chore: sync .mokogitea/workflows/pre-release.yml from moko-platform [skip ci]

Submodule reference removed from MokoWaaS; this workflow is no longer needed.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/auto-release.yml

@@ -1,949 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Release
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/joomla/auto-release.yml.template
-# VERSION: 04.06.00
-# BRIEF: Joomla build & release — ZIP package, updates.xml, SHA-256 checksum
-#
-# +========================================================================+
-# |                    BUILD & RELEASE PIPELINE (JOOMLA)                   |
-# +========================================================================+
-# |                                                                        |
-# |  Triggers on push to main (skips bot commits + [skip ci]):             |
-# |                                                                        |
-# |  Every push:                                                           |
-# |    1. Read version from README.md                                      |
-# |    3. Set platform version (Joomla <version>)                          |
-# |    4. Update [VERSION: XX.YY.ZZ] badges in markdown files              |
-# |    5. Write updates.xml (Joomla update server XML)                      |
-# |    6. Create git tag vXX.YY.ZZ                                        |
-# |    7a. Patch: update existing Gitea Release for this minor             |
-# |    8. Build ZIP, upload asset, write SHA-256 to updates.xml             |
-# |                                                                        |
-# |  Every version change: archives main -> version/XX.YY branch           |
-# |  All patches release (including 00). Patch 00/01 = full pipeline.      |
-# |  First release only (patch == 01):                                     |
-# |    7b. Create new Gitea Release                                        |
-# |                                                                        |
-# |  GitHub mirror: stable/rc releases only (continue-on-error)            |
-# |                                                                        |
-# +========================================================================+
-
-name: Build & Release
-
-on:
-  pull_request:
-    types: [closed]
-    branches:
-      - main
-    paths:
-      - 'src/**'
-      - 'htdocs/**'
-  workflow_dispatch:
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-permissions:
-  contents: write
-
-jobs:
-  release:
-    name: Build & Release Pipeline
-    runs-on: release
-    if: >-
-      github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          token: ${{ secrets.GA_TOKEN }}
-          fetch-depth: 0
-
-      - name: Setup MokoStandards tools
-        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN }}
-          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN }}"}}'
-        run: |
-          # Ensure PHP + Composer are available
-          if ! command -v composer &> /dev/null; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
-          fi
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api
-          cd /tmp/mokostandards-api
-          composer install --no-dev --no-interaction --quiet
-
-      # -- STEP 1: Read version -----------------------------------------------
-      - name: "Step 1: Read version from README.md"
-        id: version
-        run: |
-          VERSION=$(php /tmp/mokostandards-api/cli/version_read.php --path . 2>/dev/null)
-          if [ -z "$VERSION" ]; then
-            echo "No VERSION in README.md — skipping release"
-            echo "skip=true" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-          # Derive major.minor for branch naming (patches update existing branch)
-          MINOR=$(echo "$VERSION" | awk -F. '{printf "%s.%s", $1, $2}')
-          PATCH=$(echo "$VERSION" | awk -F. '{print $3}')
-
-          MAJOR=$(echo "$VERSION" | awk -F. '{print $1}')
-          MINOR_NUM=$(echo "$VERSION" | awk -F. '{print $2}')
-
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "branch=version/${MAJOR}" >> "$GITHUB_OUTPUT"
-          echo "minor=$MINOR" >> "$GITHUB_OUTPUT"
-          echo "major=$MAJOR" >> "$GITHUB_OUTPUT"
-          echo "release_tag=stable" >> "$GITHUB_OUTPUT"
-          echo "stability=stable" >> "$GITHUB_OUTPUT"
-          echo "skip=false" >> "$GITHUB_OUTPUT"
-          if [ "$PATCH" = "00" ] || [ "$PATCH" = "01" ]; then
-            echo "is_minor=true" >> "$GITHUB_OUTPUT"
-            echo "Version: $VERSION (first release for this minor — full pipeline)"
-          else
-            echo "is_minor=false" >> "$GITHUB_OUTPUT"
-            echo "Version: $VERSION (patch — platform version + badges only)"
-          fi
-
-      # -- STEP 1b: Bump minor version (stable = minor bump, reset patch) ------
-      - name: "Step 1b: Bump minor version for stable release"
-        if: steps.version.outputs.skip != 'true'
-        id: bump
-        run: |
-          CURRENT=$(sed -n 's/.*VERSION:[[:space:]]*\([0-9][0-9]\.[0-9][0-9]\.[0-9][0-9]\).*/\1/p' README.md 2>/dev/null | head -1)
-          [ -z "$CURRENT" ] && { echo "skip=true" >> "$GITHUB_OUTPUT"; exit 0; }
-
-          MAJOR=$((10#$(echo "$CURRENT" | cut -d. -f1)))
-          MINOR=$((10#$(echo "$CURRENT" | cut -d. -f2)))
-
-          # Minor bump, reset patch. Rollover if minor > 99
-          MINOR=$((MINOR + 1))
-          if [ $MINOR -gt 99 ]; then
-            MINOR=0
-            MAJOR=$((MAJOR + 1))
-          fi
-
-          VERSION=$(printf "%02d.%02d.00" $MAJOR $MINOR)
-          TODAY=$(date +%Y-%m-%d)
-
-          echo "Stable bump: ${CURRENT} → ${VERSION} (minor)"
-
-          # Update README.md
-          sed -i "s/VERSION:[[:space:]]*${CURRENT}/VERSION: ${VERSION}/" README.md
-
-          # Update manifest
-          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          if [ -n "$MANIFEST" ]; then
-            MANIFEST_VER=$(sed -n 's/.*<version>\([^<]*\)<\/version>.*/\1/p' "$MANIFEST" | head -1)
-            [ -n "$MANIFEST_VER" ] && sed -i "s|<version>${MANIFEST_VER}</version>|<version>${VERSION}</version>|" "$MANIFEST"
-            sed -i "s|<creationDate>[^<]*</creationDate>|<creationDate>${TODAY}</creationDate>|" "$MANIFEST"
-          fi
-
-          # Promote [Unreleased] section in CHANGELOG.md to new version
-          if [ -f "CHANGELOG.md" ] && grep -qi "Unreleased" CHANGELOG.md; then
-            sed -i "s|## \[Unreleased\]|## [${VERSION}] --- ${TODAY}|" CHANGELOG.md
-            sed -i "s|## Unreleased|## [${VERSION}] --- ${TODAY}|" CHANGELOG.md
-            sed -i "2i ## [Unreleased]" CHANGELOG.md
-            sed -i "3i \\ " CHANGELOG.md
-            echo "CHANGELOG promoted to [${VERSION}]"
-          fi
-
-          # Commit and push
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          git remote set-url origin "https://jmiller:${{ secrets.GA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
-          git add -A
-          git diff --cached --quiet || {
-            git commit -m "chore(version): bump ${CURRENT} → ${VERSION} [skip ci]"
-            git push origin HEAD:main 2>&1
-          }
-
-          # Override version output for rest of pipeline
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-          echo "major=$(printf "%02d" $MAJOR)" >> "$GITHUB_OUTPUT"
-
-      - name: Check if already released
-        if: steps.version.outputs.skip != 'true'
-        id: check
-        run: |
-          TAG="${{ steps.version.outputs.release_tag }}"
-          BRANCH="${{ steps.version.outputs.branch }}"
-
-          TAG_EXISTS=false
-          BRANCH_EXISTS=false
-
-          git rev-parse "$TAG" >/dev/null 2>&1 && TAG_EXISTS=true
-          git ls-remote --heads origin "$BRANCH" 2>/dev/null | grep -q "$BRANCH" && BRANCH_EXISTS=true
-
-          echo "tag_exists=$TAG_EXISTS" >> "$GITHUB_OUTPUT"
-          echo "branch_exists=$BRANCH_EXISTS" >> "$GITHUB_OUTPUT"
-
-          # Tag and branch may persist across patch releases — never skip
-          echo "already_released=false" >> "$GITHUB_OUTPUT"
-
-      # -- SANITY CHECKS -------------------------------------------------------
-      - name: "Sanity: Pre-release validation"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.already_released != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          ERRORS=0
-
-          echo "## Pre-Release Sanity Checks (Joomla)" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-
-          # -- Version drift check (must pass before release) --------
-          README_VER=$(sed -n 's/.*VERSION:[[:space:]]*\([0-9][0-9]\.[0-9][0-9]\.[0-9][0-9]\).*/\1/p' README.md 2>/dev/null | head -1)
-          if [ "$README_VER" != "$VERSION" ]; then
-            echo "- Version drift: README says \`${README_VER}\` but releasing \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS+1))
-          else
-            echo "- Version consistent: \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          # Check CHANGELOG version matches
-          CL_VER=$(sed -n 's/.*VERSION:[[:space:]]*\([0-9][0-9]\.[0-9][0-9]\.[0-9][0-9]\).*/\1/p' CHANGELOG.md 2>/dev/null | head -1)
-          if [ -n "$CL_VER" ] && [ "$CL_VER" != "$VERSION" ]; then
-            echo "- CHANGELOG drift: \`${CL_VER}\` != \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS+1))
-          fi
-
-          # Check composer.json version if present
-          if [ -f "composer.json" ]; then
-            COMP_VER=$(sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' composer.json 2>/dev/null | head -1)
-            if [ -n "$COMP_VER" ] && [ "$COMP_VER" != "$VERSION" ]; then
-              echo "- composer.json drift: \`${COMP_VER}\` != \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS+1))
-            fi
-          fi
-
-          # Common checks
-          if [ ! -f "LICENSE" ]; then
-            echo "- Missing LICENSE file" >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS+1))
-          else
-            echo "- LICENSE present" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          if [ ! -d "src" ] && [ ! -d "htdocs" ]; then
-            echo "- Warning: No src/ or htdocs/ directory" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "- Source directory present" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          # -- Joomla: manifest version drift --------
-          MANIFEST=$(find . -maxdepth 2 -name "*.xml" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          if [ -n "$MANIFEST" ]; then
-            XML_VER=$(sed -n 's/.*<version>\([^<]*\)<\/version>.*/\1/p' "$MANIFEST" 2>/dev/null | head -1)
-            if [ -n "$XML_VER" ] && [ "$XML_VER" != "$VERSION" ]; then
-              echo "- Manifest drift: \`${XML_VER}\` != \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS+1))
-            else
-              echo "- Manifest version: \`${VERSION}\`" >> $GITHUB_STEP_SUMMARY
-            fi
-          fi
-
-          # -- Joomla: XML manifest existence --------
-          if [ -z "$MANIFEST" ]; then
-            echo "- No Joomla XML manifest found" >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS+1))
-          else
-            echo "- Manifest: \`${MANIFEST}\`" >> $GITHUB_STEP_SUMMARY
-
-            # -- Joomla: extension type check --------
-            TYPE=$(sed -n 's/.*<extension[^>]*type="\([^"]*\)".*/\1/p' "$MANIFEST" 2>/dev/null)
-            echo "- Extension type: ${TYPE:-unknown}" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          if [ "$ERRORS" -gt 0 ]; then
-            echo "**${ERRORS} error(s) — release may be incomplete**" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "**All sanity checks passed**" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      # -- STEP 2: Create or update version/XX.YY archive branch ---------------
-      # Always runs — every version change on main archives to version/XX.YY
-      - name: "Step 2: Version archive branch"
-        if: steps.check.outputs.already_released != 'true'
-        run: |
-          BRANCH="${{ steps.version.outputs.branch }}"
-          IS_MINOR="${{ steps.version.outputs.is_minor }}"
-          PATCH="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          PATCH_NUM=$(echo "$PATCH" | awk -F. '{print $3}')
-
-          # Check if branch exists
-          if git ls-remote --heads origin "$BRANCH" | grep -q "$BRANCH"; then
-            git push origin HEAD:"$BRANCH" --force
-            echo "Updated archive branch: ${BRANCH} (patch ${PATCH_NUM})" >> $GITHUB_STEP_SUMMARY
-          else
-            git checkout -b "$BRANCH" 2>/dev/null || git checkout "$BRANCH"
-            git push origin "$BRANCH" --force
-            echo "Created archive branch: ${BRANCH}" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      # -- STEP 3: Set platform version ----------------------------------------
-      - name: "Step 3: Set platform version"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.already_released != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          php /tmp/mokostandards-api/cli/version_set_platform.php \
-            --path . --version "$VERSION" --branch main
-
-      # -- STEP 4: Update version badges ----------------------------------------
-      - name: "Step 4: Update version badges"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.already_released != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          find . -name "*.md" ! -path "./.git/*" ! -path "./vendor/*" | while read -r f; do
-            if grep -q '\[VERSION:' "$f" 2>/dev/null; then
-              sed -i "s/\[VERSION:[[:space:]]*[0-9]\{2\}\.[0-9]\{2\}\.[0-9]\{2\}\]/[VERSION: ${VERSION}]/" "$f"
-            fi
-          done
-
-      # -- STEP 5: Write updates.xml (Joomla update server) ---------------------
-      - name: "Step 5: Write updates.xml"
-        id: updates
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.already_released != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          REPO="${{ github.repository }}"
-
-          # -- Parse extension metadata from XML manifest ----------------
-          MANIFEST=$(find . -maxdepth 2 -name "*.xml" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          if [ -z "$MANIFEST" ]; then
-            echo "Warning: No Joomla XML manifest found — skipping updates.xml" >> $GITHUB_STEP_SUMMARY
-            exit 0
-          fi
-
-          # Extract fields using sed (portable — no grep -P)
-          EXT_NAME=$(sed -n 's/.*<name>\([^<]*\)<\/name>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_TYPE=$(sed -n 's/.*<extension[^>]*type="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_ELEMENT=$(sed -n 's/.*<element>\([^<]*\)<\/element>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_CLIENT=$(sed -n 's/.*<extension[^>]*client="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_FOLDER=$(sed -n 's/.*<extension[^>]*group="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          TARGET_PLATFORM=$(sed -n 's/.*\(<targetplatform[^/]*\/>\).*/\1/p' "$MANIFEST" | head -1)
-          PHP_MINIMUM=$(sed -n 's/.*<php_minimum>\([^<]*\)<\/php_minimum>.*/\1/p' "$MANIFEST" | head -1)
-
-          # If EXT_NAME is a language key (e.g. PLG_SYSTEM_MOKOJGDPC), resolve from .ini
-          if echo "$EXT_NAME" | grep -qE '^[A-Z_]+$'; then
-            INI_NAME=$(find . -name "*.sys.ini" -path "*/en-GB/*" -exec grep -h "^${EXT_NAME}=" {} \; 2>/dev/null | head -1 | cut -d'"' -f2)
-            [ -z "$INI_NAME" ] && INI_NAME=$(find . -name "*.sys.ini" -exec grep -h "^${EXT_NAME}=" {} \; 2>/dev/null | head -1 | cut -d'"' -f2)
-            [ -n "$INI_NAME" ] && EXT_NAME="$INI_NAME"
-          fi
-
-          # Fallbacks
-          [ -z "$EXT_NAME" ] && EXT_NAME="${{ github.event.repository.name }}"
-          [ -z "$EXT_TYPE" ] && EXT_TYPE="component"
-
-          # Derive element if not in manifest:
-          # 1. plugin="xxx" attribute (plugins)
-          # 2. module="xxx" attribute (modules)
-          # 3. XML filename (components, packages)
-          # 4. Repo name fallback (templates, anything else)
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(sed -n 's/.*plugin="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          fi
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(sed -n 's/.*module="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          fi
-          if [ -z "$EXT_ELEMENT" ]; then
-            FNAME=$(basename "$MANIFEST" .xml | tr '[:upper:]' '[:lower:]')
-            # If filename is generic (templateDetails, manifest), use repo name
-            case "$FNAME" in
-              templatedetails|manifest) EXT_ELEMENT=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]' | tr -d ' -') ;;
-              *) EXT_ELEMENT="$FNAME" ;;
-            esac
-          fi
-          # Final fallback
-          [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-
-          # Save for Steps 7, 8, 8b
-          echo "ext_element=${EXT_ELEMENT}" >> "$GITHUB_OUTPUT"
-          echo "ext_name=${EXT_NAME}" >> "$GITHUB_OUTPUT"
-          echo "ext_type=${EXT_TYPE}" >> "$GITHUB_OUTPUT"
-          echo "ext_folder=${EXT_FOLDER}" >> "$GITHUB_OUTPUT"
-
-          # Build client tag: plugins and frontend modules need <client>site</client>
-          CLIENT_TAG=""
-          if [ -n "$EXT_CLIENT" ]; then
-            CLIENT_TAG="<client>${EXT_CLIENT}</client>"
-          elif [ "$EXT_TYPE" = "module" ] || [ "$EXT_TYPE" = "plugin" ]; then
-            CLIENT_TAG="<client>site</client>"
-          fi
-
-          # Build folder tag for plugins (required for Joomla to match the update)
-          FOLDER_TAG=""
-          if [ -n "$EXT_FOLDER" ] && [ "$EXT_TYPE" = "plugin" ]; then
-            FOLDER_TAG="<folder>${EXT_FOLDER}</folder>"
-          fi
-
-          # Build targetplatform (fallback to Joomla 5 if not in manifest)
-          if [ -z "$TARGET_PLATFORM" ]; then
-            TARGET_PLATFORM=$(printf '<targetplatform name="joomla" version="((5.[0-9])|(6.[0-9]))" %s>' "/")
-          fi
-
-          # Build php_minimum tag
-          PHP_TAG=""
-          if [ -n "$PHP_MINIMUM" ]; then
-            PHP_TAG="<php_minimum>${PHP_MINIMUM}</php_minimum>"
-          fi
-
-          # Build TYPE_PREFIX for download URL
-          TYPE_PREFIX=""
-          case "${EXT_TYPE}" in
-            plugin)    TYPE_PREFIX="plg_${EXT_FOLDER}_" ;;
-            module)    TYPE_PREFIX="mod_" ;;
-            component) TYPE_PREFIX="com_" ;;
-            template)  TYPE_PREFIX="tpl_" ;;
-            library)   TYPE_PREFIX="lib_" ;;
-            package)   TYPE_PREFIX="pkg_" ;;
-          esac
-
-          DOWNLOAD_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/stable/${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION}.zip"
-          INFO_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/stable"
-
-          # -- Build update entry for a given stability tag
-          build_entry() {
-            local TAG_NAME="$1"
-            printf '%s\n' '  <update>'
-            printf '%s\n' "    <name>${EXT_NAME}</name>"
-            printf '%s\n' "    <description>${EXT_NAME} update</description>"
-            printf '%s\n' "    <element>${EXT_ELEMENT}</element>"
-            printf '%s\n' "    <type>${EXT_TYPE}</type>"
-            printf '%s\n' "    <version>${VERSION}</version>"
-            [ -n "$CLIENT_TAG" ] && printf '%s\n' "    ${CLIENT_TAG}"
-            [ -n "$FOLDER_TAG" ] && printf '%s\n' "    ${FOLDER_TAG}"
-            printf '%s\n' "    <tags><tag>${TAG_NAME}</tag></tags>"
-            printf '%s\n' "    <infourl title=\"${EXT_NAME}\">${INFO_URL}</infourl>"
-            printf '%s\n' '    <downloads>'
-            printf '%s\n' "      <downloadurl type=\"full\" format=\"zip\">${DOWNLOAD_URL}</downloadurl>"
-            printf '%s\n' '    </downloads>'
-            printf '%s\n' "    ${TARGET_PLATFORM}"
-            [ -n "$PHP_TAG" ] && printf '%s\n' "    ${PHP_TAG}"
-            printf '%s\n' '    <maintainer>Moko Consulting</maintainer>'
-            printf '%s\n' '    <maintainerurl>https://mokoconsulting.tech</maintainerurl>'
-            printf '%s\n' '  </update>'
-          }
-
-          # -- Write updates.xml with cascading channels
-          # Stable release updates ALL channels (development, alpha, beta, rc, stable)
-          {
-            printf '%s\n' "<?xml version='1.0' encoding='UTF-8'?>"
-            printf '%s\n' "<!-- Copyright (C) $(date +%Y) Moko Consulting <hello@mokoconsulting.tech>"
-            printf '%s\n' " SPDX-License-Identifier: GPL-3.0-or-later"
-            printf '%s\n' " VERSION: ${VERSION}"
-            printf '%s\n' " -->"
-            printf '%s\n' ""
-            printf '%s\n' '<updates>'
-            build_entry "development"
-            build_entry "alpha"
-            build_entry "beta"
-            build_entry "rc"
-            build_entry "stable"
-            printf '%s\n' '</updates>'
-          } > updates.xml
-
-          echo "updates.xml: ${VERSION} (all channels updated to stable)" >> $GITHUB_STEP_SUMMARY
-
-      # -- Commit all changes ---------------------------------------------------
-      - name: Commit release changes
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.already_released != 'true'
-        run: |
-          if git diff --quiet && git diff --cached --quiet; then
-            echo "No changes to commit"
-            exit 0
-          fi
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          # Set push URL with token for branch-protected repos
-          git remote set-url origin "https://jmiller:${{ secrets.GA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
-          git add -A
-          git commit -m "chore(release): build ${VERSION} [skip ci]" \
-            --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>"
-          git push -u origin HEAD
-
-      # -- STEP 6: Create tag ---------------------------------------------------
-      - name: "Step 6: Create git tag"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.check.outputs.tag_exists != 'true' &&
-          steps.version.outputs.is_minor == 'true'
-        run: |
-          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
