        }
-
         $privateKey = $credentials['private_key'] ?? '';
         $relays     = $credentials['relays'] ?? '';
 
@@ -60,393 +50,48 @@ class NostrService extends CMSPlugin implements SubscriberInterface, MokoSuiteCr
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Missing private key or relay URLs.']];
         }
 
-        $privateKey = strtolower(trim($privateKey));
-
-        if (!preg_match('/^[0-9a-f]{64}$/', $privateKey)) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Private key must be 64 hex characters.']];
-        }
-
-        $pubkey = $this->getPublicKey($privateKey);
-
-        $event = $this->createEvent($pubkey, $message);
-        $event['sig'] = $this->schnorrSign($event['id'], $privateKey);
-
-        $relayList = array_filter(array_map('trim', explode(',', $relays)));
-        $lastError = '';
-        $published = false;
-
-        foreach ($relayList as $relayUrl) {
-            $result = $this->publishToRelay($relayUrl, $event);
-
-            if ($result['success']) {
-                $published = true;
-                break;
-            }
-
-            $lastError = $result['error'];
-        }
-
-        if (!$published) {
-            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'All relays failed. Last: ' . $lastError]];
-        }
-
+        // Nostr requires WebSocket connections to relays (wss://).
+        // Full NIP-01 event signing and relay publishing is not yet implemented.
         return [
-            'success'          => true,
-            'platform_post_id' => $event['id'],
-            'response'         => ['event_id' => $event['id'], 'relay' => $relayUrl ?? ''],
+            'success'          => false,
+            'platform_post_id' => '',
+            'response'         => ['error' => 'Nostr WebSocket relay publishing is not yet implemented. This service will be available in a future release.'],
         ];
     }
 
     public function validateCredentials(array $credentials): array
     {
-        if (!extension_loaded('gmp')) {
-            return ['valid' => false, 'message' => 'PHP ext-gmp is required for Nostr.', 'account_name' => ''];
-        }
-
-        $privateKey = strtolower(trim($credentials['private_key'] ?? ''));
+        $privateKey = $credentials['private_key'] ?? '';
         $relays     = $credentials['relays'] ?? '';
 
         if (empty($privateKey)) {
             return ['valid' => false, 'message' => 'Private key is required.', 'account_name' => ''];
         }
 
-        if (!preg_match('/^[0-9a-f]{64}$/', $privateKey)) {
-            return ['valid' => false, 'message' => 'Private key must be 64 hex characters.', 'account_name' => ''];
-        }
-
         if (empty($relays)) {
             return ['valid' => false, 'message' => 'At least one relay URL is required.', 'account_name' => ''];
         }
 
+        // Validate that relay URLs look like WebSocket URLs
         $relayList = array_filter(array_map('trim', explode(',', $relays)));
+        $valid     = true;
 
         foreach ($relayList as $relay) {
             if (!str_starts_with($relay, 'wss://') && !str_starts_with($relay, 'ws://')) {
-                return ['valid' => false, 'message' => 'Relay URLs must start with wss:// or ws://.', 'account_name' => ''];
+                $valid = false;
+                break;
             }
         }
 
-        $pubkey = $this->getPublicKey($privateKey);
-        $npub   = substr($pubkey, 0, 16) . '...';
+        if (!$valid) {
+            return ['valid' => false, 'message' => 'Relay URLs must start with wss:// or ws://.', 'account_name' => ''];
+        }
 