-          # Only create the major release tag if it doesn't exist yet
-          if ! git rev-parse "$RELEASE_TAG" >/dev/null 2>&1; then
-            git tag "$RELEASE_TAG"
-            git push origin "$RELEASE_TAG"
-            echo "Tag created: ${RELEASE_TAG}" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "Tag ${RELEASE_TAG} already exists" >> $GITHUB_STEP_SUMMARY
-          fi
-          echo "Tag: ${TAG}" >> $GITHUB_STEP_SUMMARY
-
-      # -- STEP 7: Create or update Gitea Release --------------------------------
-      - name: "Step 7: Gitea Release"
-        if: >-
-          steps.version.outputs.skip != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
-          BRANCH="${{ steps.version.outputs.branch }}"
-          MAJOR="${{ steps.version.outputs.major }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          # Reuse metadata from Step 5 (single source of truth)
-          EXT_ELEMENT="${{ steps.updates.outputs.ext_element }}"
-          EXT_NAME="${{ steps.updates.outputs.ext_name }}"
-          EXT_TYPE="${{ steps.updates.outputs.ext_type }}"
-          EXT_FOLDER="${{ steps.updates.outputs.ext_folder }}"
-
-          # Fallbacks if Step 5 was skipped
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-          fi
-          [ -z "$EXT_NAME" ] && EXT_NAME="${GITEA_REPO}"
-
-          NOTES=$(php /tmp/mokostandards-api/cli/release_notes.php --path . --version "$VERSION" 2>/dev/null)
-          [ -z "$NOTES" ] && NOTES="Release ${VERSION}"
-
-          # Build release name: "Pretty Name VERSION (type_element-VERSION)"
-          TYPE_PREFIX=""
-          case "${EXT_TYPE}" in
-            plugin)    TYPE_PREFIX="plg_${EXT_FOLDER}_" ;;
-            module)    TYPE_PREFIX="mod_" ;;
-            component) TYPE_PREFIX="com_" ;;
-            template)  TYPE_PREFIX="tpl_" ;;
-            library)   TYPE_PREFIX="lib_" ;;
-            package)   TYPE_PREFIX="pkg_" ;;
-          esac
-          RELEASE_NAME="${EXT_NAME} ${VERSION} (${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION})"
-
-          # Delete existing release if present (overwrite, not append)
-          EXISTING=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/releases/tags/${RELEASE_TAG}" 2>/dev/null || true)
-          EXISTING_ID=$(echo "$EXISTING" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('id',''))" 2>/dev/null || true)
-
-          if [ -n "$EXISTING_ID" ]; then
-            curl -sS -X DELETE -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-              "${API_BASE}/releases/${EXISTING_ID}" 2>/dev/null || true
-            curl -sS -X DELETE -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-              "${API_BASE}/tags/${RELEASE_TAG}" 2>/dev/null || true
-            echo "Deleted previous stable release (id: ${EXISTING_ID})"
-          fi
-
-          # Create fresh release
-          curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            -H "Content-Type: application/json" \
-            "${API_BASE}/releases" \
-            -d "$(python3 -c "import json; print(json.dumps({
-              'tag_name': '${RELEASE_TAG}',
-              'name': '${RELEASE_NAME}',
-              'body': '''## ${VERSION} ($(date +%Y-%m-%d))\n${NOTES}''',
-              'target_commitish': '${BRANCH}'
-            }))")"
-          echo "Release created: ${RELEASE_NAME}" >> $GITHUB_STEP_SUMMARY
-
-      # -- STEP 8: Build Joomla install ZIP + SHA-256 checksum ------------------
-      - name: "Step 8: Build Joomla package and update checksum"
-        if: >-
-          steps.version.outputs.skip != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
-          REPO="${{ github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          # All ZIPs upload to the major release tag (vXX)
-          RELEASE_JSON=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/releases/tags/${RELEASE_TAG}" 2>/dev/null || true)
-          RELEASE_ID=$(echo "$RELEASE_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-          if [ -z "$RELEASE_ID" ]; then
-            echo "No release ${RELEASE_TAG} found — skipping ZIP upload"
-            exit 0
-          fi
-
-          # Find extension element name from manifest
-          MANIFEST=$(find . -maxdepth 2 -name "*.xml" -exec grep -l '<extension' {} \; 2>/dev/null | head -1 || true)
-          [ -z "$MANIFEST" ] && exit 0
-
-          # Reuse element from Step 5, with same fallback chain
-          EXT_ELEMENT="${{ steps.updates.outputs.ext_element }}"
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(sed -n 's/.*<element>\([^<]*\)<\/element>.*/\1/p' "$MANIFEST" 2>/dev/null | head -1)
-            [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(sed -n 's/.*plugin="\([^"]*\)".*/\1/p' "$MANIFEST" 2>/dev/null | head -1)
-            [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(basename "$MANIFEST" .xml | tr '[:upper:]' '[:lower:]')
-            [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-          fi
-          # ZIP name: type_folder_element-VERSION (e.g. plg_system_mokojgdpc-01.01.00.zip)
-          EXT_TYPE=$(sed -n 's/.*<extension[^>]*type="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_FOLDER=$(sed -n 's/.*<extension[^>]*group="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          TYPE_PREFIX=""
-          case "${EXT_TYPE}" in
-            plugin)    TYPE_PREFIX="plg_${EXT_FOLDER}_" ;;
-            module)    TYPE_PREFIX="mod_" ;;
-            component) TYPE_PREFIX="com_" ;;
-            template)  TYPE_PREFIX="tpl_" ;;
-            library)   TYPE_PREFIX="lib_" ;;
-            package)   TYPE_PREFIX="pkg_" ;;
-          esac
-          ZIP_NAME="${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION}.zip"
-          TAR_NAME="${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION}.tar.gz"
-
-          # -- Build install packages from src/ ----------------------------
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          [ ! -d "$SOURCE_DIR" ] && { echo "No src/ or htdocs/ — skipping package"; exit 0; }
-
-          EXCLUDES=".ftpignore sftp-config* *.ppk *.pem *.key .env*"
-
-          # ZIP package
-          cd "$SOURCE_DIR"
-          zip -r "/tmp/${ZIP_NAME}" . -x $EXCLUDES
-          cd ..
-
-          # tar.gz package
-          tar -czf "/tmp/${TAR_NAME}" -C "$SOURCE_DIR" \
-            --exclude='.ftpignore' --exclude='sftp-config*' \
-            --exclude='*.ppk' --exclude='*.pem' --exclude='*.key' --exclude='.env*' .
-
-          ZIP_SIZE=$(stat -c%s "/tmp/${ZIP_NAME}" 2>/dev/null || stat -f%z "/tmp/${ZIP_NAME}" 2>/dev/null || echo "unknown")
-          TAR_SIZE=$(stat -c%s "/tmp/${TAR_NAME}" 2>/dev/null || stat -f%z "/tmp/${TAR_NAME}" 2>/dev/null || echo "unknown")
-
-          # -- Calculate SHA-256 for both ----------------------------------
-          SHA256_ZIP=$(sha256sum "/tmp/${ZIP_NAME}" | cut -d' ' -f1)
-          SHA256_TAR=$(sha256sum "/tmp/${TAR_NAME}" | cut -d' ' -f1)
-
-          # -- Delete existing assets with same name before uploading ------
-          ASSETS=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/releases/${RELEASE_ID}/assets" 2>/dev/null || echo "[]")
-          for ASSET_NAME in "$ZIP_NAME" "$TAR_NAME"; do
-            ASSET_ID=$(echo "$ASSETS" | python3 -c "
-          import sys,json
-          assets = json.load(sys.stdin)
-          for a in assets:
-              if a['name'] == '${ASSET_NAME}':
-                  print(a['id']); break
-          " 2>/dev/null || true)
-            if [ -n "$ASSET_ID" ]; then
-              curl -sf -X DELETE -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets/${ASSET_ID}" 2>/dev/null || true
-            fi
-          done
-
-          # -- Upload both to release tag ----------------------------------
-          curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            -H "Content-Type: application/octet-stream" \
-            --data-binary @"/tmp/${ZIP_NAME}" \
-            "${API_BASE}/releases/${RELEASE_ID}/assets?name=${ZIP_NAME}" > /dev/null 2>&1 || true
-
-          curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            -H "Content-Type: application/octet-stream" \
-            --data-binary @"/tmp/${TAR_NAME}" \
-            "${API_BASE}/releases/${RELEASE_ID}/assets?name=${TAR_NAME}" > /dev/null 2>&1 || true
-
-          # -- Update updates.xml with both download formats ---------------
-          if [ -f "updates.xml" ]; then
-            ZIP_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/${RELEASE_TAG}/${ZIP_NAME}"
-            TAR_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/${RELEASE_TAG}/${TAR_NAME}"
-
-            # Use Python to update only the stable entry's downloads + sha256
-            export PY_ZIP_URL="$ZIP_URL" PY_TAR_URL="$TAR_URL" PY_SHA="$SHA256_ZIP"
-            python3 << 'PYEOF'
-          import re, os
-
-          with open("updates.xml") as f:
-              content = f.read()
-
-          zip_url = os.environ["PY_ZIP_URL"]
-          tar_url = os.environ["PY_TAR_URL"]
-          sha = os.environ["PY_SHA"]
-
-          # Find the stable update block and replace its downloads + sha256
-          def replace_stable(m):
-              block = m.group(0)
-              # Replace downloads block
-              new_downloads = (
-                  "    <downloads>\n"
-                  f"      <downloadurl type=\"full\" format=\"zip\">{zip_url}</downloadurl>\n"
-                  "    </downloads>"
-              )
-              block = re.sub(r'    <downloads>.*?</downloads>', new_downloads, block, flags=re.DOTALL)
-              # Add or replace sha256
-              if '<sha256>' in block:
-                  block = re.sub(r'    <sha256>.*?</sha256>', f'    <sha256>{sha}</sha256>', block)
-              else:
-                  block = block.replace('</downloads>', f'</downloads>\n    <sha256>{sha}</sha256>')
-              return block
-
-          content = re.sub(
-              r'  <update>.*?<tag>stable</tag>.*?</update>',
-              replace_stable,
-              content,
-              flags=re.DOTALL
-          )
-
-          with open("updates.xml", "w") as f:
-              f.write(content)
-          PYEOF
-
-            CURRENT_BRANCH="${{ github.ref_name }}"
-            git add updates.xml
-            git commit -m "chore(release): ZIP + tar.gz for ${VERSION} [skip ci]" \
-              --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>" || true
-            git push || true
-
-            # Sync updates.xml to main via direct API (always runs — may be on version/XX branch)
-            GA_TOKEN="${{ secrets.GA_TOKEN }}"
-            API="${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${{ github.repository }}"
-
-            FILE_SHA=$(curl -sf -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/contents/updates.xml?ref=main" | jq -r '.sha // empty')
-
-            if [ -n "$FILE_SHA" ]; then
-              CONTENT=$(base64 -w0 updates.xml)
-              curl -sf -X PUT -H "Authorization: token ${GA_TOKEN}" \
-                -H "Content-Type: application/json" \
-                "${API}/contents/updates.xml" \
-                -d "$(jq -n \
-                  --arg content "$CONTENT" \
-                  --arg sha "$FILE_SHA" \
-                  --arg msg "chore: sync updates.xml ${VERSION} [skip ci]" \
-                  --arg branch "main" \
-                  '{content: $content, sha: $sha, message: $msg, branch: $branch}'
-                )" > /dev/null 2>&1 \
-                && echo "updates.xml synced to main via API" \
-                || echo "WARNING: failed to sync updates.xml to main"
-            else
-              echo "WARNING: could not get updates.xml SHA from main"
-            fi
-          fi
-
-          echo "### Joomla Packages" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| Package | Size | SHA-256 |" >> $GITHUB_STEP_SUMMARY
-          echo "|---------|------|---------|" >> $GITHUB_STEP_SUMMARY
-          echo "| \`${ZIP_NAME}\` | ${ZIP_SIZE} | \`${SHA256_ZIP}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| \`${TAR_NAME}\` | ${TAR_SIZE} | \`${SHA256_TAR}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Release | \`${RELEASE_TAG}\` | |" >> $GITHUB_STEP_SUMMARY
-          echo "| Download | [${ZIP_NAME}](${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/${RELEASE_TAG}/${ZIP_NAME}) |" >> $GITHUB_STEP_SUMMARY
-
-      # -- STEP 8b: Update release description with changelog + SHA ----------------
-      - name: "Step 8b: Update release body with changelog and SHA"
-        if: steps.version.outputs.skip != 'true'
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          EXT_ELEMENT="${{ steps.updates.outputs.ext_element }}"
-          EXT_TYPE="${{ steps.updates.outputs.ext_type }}"
-          EXT_FOLDER="${{ steps.updates.outputs.ext_folder }}"
-
-          # Build TYPE_PREFIX to match Step 8's ZIP naming
-          TYPE_PREFIX=""
-          case "${EXT_TYPE}" in
-            plugin)    TYPE_PREFIX="plg_${EXT_FOLDER}_" ;;
-            module)    TYPE_PREFIX="mod_" ;;
-            component) TYPE_PREFIX="com_" ;;
-            template)  TYPE_PREFIX="tpl_" ;;
-            library)   TYPE_PREFIX="lib_" ;;
-            package)   TYPE_PREFIX="pkg_" ;;
-          esac
-          ZIP_NAME="${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION}.zip"
-          TAR_NAME="${TYPE_PREFIX}${EXT_ELEMENT}-${VERSION}.tar.gz"
-
-          # Get SHA from the built files
-          SHA256_ZIP=""
-          [ -f "/tmp/${ZIP_NAME}" ] && SHA256_ZIP=$(sha256sum "/tmp/${ZIP_NAME}" | cut -d' ' -f1)
-          SHA256_TAR=""
-          [ -f "/tmp/${TAR_NAME}" ] && SHA256_TAR=$(sha256sum "/tmp/${TAR_NAME}" | cut -d' ' -f1)
-
-          # Extract latest changelog entry (strip the ## header to avoid duplicate)
-          CHANGELOG=""
-          if [ -f "CHANGELOG.md" ]; then
-            CHANGELOG=$(sed -n "/^## \[*${VERSION}/,/^## \[*[0-9]/p" CHANGELOG.md | sed '$d' | sed '1d')
-            [ -z "$CHANGELOG" ] && CHANGELOG=$(sed -n '/^## /,/^## /p' CHANGELOG.md | sed '$d' | sed '1d' | head -30)
-          fi
-
-          # Build release body (single header, no duplicate from changelog)
-          BODY="## ${VERSION} ($(date +%Y-%m-%d))\n\n"
-          if [ -n "$CHANGELOG" ]; then
-            BODY="${BODY}${CHANGELOG}\n\n"
-          fi
-          BODY="${BODY}---\n\n### Checksums\n\n"
-          BODY="${BODY}| File | SHA-256 |\n|------|--------|\n"
-          [ -n "$SHA256_ZIP" ] && BODY="${BODY}| \`${ZIP_NAME}\` | \`${SHA256_ZIP}\` |\n"
-          [ -n "$SHA256_TAR" ] && BODY="${BODY}| \`${TAR_NAME}\` | \`${SHA256_TAR}\` |\n"
-
-          # Get release ID and update body
-          RELEASE_ID=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/releases/tags/${RELEASE_TAG}" 2>/dev/null | \
-            python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-
-          if [ -n "$RELEASE_ID" ] && [ "$RELEASE_ID" != "None" ]; then
-            python3 -c "
-          import json, urllib.request
-          body = '''$(printf '%b' "$BODY")'''
-          data = json.dumps({'body': body}).encode()
-          req = urllib.request.Request(
-              '${API_BASE}/releases/${RELEASE_ID}',
-              data=data,
-              headers={'Authorization': 'token ${{ secrets.GA_TOKEN }}', 'Content-Type': 'application/json'},
-              method='PATCH'
-          )
-          urllib.request.urlopen(req)
-          " 2>/dev/null && echo "Release body updated with changelog + SHA" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      # -- STEP 9: Mirror to GitHub (stable only) --------------------------------
-      - name: "Step 9: Mirror release to GitHub"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          steps.version.outputs.stability == 'stable' &&
-          secrets.GH_TOKEN != ''
-        continue-on-error: true
-        env:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
-          MAJOR="${{ steps.version.outputs.major }}"
-          BRANCH="${{ steps.version.outputs.branch }}"
-          GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
-
-          NOTES=$(php /tmp/mokostandards-api/cli/release_notes.php --path . --version "$VERSION" 2>/dev/null || true)
-          [ -z "$NOTES" ] && NOTES="Release ${VERSION}"
-          echo "$NOTES" > /tmp/release_notes.md
-
-          EXISTING=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" "${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${{ github.repository }}/releases/tags/$RELEASE_TAG" 2>/dev/null | jq -r ".tag_name // empty" || true)
-
-          if [ -z "$EXISTING" ]; then
-            gh release create "$RELEASE_TAG" \
-              --repo "$GH_REPO" \
-              --title "v${MAJOR} (latest: ${VERSION})" \
-              --notes-file /tmp/release_notes.md \
-              --target "$BRANCH" || true
-          else
-            gh release edit "$RELEASE_TAG" \
-              --repo "$GH_REPO" \
-              --title "v${MAJOR} (latest: ${VERSION})" || true
-          fi
-
-          # Upload assets to GitHub mirror
-          for PKG in /tmp/${EXT_ELEMENT:-pkg}-${VERSION}.*; do
-            if [ -f "$PKG" ]; then
-              _RELID=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" "${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${{ github.repository }}/releases/tags/$RELEASE_TAG" 2>/dev/null | jq -r ".id // empty")
-              [ -n "$_RELID" ] && curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" -H "Content-Type: application/octet-stream" "${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${{ github.repository }}/releases/${_RELID}/assets?name=$(basename $PKG)" --data-binary "@$PKG" > /dev/null 2>&1 || true
-            fi
-          done
-          echo "GitHub mirror updated: ${GH_REPO} ${RELEASE_TAG}" >> $GITHUB_STEP_SUMMARY
-
-      # -- STEP 10: Sync main branch to GitHub mirror ----------------------------
-      - name: "Step 10: Push main to GitHub mirror"
-        if: >-
-          steps.version.outputs.skip != 'true' &&
-          secrets.GH_TOKEN != ''
-        continue-on-error: true
-        run: |
-          GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
-          GH_ORG=$(echo "$GH_REPO" | cut -d/ -f1)
-          GH_NAME=$(echo "$GH_REPO" | cut -d/ -f2)
-          git remote add github "https://x-access-token:${{ secrets.GH_TOKEN }}@github.com/${GH_ORG}/${GH_NAME}.git" 2>/dev/null || \
-            git remote set-url github "https://x-access-token:${{ secrets.GH_TOKEN }}@github.com/${GH_ORG}/${GH_NAME}.git"
-          git fetch origin main --depth=1
-          git push github origin/main:refs/heads/main --force 2>/dev/null \
-            && echo "main branch pushed to GitHub mirror" \
-            || echo "WARNING: GitHub mirror push failed"
-
-      # -- Clean up lesser pre-releases (cascade) ---------------------------------
-      # stable → deletes all | rc → beta,alpha,dev | beta → alpha,dev | alpha → dev
-      - name: "Delete lesser pre-release channels"
-        if: steps.version.outputs.skip != 'true'
-        continue-on-error: true
-        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.GA_TOKEN }}"
-
-          # Stable deletes all pre-release channels
-          TAGS_TO_DELETE="development alpha beta release-candidate"
-
-          DELETED=0
-          for TAG in $TAGS_TO_DELETE; do
-            RELEASE_ID=$(curl -sS -H "Authorization: token ${TOKEN}" \
-              "${API_BASE}/releases/tags/${TAG}" 2>/dev/null | \
-              python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-
-            if [ -n "$RELEASE_ID" ] && [ "$RELEASE_ID" != "None" ]; then
-              curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-                "${API_BASE}/releases/${RELEASE_ID}" 2>/dev/null || true
-              curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-                "${API_BASE}/tags/${TAG}" 2>/dev/null || true
-              echo "Deleted: ${TAG} (id: ${RELEASE_ID})"
-              DELETED=$((DELETED + 1))
-            fi
-          done
-          echo "Cleaned up ${DELETED} pre-release channel(s)" >> $GITHUB_STEP_SUMMARY
-
-      # -- STEP 11: Reset dev branch from main ------------------------------------
-      - name: "Step 11: Delete and recreate dev branch from main"
-        if: steps.version.outputs.skip != 'true'
-        continue-on-error: true
-        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.GA_TOKEN }}"
-
-          # Delete dev branch
-          curl -sf -X DELETE -H "Authorization: token ${TOKEN}" \
-            "${API_BASE}/branches/dev" 2>/dev/null && echo "Deleted dev branch"
-
-          # Recreate dev from main (now includes version bump + changelog promotion)
-          curl -sf -X POST -H "Authorization: token ${TOKEN}" \
-            -H "Content-Type: application/json" \
-            "${API_BASE}/branches" \
-            -d '{"new_branch_name":"dev","old_branch_name":"main"}' 2>/dev/null && echo "Recreated dev from main"
-
-          echo "Dev branch reset from main (keeps dev ahead after release)" >> $GITHUB_STEP_SUMMARY
-
-      # -- Summary --------------------------------------------------------------
-      - name: Pipeline Summary
-        if: always()
-        run: |
-          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
-          if [ "${{ steps.version.outputs.skip }}" = "true" ]; then
-            echo "## Release Skipped" >> $GITHUB_STEP_SUMMARY
-            echo "No VERSION in README.md" >> $GITHUB_STEP_SUMMARY
-          elif [ "${{ steps.check.outputs.already_released }}" = "true" ]; then
-            echo "## Already Released — ${VERSION}" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "## Build & Release Complete (Joomla)" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "| Step | Result |" >> $GITHUB_STEP_SUMMARY
-            echo "|------|--------|" >> $GITHUB_STEP_SUMMARY
-            echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Branch | \`${{ steps.version.outputs.branch }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Tag | \`${{ steps.version.outputs.tag }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Release | [View](${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
-          fi

.gitea/cascade-dev.yml

@@ -1,213 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Maintenance
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/cascade-dev.yml.template
-# VERSION: 02.00.00
-# BRIEF: Forward-merge main → all open branches after every push to main
-#
-# +========================================================================+
-# |                CASCADE MAIN → ALL BRANCHES                             |
-# +========================================================================+
-# |                                                                        |
-# |  Triggers on every push to main (PR merges, bot commits, etc.)         |
-# |                                                                        |
-# |  1. List all branches matching: dev, rc/*, beta/*, alpha/*             |
-# |  2. For each: create PR (main → branch), auto-merge if clean           |
-# |  3. On conflict: leave PR open for manual resolution                   |
-# |                                                                        |
-# +========================================================================+
-
-name: Cascade Main → Dev
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  cascade:
-    name: Cascade main → branches
-    runs-on: ubuntu-latest
-    if: >-
-      !contains(github.event.head_commit.message, '[skip ci]') &&
-      !contains(github.event.head_commit.message, '[skip cascade]')
-
-    steps:
-      - name: Discover target branches
-        id: branches
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          # Fetch all branches (paginated)
-          PAGE=1
-          ALL_BRANCHES=""
-          while true; do
-            BATCH=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/branches?page=${PAGE}&limit=50" \
-              | jq -r '.[].name // empty')
-            [ -z "$BATCH" ] && break
-            ALL_BRANCHES="$ALL_BRANCHES $BATCH"
-            PAGE=$((PAGE + 1))
-          done
-
-          # Filter to cascade targets: dev, dev/*, rc/*, beta/*, alpha/*
-          TARGETS=""
-          for BRANCH in $ALL_BRANCHES; do
-            case "$BRANCH" in
-              dev|dev/*|rc/*|beta/*|alpha/*)
-                TARGETS="$TARGETS $BRANCH"
-                ;;
-            esac
-          done
-
-          TARGETS=$(echo "$TARGETS" | xargs)  # trim whitespace
-
-          if [ -z "$TARGETS" ]; then
-            echo "targets=" >> "$GITHUB_OUTPUT"
-            echo "ℹ️  No cascade target branches found"
-          else
-            echo "targets=$TARGETS" >> "$GITHUB_OUTPUT"
-            COUNT=$(echo "$TARGETS" | wc -w)
-            echo "📋 Found ${COUNT} target branch(es): ${TARGETS}"
-          fi
-
-      - name: Cascade to all target branches
-        if: steps.branches.outputs.targets != ''
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          SHORT_SHA="${GITHUB_SHA:0:7}"
-          TARGETS="${{ steps.branches.outputs.targets }}"
-
-          SUCCESS=0
-          CONFLICTS=0
-          SKIPPED=0
-          FAILED=0
-
-          for BRANCH in $TARGETS; do
-            echo ""
-            echo "═══ main → ${BRANCH} ═══"
-
-            # Check if branch is already up to date
-            ENCODED_BRANCH=$(echo "$BRANCH" | sed 's|/|%2F|g')
-            RESPONSE=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/compare/${ENCODED_BRANCH}...main")
-
-            AHEAD=$(echo "$RESPONSE" | jq '.total_commits // 0')
-
-            if [ "$AHEAD" -eq 0 ]; then
-              echo "  ✅ Already up to date"
-              SKIPPED=$((SKIPPED + 1))
-              continue
-            fi
-
-            echo "  ℹ️  main is ${AHEAD} commit(s) ahead"
-
-            # Check for existing cascade PR
-            EXISTING=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/pulls?state=open&head=${GITEA_ORG}:main&base=${ENCODED_BRANCH}&limit=1")
-
-            EXISTING_COUNT=$(echo "$EXISTING" | jq 'length')
-            PR_NUMBER=""
-
-            if [ "$EXISTING_COUNT" -gt 0 ]; then
-              PR_NUMBER=$(echo "$EXISTING" | jq -r '.[0].number')
-              echo "  ℹ️  Reusing existing PR #${PR_NUMBER}"
-            else
-              # Create cascade PR
-              PR_RESPONSE=$(curl -sS -w "\n%{http_code}" \
-                -X POST \
-                -H "Authorization: token ${GA_TOKEN}" \
-                -H "Content-Type: application/json" \
-                -d "{
-                  \"title\": \"chore: cascade main → ${BRANCH} (${SHORT_SHA}) [skip ci]\",
-                  \"body\": \"## Automatic cascade\\n\\nForward-merging \`main\` (${SHORT_SHA}) into \`${BRANCH}\`.\\n\\nIf conflicts exist, resolve manually and merge.\\n\\n> Auto-created by **Cascade Main → Dev**.\",
-                  \"head\": \"main\",
-                  \"base\": \"${BRANCH}\"
-                }" \
-                "${API}/pulls")
-
-              HTTP_CODE=$(echo "$PR_RESPONSE" | tail -1)
-              BODY=$(echo "$PR_RESPONSE" | sed '$d')
-              PR_NUMBER=$(echo "$BODY" | jq -r '.number // empty')
-
-              if [ "$HTTP_CODE" != "201" ] || [ -z "$PR_NUMBER" ]; then
-                MSG=$(echo "$BODY" | jq -r '.message // .' 2>/dev/null | head -1)
-                echo "  ❌ Failed to create PR (HTTP ${HTTP_CODE}): ${MSG}"
-                FAILED=$((FAILED + 1))
-                continue
-              fi
-
-              echo "  ✅ Created PR #${PR_NUMBER}"
-            fi
-
-            # Try auto-merge
-            PR_DATA=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/pulls/${PR_NUMBER}")
-
-            MERGEABLE=$(echo "$PR_DATA" | jq -r '.mergeable // false')
-
-            if [ "$MERGEABLE" != "true" ]; then
-              echo "  ⚠️  Conflicts — PR #${PR_NUMBER} left open"
-              CONFLICTS=$((CONFLICTS + 1))
-              continue
-            fi
-
-            MERGE_RESPONSE=$(curl -sS -w "\n%{http_code}" \
-              -X POST \
-              -H "Authorization: token ${GA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              -d "{
-                \"Do\": \"merge\",
-                \"merge_message_field\": \"chore: cascade main → ${BRANCH} [skip ci]\",
-                \"delete_branch_after_merge\": false
-              }" \
-              "${API}/pulls/${PR_NUMBER}/merge")
-
-            MERGE_HTTP=$(echo "$MERGE_RESPONSE" | tail -1)
-
-            if [ "$MERGE_HTTP" = "200" ] || [ "$MERGE_HTTP" = "204" ]; then
-              echo "  ✅ Merged — ${BRANCH} is in sync"
-              SUCCESS=$((SUCCESS + 1))
-            else
-              MERGE_BODY=$(echo "$MERGE_RESPONSE" | sed '$d')
-              echo "  ⚠️  Merge failed (HTTP ${MERGE_HTTP}) — PR #${PR_NUMBER} left open"
-              CONFLICTS=$((CONFLICTS + 1))
-            fi
-          done
-
-          # Summary
-          echo ""
-          echo "════════════════════════════════════════"
-          echo "  ✅ Merged:    ${SUCCESS}"
-          echo "  ⚠️  Conflicts: ${CONFLICTS}"
-          echo "  ⏭️  Up to date: ${SKIPPED}"
-          echo "  ❌ Failed:    ${FAILED}"
-          echo "════════════════════════════════════════"
-
-          if [ "$FAILED" -gt 0 ]; then
-            exit 1
-          fi

.gitea/ci-joomla.yml

@@ -1,450 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# This file is part of a Moko Consulting project.
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow.Template
-# INGROUP: MokoStandards.CI
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/joomla/ci-joomla.yml.template
-# VERSION: 04.06.00
-# BRIEF: CI workflow for Joomla extensions — lint, validate, test
-
-name: Joomla Extension CI
-
-on:
-  pull_request:
-    branches:
-      - main
-      - 'dev/**'
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  pull-requests: write
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
-jobs:
-  lint-and-validate:
-    name: Lint & Validate
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Setup PHP
-        run: |
-          php -v && composer --version
-
-      - name: Clone MokoStandards
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_HOST: ${{ secrets.GA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
-        run: |
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api
-
-      - name: Install dependencies
-        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
-        run: |
-          if [ -f "composer.json" ]; then
-            composer install \
-              --no-interaction \
-              --prefer-dist \
-              --optimize-autoloader
-          else
-            echo "No composer.json found — skipping dependency install"
-          fi
-
-      - name: PHP syntax check
-        run: |
-          ERRORS=0
-          for DIR in src/ htdocs/; do
-            if [ -d "$DIR" ]; then
-              FOUND=1
-              while IFS= read -r -d '' FILE; do
-                OUTPUT=$(php -l "$FILE" 2>&1)
-                if echo "$OUTPUT" | grep -q "Parse error"; then
-                  echo "::error file=${FILE}::${OUTPUT}"
-                  ERRORS=$((ERRORS + 1))
-                fi
-              done < <(find "$DIR" -name "*.php" -print0)
-            fi
-          done
-          echo "### PHP Syntax Check" >> $GITHUB_STEP_SUMMARY
-          if [ "${ERRORS}" -gt 0 ]; then
-            echo "**${ERRORS} syntax error(s) found.**" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          else
-            echo "All PHP files passed syntax check." >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: XML manifest validation
-        run: |
-          echo "### XML Manifest Validation" >> $GITHUB_STEP_SUMMARY
-          ERRORS=0
-
-          # Find the extension manifest (XML with <extension tag)
-          MANIFEST=""
-          for XML_FILE in $(find . -maxdepth 2 -name "*.xml" -not -path "./.git/*" -not -path "./vendor/*"); do
-            if grep -q "<extension" "$XML_FILE" 2>/dev/null; then
-              MANIFEST="$XML_FILE"
-              break
-            fi
-          done
-
-          if [ -z "$MANIFEST" ]; then
-            echo "No Joomla extension manifest found (XML file with \`<extension\` tag)." >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS + 1))
-          else
-            echo "Manifest found: \`${MANIFEST}\`" >> $GITHUB_STEP_SUMMARY
-
-            # Validate well-formed XML
-            php -r "
-              \$xml = @simplexml_load_file('$MANIFEST');
-              if (\$xml === false) {
-                echo 'INVALID';
-                exit(1);
-              }
-              echo 'VALID';
-            " > /tmp/xml_result 2>&1
-            XML_RESULT=$(cat /tmp/xml_result)
-            if [ "$XML_RESULT" != "VALID" ]; then
-              echo "Manifest is not well-formed XML." >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS + 1))
-            else
-              echo "Manifest is well-formed XML." >> $GITHUB_STEP_SUMMARY
-            fi
-
-            # Check required tags: name, version, author, namespace (Joomla 5+)
-            for TAG in name version author namespace; do
-              if ! grep -q "<${TAG}>" "$MANIFEST" 2>/dev/null; then
-                echo "Missing required tag: \`<${TAG}>\`" >> $GITHUB_STEP_SUMMARY
-                ERRORS=$((ERRORS + 1))
-              else
-                echo "Found required tag: \`<${TAG}>\`" >> $GITHUB_STEP_SUMMARY
-              fi
-            done
-          fi
-
-          if [ "${ERRORS}" -gt 0 ]; then
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**${ERRORS} manifest issue(s) found.**" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          else
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**Manifest validation passed.**" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: Check language files referenced in manifest
-        run: |
-          echo "### Language File Check" >> $GITHUB_STEP_SUMMARY
-          ERRORS=0
-
-          MANIFEST=""
-          for XML_FILE in $(find . -maxdepth 2 -name "*.xml" -not -path "./.git/*" -not -path "./vendor/*"); do
-            if grep -q "<extension" "$XML_FILE" 2>/dev/null; then
-              MANIFEST="$XML_FILE"
-              break
-            fi
-          done
-
-          if [ -n "$MANIFEST" ]; then
-            # Extract language file references from manifest
-            LANG_FILES=$(grep -oP 'language\s+tag="[^"]*"[^>]*>\K[^<]+' "$MANIFEST" 2>/dev/null || true)
-            if [ -z "$LANG_FILES" ]; then
-              echo "No language file references found in manifest — skipping." >> $GITHUB_STEP_SUMMARY
-            else
-              while IFS= read -r LANG_FILE; do
-                LANG_FILE=$(echo "$LANG_FILE" | xargs)
-                if [ -z "$LANG_FILE" ]; then
-                  continue
-                fi
-                # Check in common locations
-                FOUND=0
-                for BASE in "." "src" "htdocs"; do
-                  if [ -f "${BASE}/${LANG_FILE}" ]; then
-                    FOUND=1
-                    break
-                  fi
-                done
-                if [ "$FOUND" -eq 0 ]; then
-                  echo "Missing language file: \`${LANG_FILE}\`" >> $GITHUB_STEP_SUMMARY
-                  ERRORS=$((ERRORS + 1))
-                else
-                  echo "Language file present: \`${LANG_FILE}\`" >> $GITHUB_STEP_SUMMARY
-                fi
-              done <<< "$LANG_FILES"
-            fi
-          else
-            echo "No manifest found — skipping language check." >> $GITHUB_STEP_SUMMARY
-          fi
-
-          if [ "${ERRORS}" -gt 0 ]; then
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**${ERRORS} missing language file(s).**" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          else
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**Language file check passed.**" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: Check index.html files in directories
-        run: |
-          echo "### Index.html Check" >> $GITHUB_STEP_SUMMARY
-          MISSING=0
-          CHECKED=0
-
-          for DIR in src/ htdocs/; do
-            if [ -d "$DIR" ]; then
-              while IFS= read -r -d '' SUBDIR; do
-                CHECKED=$((CHECKED + 1))
-                if [ ! -f "${SUBDIR}/index.html" ]; then
-                  echo "Missing index.html in: \`${SUBDIR}\`" >> $GITHUB_STEP_SUMMARY
-                  MISSING=$((MISSING + 1))
-                fi
-              done < <(find "$DIR" -type d -print0)
-            fi
-          done
-
-          if [ "${CHECKED}" -eq 0 ]; then
-            echo "No src/ or htdocs/ directories found — skipping." >> $GITHUB_STEP_SUMMARY
-          elif [ "${MISSING}" -gt 0 ]; then
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**${MISSING} director(ies) missing index.html out of ${CHECKED} checked.**" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          else
-            echo "All ${CHECKED} directories contain index.html." >> $GITHUB_STEP_SUMMARY
-          fi
-
-  release-readiness:
-    name: Release Readiness Check
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && github.base_ref == 'main'
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Validate release readiness
-        run: |
-          echo "## Release Readiness" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          ERRORS=0
-
-          # Extract version from README.md
-          README_VERSION=$(grep -oP '^\s*VERSION:\s*\K[0-9]{2}\.[0-9]{2}\.[0-9]{2}' README.md | head -1)
-          if [ -z "$README_VERSION" ]; then
-            echo "No VERSION found in README.md FILE INFORMATION block." >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS + 1))
-          else
-            echo "README version: \`${README_VERSION}\`" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          # Find the extension manifest
-          MANIFEST=""
-          for XML_FILE in $(find . -maxdepth 2 -name "*.xml" -not -path "./.git/*" -not -path "./vendor/*"); do
-            if grep -q "<extension" "$XML_FILE" 2>/dev/null; then
-              MANIFEST="$XML_FILE"
-              break
-            fi
-          done
-
-          if [ -z "$MANIFEST" ]; then
-            echo "No Joomla extension manifest found." >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS + 1))
-          else
-            echo "Manifest: \`${MANIFEST}\`" >> $GITHUB_STEP_SUMMARY
-
-            # Check <version> matches README VERSION
-            MANIFEST_VERSION=$(grep -oP '<version>\K[^<]+' "$MANIFEST" | head -1)
-            if [ -z "$MANIFEST_VERSION" ]; then
-              echo "No \`<version>\` tag in manifest." >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS + 1))
-            elif [ -n "$README_VERSION" ] && [ "$MANIFEST_VERSION" != "$README_VERSION" ]; then
-              echo "Manifest version \`${MANIFEST_VERSION}\` does not match README \`${README_VERSION}\`." >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS + 1))
-            else
-              echo "Manifest version: \`${MANIFEST_VERSION}\`" >> $GITHUB_STEP_SUMMARY
-            fi
-
-            # Check extension type, element, client attributes
-            EXT_TYPE=$(grep -oP '<extension[^>]*\btype="\K[^"]+' "$MANIFEST" | head -1)
-            if [ -z "$EXT_TYPE" ]; then
-              echo "Missing \`type\` attribute on \`<extension>\` tag." >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS + 1))
-            else
-              echo "Extension type: \`${EXT_TYPE}\`" >> $GITHUB_STEP_SUMMARY
-            fi
-
-            # Element check (component/module/plugin name)
-            HAS_ELEMENT=$(grep -cP '<(element|name)>' "$MANIFEST" 2>/dev/null || echo "0")
-            if [ "$HAS_ELEMENT" -eq 0 ]; then
-              echo "Missing \`<element>\` or \`<name>\` in manifest." >> $GITHUB_STEP_SUMMARY
-              ERRORS=$((ERRORS + 1))
-            fi
-
-            # Client attribute for site/admin modules and plugins
-            if echo "$EXT_TYPE" | grep -qP "^(module|plugin)$"; then
-              HAS_CLIENT=$(grep -cP '<extension[^>]*\bclient=' "$MANIFEST" 2>/dev/null || echo "0")
-              if [ "$HAS_CLIENT" -eq 0 ]; then
-                echo "Missing \`client\` attribute for ${EXT_TYPE} extension." >> $GITHUB_STEP_SUMMARY
-                ERRORS=$((ERRORS + 1))
-              fi
-            fi
-          fi
-
-          # Check updates.xml exists
-          if [ -f "updates.xml" ] || [ -f "updates.xml" ]; then
-            echo "Update XML present." >> $GITHUB_STEP_SUMMARY
-          else
-            echo "No updates.xml found." >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS + 1))
-          fi
-
-          # Check CHANGELOG.md exists
-          if [ -f "CHANGELOG.md" ]; then
-            echo "CHANGELOG.md present." >> $GITHUB_STEP_SUMMARY
-          else
-            echo "No CHANGELOG.md found." >> $GITHUB_STEP_SUMMARY
-            ERRORS=$((ERRORS + 1))
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          if [ $ERRORS -gt 0 ]; then
-            echo "**${ERRORS} issue(s) must be resolved before release.**" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          else
-            echo "**Extension is ready for release.**" >> $GITHUB_STEP_SUMMARY
-          fi
-
-  test:
-    name: Tests (PHP ${{ matrix.php }})
-    runs-on: ubuntu-latest
-    needs: lint-and-validate
-
-    strategy:
-      fail-fast: false
-      matrix:
-        php: ['8.2', '8.3']
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Setup PHP ${{ matrix.php }}
-        run: |
-          php -v && composer --version
-
-      - name: Install dependencies
-        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
-        run: |
-          if [ -f "composer.json" ]; then
-            composer install \
-              --no-interaction \
-              --prefer-dist \
-              --optimize-autoloader
-          else
-            echo "No composer.json found — skipping dependency install"
-          fi
-
-      - name: Run tests
-        run: |
-          echo "### Test Results (PHP ${{ matrix.php }})" >> $GITHUB_STEP_SUMMARY
-          if [ -f "phpunit.xml" ] || [ -f "phpunit.xml.dist" ]; then
-            vendor/bin/phpunit --testdox 2>&1 | tee /tmp/test-output.log
-            EXIT=${PIPESTATUS[0]}
-            if [ $EXIT -eq 0 ]; then
-              echo "All tests passed." >> $GITHUB_STEP_SUMMARY
-            else
-              echo "Test failures detected — see log." >> $GITHUB_STEP_SUMMARY
-              echo '```' >> $GITHUB_STEP_SUMMARY
-              cat /tmp/test-output.log >> $GITHUB_STEP_SUMMARY
-              echo '```' >> $GITHUB_STEP_SUMMARY
-            fi
-            exit $EXIT
-          else
-            echo "No phpunit.xml found — skipping tests." >> $GITHUB_STEP_SUMMARY
-          fi
-
-  static-analysis:
-    name: PHPStan Analysis
-    runs-on: ubuntu-latest
-    needs: lint-and-validate
-    continue-on-error: true
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Setup PHP
-        run: php -v && composer --version
-
-      - name: Install dependencies
-        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
-        run: |
-          if [ -f "composer.json" ]; then
-            composer install --no-interaction --prefer-dist --optimize-autoloader
-          fi
-
-      - name: Install PHPStan
-        run: |
-          if ! command -v vendor/bin/phpstan &> /dev/null; then
-            composer require --dev phpstan/phpstan --no-interaction 2>/dev/null || \
-              composer global require phpstan/phpstan --no-interaction
-          fi
-
-      - name: Run PHPStan
-        run: |
-          echo "### PHPStan Static Analysis" >> $GITHUB_STEP_SUMMARY
-          PHPSTAN="vendor/bin/phpstan"
-          if [ ! -f "$PHPSTAN" ]; then
-            PHPSTAN=$(composer global config bin-dir --absolute 2>/dev/null)/phpstan
-          fi
-
-          # Determine source directory
-          SRC_DIR=""
-          for DIR in src/ htdocs/ lib/; do
-            if [ -d "$DIR" ]; then
-              SRC_DIR="$DIR"
-              break
-            fi
-          done
-
-          if [ -z "$SRC_DIR" ]; then
-            echo "No source directory found (src/, htdocs/, lib/) — skipping." >> $GITHUB_STEP_SUMMARY
-            exit 0
-          fi
-
-          # Use repo phpstan.neon if present, otherwise use baseline config
-          ARGS="analyse ${SRC_DIR} --memory-limit=512M --no-progress --error-format=table"
-          if [ -f "phpstan.neon" ] || [ -f "phpstan.neon.dist" ]; then
-            echo "Using project PHPStan config." >> $GITHUB_STEP_SUMMARY
-          else
-            ARGS="$ARGS --level=3"
-            echo "No phpstan.neon found — using level 3 (type inference)." >> $GITHUB_STEP_SUMMARY
-          fi
-
-          $PHPSTAN $ARGS 2>&1 | tee /tmp/phpstan-output.txt
-          EXIT=${PIPESTATUS[0]}
-
-          if [ $EXIT -eq 0 ]; then
-            echo "**No errors found.**" >> $GITHUB_STEP_SUMMARY
-          else
-            ERRORS=$(grep -c "ERROR" /tmp/phpstan-output.txt 2>/dev/null || echo "some")
-            echo "**${ERRORS} error(s) found.** Review output above." >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-            tail -30 /tmp/phpstan-output.txt >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-          fi
-          exit $EXIT