-        return ['valid' => true, 'message' => count($relayList) . ' relay(s) configured', 'account_name' => 'npub:' . $npub];
+        return ['valid' => true, 'message' => 'Credentials configured (' . count($relayList) . ' relay(s))', 'account_name' => 'Nostr'];
     }
 
     public function getSupportedMediaTypes(): array
     {
         return [];
     }
-
-    // -- NIP-01 event creation --
-
-    private function createEvent(string $pubkey, string $content, int $kind = 1, array $tags = []): array
-    {
-        $createdAt  = time();
-        $serialized = json_encode([0, $pubkey, $createdAt, $kind, $tags, $content], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
-        $id         = hash('sha256', $serialized);
-
-        return [
-            'id'         => $id,
-            'pubkey'     => $pubkey,
-            'created_at' => $createdAt,
-            'kind'       => $kind,
-            'tags'       => $tags,
-            'content'    => $content,
-            'sig'        => '',
-        ];
-    }
-
-    // -- WebSocket relay publishing --
-
-    private function publishToRelay(string $relayUrl, array $event): array
-    {
-        $parsed = parse_url($relayUrl);
-
-        if (!$parsed || !isset($parsed['host'])) {
-            return ['success' => false, 'error' => 'Invalid relay URL'];
-        }
-
-        $scheme = $parsed['scheme'] ?? 'wss';
-        $host   = $parsed['host'];
-        $port   = $parsed['port'] ?? ($scheme === 'wss' ? 443 : 80);
-        $path   = $parsed['path'] ?? '/';
-        $useTls = ($scheme === 'wss');
-
-        $address = ($useTls ? 'tls://' : 'tcp://') . $host . ':' . $port;
-        $context = stream_context_create(['ssl' => ['verify_peer' => true, 'verify_peer_name' => true]]);
-
-        $socket = @stream_socket_client($address, $errno, $errstr, 10, STREAM_CLIENT_CONNECT, $context);
-
-        if (!$socket) {
-            return ['success' => false, 'error' => "Connection failed: {$errstr} ({$errno})"];
-        }
-
-        stream_set_timeout($socket, 10);
-
-        // WebSocket upgrade handshake
-        $wsKey     = base64_encode(random_bytes(16));
-        $handshake = "GET {$path} HTTP/1.1\r\n"
-            . "Host: {$host}\r\n"
-            . "Upgrade: websocket\r\n"
-            . "Connection: Upgrade\r\n"
-            . "Sec-WebSocket-Key: {$wsKey}\r\n"
-            . "Sec-WebSocket-Version: 13\r\n"
-            . "\r\n";
-
-        fwrite($socket, $handshake);
-
-        $response = '';
-
-        while (($line = fgets($socket)) !== false) {
-            $response .= $line;
-
-            if (trim($line) === '') {
-                break;
-            }
-        }
-
-        if (strpos($response, '101') === false) {
-            fclose($socket);
-
-            return ['success' => false, 'error' => 'WebSocket upgrade failed'];
-        }
-
-        // Send EVENT message
-        $payload = json_encode(['EVENT', $event], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
-        $this->wsWrite($socket, $payload);
-
-        // Read OK response (with timeout)
-        $reply = $this->wsRead($socket);
-        fclose($socket);
-
-        if ($reply === null) {
-            return ['success' => false, 'error' => 'No response from relay'];
-        }
-
-        $decoded = json_decode($reply, true);
-
-        if (!is_array($decoded) || ($decoded[0] ?? '') !== 'OK') {
-            $msg = is_array($decoded) ? ($decoded[3] ?? $decoded[2] ?? 'Unknown error') : 'Invalid response';
-
-            return ['success' => false, 'error' => (string) $msg];
-        }
-
-        // ["OK", event_id, true/false, message]
-        $accepted = $decoded[2] ?? false;
-
-        if (!$accepted) {
-            return ['success' => false, 'error' => $decoded[3] ?? 'Relay rejected event'];
-        }
-
-        return ['success' => true, 'error' => ''];
-    }
-
-    private function wsWrite($socket, string $data): void
-    {
-        $len    = strlen($data);
-        $frame  = chr(0x81); // text frame, FIN bit set
-        $mask   = random_bytes(4);
-
-        if ($len < 126) {
-            $frame .= chr($len | 0x80); // mask bit set
-        } elseif ($len < 65536) {
-            $frame .= chr(126 | 0x80) . pack('n', $len);
-        } else {
-            $frame .= chr(127 | 0x80) . pack('J', $len);
-        }
-
-        $frame .= $mask;
-
-        for ($i = 0; $i < $len; $i++) {
-            $frame .= $data[$i] ^ $mask[$i % 4];
-        }
-
-        fwrite($socket, $frame);
-    }
-
-    private function wsRead($socket): ?string
-    {
-        $header = fread($socket, 2);
-
-        if ($header === false || strlen($header) < 2) {
-            return null;
-        }
-
-        $len = ord($header[1]) & 0x7F;
-
-        if ($len === 126) {
-            $ext = fread($socket, 2);
-            $len = unpack('n', $ext)[1];
-        } elseif ($len === 127) {
-            $ext = fread($socket, 8);
-            $len = unpack('J', $ext)[1];
-        }
-
-        $masked = (ord($header[1]) & 0x80) !== 0;
-        $mask   = $masked ? fread($socket, 4) : '';
-        $data   = '';
-
-        while (strlen($data) < $len) {
-            $chunk = fread($socket, $len - strlen($data));
-
-            if ($chunk === false) {
-                break;
-            }
-
-            $data .= $chunk;
-        }
-
-        if ($masked) {
-            for ($i = 0; $i < strlen($data); $i++) {
-                $data[$i] = $data[$i] ^ $mask[$i % 4];
-            }
-        }
-
-        return $data;
-    }
-
-    // -- BIP-340 Schnorr signature over secp256k1 --
-
-    private function getPublicKey(string $privateKeyHex): string
-    {
-        $d = gmp_init($privateKeyHex, 16);
-        $G = [gmp_init(self::SECP256K1_GX, 16), gmp_init(self::SECP256K1_GY, 16)];
-
-        $point = $this->ecMultiply($G, $d);
-
-        return str_pad(gmp_strval($point[0], 16), 64, '0', STR_PAD_LEFT);
-    }
-
-    private function schnorrSign(string $messageHex, string $privateKeyHex): string
-    {
-        $p = gmp_init(self::SECP256K1_P, 16);
-        $n = gmp_init(self::SECP256K1_N, 16);
-        $G = [gmp_init(self::SECP256K1_GX, 16), gmp_init(self::SECP256K1_GY, 16)];
-
-        $d  = gmp_init($privateKeyHex, 16);
-        $P  = $this->ecMultiply($G, $d);
-        $px = str_pad(gmp_strval($P[0], 16), 64, '0', STR_PAD_LEFT);
-
-        // BIP-340: if P.y is odd, negate d
-        if (gmp_testbit($P[1], 0)) {
-            $d = gmp_sub($n, $d);
-        }
-
-        $dBytes   = hex2bin(str_pad(gmp_strval($d, 16), 64, '0', STR_PAD_LEFT));
-        $auxRand  = random_bytes(32);
-        $t        = $dBytes ^ $this->taggedHash('BIP0340/aux', $auxRand);
-        $pxBytes  = hex2bin($px);
-        $msgBytes = hex2bin($messageHex);
-
-        $rand = $this->taggedHash('BIP0340/nonce', $t . $pxBytes . $msgBytes);