.gitea/dispatch-css-sync.yml

@@ -1,111 +0,0 @@
-# When MokoOnyx CSS changes hit main:
-# 1. Sync base CSS to Template-Client-WaaS (the single source for clients)
-# 2. If new CSS variables were added, create issues on individual client repos
-name: Sync CSS to Client Template
-
-on:
-  push:
-    branches: [main]
-    paths:
-      - 'src/media/templates/site/mokoonyx/css/**'
-      - 'media/templates/site/mokoonyx/css/**'
-
-permissions:
-  contents: read
-
-jobs:
-  sync:
-    name: Sync to Template and Notify Clients
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout MokoOnyx
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 2
-
-      - name: Sync CSS to Template-Client-WaaS
-        env:
-          GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${{ github.server_url }}/api/v1"
-          AUTH="Authorization: token ${GITEA_TOKEN}"
-          TEMPLATE="MokoConsulting/Template-Client-WaaS"
-
-          CSS_DIR="src/media/templates/site/mokoonyx/css"
-          [ ! -d "$CSS_DIR" ] && CSS_DIR="media/templates/site/mokoonyx/css"
-
-          # Sync base CSS files only (user.css and *.custom.css are client-owned)
-          find "$CSS_DIR" -name "*.css" -not -name "user.css" -not -name "*.custom.css" | while read -r file; do
-            rel_path="src/media/templates/site/mokoonyx/css/${file#${CSS_DIR}/}"
-            content_b64=$(base64 -w0 "$file")
-            sha=$(curl -sf -H "$AUTH" "${API}/repos/${TEMPLATE}/contents/${rel_path}" | jq -r '.sha // empty')
-
-            if [ -n "$sha" ]; then
-              curl -sf -X PUT -H "$AUTH" -H "Content-Type: application/json" \
-                "${API}/repos/${TEMPLATE}/contents/${rel_path}" \
-                -d "{\"content\": \"${content_b64}\", \"sha\": \"${sha}\", \"message\": \"chore: sync CSS from MokoOnyx\"}" \
-                -o /dev/null && echo "Updated: ${rel_path}"
-            else
-              curl -sf -X POST -H "$AUTH" -H "Content-Type: application/json" \
-                "${API}/repos/${TEMPLATE}/contents/${rel_path}" \
-                -d "{\"content\": \"${content_b64}\", \"message\": \"chore: sync CSS from MokoOnyx\"}" \
-                -o /dev/null && echo "Created: ${rel_path}"
-            fi
-          done
-
-      - name: Extract all CSS variables from MokoOnyx base
-        id: vars
-        env:
-          GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${{ github.server_url }}/api/v1"
-          AUTH="Authorization: token ${GITEA_TOKEN}"
-
-          CSS_DIR="src/media/templates/site/mokoonyx/css"
-          [ ! -d "$CSS_DIR" ] && CSS_DIR="media/templates/site/mokoonyx/css"
-
-          # Get ALL variables defined in MokoOnyx base CSS (excluding custom files)
-          ALL_VARS=$(find "$CSS_DIR" -name "*.css" -not -name "*.custom.css" -not -name "user.css" -exec grep -ohE '\-\-[a-z][a-z0-9-]+' {} \; | sort -u)
-          echo "$ALL_VARS" > /tmp/all_vars.txt
-          echo "Total base variables: $(wc -l < /tmp/all_vars.txt)"
-
-          # Check each client repo for missing variables
-          CLIENTS=(
-            "ClarksvilleFurs/client-waas-clarksvillefurs"
-            "KiddieLand/client-waas-kiddieland"
-            "VexCreations/client-waas-vexcreations"
-          )
-
-          for repo in "${CLIENTS[@]}"; do
-            echo "=== Checking ${repo} ==="
-            MISSING=""
-
-            for theme in "dark" "light"; do
-              FILE_PATH="src/media/templates/site/mokoonyx/css/theme/${theme}.custom.css"
-              CLIENT_CSS=$(curl -sf -H "$AUTH" "${API}/repos/${repo}/contents/${FILE_PATH}" | jq -r '.content // empty' | base64 -d 2>/dev/null || echo "")
-
-              if [ -z "$CLIENT_CSS" ]; then
-                MISSING="$MISSING\nAll variables missing from ${theme}.custom.css (file not found)"
-                continue
-              fi
-
-              # Find variables in base that are NOT in client custom file
-              while read -r var; do
-                [ -z "$var" ] && continue
-                if ! echo "$CLIENT_CSS" | grep -qF "$var"; then
-                  MISSING="$MISSING\n- \`${var}\` missing from ${theme}.custom.css"
-                fi
-              done < /tmp/all_vars.txt
-            done
-
-            if [ -n "$MISSING" ]; then
-              BODY="Your theme custom files are missing CSS variables defined in MokoOnyx base.\n\n## Missing Variables\n${MISSING}\n\n## Action\n\nAdd these variables to your \`dark.custom.css\` and/or \`light.custom.css\` with appropriate values for your theme.\n\nBase CSS reference: ${{ github.server_url }}/MokoConsulting/MokoOnyx/src/branch/main/src/media/templates/site/mokoonyx/css"
-
-              curl -sf -X POST -H "$AUTH" -H "Content-Type: application/json" \
-                "${API}/repos/${repo}/issues" \
-                -d "$(jq -n --arg t "chore: CSS variables out of sync with MokoOnyx" --arg b "$BODY" '{title:$t,body:$b}')" \
-                -o /dev/null && echo "Issue created: ${repo}"
-            else
-              echo "  All variables present"
-            fi
-          done

.gitea/pr-branch-check.yml

@@ -1,90 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# Enforces branch merge policy:
-#   feature/* → dev only
-#   fix/*     → dev only
-#   hotfix/*  → dev or main (emergency)
-#   dev       → main only
-#   alpha/*   → dev only
-#   beta/*    → dev only
-#   rc/*      → main only
-
-name: Branch Policy Check
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, edited]
-
-jobs:
-  check-target:
-    name: Verify merge target
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check branch policy
-        run: |
-          HEAD="${{ github.head_ref }}"
-          BASE="${{ github.base_ref }}"
-
-          echo "PR: ${HEAD} → ${BASE}"
-
-          ALLOWED=true
-          REASON=""
-
-          case "$HEAD" in
-            feature/*|feat/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Feature branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            fix/*|bugfix/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Fix branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            hotfix/*)
-              if [ "$BASE" != "dev" ] && [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Hotfix branches can only target 'dev' or 'main', not '${BASE}'"
-              fi
-              ;;
-            alpha/*|beta/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Pre-release branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            rc/*)
-              if [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Release candidate branches must target 'main', not '${BASE}'"
-              fi
-              ;;
-            dev)
-              if [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Dev branch can only merge into 'main', not '${BASE}'"
-              fi
-              ;;
-          esac
-
-          if [ "$ALLOWED" = false ]; then
-            echo "::error::${REASON}"
-            echo ""
-            echo "## Branch Policy Violation" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "${REASON}" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "### Allowed merge paths:" >> $GITHUB_STEP_SUMMARY
-            echo "- \`feature/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`fix/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`hotfix/*\` → \`dev\` or \`main\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`dev\` → \`main\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`rc/*\` → \`main\`" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          fi
-
-          echo "Branch policy: OK (${HEAD} → ${BASE})"
-          echo "## Branch Policy: Passed" >> $GITHUB_STEP_SUMMARY

.gitea/sync-roadmap-wiki.yml

@@ -1,193 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-# SPDX-License-Identifier: GPL-3.0-or-later
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: moko-platform.Workflows
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
-# PATH: /templates/workflows/sync-roadmap-wiki.yml.template
-# VERSION: 04.06.00
-# BRIEF: Syncs project board state to a Roadmap wiki page
-
-name: Sync Roadmap to Wiki
-
-on:
-  # Run when project issues change
-  issues:
-    types: [opened, closed, reopened, labeled, unlabeled, milestoned, demilestoned]
-
-  # Run on milestone changes
-  milestone:
-    types: [created, closed, opened, edited, deleted]
-
-  # Manual trigger
-  workflow_dispatch:
-
-  # Weekly refresh to catch any drift
-  schedule:
-    - cron: '0 6 * * 1'
-
-permissions:
-  contents: write
-  issues: read
-
-jobs:
-  sync-roadmap:
-    name: Generate Roadmap Wiki
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Generate Roadmap from Projects
-        env:
-          GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
-          GITEA_URL: ${{ github.server_url }}
-          REPO_OWNER: ${{ github.repository_owner }}
-          REPO_NAME: ${{ github.event.repository.name }}
-        run: |
-          set -euo pipefail
-
-          API="${GITEA_URL}/api/v1"
-          AUTH="Authorization: token ${GITEA_TOKEN}"
-          REPO="${REPO_OWNER}/${REPO_NAME}"
-
-          # Fetch milestones (open + closed)
-          MILESTONES_OPEN=$(curl -sf -H "$AUTH" "${API}/repos/${REPO}/milestones?state=open&limit=50" || echo "[]")
-          MILESTONES_CLOSED=$(curl -sf -H "$AUTH" "${API}/repos/${REPO}/milestones?state=closed&limit=50" || echo "[]")
-
-          # Fetch all open issues
-          ISSUES_OPEN=$(curl -sf -H "$AUTH" "${API}/repos/${REPO}/issues?state=open&type=issues&limit=50" || echo "[]")
-          ISSUES_CLOSED=$(curl -sf -H "$AUTH" "${API}/repos/${REPO}/issues?state=closed&type=issues&limit=50&sort=updated&direction=desc" || echo "[]")
-
-          # Fetch labels for categorization
-          LABELS=$(curl -sf -H "$AUTH" "${API}/repos/${REPO}/labels?limit=50" || echo "[]")
-
-          # Build the roadmap markdown
-          cat > /tmp/roadmap.md << 'HEADER'
-          # Roadmap
-
-          > Auto-generated from project milestones and issues.
-          > Last updated: TIMESTAMP
-
-          HEADER
-          sed -i "s|TIMESTAMP|$(date -u '+%Y-%m-%d %H:%M UTC')|" /tmp/roadmap.md
-
-          # --- Active Milestones ---
-          echo "## Active Milestones" >> /tmp/roadmap.md
-          echo "" >> /tmp/roadmap.md
-
-          MILESTONE_COUNT=$(echo "$MILESTONES_OPEN" | jq 'length')
-          if [ "$MILESTONE_COUNT" -eq 0 ]; then
-            echo "_No active milestones._" >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-          else
-            echo "$MILESTONES_OPEN" | jq -r '.[] | @base64' | while read -r ms; do
-              _jq() { echo "$ms" | base64 -d | jq -r "$1"; }
-              TITLE=$(_jq '.title')
-              DESC=$(_jq '.description // ""')
-              DUE=$(_jq '.due_on // ""')
-              OPEN=$(_jq '.open_issues')
-              CLOSED=$(_jq '.closed_issues')
-              TOTAL=$((OPEN + CLOSED))
-
-              if [ "$TOTAL" -gt 0 ]; then
-                PCT=$((CLOSED * 100 / TOTAL))
-              else
-                PCT=0
-              fi
-
-              echo "### ${TITLE}" >> /tmp/roadmap.md
-              if [ -n "$DUE" ] && [ "$DUE" != "null" ] && [ "$DUE" != "0001-01-01T00:00:00Z" ]; then
-                DUE_FMT=$(date -d "$DUE" '+%B %d, %Y' 2>/dev/null || echo "$DUE")
-                echo "**Due:** ${DUE_FMT}" >> /tmp/roadmap.md
-              fi
-              if [ -n "$DESC" ] && [ "$DESC" != "null" ]; then
-                echo "" >> /tmp/roadmap.md
-                echo "$DESC" >> /tmp/roadmap.md
-              fi
-              echo "" >> /tmp/roadmap.md
-              echo "**Progress:** ${CLOSED}/${TOTAL} (${PCT}%)" >> /tmp/roadmap.md
-              echo "" >> /tmp/roadmap.md
-
-              # List issues in this milestone
-              MS_ID=$(_jq '.id')
-              MS_ISSUES=$(echo "$ISSUES_OPEN" | jq --arg id "$MS_ID" '[.[] | select(.milestone.id == ($id | tonumber))]')
-              MS_DONE=$(echo "$ISSUES_CLOSED" | jq --arg id "$MS_ID" '[.[] | select(.milestone.id == ($id | tonumber))]')
-
-              if [ "$(echo "$MS_DONE" | jq 'length')" -gt 0 ]; then
-                echo "$MS_DONE" | jq -r '.[] | "- [x] " + .title + " (#" + (.number | tostring) + ")"' >> /tmp/roadmap.md
-              fi
-              if [ "$(echo "$MS_ISSUES" | jq 'length')" -gt 0 ]; then
-                echo "$MS_ISSUES" | jq -r '.[] | "- [ ] " + .title + " (#" + (.number | tostring) + ")"' >> /tmp/roadmap.md
-              fi
-              echo "" >> /tmp/roadmap.md
-            done
-          fi
-
-          # --- Backlog (issues without milestones) ---
-          BACKLOG=$(echo "$ISSUES_OPEN" | jq '[.[] | select(.milestone == null)]')
-          BACKLOG_COUNT=$(echo "$BACKLOG" | jq 'length')
-
-          if [ "$BACKLOG_COUNT" -gt 0 ]; then
-            echo "## Backlog" >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-            echo "_Issues not yet assigned to a milestone._" >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-
-            # Group by label if possible
-            echo "$BACKLOG" | jq -r '.[] | "- [ ] " + .title + " (#" + (.number | tostring) + ")" + (if (.labels | length) > 0 then " `" + (.labels | map(.name) | join("`, `")) + "`" else "" end)' >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-          fi
-
-          # --- Completed Milestones ---
-          CLOSED_COUNT=$(echo "$MILESTONES_CLOSED" | jq 'length')
-          if [ "$CLOSED_COUNT" -gt 0 ]; then
-            echo "## Completed" >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-            echo "$MILESTONES_CLOSED" | jq -r '.[] | "- ~~" + .title + "~~ ✓ (" + (.closed_issues | tostring) + " issues)"' >> /tmp/roadmap.md
-            echo "" >> /tmp/roadmap.md
-          fi
-
-          echo "---" >> /tmp/roadmap.md
-          echo "_Generated by [sync-roadmap-wiki](${GITEA_URL}/${REPO}/actions) workflow._" >> /tmp/roadmap.md
-
-          echo "=== Generated Roadmap ==="
-          cat /tmp/roadmap.md
-
-      - name: Push Roadmap to Wiki
-        env:
-          GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
-          GITEA_URL: ${{ github.server_url }}
-          REPO_OWNER: ${{ github.repository_owner }}
-          REPO_NAME: ${{ github.event.repository.name }}
-        run: |
-          API="${GITEA_URL}/api/v1"
-          AUTH="Authorization: token ${GITEA_TOKEN}"
-          REPO="${REPO_OWNER}/${REPO_NAME}"
-
-          CONTENT_B64=$(base64 -w0 /tmp/roadmap.md)
-
-          # Check if Roadmap wiki page exists
-          STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -H "$AUTH" "${API}/repos/${REPO}/wiki/page/Roadmap" || echo "404")
-
-          if [ "$STATUS" = "200" ]; then
-            # Update existing page
-            curl -sf -X PATCH -H "$AUTH" -H "Content-Type: application/json" \
-              "${API}/repos/${REPO}/wiki/page/Roadmap" \
-              -d "{\"title\": \"Roadmap\", \"content_base64\": \"${CONTENT_B64}\", \"message\": \"chore: sync roadmap from project board\"}" \
-              && echo "Roadmap wiki page updated"
-          else
-            # Create new page
-            curl -sf -X POST -H "$AUTH" -H "Content-Type: application/json" \
-              "${API}/repos/${REPO}/wiki/new" \
-              -d "{\"title\": \"Roadmap\", \"content_base64\": \"${CONTENT_B64}\", \"message\": \"chore: create roadmap from project board\"}" \
-              && echo "Roadmap wiki page created"
-          fi
-
-      - name: Summary
-        if: always()
-        run: |
-          echo "## Roadmap Sync" >> $GITHUB_STEP_SUMMARY
-          echo "Roadmap wiki page synced from milestones and issues." >> $GITHUB_STEP_SUMMARY
-          echo "View it at: ${{ github.server_url }}/${{ github.repository }}/wiki/Roadmap" >> $GITHUB_STEP_SUMMARY

.gitea/update-server.yml

@@ -1,464 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Joomla
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/joomla/update-server.yml.template
-# VERSION: 04.06.00
-# BRIEF: Update Joomla update server XML feed with stable/rc/dev entries
-#
-# Writes updates.xml with multiple <update> entries:
-#   - <tag>stable</tag>     on push to main (from auto-release)
-#   - <tag>rc</tag>         on push to rc/**
-#   - <tag>development</tag> on push to dev or dev/**
-#
-# Joomla filters by user's "Minimum Stability" setting.
-
-name: Update Joomla Update Server XML Feed
-
-on:
-  push:
-    branches:
-      - 'dev'
-      - 'dev/**'
-      - 'alpha/**'
-      - 'beta/**'
-      - 'rc/**'
-    paths:
-      - 'src/**'
-      - 'htdocs/**'
-  pull_request:
-    types: [closed]
-    branches:
-      - 'dev'
-      - 'dev/**'
-      - 'alpha/**'
-      - 'beta/**'
-      - 'rc/**'
-    paths:
-      - 'src/**'
-      - 'htdocs/**'
-  workflow_dispatch:
-    inputs:
-      stability:
-        description: 'Stability tag'
-        required: true
-        default: 'development'
-        type: choice
-        options:
-          - development
-          - alpha
-          - beta
-          - rc
-          - stable
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-permissions:
-  contents: write
-
-jobs:
-  update-xml:
-    name: Update updates.xml
-    runs-on: release
-    if: >-
-      github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' || github.event_name == 'push'
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          token: ${{ secrets.GA_TOKEN }}
-          fetch-depth: 0
-
-      - name: Setup MokoStandards tools
-        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN }}
-          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
-          COMPOSER_AUTH: '{"http-basic":{"git.mokoconsulting.tech":{"username":"token","password":"${{ secrets.GA_TOKEN }}"}}}'
-        run: |
-          if ! command -v composer &> /dev/null; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
-          fi
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api 2>/dev/null || true
-          if [ -d "/tmp/mokostandards-api" ] && [ -f "/tmp/mokostandards-api/composer.json" ]; then
-            cd /tmp/mokostandards-api && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
-          fi
-
-      - name: Generate updates.xml entry
-        id: update
-        run: |
-          BRANCH="${{ github.ref_name }}"
-          REPO="${{ github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          VERSION=$(php /tmp/mokostandards-api/cli/version_read.php --path . 2>/dev/null || echo "0.0.0")
-
-          # Auto-bump patch on all branches (dev, alpha, beta, rc)
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          BUMPED=$(php /tmp/mokostandards-api/cli/version_bump.php --path . 2>/dev/null || true)
-          if [ -n "$BUMPED" ]; then
-            VERSION=$(php /tmp/mokostandards-api/cli/version_read.php --path . 2>/dev/null || echo "$VERSION")
-            git add -A
-            git commit -m "chore(version): auto-bump patch ${VERSION} [skip ci]" \
-              --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>" 2>/dev/null || true
-            git push 2>/dev/null || true
-          fi
-
-          # Determine stability from branch or input
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            STABILITY="${{ inputs.stability }}"
-          elif [[ "$BRANCH" == rc/* ]]; then
-            STABILITY="rc"
-          elif [[ "$BRANCH" == beta/* ]]; then
-            STABILITY="beta"
-          elif [[ "$BRANCH" == alpha/* ]]; then
-            STABILITY="alpha"
-          elif [[ "$BRANCH" == dev/* ]] || [[ "$BRANCH" == "dev" ]]; then
-            STABILITY="development"
-          else
-            STABILITY="stable"
-          fi
-
-          echo "stability=${STABILITY}" >> "$GITHUB_OUTPUT"
-
-          # Parse manifest (portable — no grep -P)
-          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" ! -path "./build/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          if [ -z "$MANIFEST" ]; then
-            echo "No Joomla manifest found — skipping"
-            exit 0
-          fi
-
-          # Extract fields using sed (works on all runners)
-          EXT_NAME=$(sed -n 's/.*<name>\([^<]*\)<\/name>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_TYPE=$(sed -n 's/.*<extension[^>]*type="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_ELEMENT=$(sed -n 's/.*<element>\([^<]*\)<\/element>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_CLIENT=$(sed -n 's/.*<extension[^>]*client="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_FOLDER=$(sed -n 's/.*<extension[^>]*group="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_VERSION=$(sed -n 's/.*<version>\([^<]*\)<\/version>.*/\1/p' "$MANIFEST" | head -1)
-          TARGET_PLATFORM=$(sed -n 's/.*\(<targetplatform[^/]*\/>\).*/\1/p' "$MANIFEST" | head -1)
-          PHP_MINIMUM=$(sed -n 's/.*<php_minimum>\([^<]*\)<\/php_minimum>.*/\1/p' "$MANIFEST" | head -1)
-
-          # Fallbacks
-          [ -z "$EXT_NAME" ] && EXT_NAME="${{ github.event.repository.name }}"
-          [ -z "$EXT_TYPE" ] && EXT_TYPE="component"
-
-          # Derive element if not in manifest: try XML filename, then repo name
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(basename "$MANIFEST" .xml | tr '[:upper:]' '[:lower:]')
-            case "$EXT_ELEMENT" in
-              templatedetails|manifest|*.xml) EXT_ELEMENT=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]' | tr -d ' -') ;;
-            esac
-          fi
-
-          # Use manifest version if README version is empty
-          [ "$VERSION" = "0.0.0" ] && [ -n "$EXT_VERSION" ] && VERSION="$EXT_VERSION"
-
-          [ -z "$TARGET_PLATFORM" ] && TARGET_PLATFORM=$(printf '<targetplatform name="joomla" version="((5.[0-9])|(6.[0-9]))" %s>' "/")
-
-          CLIENT_TAG=""
-          [ -n "$EXT_CLIENT" ] && CLIENT_TAG="<client>${EXT_CLIENT}</client>"
-          [ -z "$CLIENT_TAG" ] && ([ "$EXT_TYPE" = "module" ] || [ "$EXT_TYPE" = "plugin" ]) && CLIENT_TAG="<client>site</client>"
-
-          FOLDER_TAG=""
-          [ -n "$EXT_FOLDER" ] && [ "$EXT_TYPE" = "plugin" ] && FOLDER_TAG="<folder>${EXT_FOLDER}</folder>"
-
-          PHP_TAG=""
-          [ -n "$PHP_MINIMUM" ] && PHP_TAG="<php_minimum>${PHP_MINIMUM}</php_minimum>"
-
-          # Version suffix for non-stable
-          DISPLAY_VERSION="$VERSION"
-          case "$STABILITY" in
-            development) DISPLAY_VERSION="${VERSION}-dev" ;;
-            alpha)       DISPLAY_VERSION="${VERSION}-alpha" ;;
-            beta)        DISPLAY_VERSION="${VERSION}-beta" ;;
-            rc)          DISPLAY_VERSION="${VERSION}-rc" ;;
-          esac
-
-          MAJOR=$(echo "$VERSION" | awk -F. '{print $1}')
-
-          # Each stability level has its own release tag
-          case "$STABILITY" in
-            development) RELEASE_TAG="development" ;;
-            alpha)       RELEASE_TAG="alpha" ;;
-            beta)        RELEASE_TAG="beta" ;;
-            rc)          RELEASE_TAG="release-candidate" ;;
-            *)           RELEASE_TAG="v${MAJOR}" ;;
-          esac
-
-          PACKAGE_NAME="${EXT_ELEMENT}-${DISPLAY_VERSION}.zip"
-          DOWNLOAD_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/${RELEASE_TAG}/${PACKAGE_NAME}"
-          INFO_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}"
-
-          # -- Build install packages (ZIP + tar.gz) --------------------
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          if [ -d "$SOURCE_DIR" ]; then
-            EXCLUDES=".ftpignore sftp-config* *.ppk *.pem *.key .env*"
-            TAR_NAME="${EXT_ELEMENT}-${DISPLAY_VERSION}.tar.gz"
-
-            cd "$SOURCE_DIR"
-            zip -r "/tmp/${PACKAGE_NAME}" . -x $EXCLUDES
-            cd ..
-            tar -czf "/tmp/${TAR_NAME}" -C "$SOURCE_DIR" \
-              --exclude='.ftpignore' --exclude='sftp-config*' \
-              --exclude='*.ppk' --exclude='*.pem' --exclude='*.key' --exclude='.env*' .
-
-            SHA256=$(sha256sum "/tmp/${PACKAGE_NAME}" | cut -d' ' -f1)
-
-            # Ensure release exists on Gitea
-            RELEASE_JSON=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-              "${API_BASE}/releases/tags/${RELEASE_TAG}" 2>/dev/null || true)
-            RELEASE_ID=$(echo "$RELEASE_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-
-            if [ -z "$RELEASE_ID" ]; then
-              # Create release
-              RELEASE_JSON=$(curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/json" \
-                "${API_BASE}/releases" \
-                -d "$(python3 -c "import json; print(json.dumps({
-                  'tag_name': '${RELEASE_TAG}',
-                  'name': '${RELEASE_TAG} (${DISPLAY_VERSION})',
-                  'body': '${STABILITY} release',
-                  'prerelease': True,
-                  'target_commitish': 'main'
-                }))")" 2>/dev/null || true)
-              RELEASE_ID=$(echo "$RELEASE_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-            fi
-
-            if [ -n "$RELEASE_ID" ]; then
-              # Delete existing assets with same name before uploading
-              ASSETS=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets" 2>/dev/null || echo "[]")
-              for ASSET_FILE in "$PACKAGE_NAME" "$TAR_NAME"; do
-                ASSET_ID=$(echo "$ASSETS" | python3 -c "
-          import sys,json
-          assets = json.load(sys.stdin)
-          for a in assets:
-              if a['name'] == '${ASSET_FILE}':
-                  print(a['id']); break
-          " 2>/dev/null || true)
-                if [ -n "$ASSET_ID" ]; then
-                  curl -sf -X DELETE -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                    "${API_BASE}/releases/${RELEASE_ID}/assets/${ASSET_ID}" 2>/dev/null || true
-                fi
-              done
-
-              # Upload both formats
-              curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/octet-stream" \
-                --data-binary @"/tmp/${PACKAGE_NAME}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets?name=${PACKAGE_NAME}" > /dev/null 2>&1 || true
-
-              curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/octet-stream" \
-                --data-binary @"/tmp/${TAR_NAME}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets?name=${TAR_NAME}" > /dev/null 2>&1 || true
-            fi
-
-            echo "Packages: ${PACKAGE_NAME} + ${TAR_NAME} (SHA: ${SHA256})" >> $GITHUB_STEP_SUMMARY
-          else
-            SHA256=""
-          fi
-
-          # -- Build the new entry (canonical format matching release.yml) --
-          NEW_ENTRY=""
-          NEW_ENTRY="${NEW_ENTRY}  <update>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <name>${EXT_NAME}</name>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <description>${EXT_NAME} ${STABILITY} build.</description>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <element>${EXT_ELEMENT}</element>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <type>${EXT_TYPE}</type>\n"
-          [ -n "$CLIENT_TAG" ] && NEW_ENTRY="${NEW_ENTRY}    ${CLIENT_TAG}\n"
-          [ -n "$FOLDER_TAG" ] && NEW_ENTRY="${NEW_ENTRY}    ${FOLDER_TAG}\n"
-          NEW_ENTRY="${NEW_ENTRY}    <version>${VERSION}</version>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <creationDate>$(date +%Y-%m-%d)</creationDate>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <infourl title='${EXT_NAME}'>https://git.mokoconsulting.tech/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${RELEASE_TAG}</infourl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <downloads>\n"
-          NEW_ENTRY="${NEW_ENTRY}      <downloadurl type='full' format='zip'>${DOWNLOAD_URL}</downloadurl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    </downloads>\n"
-          [ -n "$SHA256" ] && NEW_ENTRY="${NEW_ENTRY}    <sha256>${SHA256}</sha256>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <tags><tag>${STABILITY}</tag></tags>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <maintainer>Moko Consulting</maintainer>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <maintainerurl>https://mokoconsulting.tech</maintainerurl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <targetplatform name='joomla' version='(5|6).*'/>\n"
-          [ -n "$PHP_MINIMUM" ] && NEW_ENTRY="${NEW_ENTRY}    <php_minimum>${PHP_MINIMUM}</php_minimum>\n"
-          NEW_ENTRY="${NEW_ENTRY}  </update>"
-
-          # -- Write new entry to temp file --------------------------------
-          printf '%b' "$NEW_ENTRY" > /tmp/new_entry.xml
-
-          # -- Merge into updates.xml ----------------------------------------
-          # Cascade: stable→all | rc→rc+lower | beta→beta+lower | alpha→alpha+dev | dev→dev
-          CASCADE_MAP="stable:development,alpha,beta,rc,stable rc:development,alpha,beta,rc beta:development,alpha,beta alpha:development,alpha development:development"
-          TARGETS=""
-          for entry in $CASCADE_MAP; do
-            key="${entry%%:*}"
-            vals="${entry#*:}"
-            if [ "$key" = "${STABILITY}" ]; then
-              TARGETS="$vals"
-              break
-            fi
-          done
-          [ -z "$TARGETS" ] && TARGETS="${STABILITY}"
-
-          echo "Cascade: ${STABILITY} → ${TARGETS}"
-
-          # Create updates.xml if missing
-          if [ ! -f "updates.xml" ]; then
-            printf '%s\n' "<?xml version='1.0' encoding='UTF-8'?>" > updates.xml
-            printf '%s\n' "<!-- Copyright (C) $(date +%Y) Moko Consulting -->" >> updates.xml
-            printf '%s\n' "<updates>" >> updates.xml
-            printf '%s\n' "</updates>" >> updates.xml
-          fi
-
-          # Update existing blocks or create missing ones
-          export PY_TARGETS="$TARGETS" PY_VERSION="$VERSION" PY_DATE="$(date +%Y-%m-%d)"
-          python3 << 'PYEOF'
-          import re, os
-
-          targets = os.environ["PY_TARGETS"].split(",")
-          version = os.environ["PY_VERSION"]
-          date = os.environ["PY_DATE"]
-
-          with open("updates.xml") as f:
-              content = f.read()
-          with open("/tmp/new_entry.xml") as f:
-              new_entry_template = f.read()
-
-          for tag in targets:
-              tag = tag.strip()
-              # Build entry with this tag's name
-              new_entry = re.sub(r"<tag>[^<]*</tag>", f"<tag>{tag}</tag>", new_entry_template)
-
-              # Try to find existing block (handles both single-line and multi-line <tags>)
-              block_pattern = r"(<update>(?:(?!</update>).)*?<tag>" + re.escape(tag) + r"</tag>.*?</update>)"
-              match = re.search(block_pattern, content, re.DOTALL)
-
-              if match:
-                  # Update in place — replace entire block
-                  content = content.replace(match.group(1), new_entry.strip())
-                  print(f"  UPDATED: <tag>{tag}</tag> → {version}")
-              else:
-                  # Create — insert before </updates>
-                  content = content.replace("</updates>", "\n" + new_entry.strip() + "\n\n</updates>")
-                  print(f"  CREATED: <tag>{tag}</tag> → {version}")
-
-          # Clean up excessive blank lines
-          content = re.sub(r"\n{3,}", "\n\n", content)
-
-          with open("updates.xml", "w") as f:
-              f.write(content)
-          PYEOF
-
-          # Commit
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          git add updates.xml
-          git diff --cached --quiet || {
-            git commit -m "chore: update updates.xml (${STABILITY}: ${DISPLAY_VERSION}) [skip ci]" \
-              --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>"
-            git push
-          }
-
-      # -- Sync updates.xml to main (for non-main branches) ----------------------
-      - name: Sync updates.xml to main
-        if: github.ref_name != 'main'
-        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          GA_TOKEN="${{ secrets.GA_TOKEN }}"
-
-          FILE_SHA=$(curl -sf -H "Authorization: token ${GA_TOKEN}" \
-            "${API_BASE}/contents/updates.xml?ref=main" | python3 -c "import sys,json; print(json.load(sys.stdin).get('sha',''))" 2>/dev/null || true)
-
-          if [ -n "$FILE_SHA" ] && [ -f "updates.xml" ]; then
-            CONTENT=$(base64 -w0 updates.xml)
-            curl -sf -X PUT -H "Authorization: token ${GA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              "${API_BASE}/contents/updates.xml" \
-              -d "$(python3 -c "import json; print(json.dumps({
-                'content': '${CONTENT}',
-                'sha': '${FILE_SHA}',
-                'message': 'chore: sync updates.xml from ${STABILITY} [skip ci]',
-                'branch': 'main'
-              }))")" > /dev/null 2>&1 \
-              && echo "updates.xml synced to main (${STABILITY})" >> $GITHUB_STEP_SUMMARY \
-              || echo "WARNING: failed to sync updates.xml to main" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "WARNING: could not get updates.xml SHA from main" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: SFTP deploy to dev server
-        if: contains(github.ref, 'dev/') || github.ref == 'refs/heads/dev'
-        env:
-          DEV_HOST: ${{ vars.DEV_FTP_HOST }}
-          DEV_PATH: ${{ vars.DEV_FTP_PATH }}
-          DEV_SUFFIX: ${{ vars.DEV_FTP_SUFFIX }}
-          DEV_USER: ${{ vars.DEV_FTP_USERNAME }}
-          DEV_PORT: ${{ vars.DEV_FTP_PORT }}
-          DEV_KEY: ${{ secrets.DEV_FTP_KEY }}
-          DEV_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
-        run: |
-          # -- Permission check: admin or maintain role required --------
-          ACTOR="${{ github.actor }}"
-          REPO="${{ github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          PERMISSION=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/collaborators/${ACTOR}/permission" 2>/dev/null | \
-            python3 -c "import sys,json; print(json.load(sys.stdin).get('permission','read'))" 2>/dev/null || echo "read")
-          case "$PERMISSION" in
-            admin|maintain|write) ;;
-            *)
-              echo "Deploy denied: ${ACTOR} has '${PERMISSION}' — requires admin, maintain, or write"
-              exit 0
-              ;;
-          esac
-
-          [ -z "$DEV_HOST" ] || [ -z "$DEV_PATH" ] && { echo "DEV FTP not configured — skipping SFTP"; exit 0; }
-
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          [ ! -d "$SOURCE_DIR" ] && exit 0
-
-          PORT="${DEV_PORT:-22}"
-          REMOTE="${DEV_PATH%/}"
-          [ -n "$DEV_SUFFIX" ] && REMOTE="${REMOTE}/${DEV_SUFFIX#/}"
-
-          printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
-            "$DEV_HOST" "$PORT" "$DEV_USER" "$REMOTE" > /tmp/sftp-config.json
-          if [ -n "$DEV_KEY" ]; then
-            echo "$DEV_KEY" > /tmp/deploy_key && chmod 600 /tmp/deploy_key
-            printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
-          else
-            printf ',"password":"%s"}' "$DEV_PASS" >> /tmp/sftp-config.json
-          fi
-
-          PLATFORM=$(php /tmp/mokostandards-api/cli/platform_detect.php --path . 2>/dev/null || true)
-          if [ "$PLATFORM" = "waas-component" ] && [ -f "/tmp/mokostandards-api/deploy/deploy-joomla.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-joomla.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
-          elif [ -f "/tmp/mokostandards-api/deploy/deploy-sftp.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-sftp.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
-          fi
-          rm -f /tmp/deploy_key /tmp/sftp-config.json
-          echo "SFTP deploy to dev complete" >> $GITHUB_STEP_SUMMARY
-
-      - name: Summary
-        if: always()
-        run: |
-          echo "## Joomla Update Server" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
-          echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
-          echo "| Stability | \`${STABILITY}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Version | \`${DISPLAY_VERSION}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Element | \`${EXT_ELEMENT}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Download | [ZIP](${DOWNLOAD_URL}) |" >> $GITHUB_STEP_SUMMARY