-        $k0   = gmp_mod(gmp_init(bin2hex($rand), 16), $n);
-
-        if (gmp_cmp($k0, 0) === 0) {
-            return str_repeat('00', 64);
-        }
-
-        $R = $this->ecMultiply($G, $k0);
-        $k = gmp_testbit($R[1], 0) ? gmp_sub($n, $k0) : $k0;
-
-        $rx      = str_pad(gmp_strval($R[0], 16), 64, '0', STR_PAD_LEFT);
-        $rxBytes = hex2bin($rx);
-
-        $eHash = $this->taggedHash('BIP0340/challenge', $rxBytes . $pxBytes . $msgBytes);
-        $e     = gmp_mod(gmp_init(bin2hex($eHash), 16), $n);
-
-        $s = gmp_mod(gmp_add($k, gmp_mul($e, $d)), $n);
-
-        return $rx . str_pad(gmp_strval($s, 16), 64, '0', STR_PAD_LEFT);
-    }
-
-    private function taggedHash(string $tag, string $data): string
-    {
-        $tagHash = hash('sha256', $tag, true);
-
-        return hash('sha256', $tagHash . $tagHash . $data, true);
-    }
-
-    // -- secp256k1 elliptic curve arithmetic --
-
-    private function ecMultiply(array $point, \GMP $scalar): array
-    {
-        $result = null;
-        $addend = $point;
-        $n      = gmp_init(self::SECP256K1_N, 16);
-
-        $scalar = gmp_mod($scalar, $n);
-
-        while (gmp_cmp($scalar, 0) > 0) {
-            if (gmp_testbit($scalar, 0)) {
-                $result = $result === null ? $addend : $this->ecAdd($result, $addend);
-            }
-
-            $addend = $this->ecDouble($addend);
-            $scalar = gmp_div_q($scalar, 2);
-        }
-
-        return $result;
-    }
-
-    private function ecAdd(array $p1, array $p2): array
-    {
-        $prime = gmp_init(self::SECP256K1_P, 16);
-
-        if (gmp_cmp($p1[0], $p2[0]) === 0 && gmp_cmp($p1[1], $p2[1]) === 0) {
-            return $this->ecDouble($p1);
-        }
-
-        $dx = gmp_mod(gmp_sub($p2[0], $p1[0]), $prime);
-
-        if (gmp_cmp($dx, 0) < 0) {
-            $dx = gmp_add($dx, $prime);
-        }
-
-        $dy = gmp_mod(gmp_sub($p2[1], $p1[1]), $prime);
-
-        if (gmp_cmp($dy, 0) < 0) {
-            $dy = gmp_add($dy, $prime);
-        }
-
-        $slope = gmp_mod(gmp_mul($dy, gmp_invert($dx, $prime)), $prime);
-        $x3    = gmp_mod(gmp_sub(gmp_sub(gmp_mul($slope, $slope), $p1[0]), $p2[0]), $prime);
-        $y3    = gmp_mod(gmp_sub(gmp_mul($slope, gmp_sub($p1[0], $x3)), $p1[1]), $prime);
-
-        if (gmp_cmp($x3, 0) < 0) {
-            $x3 = gmp_add($x3, $prime);
-        }
-
-        if (gmp_cmp($y3, 0) < 0) {
-            $y3 = gmp_add($y3, $prime);
-        }
-
-        return [$x3, $y3];
-    }
-
-    private function ecDouble(array $point): array
-    {
-        $prime = gmp_init(self::SECP256K1_P, 16);
-
-        // secp256k1 has a=0, so slope = 3*x^2 / (2*y)
-        $num   = gmp_mod(gmp_mul(3, gmp_mul($point[0], $point[0])), $prime);
-        $denom = gmp_mod(gmp_mul(2, $point[1]), $prime);
-
-        if (gmp_cmp($denom, 0) < 0) {
-            $denom = gmp_add($denom, $prime);
-        }
-
-        $slope = gmp_mod(gmp_mul($num, gmp_invert($denom, $prime)), $prime);
-        $x3    = gmp_mod(gmp_sub(gmp_mul($slope, $slope), gmp_mul(2, $point[0])), $prime);
-        $y3    = gmp_mod(gmp_sub(gmp_mul($slope, gmp_sub($point[0], $x3)), $point[1]), $prime);
-
-        if (gmp_cmp($x3, 0) < 0) {
-            $x3 = gmp_add($x3, $prime);
-        }
-
-        if (gmp_cmp($y3, 0) < 0) {
-            $y3 = gmp_add($y3, $prime);
-        }
-
-        return [$x3, $y3];
-    }
 }