.gitea/workflows/cascade-dev.yml

@@ -1,213 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Maintenance
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/cascade-dev.yml.template
-# VERSION: 02.00.00
-# BRIEF: Forward-merge main → all open branches after every push to main
-#
-# +========================================================================+
-# |                CASCADE MAIN → ALL BRANCHES                             |
-# +========================================================================+
-# |                                                                        |
-# |  Triggers on every push to main (PR merges, bot commits, etc.)         |
-# |                                                                        |
-# |  1. List all branches matching: dev, rc/*, beta/*, alpha/*             |
-# |  2. For each: create PR (main → branch), auto-merge if clean           |
-# |  3. On conflict: leave PR open for manual resolution                   |
-# |                                                                        |
-# +========================================================================+
-
-name: "Universal: Cascade Main → Dev"
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  cascade:
-    name: Cascade main → branches
-    runs-on: ubuntu-latest
-    if: >-
-      !contains(github.event.head_commit.message, '[skip ci]') &&
-      !contains(github.event.head_commit.message, '[skip cascade]')
-
-    steps:
-      - name: Discover target branches
-        id: branches
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          # Fetch all branches (paginated)
-          PAGE=1
-          ALL_BRANCHES=""
-          while true; do
-            BATCH=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/branches?page=${PAGE}&limit=50" \
-              | jq -r '.[].name // empty')
-            [ -z "$BATCH" ] && break
-            ALL_BRANCHES="$ALL_BRANCHES $BATCH"
-            PAGE=$((PAGE + 1))
-          done
-
-          # Filter to cascade targets: dev, dev/*, rc/*, beta/*, alpha/*
-          TARGETS=""
-          for BRANCH in $ALL_BRANCHES; do
-            case "$BRANCH" in
-              dev|dev/*|rc/*|beta/*|alpha/*)
-                TARGETS="$TARGETS $BRANCH"
-                ;;
-            esac
-          done
-
-          TARGETS=$(echo "$TARGETS" | xargs)  # trim whitespace
-
-          if [ -z "$TARGETS" ]; then
-            echo "targets=" >> "$GITHUB_OUTPUT"
-            echo "ℹ️  No cascade target branches found"
-          else
-            echo "targets=$TARGETS" >> "$GITHUB_OUTPUT"
-            COUNT=$(echo "$TARGETS" | wc -w)
-            echo "📋 Found ${COUNT} target branch(es): ${TARGETS}"
-          fi
-
-      - name: Cascade to all target branches
-        if: steps.branches.outputs.targets != ''
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
-        run: |
-          API="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          SHORT_SHA="${GITHUB_SHA:0:7}"
-          TARGETS="${{ steps.branches.outputs.targets }}"
-
-          SUCCESS=0
-          CONFLICTS=0
-          SKIPPED=0
-          FAILED=0
-
-          for BRANCH in $TARGETS; do
-            echo ""
-            echo "═══ main → ${BRANCH} ═══"
-
-            # Check if branch is already up to date
-            ENCODED_BRANCH=$(echo "$BRANCH" | sed 's|/|%2F|g')
-            RESPONSE=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/compare/${ENCODED_BRANCH}...main")
-
-            AHEAD=$(echo "$RESPONSE" | jq '.total_commits // 0')
-
-            if [ "$AHEAD" -eq 0 ]; then
-              echo "  ✅ Already up to date"
-              SKIPPED=$((SKIPPED + 1))
-              continue
-            fi
-
-            echo "  ℹ️  main is ${AHEAD} commit(s) ahead"
-
-            # Check for existing cascade PR
-            EXISTING=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/pulls?state=open&head=${GITEA_ORG}:main&base=${ENCODED_BRANCH}&limit=1")
-
-            EXISTING_COUNT=$(echo "$EXISTING" | jq 'length')
-            PR_NUMBER=""
-
-            if [ "$EXISTING_COUNT" -gt 0 ]; then
-              PR_NUMBER=$(echo "$EXISTING" | jq -r '.[0].number')
-              echo "  ℹ️  Reusing existing PR #${PR_NUMBER}"
-            else
-              # Create cascade PR
-              PR_RESPONSE=$(curl -sS -w "\n%{http_code}" \
-                -X POST \
-                -H "Authorization: token ${GA_TOKEN}" \
-                -H "Content-Type: application/json" \
-                -d "{
-                  \"title\": \"chore: cascade main → ${BRANCH} (${SHORT_SHA}) [skip ci]\",
-                  \"body\": \"## Automatic cascade\\n\\nForward-merging \`main\` (${SHORT_SHA}) into \`${BRANCH}\`.\\n\\nIf conflicts exist, resolve manually and merge.\\n\\n> Auto-created by **Cascade Main → Dev**.\",
-                  \"head\": \"main\",
-                  \"base\": \"${BRANCH}\"
-                }" \
-                "${API}/pulls")
-
-              HTTP_CODE=$(echo "$PR_RESPONSE" | tail -1)
-              BODY=$(echo "$PR_RESPONSE" | sed '$d')
-              PR_NUMBER=$(echo "$BODY" | jq -r '.number // empty')
-
-              if [ "$HTTP_CODE" != "201" ] || [ -z "$PR_NUMBER" ]; then
-                MSG=$(echo "$BODY" | jq -r '.message // .' 2>/dev/null | head -1)
-                echo "  ❌ Failed to create PR (HTTP ${HTTP_CODE}): ${MSG}"
-                FAILED=$((FAILED + 1))
-                continue
-              fi
-
-              echo "  ✅ Created PR #${PR_NUMBER}"
-            fi
-
-            # Try auto-merge
-            PR_DATA=$(curl -sS \
-              -H "Authorization: token ${GA_TOKEN}" \
-              "${API}/pulls/${PR_NUMBER}")
-
-            MERGEABLE=$(echo "$PR_DATA" | jq -r '.mergeable // false')
-
-            if [ "$MERGEABLE" != "true" ]; then
-              echo "  ⚠️  Conflicts — PR #${PR_NUMBER} left open"
-              CONFLICTS=$((CONFLICTS + 1))
-              continue
-            fi
-
-            MERGE_RESPONSE=$(curl -sS -w "\n%{http_code}" \
-              -X POST \
-              -H "Authorization: token ${GA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              -d "{
-                \"Do\": \"merge\",
-                \"merge_message_field\": \"chore: cascade main → ${BRANCH} [skip ci]\",
-                \"delete_branch_after_merge\": false
-              }" \
-              "${API}/pulls/${PR_NUMBER}/merge")
-
-            MERGE_HTTP=$(echo "$MERGE_RESPONSE" | tail -1)
-
-            if [ "$MERGE_HTTP" = "200" ] || [ "$MERGE_HTTP" = "204" ]; then
-              echo "  ✅ Merged — ${BRANCH} is in sync"
-              SUCCESS=$((SUCCESS + 1))
-            else
-              MERGE_BODY=$(echo "$MERGE_RESPONSE" | sed '$d')
-              echo "  ⚠️  Merge failed (HTTP ${MERGE_HTTP}) — PR #${PR_NUMBER} left open"
-              CONFLICTS=$((CONFLICTS + 1))
-            fi
-          done
-
-          # Summary
-          echo ""
-          echo "════════════════════════════════════════"
-          echo "  ✅ Merged:    ${SUCCESS}"
-          echo "  ⚠️  Conflicts: ${CONFLICTS}"
-          echo "  ⏭️  Up to date: ${SKIPPED}"
-          echo "  ❌ Failed:    ${FAILED}"
-          echo "════════════════════════════════════════"
-
-          if [ "$FAILED" -gt 0 ]; then
-            exit 1
-          fi

.gitea/workflows/deploy-manual.yml

@@ -1,126 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Deploy
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards-API
-# PATH: /templates/workflows/joomla/deploy-manual.yml.template
-# VERSION: 04.07.00
-# BRIEF: Manual SFTP deploy to dev server for Joomla repos
-
-name: "Universal: Deploy to Dev (Manual)"
-
-on:
-  workflow_dispatch:
-    inputs:
-      clear_remote:
-        description: 'Delete all remote files before uploading'
-        required: false
-        default: 'false'
-        type: boolean
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    name: SFTP Deploy to Dev
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Setup PHP
-        run: |
-          php -v && composer --version
-
-      - name: Setup MokoStandards tools
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_HOST: ${{ secrets.GA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
-        run: |
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api 2>/dev/null || true
-          if [ -d "/tmp/mokostandards-api" ] && [ -f "/tmp/mokostandards-api/composer.json" ]; then
-            cd /tmp/mokostandards-api && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
-          fi
-
-      - name: Check FTP configuration
-        id: check
-        env:
-          HOST: ${{ vars.DEV_FTP_HOST }}
-          PATH_VAR: ${{ vars.DEV_FTP_PATH }}
-          PORT: ${{ vars.DEV_FTP_PORT }}
-        run: |
-          if [ -z "$HOST" ] || [ -z "$PATH_VAR" ]; then
-            echo "DEV_FTP_HOST or DEV_FTP_PATH not configured -- cannot deploy"
-            echo "skip=true" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-          echo "skip=false" >> "$GITHUB_OUTPUT"
-          echo "host=$HOST" >> "$GITHUB_OUTPUT"
-
-          REMOTE="${PATH_VAR%/}"
-          echo "remote=$REMOTE" >> "$GITHUB_OUTPUT"
-
-          [ -z "$PORT" ] && PORT="22"
-          echo "port=$PORT" >> "$GITHUB_OUTPUT"
-
-      - name: Deploy via SFTP
-        if: steps.check.outputs.skip != 'true'
-        env:
-          SFTP_KEY: ${{ secrets.DEV_FTP_KEY }}
-          SFTP_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
-          SFTP_USER: ${{ vars.DEV_FTP_USERNAME }}
-        run: |
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          [ ! -d "$SOURCE_DIR" ] && { echo "No src/ or htdocs/ -- nothing to deploy"; exit 0; }
-
-          printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
-            "${{ steps.check.outputs.host }}" "${{ steps.check.outputs.port }}" "$SFTP_USER" "${{ steps.check.outputs.remote }}" \
-            > /tmp/sftp-config.json
-
-          if [ -n "$SFTP_KEY" ]; then
-            echo "$SFTP_KEY" > /tmp/deploy_key
-            chmod 600 /tmp/deploy_key
-            printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
-          else
-            printf ',"password":"%s"}' "$SFTP_PASS" >> /tmp/sftp-config.json
-          fi
-
-          DEPLOY_ARGS=(--path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json)
-          [ "${{ inputs.clear_remote }}" = "true" ] && DEPLOY_ARGS+=(--clear-remote)
-
-          PLATFORM=$(php /tmp/mokostandards-api/cli/platform_detect.php --path . 2>/dev/null || true)
-          if [ "$PLATFORM" = "waas-component" ] && [ -f "/tmp/mokostandards-api/deploy/deploy-joomla.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-joomla.php "${DEPLOY_ARGS[@]}"
-          else
-            php /tmp/mokostandards-api/deploy/deploy-sftp.php "${DEPLOY_ARGS[@]}"
-          fi
-
-          rm -f /tmp/deploy_key /tmp/sftp-config.json
-
-      - name: Summary
-        if: always()
-        run: |
-          if [ "${{ steps.check.outputs.skip }}" = "true" ]; then
-            echo "### Deploy Skipped -- FTP not configured" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "### Manual Dev Deploy Complete" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
-            echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
-            echo "| Host | \`${{ steps.check.outputs.host }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Remote | \`${{ steps.check.outputs.remote }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Clear | ${{ inputs.clear_remote }} |" >> $GITHUB_STEP_SUMMARY
-          fi

.gitea/workflows/pr-check.yml

@@ -1,196 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.CI
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/universal/pr-check.yml.template
-# VERSION: 05.00.00
-# BRIEF: PR gate — branch policy + code validation before merge
-
-name: "Universal: PR Check"
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, edited]
-
-permissions:
-  contents: read
-  pull-requests: write
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
-jobs:
-  # ── Branch Policy ──────────────────────────────────────────────────────
-  branch-policy:
-    name: Branch Policy
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check branch merge target
-        run: |
-          HEAD="${{ github.head_ref }}"
-          BASE="${{ github.base_ref }}"
-
-          echo "PR: ${HEAD} → ${BASE}"
-
-          ALLOWED=true
-          REASON=""
-
-          case "$HEAD" in
-            feature/*|feat/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Feature branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            fix/*|bugfix/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Fix branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            hotfix/*)
-              if [ "$BASE" != "dev" ] && [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Hotfix branches can only target 'dev' or 'main', not '${BASE}'"
-              fi
-              ;;
-            alpha/*|beta/*)
-              if [ "$BASE" != "dev" ]; then
-                ALLOWED=false
-                REASON="Pre-release branches must target 'dev', not '${BASE}'"
-              fi
-              ;;
-            rc/*)
-              if [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Release candidate branches must target 'main', not '${BASE}'"
-              fi
-              ;;
-            dev)
-              if [ "$BASE" != "main" ]; then
-                ALLOWED=false
-                REASON="Dev branch can only merge into 'main', not '${BASE}'"
-              fi
-              ;;
-          esac
-
-          if [ "$ALLOWED" = false ]; then
-            echo "::error::${REASON}"
-            echo "## Branch Policy Violation" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "${REASON}" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "### Allowed merge paths:" >> $GITHUB_STEP_SUMMARY
-            echo "- \`feature/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`fix/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`hotfix/*\` → \`dev\` or \`main\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`dev\` → \`main\`" >> $GITHUB_STEP_SUMMARY
-            echo "- \`rc/*\` → \`main\`" >> $GITHUB_STEP_SUMMARY
-            exit 1
-          fi
-
-          echo "Branch policy: OK (${HEAD} → ${BASE})"
-          echo "## Branch Policy: Passed" >> $GITHUB_STEP_SUMMARY
-
-  # ── Code Validation ────────────────────────────────────────────────────
-  validate:
-    name: Validate PR
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Detect platform
-        id: platform
-        run: |
-          # Read platform from XML manifest (<platform> tag) or plain text fallback
-          PLATFORM=$(sed -n 's/.*<platform>\([^<]*\)<\/platform>.*/\1/p' .gitea/manifest.xml 2>/dev/null | head -1)
-          [ -z "$PLATFORM" ] && PLATFORM=$(cat .gitea/manifest.xml 2>/dev/null | tr -d '[:space:]')
-          [ -z "$PLATFORM" ] && PLATFORM="generic"
-          echo "platform=$PLATFORM" >> "$GITHUB_OUTPUT"
-
-      - name: Setup PHP
-        if: steps.platform.outputs.platform == 'joomla' || steps.platform.outputs.platform == 'dolibarr'
-        run: |
-          if ! command -v php &> /dev/null; then
-            sudo apt-get update -qq
-            sudo apt-get install -y -qq php-cli php-mbstring php-xml >/dev/null 2>&1
-          fi
-
-      - name: PHP syntax check
-        if: steps.platform.outputs.platform == 'joomla' || steps.platform.outputs.platform == 'dolibarr'
-        run: |
-          ERRORS=0
-          while IFS= read -r -d '' file; do
-            if ! php -l "$file" 2>&1 | grep -q "No syntax errors"; then
-              ERRORS=$((ERRORS + 1))
-            fi
-          done < <(find . -name "*.php" -not -path "./.git/*" -not -path "./vendor/*" -print0)
-          echo "PHP lint: ${ERRORS} error(s)"
-          [ "$ERRORS" -eq 0 ] || { echo "::error::PHP syntax errors found"; exit 1; }
-
-      - name: Validate platform manifest
-        run: |
-          PLATFORM="${{ steps.platform.outputs.platform }}"
-          case "$PLATFORM" in
-            joomla)
-              MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-              if [ -z "$MANIFEST" ]; then
-                echo "::warning::No Joomla manifest found (WaaS site)"
-                exit 0
-              fi
-              echo "Manifest: ${MANIFEST}"
-              if command -v php &> /dev/null; then
-                php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('$MANIFEST'); if(!\$x){foreach(libxml_get_errors() as \$e) echo \$e->message; exit(1);}" || { echo "::error::Manifest XML is malformed"; exit 1; }
-              fi
-              for ELEMENT in name version description; do
-                grep -q "<${ELEMENT}>" "$MANIFEST" || { echo "::error::Missing <${ELEMENT}> in manifest"; exit 1; }
-              done
-              echo "Joomla manifest valid"
-              ;;
-            dolibarr)
-              MOD_FILE=$(find . -maxdepth 4 -name "mod*.class.php" ! -path "./.git/*" -exec grep -l 'extends DolibarrModules' {} \; 2>/dev/null | head -1)
-              if [ -z "$MOD_FILE" ]; then
-                echo "::error::No mod*.class.php found"
-                exit 1
-              fi
-              echo "Dolibarr module: ${MOD_FILE}"
-              ;;
-            *)
-              echo "Generic platform — no manifest validation"
-              ;;
-          esac
-
-      - name: Check update stream format
-        run: |
-          PLATFORM="${{ steps.platform.outputs.platform }}"
-          case "$PLATFORM" in
-            joomla)
-              if [ -f "updates.xml" ]; then
-                if command -v php &> /dev/null; then
-                  php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('updates.xml'); if(!\$x){foreach(libxml_get_errors() as \$e) echo \$e->message; exit(1);}" || { echo "::error::updates.xml is malformed"; exit 1; }
-                fi
-                echo "updates.xml valid"
-              fi
-              ;;
-            dolibarr)
-              [ -f "update.txt" ] && echo "update.txt present" || echo "::warning::No update.txt"
-              ;;
-          esac
-
-      - name: Verify package source
-        run: |
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          if [ ! -d "$SOURCE_DIR" ]; then
-            echo "::warning::No src/ or htdocs/ directory"
-            exit 0
-          fi
-          FILE_COUNT=$(find "$SOURCE_DIR" -type f | wc -l)
-          echo "Source: ${FILE_COUNT} files"
-          [ "$FILE_COUNT" -gt 0 ] || { echo "::error::Source directory is empty"; exit 1; }