source/packages/plg_mokosuitecross_ntfy/ntfy.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Ntfy Push Notifications</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_pinterest/pinterest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Pinterest</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_reddit/reddit.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Reddit</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_rssfeed/rssfeed.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - RSS Feed</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_sendgrid/sendgrid.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - SendGrid</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_slack/slack.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Slack</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_teams/teams.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Microsoft Teams</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_telegram/telegram.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Telegram</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_threads/src/Extension/ThreadsService.php

@@ -17,13 +17,15 @@ use Joomla\CMS\Plugin\CMSPlugin;
 use Joomla\Component\MokoSuiteCross\Administrator\Service\MokoSuiteCrossServiceInterface;
 use Joomla\Event\SubscriberInterface;
 
+/**
+ * Threads (Meta) service plugin for MokoSuiteCross.
+ *
+ * Uses the Threads Publishing API — a 2-step flow:
+ * 1. Create a media container via POST /{user_id}/threads
+ * 2. Publish the container via POST /{user_id}/threads_publish
+ */
 class ThreadsService extends CMSPlugin implements SubscriberInterface, MokoSuiteCrossServiceInterface
 {
-    private const API_BASE = 'https://graph.threads.net/v1.0/';
-    private const MAX_CAROUSEL_ITEMS = 20;
-    private const MAX_POLL_OPTIONS = 4;
-    private const MIN_POLL_OPTIONS = 2;
-
     public static function getSubscribedEvents(): array
     {
         return ['onMokoSuiteCrossGetServices' => 'onMokoSuiteCrossGetServices'];
@@ -48,104 +50,25 @@ class ThreadsService extends CMSPlugin implements SubscriberInterface, MokoSuite
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Missing access token or user ID.']];
         }
 
-        $text = mb_substr($message, 0, 500);
-        $media = array_filter($media);
-
-        if (\count($media) > 1) {
-            return $this->publishCarousel($text, $media, $userId, $token, $params);
-        }
-
-        return $this->publishSinglePost($text, $media, $userId, $token, $params);
-    }
-
-    private function publishSinglePost(string $text, array $media, string $userId, string $token, array $params): array
-    {
-        $containerUrl = self::API_BASE . urlencode($userId) . '/threads';
+        // Step 1: Create media container
+        $containerUrl = 'https://graph.threads.net/v1.0/' . urlencode($userId) . '/threads';
         $containerData = [
-            'text'         => $text,
+            'text'         => mb_substr($message, 0, 500),
             'access_token' => $token,
         ];
 
+        // Attach image if provided
         if (!empty($media[0])) {
-            $mediaType = $this->detectMediaType($media[0]);
-            $containerData['media_type'] = $mediaType;
-            $containerData[$mediaType === 'VIDEO' ? 'video_url' : 'image_url'] = $media[0];
+            $containerData['media_type'] = 'IMAGE';
+            $containerData['image_url']  = $media[0];
         } else {
             $containerData['media_type'] = 'TEXT';
         }
 