.gitea/workflows/pre-release.yml

@@ -1,384 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Release
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
-# PATH: /templates/workflows/universal/pre-release.yml.template
-# VERSION: 05.00.00
-# BRIEF: Manual pre-release — builds dev/alpha/beta/rc packages from any branch
-
-name: "Universal: Pre-Release"
-
-on:
-  workflow_dispatch:
-    inputs:
-      stability:
-        description: 'Pre-release channel'
-        required: true
-        type: choice
-        options:
-          - development
-          - alpha
-          - beta
-          - release-candidate
-
-permissions:
-  contents: write
-
-env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-jobs:
-  build:
-    name: "Build Pre-Release (${{ inputs.stability }})"
-    runs-on: release
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.GA_TOKEN }}
-
-      - name: Setup PHP
-        run: |
-          if ! command -v php &> /dev/null; then
-            sudo apt-get update -qq
-            sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip >/dev/null 2>&1
-          fi
-
-      - name: Detect platform
-        id: platform
-        run: |
-          # Read platform from XML manifest (<platform> tag) or plain text fallback
-          PLATFORM=$(sed -n 's/.*<platform>\([^<]*\)<\/platform>.*/\1/p' .gitea/manifest.xml 2>/dev/null | head -1)
-          [ -z "$PLATFORM" ] && PLATFORM=$(cat .gitea/manifest.xml 2>/dev/null | tr -d '[:space:]')
-          [ -z "$PLATFORM" ] && PLATFORM="generic"
-          echo "platform=$PLATFORM" >> "$GITHUB_OUTPUT"
-          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          MOD_FILE=$(find . -maxdepth 4 -name "mod*.class.php" ! -path "./.git/*" -exec grep -l 'extends DolibarrModules' {} \; 2>/dev/null | head -1)
-          echo "manifest=${MANIFEST}" >> "$GITHUB_OUTPUT"
-          echo "mod_file=${MOD_FILE}" >> "$GITHUB_OUTPUT"
-
-      - name: Resolve metadata
-        id: meta
-        run: |
-          STABILITY="${{ inputs.stability }}"
-
-          case "$STABILITY" in
-            development)        SUFFIX="-dev";   TAG="development" ;;
-            alpha)              SUFFIX="-alpha"; TAG="alpha" ;;
-            beta)               SUFFIX="-beta";  TAG="beta" ;;
-            release-candidate)  SUFFIX="-rc";    TAG="release-candidate" ;;
-          esac
-
-          # Read and bump patch version (with rollover)
-          CURRENT=$(sed -n 's/.*VERSION:[[:space:]]*\([0-9][0-9]\.[0-9][0-9]\.[0-9][0-9]\).*/\1/p' README.md 2>/dev/null | head -1)
-          [ -z "$CURRENT" ] && CURRENT="00.00.00"
-
-          MAJOR=$(echo "$CURRENT" | cut -d. -f1)
-          MINOR=$(echo "$CURRENT" | cut -d. -f2)
-          PATCH=$(echo "$CURRENT" | cut -d. -f3)
-
-          # Patch bump with rollover: ZZ=99 → bump minor, YY=99 → bump major
-          NEW_PATCH=$((10#$PATCH + 1))
-          NEW_MINOR=$((10#$MINOR))
-          NEW_MAJOR=$((10#$MAJOR))
-
-          if [ $NEW_PATCH -gt 99 ]; then
-            NEW_PATCH=0
-            NEW_MINOR=$((NEW_MINOR + 1))
-          fi
-          if [ $NEW_MINOR -gt 99 ]; then
-            NEW_MINOR=0
-            NEW_MAJOR=$((NEW_MAJOR + 1))
-          fi
-
-          VERSION=$(printf "%02d.%02d.%02d" $NEW_MAJOR $NEW_MINOR $NEW_PATCH)
-          TODAY=$(date +%Y-%m-%d)
-
-          echo "Bumping: ${CURRENT} → ${VERSION} (patch)"
-
-          # Update README.md
-          sed -i "s/VERSION:[[:space:]]*${CURRENT}/VERSION: ${VERSION}/" README.md
-
-          # Update platform-specific manifest
-          PLATFORM="${{ steps.platform.outputs.platform }}"
-          MANIFEST="${{ steps.platform.outputs.manifest }}"
-          MOD_FILE="${{ steps.platform.outputs.mod_file }}"
-          case "$PLATFORM" in
-            joomla)
-              if [ -n "$MANIFEST" ]; then
-                MANIFEST_VER=$(sed -n 's/.*<version>\([^<]*\)<\/version>.*/\1/p' "$MANIFEST" | head -1)
-                sed -i "s|<version>${MANIFEST_VER}</version>|<version>${VERSION}</version>|" "$MANIFEST"
-                sed -i "s|<creationDate>[^<]*</creationDate>|<creationDate>${TODAY}</creationDate>|" "$MANIFEST"
-              fi
-              ;;
-            dolibarr)
-              if [ -n "$MOD_FILE" ]; then
-                sed -i "s/\$this->version = '[^']*'/\$this->version = '${VERSION}'/" "$MOD_FILE"
-              fi
-              ;;
-            *) ;;
-          esac
-
-          # Commit version bump
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          git remote set-url origin "https://jmiller:${{ secrets.GA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
-          git add -A
-          git diff --cached --quiet || {
-            git commit -m "chore(version): bump ${CURRENT} → ${VERSION} [skip ci]"
-            git push origin HEAD 2>&1
-          }
-
-          # Auto-detect element (platform-aware)
-          case "$PLATFORM" in
-            joomla)
-              MANIFEST="${{ steps.platform.outputs.manifest }}"
-              EXT_ELEMENT=""
-              if [ -n "$MANIFEST" ]; then
-                EXT_ELEMENT=$(sed -n 's/.*<element>\([^<]*\)<\/element>.*/\1/p' "$MANIFEST" 2>/dev/null | head -1)
-                if [ -z "$EXT_ELEMENT" ]; then
-                  EXT_ELEMENT=$(basename "$MANIFEST" .xml | tr '[:upper:]' '[:lower:]')
-                  case "$EXT_ELEMENT" in
-                    templatedetails|manifest) EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -') ;;
-                  esac
-                fi
-              else
-                EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-              fi
-              ;;
-            dolibarr)
-              MOD_FILE="${{ steps.platform.outputs.mod_file }}"
-              if [ -n "$MOD_FILE" ]; then
-                MOD_BASENAME=$(basename "$MOD_FILE" .class.php)
-                EXT_ELEMENT=$(echo "$MOD_BASENAME" | sed 's/^mod//' | tr '[:upper:]' '[:lower:]')
-              else
-                EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-              fi
-              ;;
-            *)
-              EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
-              ;;
-          esac
-
-          ZIP_NAME="${EXT_ELEMENT}-${VERSION}${SUFFIX}.zip"
-
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-          echo "stability=${STABILITY}" >> "$GITHUB_OUTPUT"
-          echo "suffix=${SUFFIX}" >> "$GITHUB_OUTPUT"
-          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
-          echo "zip_name=${ZIP_NAME}" >> "$GITHUB_OUTPUT"
-          echo "ext_element=${EXT_ELEMENT}" >> "$GITHUB_OUTPUT"
-          echo "manifest=${MANIFEST}" >> "$GITHUB_OUTPUT"
-
-          echo "=== Pre-Release: ${EXT_ELEMENT} ${VERSION}${SUFFIX} ==="
-
-      - name: Build package
-        run: |
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          if [ ! -d "$SOURCE_DIR" ]; then
-            echo "::error::No src/ or htdocs/ directory"
-            exit 1
-          fi
-
-          mkdir -p build/package
-          rsync -a \
-            --exclude='sftp-config*' \
-            --exclude='.ftpignore' \
-            --exclude='*.ppk' \
-            --exclude='*.pem' \
-            --exclude='*.key' \
-            --exclude='.env*' \
-            --exclude='*.local' \
-            --exclude='.build-trigger' \
-            "${SOURCE_DIR}/" build/package/
-
-      - name: Create ZIP
-        id: zip
-        run: |
-          ZIP_NAME="${{ steps.meta.outputs.zip_name }}"
-          cd build/package
-          zip -r "../${ZIP_NAME}" .
-          cd ..
-
-          SHA256=$(sha256sum "${ZIP_NAME}" | cut -d' ' -f1)
-          echo "sha256=${SHA256}" >> "$GITHUB_OUTPUT"
-          echo "ZIP: ${ZIP_NAME} (SHA: ${SHA256:0:16}...)"
-
-      - name: Create or replace Gitea release
-        id: release
-        run: |
-          TAG="${{ steps.meta.outputs.tag }}"
-          VERSION="${{ steps.meta.outputs.version }}"
-          STABILITY="${{ steps.meta.outputs.stability }}"
-          SHA256="${{ steps.zip.outputs.sha256 }}"
-          ZIP_NAME="${{ steps.meta.outputs.zip_name }}"
-          EXT_ELEMENT="${{ steps.meta.outputs.ext_element }}"
-          TOKEN="${{ secrets.GA_TOKEN }}"
-          API="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          BRANCH=$(git branch --show-current)
-
-          BODY="## ${VERSION} ($(date +%Y-%m-%d))
-          **Channel:** ${STABILITY}
-          **SHA-256:** \`${SHA256}\`"
-
-          # Delete existing release
-          EXISTING_ID=$(curl -sS -H "Authorization: token ${TOKEN}" \
-            "${API}/releases/tags/${TAG}" | jq -r '.id // empty' 2>/dev/null)
-          if [ -n "$EXISTING_ID" ]; then
-            curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-              "${API}/releases/${EXISTING_ID}" 2>/dev/null || true
-            curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-              "${API}/tags/${TAG}" 2>/dev/null || true
-          fi
-
-          # Create release
-          RELEASE_ID=$(curl -sS -X POST -H "Authorization: token ${TOKEN}" \
-            -H "Content-Type: application/json" \
-            "${API}/releases" \
-            -d "$(jq -n \
-              --arg tag "$TAG" \
-              --arg target "$BRANCH" \
-              --arg name "${EXT_ELEMENT} ${VERSION} (${STABILITY})" \
-              --arg body "$BODY" \
-              '{tag_name: $tag, target_commitish: $target, name: $name, body: $body, prerelease: true}'
-            )" | jq -r '.id')
-
-          echo "release_id=${RELEASE_ID}" >> "$GITHUB_OUTPUT"
-
-          # Upload ZIP
-          curl -sS -X POST -H "Authorization: token ${TOKEN}" \
-            -H "Content-Type: application/octet-stream" \
-            "${API}/releases/${RELEASE_ID}/assets?name=${ZIP_NAME}" \
-            --data-binary "@build/${ZIP_NAME}"
-
-          echo "Released: ${EXT_ELEMENT} ${VERSION} (${STABILITY})"
-
-      - name: Update updates.xml
-        if: steps.platform.outputs.platform == 'joomla'
-        run: |
-          STABILITY="${{ steps.meta.outputs.stability }}"
-          VERSION="${{ steps.meta.outputs.version }}"
-          SHA256="${{ steps.zip.outputs.sha256 }}"
-          ZIP_NAME="${{ steps.meta.outputs.zip_name }}"
-          TAG="${{ steps.meta.outputs.tag }}"
-          DATE=$(date +%Y-%m-%d)
-
-          if [ ! -f "updates.xml" ]; then
-            echo "No updates.xml — skipping"
-            exit 0
-          fi
-
-          export PY_STABILITY="$STABILITY" PY_VERSION="$VERSION" PY_SHA256="$SHA256" \
-                 PY_ZIP_NAME="$ZIP_NAME" PY_TAG="$TAG" PY_DATE="$DATE" \
-                 PY_GITEA_ORG="$GITEA_ORG" PY_GITEA_REPO="$GITEA_REPO"
-          python3 << 'PYEOF'
-          import re, os
-
-          stability  = os.environ["PY_STABILITY"]
-          version    = os.environ["PY_VERSION"]
-          sha256     = os.environ["PY_SHA256"]
-          zip_name   = os.environ["PY_ZIP_NAME"]
-          tag        = os.environ["PY_TAG"]
-          date       = os.environ["PY_DATE"]
-          gitea_org  = os.environ["PY_GITEA_ORG"]
-          gitea_repo = os.environ["PY_GITEA_REPO"]
-          download_url = f"https://git.mokoconsulting.tech/{gitea_org}/{gitea_repo}/releases/download/{tag}/{zip_name}"
-
-          with open("updates.xml", "r") as f:
-              content = f.read()
-
-          # Map stability to XML tag name
-          tag_map = {"development": "development", "alpha": "alpha", "beta": "beta", "release-candidate": "rc"}
-          xml_tag = tag_map.get(stability, stability)
-
-          pattern = r"(<update>(?:(?!</update>).)*?<tag>" + re.escape(xml_tag) + r"</tag>.*?</update>)"
-          match = re.search(pattern, content, re.DOTALL)
-          if match:
-              block = match.group(1)
-              updated = re.sub(r"<version>[^<]*</version>", f"<version>{version}</version>", block)
-              updated = re.sub(r"<creationDate>[^<]*</creationDate>", f"<creationDate>{date}</creationDate>", updated)
-              if "<sha256>" in updated:
-                  updated = re.sub(r"<sha256>[^<]*</sha256>", f"<sha256>{sha256}</sha256>", updated)
-              else:
-                  updated = updated.replace("</downloads>", f"</downloads>\n    <sha256>{sha256}</sha256>")
-              updated = re.sub(r"(<downloadurl[^>]*>)[^<]*(</downloadurl>)", rf"\g<1>{download_url}\g<2>", updated)
-              content = content.replace(block, updated)
-              print(f"Updated {xml_tag} channel: version={version}")
-          else:
-              print(f"WARNING: No <tag>{xml_tag}</tag> block in updates.xml")
-
-          with open("updates.xml", "w") as f:
-              f.write(content)
-          PYEOF
-
-          # Commit and push to current branch
-          if ! git diff --quiet updates.xml 2>/dev/null; then
-            git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-            git config --local user.name "gitea-actions[bot]"
-            git add updates.xml
-            git commit -m "chore: update ${STABILITY} channel ${VERSION} [skip ci]"
-            git push origin HEAD 2>&1 || echo "WARNING: push failed"
-          fi
-
-      - name: "Sync updates.xml to all branches"
-        if: steps.platform.outputs.platform == 'joomla'
-        run: |
-          CURRENT_BRANCH="${{ github.ref_name }}"
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-
-          # Sync updates.xml to main and dev (whichever isn't current)
-          for BRANCH in main dev; do
-            [ "$BRANCH" = "$CURRENT_BRANCH" ] && continue
-
-            echo "Syncing updates.xml → ${BRANCH}"
-            git fetch origin "${BRANCH}" 2>/dev/null || continue
-            git checkout "origin/${BRANCH}" -- . 2>/dev/null || continue
-            git checkout "${CURRENT_BRANCH}" -- updates.xml
-            if ! git diff --quiet updates.xml 2>/dev/null; then
-              git add updates.xml
-              git commit -m "chore: sync updates.xml from ${CURRENT_BRANCH} [skip ci]"
-              git push origin HEAD:refs/heads/${BRANCH} 2>&1 || echo "WARNING: push to ${BRANCH} failed"
-            fi
-            git checkout "${CURRENT_BRANCH}" 2>/dev/null
-          done
-
-      - name: "Delete lesser pre-release channels (cascade)"
-        continue-on-error: true
-        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.GA_TOKEN }}"
-          STABILITY="${{ steps.meta.outputs.stability }}"
-
-          # Cascade: rc → beta,alpha,dev | beta → alpha,dev | alpha → dev | dev → nothing
-          case "$STABILITY" in
-            release-candidate) TAGS_TO_DELETE="beta alpha development" ;;
-            beta)              TAGS_TO_DELETE="alpha development" ;;
-            alpha)             TAGS_TO_DELETE="development" ;;
-            *)                 TAGS_TO_DELETE="" ;;
-          esac
-
-          [ -z "$TAGS_TO_DELETE" ] && exit 0
-
-          for TAG in $TAGS_TO_DELETE; do
-            RELEASE_ID=$(curl -sS -H "Authorization: token ${TOKEN}" \
-              "${API_BASE}/releases/tags/${TAG}" 2>/dev/null | \
-              python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-
-            if [ -n "$RELEASE_ID" ] && [ "$RELEASE_ID" != "None" ]; then
-              curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-                "${API_BASE}/releases/${RELEASE_ID}" 2>/dev/null || true
-              curl -sS -X DELETE -H "Authorization: token ${TOKEN}" \
-                "${API_BASE}/tags/${TAG}" 2>/dev/null || true
-              echo "Deleted: ${TAG} (id: ${RELEASE_ID})"
-            fi
-          done