-        $this->applyPollOptions($containerData, $params);
-        $this->applySpoilerFlag($containerData, $params);
-
-        $result = $this->apiPost($containerUrl, $containerData);
-
-        if (!$result['success']) {
-            return $result;
-        }
-
-        return $this->publishContainer($userId, $token, $result['response']['id']);
-    }
-
-    private function publishCarousel(string $text, array $media, string $userId, string $token, array $params): array
-    {
-        $items = \array_slice($media, 0, self::MAX_CAROUSEL_ITEMS);
-        $childIds = [];
-
-        foreach ($items as $url) {
-            $mediaType = $this->detectMediaType($url);
-            $childData = [
-                'is_carousel_item' => 'true',
-                'media_type'       => $mediaType,
-                'access_token'     => $token,
-            ];
-            $childData[$mediaType === 'VIDEO' ? 'video_url' : 'image_url'] = $url;
-
-            $childUrl = self::API_BASE . urlencode($userId) . '/threads';
-            $result = $this->apiPost($childUrl, $childData);
-
-            if (!$result['success']) {
-                return $result;
-            }
-
-            $childIds[] = $result['response']['id'];
-        }
-
-        $carouselData = [
-            'media_type'   => 'CAROUSEL',
-            'children'     => implode(',', $childIds),
-            'text'         => $text,
-            'access_token' => $token,
-        ];
-
-        $this->applySpoilerFlag($carouselData, $params);
-
-        $carouselUrl = self::API_BASE . urlencode($userId) . '/threads';
-        $result = $this->apiPost($carouselUrl, $carouselData);
-
-        if (!$result['success']) {
-            return $result;
-        }
-
-        return $this->publishContainer($userId, $token, $result['response']['id']);
-    }
-
-    private function publishContainer(string $userId, string $token, string $containerId): array
-    {
-        $publishUrl = self::API_BASE . urlencode($userId) . '/threads_publish';
-        $publishData = [
-            'creation_id'  => $containerId,
-            'access_token' => $token,
-        ];
-
-        return $this->apiPost($publishUrl, $publishData);
-    }
-
-    private function apiPost(string $url, array $data): array
-    {
-        $ch = curl_init($url);
+        $ch = curl_init($containerUrl);
         curl_setopt_array($ch, [
             CURLOPT_POST           => true,
-            CURLOPT_POSTFIELDS     => http_build_query($data),
+            CURLOPT_POSTFIELDS     => http_build_query($containerData),
             CURLOPT_RETURNTRANSFER => true,
             CURLOPT_TIMEOUT        => 30,
         ]);
@@ -153,60 +76,61 @@ class ThreadsService extends CMSPlugin implements SubscriberInterface, MokoSuite
         $response = curl_exec($ch);
 
         if ($response === false) {
+
             $curlError = curl_error($ch);
+
             curl_close($ch);
 
             return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
-        }
 
+        }
         $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         curl_close($ch);
 
-        $responseData = json_decode($response, true) ?: [];
+        $data = json_decode($response, true) ?: [];
 
-        if ($httpCode >= 200 && $httpCode < 300 && !empty($responseData['id'])) {
-            return ['success' => true, 'platform_post_id' => (string) $responseData['id'], 'response' => $responseData];
+        if ($httpCode < 200 || $httpCode >= 300 || empty($data['id'])) {
+            return ['success' => false, 'platform_post_id' => '', 'response' => $data];
         }
 
-        return ['success' => false, 'platform_post_id' => '', 'response' => $responseData];
-    }
+        $containerId = $data['id'];
 
-    private function applyPollOptions(array &$data, array $params): void
-    {
-        $options = $params['poll_options'] ?? [];
+        // Step 2: Publish the container
+        $publishUrl = 'https://graph.threads.net/v1.0/' . urlencode($userId) . '/threads_publish';
+        $publishData = [
+            'creation_id'  => $containerId,
+            'access_token' => $token,
+        ];
 
-        if (empty($options) || !\is_array($options)) {
-            return;
+        $ch = curl_init($publishUrl);
+        curl_setopt_array($ch, [
+            CURLOPT_POST           => true,
+            CURLOPT_POSTFIELDS     => http_build_query($publishData),
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_TIMEOUT        => 30,
+        ]);
+
+        $response = curl_exec($ch);
+
+        if ($response === false) {
+
+            $curlError = curl_error($ch);
+
+            curl_close($ch);
+
+            return ['success' => false, 'platform_post_id' => '', 'response' => ['error' => 'Connection error: ' . $curlError]];
+
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        $data = json_decode($response, true) ?: [];
+
+        if ($httpCode >= 200 && $httpCode < 300 && !empty($data['id'])) {
+            return ['success' => true, 'platform_post_id' => (string) $data['id'], 'response' => $data];
         }
 
-        $options = \array_slice($options, 0, self::MAX_POLL_OPTIONS);
-
-        if (\count($options) < self::MIN_POLL_OPTIONS) {
-            return;
-        }
-
-        $data['poll'] = json_encode(['options' => array_values($options)]);
-    }
-
-    private function applySpoilerFlag(array &$data, array $params): void
-    {
-        if (!empty($params['spoiler'])) {
-            $data['spoiler'] = 'true';
-        }
-    }
-
-    private function detectMediaType(string $url): string
-    {
-        $path = strtolower(parse_url($url, PHP_URL_PATH) ?? '');
-        $videoExtensions = ['.mp4', '.mov', '.avi', '.wmv', '.webm'];
-
-        foreach ($videoExtensions as $ext) {
-            if (str_ends_with($path, $ext)) {
-                return 'VIDEO';
-            }
-        }
-
-        return 'IMAGE';
+        return ['success' => false, 'platform_post_id' => '', 'response' => $data];
     }
 
     public function validateCredentials(array $credentials): array
@@ -218,7 +142,7 @@ class ThreadsService extends CMSPlugin implements SubscriberInterface, MokoSuite
             return ['valid' => false, 'message' => 'Access token and user ID are required.', 'account_name' => ''];
         }
 
-        $ch = curl_init(self::API_BASE . urlencode($userId) . '?fields=username&access_token=' . urlencode($token));
+        $ch = curl_init('https://graph.threads.net/v1.0/' . urlencode($userId) . '?fields=username&access_token=' . urlencode($token));
         curl_setopt_array($ch, [
             CURLOPT_RETURNTRANSFER => true,
             CURLOPT_TIMEOUT        => 10,

source/packages/plg_mokosuitecross_threads/threads.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Threads (Meta)</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_tiktok/tiktok.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - TikTok</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_tumblr/tumblr.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Tumblr</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_twitter/twitter.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - X / Twitter</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_webhook/webhook.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Generic Webhook</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_whatsapp/whatsapp.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - WhatsApp Business</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_wordpress/wordpress.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - WordPress</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_mokosuitecross_youtube/youtube.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="mokosuitecross" method="upgrade">
     <name>MokoSuiteCross - Youtube</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-06-23</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_system_mokosuitecross/mokosuitecross.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="system" method="upgrade">
     <name>System - MokoSuiteCross</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_system_mokosuitecross_events/mokosuitecross_events.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="system" method="upgrade">
     <name>System - MokoSuiteCross Events</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_system_mokosuitecross_gallery/mokosuitecross_gallery.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="system" method="upgrade">
     <name>System - MokoSuiteCross Gallery</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_task_mokosuitecross/mokosuitecross.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="task" method="upgrade">
     <name>Task - MokoSuiteCross Queue Processor</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_webservices_mokosuitecross/mokosuitecross.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="webservices" method="upgrade">
     <name>Web Services - MokoSuiteCross</name>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

source/packages/plg_webservices_mokosuitecross/src/Extension/MokoSuiteCrossWebServices.php

@@ -35,9 +35,8 @@ class MokoSuiteCrossWebServices extends CMSPlugin implements SubscriberInterface
         ];
     }
 
-    public function onBeforeApiRoute($event): void
+    public function onBeforeApiRoute(&$router): void
     {
-        $router   = $event instanceof \Joomla\CMS\Event\AbstractEvent ? $event->getRouter() : $event;
         $defaults = ['component' => 'com_mokosuitecross'];
 
         $router->createCRUDRoutes('v1/mokosuitecross/posts', 'posts', $defaults);
@@ -45,6 +44,7 @@ class MokoSuiteCrossWebServices extends CMSPlugin implements SubscriberInterface
         $router->createCRUDRoutes('v1/mokosuitecross/templates', 'templates', $defaults);
         $router->createCRUDRoutes('v1/mokosuitecross/logs', 'logs', $defaults);
 
+        // Action endpoint: dispatch cross-posts for an article (POST only)
         $router->addRoute(
             new \Joomla\Router\Route(['POST'], 'v1/mokosuitecross/dispatch', 'dispatch.dispatch', [], $defaults)
         );

source/pkg_mokosuitecross.xml

@@ -2,7 +2,7 @@
 <extension type="package" method="upgrade">
     <name>MokoSuiteCross</name>
     <packagename>mokosuitecross</packagename>
-    <version>01.08.18</version>
+    <version>01.08.00</version>
     <creationDate>2026-05-28</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>