.gitea/workflows/repo-health.yml

@@ -1,766 +0,0 @@
-# ============================================================================
-# Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
-#
-# This file is part of a Moko Consulting project.
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Validation
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/joomla/repo_health.yml.template
-# VERSION: 04.06.00
-# BRIEF: Enforces repository guardrails by validating release configuration, scripts governance, tooling availability, and core repository health artifacts.
-# ============================================================================
-
-name: "Joomla: Repo Health"
-
-concurrency:
-  group: repo-health-${{ github.repository }}-${{ github.ref }}
-  cancel-in-progress: true
-
-defaults:
-  run:
-    shell: bash
-
-on:
-  workflow_dispatch:
-    inputs:
-      profile:
-        description: 'Validation profile: all, release, scripts, or repo'
-        required: true
-        default: all
-        type: choice
-        options:
-          - all
-          - release
-          - scripts
-          - repo
-  pull_request:
-  push:
-
-permissions:
-  contents: read
-
-env:
-  # Release policy - Repository Variables Only
-  RELEASE_REQUIRED_REPO_VARS: RS_FTP_PATH_SUFFIX
-  RELEASE_OPTIONAL_REPO_VARS: DEV_FTP_SUFFIX
-
-  # Scripts governance policy
-  SCRIPTS_REQUIRED_DIRS:
-  SCRIPTS_ALLOWED_DIRS: scripts,scripts/fix,scripts/lib,scripts/release,scripts/run,scripts/validate
-
-  # Repo health policy
-  REPO_REQUIRED_ARTIFACTS: README.md,LICENSE,CHANGELOG.md,CONTRIBUTING.md,CODE_OF_CONDUCT.md,.gitea/workflows/
-  REPO_OPTIONAL_FILES: SECURITY.md,GOVERNANCE.md,.editorconfig,.gitattributes,.gitignore,README.md,docs/
-  REPO_DISALLOWED_DIRS:
-  REPO_DISALLOWED_FILES: TODO.md,todo.md
-
-  # Extended checks toggles
-  EXTENDED_CHECKS: "true"
-
-  # File / directory variables
-  DOCS_INDEX: docs/docs-index.md
-  SCRIPT_DIR: scripts
-  WORKFLOWS_DIR: .gitea/workflows
-  SHELLCHECK_PATTERN: '*.sh'
-  SPDX_FILE_GLOBS: '*.sh,*.php,*.js,*.ts,*.css,*.xml,*.yml,*.yaml'
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
-jobs:
-  access_check:
-    name: Access control
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    permissions:
-      contents: read
-
-    outputs:
-      allowed: ${{ steps.perm.outputs.allowed }}
-      permission: ${{ steps.perm.outputs.permission }}
-
-    steps:
-      - name: Check actor permission (admin only)
-        id: perm
-        env:
-          TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          REPO: ${{ github.repository }}
-          ACTOR: ${{ github.actor }}
-        run: |
-          set -euo pipefail
-          ALLOWED=false
-          PERMISSION=unknown
-          METHOD=""
-
-          # Hardcoded authorized users — always allowed
-          case "$ACTOR" in
-            jmiller|gitea-actions[bot])
-              ALLOWED=true
-              PERMISSION=admin
-              METHOD="hardcoded allowlist"
-              ;;
-            *)
-              # Detect platform and check permissions via API
-              API_BASE="${GITHUB_API_URL:-${GITEA_API_URL:-https://api.github.com}}"
-              RESP=$(curl -sf -H "Authorization: token ${TOKEN}" \
-                "${API_BASE}/repos/${REPO}/collaborators/${ACTOR}/permission" 2>/dev/null || echo '{}')
-              PERMISSION=$(echo "$RESP" | grep -oP '"permission"\s*:\s*"\K[^"]+' || echo "unknown")
-              if [ "$PERMISSION" = "admin" ] || [ "$PERMISSION" = "maintain" ] || [ "$PERMISSION" = "owner" ]; then
-                ALLOWED=true
-              fi
-              METHOD="collaborator API"
-              ;;
-          esac
-
-          echo "permission=${PERMISSION}" >> "$GITHUB_OUTPUT"
-          echo "allowed=${ALLOWED}" >> "$GITHUB_OUTPUT"
-
-          {
-            echo "## Access Authorization"
-            echo ""
-            echo "| Field | Value |"
-            echo "|-------|-------|"
-            echo "| **Actor** | \`${ACTOR}\` |"
-            echo "| **Repository** | \`${REPO}\` |"
-            echo "| **Permission** | \`${PERMISSION}\` |"
-            echo "| **Method** | ${METHOD} |"
-            echo "| **Authorized** | ${ALLOWED} |"
-            echo ""
-            if [ "$ALLOWED" = "true" ]; then
-              echo "${ACTOR} authorized (${METHOD})"
-            else
-              echo "${ACTOR} is NOT authorized. Requires admin or maintain role."
-            fi
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-      - name: Deny execution when not permitted
-        if: ${{ steps.perm.outputs.allowed != 'true' }}
-        run: |
-          set -euo pipefail
-          printf '%s\n' 'ERROR: Access denied. Admin permission required.' >> "${GITHUB_STEP_SUMMARY}"
-          exit 1
-
-  release_config:
-    name: Release configuration
-    needs: access_check
-    if: ${{ needs.access_check.outputs.allowed == 'true' }}
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    permissions:
-      contents: read
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          fetch-depth: 0
-
-      - name: Guardrails release vars
-        env:
-          PROFILE_RAW: ${{ github.event.inputs.profile }}
-          RS_FTP_PATH_SUFFIX: ${{ vars.RS_FTP_PATH_SUFFIX }}
-          DEV_FTP_SUFFIX: ${{ vars.DEV_FTP_SUFFIX }}
-        run: |
-          set -euo pipefail
-
-          profile="${PROFILE_RAW:-all}"
-          case "${profile}" in
-            all|release|scripts|repo) ;;
-            *)
-              printf '%s\n' "ERROR: Unknown profile: ${profile}" >> "${GITHUB_STEP_SUMMARY}"
-              exit 1
-              ;;
-          esac
-
-          if [ "${profile}" = 'scripts' ] || [ "${profile}" = 'repo' ]; then
-            {
-              printf '%s\n' '### Release configuration (Repository Variables)'
-              printf '%s\n' "Profile: ${profile}"
-              printf '%s\n' 'Status: SKIPPED'
-              printf '%s\n' 'Reason: profile excludes release validation'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 0
-          fi
-
-          IFS=',' read -r -a required <<< "${RELEASE_REQUIRED_REPO_VARS}"
-          IFS=',' read -r -a optional <<< "${RELEASE_OPTIONAL_REPO_VARS}"
-
-          missing=()
-          missing_optional=()
-
-          for k in "${required[@]}"; do
-            v="${!k:-}"
-            [ -z "${v}" ] && missing+=("${k}")
-          done
-
-          for k in "${optional[@]}"; do
-            v="${!k:-}"
-            [ -z "${v}" ] && missing_optional+=("${k}")
-          done
-
-          {
-            printf '%s\n' '### Release configuration (Repository Variables)'
-            printf '%s\n' "Profile: ${profile}"
-            printf '%s\n' '| Variable | Status |'
-            printf '%s\n' '|---|---|'
-            printf '%s\n' "| RS_FTP_PATH_SUFFIX | ${RS_FTP_PATH_SUFFIX:-NOT SET} |"
-            printf '%s\n' "| DEV_FTP_SUFFIX | ${DEV_FTP_SUFFIX:-NOT SET} |"
-            printf '\n'
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-          if [ "${#missing_optional[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Missing optional repository variables'
-              for m in "${missing_optional[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          fi
-
-          if [ "${#missing[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Missing required repository variables'
-              for m in "${missing[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '%s\n' 'ERROR: Guardrails failed. Missing required repository variables.'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 1
-          fi
-
-          {
-            printf '%s\n' '### Repository variables validation result'
-            printf '%s\n' 'Status: OK'
-            printf '%s\n' 'All required repository variables present.'
-            printf '%s\n' ''
-            printf '%s\n' '**Note**: Organization secrets (RS_FTP_HOST, RS_FTP_USER, etc.) are validated at deployment time, not in repository health checks.'
-            printf '\n'
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-  scripts_governance:
-    name: Scripts governance
-    needs: access_check
-    if: ${{ needs.access_check.outputs.allowed == 'true' }}
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    permissions:
-      contents: read
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          fetch-depth: 0
-
-      - name: Scripts folder checks
-        env:
-          PROFILE_RAW: ${{ github.event.inputs.profile }}
-        run: |
-          set -euo pipefail
-
-          profile="${PROFILE_RAW:-all}"
-          case "${profile}" in
-            all|release|scripts|repo) ;;
-            *)
-              printf '%s\n' "ERROR: Unknown profile: ${profile}" >> "${GITHUB_STEP_SUMMARY}"
-              exit 1
-              ;;
-          esac
-
-          if [ "${profile}" = 'release' ] || [ "${profile}" = 'repo' ]; then
-            {
-              printf '%s\n' '### Scripts governance'
-              printf '%s\n' "Profile: ${profile}"
-              printf '%s\n' 'Status: SKIPPED'
-              printf '%s\n' 'Reason: profile excludes scripts governance'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 0
-          fi
-
-          if [ ! -d "${SCRIPT_DIR}" ]; then
-            {
-              printf '%s\n' '### Scripts governance'
-              printf '%s\n' 'Status: OK (advisory)'
-              printf '%s\n' 'scripts/ directory not present. No scripts governance enforced.'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 0
-          fi
-
-          IFS=',' read -r -a required_dirs <<< "${SCRIPTS_REQUIRED_DIRS}"
-          IFS=',' read -r -a allowed_dirs <<< "${SCRIPTS_ALLOWED_DIRS}"
-
-          missing_dirs=()
-          unapproved_dirs=()
-
-          for d in "${required_dirs[@]}"; do
-            req="${d%/}"
-            [ ! -d "${req}" ] && missing_dirs+=("${req}/")
-          done
-
-          while IFS= read -r d; do
-            allowed=false
-            for a in "${allowed_dirs[@]}"; do
-              a_norm="${a%/}"
-              [ "${d%/}" = "${a_norm}" ] && allowed=true
-            done
-            [ "${allowed}" = false ] && unapproved_dirs+=("${d%/}/")
-          done < <(find "${SCRIPT_DIR}" -maxdepth 1 -mindepth 1 -type d 2>/dev/null | sed 's#^\./##')
-
-          {
-            printf '%s\n' '### Scripts governance'
-            printf '%s\n' "Profile: ${profile}"
-            printf '%s\n' '| Area | Status | Notes |'
-            printf '%s\n' '|---|---|---|'
-
-            if [ "${#missing_dirs[@]}" -gt 0 ]; then
-              printf '%s\n' '| Required directories | Warning | Missing required subfolders |'
-            else
-              printf '%s\n' '| Required directories | OK | All required subfolders present |'
-            fi
-
-            if [ "${#unapproved_dirs[@]}" -gt 0 ]; then
-              printf '%s\n' '| Directory policy | Warning | Unapproved directories detected |'
-            else
-              printf '%s\n' '| Directory policy | OK | No unapproved directories |'
-            fi
-
-            printf '%s\n' '| Enforcement mode | Advisory | scripts folder is optional |'
-            printf '\n'
-
-            if [ "${#missing_dirs[@]}" -gt 0 ]; then
-              printf '%s\n' 'Missing required script directories:'
-              for m in "${missing_dirs[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '\n'
-            else
-              printf '%s\n' 'Missing required script directories: none.'
-              printf '\n'
-            fi
-
-            if [ "${#unapproved_dirs[@]}" -gt 0 ]; then
-              printf '%s\n' 'Unapproved script directories detected:'
-              for m in "${unapproved_dirs[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '\n'
-            else
-              printf '%s\n' 'Unapproved script directories detected: none.'
-              printf '\n'
-            fi
-
-            printf '%s\n' 'Scripts governance completed in advisory mode.'
-            printf '\n'
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-  repo_health:
-    name: Repository health
-    needs: access_check
-    if: ${{ needs.access_check.outputs.allowed == 'true' }}
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    permissions:
-      contents: read
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          fetch-depth: 0
-
-      - name: Repository health checks
-        env:
-          PROFILE_RAW: ${{ github.event.inputs.profile }}
-        run: |
-          set -euo pipefail
-
-          profile="${PROFILE_RAW:-all}"
-          case "${profile}" in
-            all|release|scripts|repo) ;;
-            *)
-              printf '%s\n' "ERROR: Unknown profile: ${profile}" >> "${GITHUB_STEP_SUMMARY}"
-              exit 1
-              ;;
-          esac
-
-          if [ "${profile}" = 'release' ] || [ "${profile}" = 'scripts' ]; then
-            {
-              printf '%s\n' '### Repository health'
-              printf '%s\n' "Profile: ${profile}"
-              printf '%s\n' 'Status: SKIPPED'
-              printf '%s\n' 'Reason: profile excludes repository health'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 0
-          fi
-
-          # Source directory: src/ or htdocs/ (either is valid)
-          if [ -d "src" ]; then
-            SOURCE_DIR="src"
-          elif [ -d "htdocs" ]; then
-            SOURCE_DIR="htdocs"
-          else
-            missing_required+=("src/ or htdocs/ (source directory required)")
-          fi
-
-          IFS=',' read -r -a required_artifacts <<< "${REPO_REQUIRED_ARTIFACTS}"
-          IFS=',' read -r -a optional_files <<< "${REPO_OPTIONAL_FILES}"
-          IFS=',' read -r -a disallowed_dirs <<< "${REPO_DISALLOWED_DIRS}"
-          IFS=',' read -r -a disallowed_files <<< "${REPO_DISALLOWED_FILES}"
-
-          missing_required=()
-          missing_optional=()
-
-          for item in "${required_artifacts[@]}"; do
-            if printf '%s' "${item}" | grep -q '/$'; then
-              d="${item%/}"
-              [ ! -d "${d}" ] && missing_required+=("${item}")
-            else
-              [ ! -f "${item}" ] && missing_required+=("${item}")
-            fi
-          done
-
-          for f in "${optional_files[@]}"; do
-            if printf '%s' "${f}" | grep -q '/$'; then
-              d="${f%/}"
-              [ ! -d "${d}" ] && missing_optional+=("${f}")
-            else
-              [ ! -f "${f}" ] && missing_optional+=("${f}")
-            fi
-          done
-
-          for d in "${disallowed_dirs[@]}"; do
-            d_norm="${d%/}"
-            [ -d "${d_norm}" ] && missing_required+=("${d_norm}/ (disallowed)")
-          done
-
-          for f in "${disallowed_files[@]}"; do
-            [ -f "${f}" ] && missing_required+=("${f} (disallowed)")
-          done
-
-          git fetch origin --prune
-
-          dev_paths=()
-          dev_branches=()
-
-          while IFS= read -r b; do
-            name="${b#origin/}"
-            if [ "${name}" = 'dev' ]; then
-              dev_branches+=("${name}")
-            else
-              dev_paths+=("${name}")
-            fi
-          done < <(git branch -r --list 'origin/dev*' | sed 's/^ *//')
-
-          if [ "${#dev_paths[@]}" -eq 0 ]; then
-            missing_required+=("dev/* branch (e.g. dev/01.00.00)")
-          fi
-
-          if [ "${#dev_branches[@]}" -gt 0 ]; then
-            missing_required+=("invalid branch dev (must be dev/<version>)")
-          fi
-
-          content_warnings=()
-
-          if [ -f 'CHANGELOG.md' ] && ! grep -Eq '^# Changelog' CHANGELOG.md; then
-            content_warnings+=("CHANGELOG.md missing '# Changelog' header")
-          fi
-
-          if [ -f 'CHANGELOG.md' ] && grep -Eq '^[# ]*Unreleased' CHANGELOG.md; then
-            content_warnings+=("CHANGELOG.md contains Unreleased section (review release readiness)")
-          fi
-
-          if [ -f 'LICENSE' ] && ! grep -qiE 'GNU GENERAL PUBLIC LICENSE|GPL' LICENSE; then
-            content_warnings+=("LICENSE does not look like a GPL text")
-          fi
-
-          if [ -f 'README.md' ] && ! grep -qiE 'moko|Moko' README.md; then
-            content_warnings+=("README.md missing expected brand keyword")
-          fi
-
-          export PROFILE_RAW="${profile}"
-          export MISSING_REQUIRED="$(printf '%s\n' "${missing_required[@]:-}")"
-          export MISSING_OPTIONAL="$(printf '%s\n' "${missing_optional[@]:-}")"
-          export CONTENT_WARNINGS="$(printf '%s\n' "${content_warnings[@]:-}")"
-
-          report_json="$(python3 - <<'PY'
-          import json
-          import os
-
-          profile = os.environ.get('PROFILE_RAW') or 'all'
-
-          missing_required = os.environ.get('MISSING_REQUIRED', '').splitlines() if os.environ.get('MISSING_REQUIRED') else []
-          missing_optional = os.environ.get('MISSING_OPTIONAL', '').splitlines() if os.environ.get('MISSING_OPTIONAL') else []
-          content_warnings = os.environ.get('CONTENT_WARNINGS', '').splitlines() if os.environ.get('CONTENT_WARNINGS') else []
-
-          out = {
-            'profile': profile,
-            'missing_required': [x for x in missing_required if x],
-            'missing_optional': [x for x in missing_optional if x],
-            'content_warnings': [x for x in content_warnings if x],
-          }
-
-          print(json.dumps(out, indent=2))
-          PY
-          )"
-
-          {
-            printf '%s\n' '### Repository health'
-            printf '%s\n' "Profile: ${profile}"
-            printf '%s\n' '| Metric | Value |'
-            printf '%s\n' '|---|---|'
-            printf '%s\n' "| Missing required | ${#missing_required[@]} |"
-            printf '%s\n' "| Missing optional | ${#missing_optional[@]} |"
-            printf '%s\n' "| Content warnings | ${#content_warnings[@]} |"
-            printf '\n'
-
-            printf '%s\n' '### Guardrails report (JSON)'
-            printf '%s\n' '```json'
-            printf '%s\n' "${report_json}"
-            printf '%s\n' '```'
-            printf '\n'
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-          if [ "${#missing_required[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Missing required repo artifacts'
-              for m in "${missing_required[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '%s\n' 'ERROR: Guardrails failed. Missing required repository artifacts.'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-            exit 1
-          fi
-
-          if [ "${#missing_optional[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Missing optional repo artifacts'
-              for m in "${missing_optional[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          fi
-
-          if [ "${#content_warnings[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Repo content warnings'
-              for m in "${content_warnings[@]}"; do printf '%s\n' "- ${m}"; done
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          fi
-
-          # -- Joomla-specific checks --
-          joomla_findings=()
-
-          MANIFEST="$(find . -maxdepth 2 -name '*.xml' -exec grep -l '<extension' {} \; 2>/dev/null | head -1 || true)"
-          if [ -z "${MANIFEST}" ]; then
-            joomla_findings+=("Joomla XML manifest not found (no *.xml with <extension> tag)")
-          else
-            if ! grep -qP '<version>' "${MANIFEST}"; then
-              joomla_findings+=("XML manifest: <version> tag missing")
-            fi
-            if ! grep -qP 'type="(component|module|plugin|library|package|template|language)"' "${MANIFEST}"; then
-              joomla_findings+=("XML manifest: type attribute missing or invalid")
-            fi
-            if ! grep -qP '<name>' "${MANIFEST}"; then
-              joomla_findings+=("XML manifest: <name> tag missing")
-            fi
-            if ! grep -qP '<author>' "${MANIFEST}"; then
-              joomla_findings+=("XML manifest: <author> tag missing")
-            fi
-            if ! grep -qP '<namespace' "${MANIFEST}"; then
-              joomla_findings+=("XML manifest: <namespace> missing (required for Joomla 5+)")
-            fi
-          fi
-
-          INI_COUNT="$(find . -name '*.ini' -type f 2>/dev/null | wc -l)"
-          if [ "${INI_COUNT}" -eq 0 ]; then
-            joomla_findings+=("No .ini language files found")
-          fi
-
-          if [ ! -f 'updates.xml' ]; then
-            joomla_findings+=("updates.xml missing in root (required for Joomla update server)")
-          fi
-
-          INDEX_DIRS=("${SOURCE_DIR}" "${SOURCE_DIR}/admin" "${SOURCE_DIR}/site")
-          for dir in "${INDEX_DIRS[@]}"; do
-            if [ -d "${dir}" ] && [ ! -f "${dir}/index.html" ]; then
-              joomla_findings+=("${dir}/index.html missing (directory listing protection)")
-            fi
-          done
-
-          if [ "${#joomla_findings[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Joomla extension checks'
-              printf '%s\n' '| Check | Status |'
-              printf '%s\n' '|---|---|'
-              for f in "${joomla_findings[@]}"; do
-                printf '%s\n' "| ${f} | Warning |"
-              done
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          else
-            {
-              printf '%s\n' '### Joomla extension checks'
-              printf '%s\n' 'All Joomla-specific checks passed.'
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          fi
-
-          extended_enabled="${EXTENDED_CHECKS:-true}"
-          extended_findings=()
-
-          if [ "${extended_enabled}" = 'true' ]; then
-            if [ -f '.github/CODEOWNERS' ] || [ -f 'CODEOWNERS' ] || [ -f 'docs/CODEOWNERS' ]; then
-              :
-            else
-              extended_findings+=("CODEOWNERS not found (.github/CODEOWNERS preferred)")
-            fi
-
-            if ls "${WORKFLOWS_DIR}"/*.yml >/dev/null 2>&1 || ls "${WORKFLOWS_DIR}"/*.yaml >/dev/null 2>&1; then
-              bad_refs="$(grep -RIn --include='*.yml' --include='*.yaml' -E '^[[:space:]]*uses:[[:space:]]*[^#]+@(main|master)\b' "${WORKFLOWS_DIR}" 2>/dev/null || true)"
-              if [ -n "${bad_refs}" ]; then
-                extended_findings+=("Workflows reference actions @main/@master (pin versions): see log excerpt")
-                {
-                  printf '%s\n' '### Workflow pinning advisory'
-                  printf '%s\n' 'Found uses: entries pinned to main/master:'
-                  printf '%s\n' '```'
-                  printf '%s\n' "${bad_refs}"
-                  printf '%s\n' '```'
-                  printf '\n'
-                } >> "${GITHUB_STEP_SUMMARY}"
-              fi
-            fi
-
-            if [ -f "${DOCS_INDEX}" ]; then
-              missing_links="$(python3 - <<'PY'
-              import os
-              import re
-
-              idx = os.environ.get('DOCS_INDEX', 'docs/docs-index.md')
-              base = os.getcwd()
-
-              bad = []
-              pat = re.compile(r'\[[^\]]+\]\(([^)]+)\)')
-
-              with open(idx, 'r', encoding='utf-8') as f:
-                for line in f:
-                  for m in pat.findall(line):
-                    link = m.strip()
-                    if link.startswith('http://') or link.startswith('https://') or link.startswith('#') or link.startswith('mailto:'):
-                      continue
-                    if link.startswith('/'):
-                      rel = link.lstrip('/')
-                    else:
-                      rel = os.path.normpath(os.path.join(os.path.dirname(idx), link))
-                    rel = rel.split('#', 1)[0]
-                    rel = rel.split('?', 1)[0]
-                    if not rel:
-                      continue
-                    p = os.path.join(base, rel)
-                    if not os.path.exists(p):
-                      bad.append(rel)
-
-              print('\n'.join(sorted(set(bad))))
-              PY
-              )"
-              if [ -n "${missing_links}" ]; then
-                extended_findings+=("docs/docs-index.md contains broken relative links")
-                {
-                  printf '%s\n' '### Docs index link integrity'
-                  printf '%s\n' 'Broken relative links:'
-                  while IFS= read -r l; do [ -n "${l}" ] && printf '%s\n' "- ${l}"; done <<< "${missing_links}"
-                  printf '\n'
-                } >> "${GITHUB_STEP_SUMMARY}"
-              fi
-            fi
-
-            if [ -d "${SCRIPT_DIR}" ]; then
-              if ! command -v shellcheck >/dev/null 2>&1; then
-                sudo apt-get update -qq
-                sudo apt-get install -y shellcheck >/dev/null
-              fi
-
-              sc_out=''
-              while IFS= read -r shf; do
-                [ -z "${shf}" ] && continue
-                out_one="$(shellcheck -S warning -x "${shf}" 2>/dev/null || true)"
-                if [ -n "${out_one}" ]; then
-                  sc_out="${sc_out}${out_one}\n"
-                fi
-              done < <(find "${SCRIPT_DIR}" -type f -name "${SHELLCHECK_PATTERN}" 2>/dev/null | sort)
-
-              if [ -n "${sc_out}" ]; then
-                extended_findings+=("ShellCheck warnings detected (advisory)")
-                sc_head="$(printf '%s' "${sc_out}" | head -n 200)"
-                {
-                  printf '%s\n' '### ShellCheck (advisory)'
-                  printf '%s\n' '```'
-                  printf '%s\n' "${sc_head}"
-                  printf '%s\n' '```'
-                  printf '\n'
-                } >> "${GITHUB_STEP_SUMMARY}"
-              fi
-            fi
-
-            spdx_missing=()
-            IFS=',' read -r -a spdx_globs <<< "${SPDX_FILE_GLOBS}"
-            spdx_args=()
-            for g in "${spdx_globs[@]}"; do spdx_args+=("${g}"); done
-
-            while IFS= read -r f; do
-              [ -z "${f}" ] && continue
-              if ! head -n 40 "${f}" | grep -q 'SPDX-License-Identifier:'; then
-                spdx_missing+=("${f}")
-              fi
-            done < <(git ls-files "${spdx_args[@]}" 2>/dev/null || true)
-
-            if [ "${#spdx_missing[@]}" -gt 0 ]; then
-              extended_findings+=("SPDX header missing in some tracked files (advisory)")
-              {
-                printf '%s\n' '### SPDX header advisory'
-                printf '%s\n' 'Files missing SPDX-License-Identifier (first 40 lines scan):'
-                for f in "${spdx_missing[@]}"; do printf '%s\n' "- ${f}"; done
-                printf '\n'
-              } >> "${GITHUB_STEP_SUMMARY}"
-            fi
-
-            stale_cutoff_days=180
-            stale_branches="$(git for-each-ref --format='%(refname:short) %(committerdate:unix)' refs/remotes/origin 2>/dev/null | awk -v now="$(date +%s)" -v days="${stale_cutoff_days}" '{if (now-$2 > days*86400) print $1}' | head -50)"
-            if [ -n "${stale_branches}" ]; then
-              extended_findings+=("Stale remote branches detected (advisory)")
-              {
-                printf '%s\n' '### Git hygiene advisory'
-                printf '%s\n' "Branches with last commit older than ${stale_cutoff_days} days (sample up to 50):"
-                while IFS= read -r b; do [ -n "${b}" ] && printf '%s\n' "- ${b}"; done <<< "${stale_branches}"
-                printf '\n'
-              } >> "${GITHUB_STEP_SUMMARY}"
-            fi
-          fi
-
-          {
-            printf '%s\n' '### Guardrails coverage matrix'
-            printf '%s\n' '| Domain | Status | Notes |'
-            printf '%s\n' '|---|---|---|'
-            printf '%s\n' '| Access control | OK | Admin-only execution gate |'
-            printf '%s\n' '| Release variables | OK | Repository variables validation |'
-            printf '%s\n' '| Scripts governance | OK | Directory policy and advisory reporting |'
-            printf '%s\n' '| Repo required artifacts | OK | Required, optional, disallowed enforcement |'
-            printf '%s\n' '| Repo content heuristics | OK | Brand, license, changelog structure |'
-            if [ "${extended_enabled}" = 'true' ]; then
-              if [ "${#extended_findings[@]}" -gt 0 ]; then
-                printf '%s\n' '| Extended checks | Warning | See extended findings below |'
-              else
-                printf '%s\n' '| Extended checks | OK | No findings |'
-              fi
-            else
-              printf '%s\n' '| Extended checks | SKIPPED | EXTENDED_CHECKS disabled |'
-            fi
-            printf '\n'
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-          if [ "${extended_enabled}" = 'true' ] && [ "${#extended_findings[@]}" -gt 0 ]; then
-            {
-              printf '%s\n' '### Extended findings (advisory)'
-              for f in "${extended_findings[@]}"; do printf '%s\n' "- ${f}"; done
-              printf '\n'
-            } >> "${GITHUB_STEP_SUMMARY}"
-          fi
-
-          printf '%s\n' 'Repository health guardrails passed.' >> "${GITHUB_STEP_SUMMARY}"

.gitea/workflows/update-server.yml

@@ -1,464 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Joomla
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/joomla/update-server.yml.template
-# VERSION: 04.06.00
-# BRIEF: Update Joomla update server XML feed with stable/rc/dev entries
-#
-# Writes updates.xml with multiple <update> entries:
-#   - <tag>stable</tag>     on push to main (from auto-release)
-#   - <tag>rc</tag>         on push to rc/**
-#   - <tag>development</tag> on push to dev or dev/**
-#
-# Joomla filters by user's "Minimum Stability" setting.
-
-name: "Joomla: Update Server"
-
-on:
-  push:
-    branches:
-      - 'dev'
-      - 'dev/**'
-      - 'alpha/**'
-      - 'beta/**'
-      - 'rc/**'
-    paths:
-      - 'src/**'
-      - 'htdocs/**'
-  pull_request:
-    types: [closed]
-    branches:
-      - 'dev'
-      - 'dev/**'
-      - 'alpha/**'
-      - 'beta/**'
-      - 'rc/**'
-    paths:
-      - 'src/**'
-      - 'htdocs/**'
-  workflow_dispatch:
-    inputs:
-      stability:
-        description: 'Stability tag'
-        required: true
-        default: 'development'
-        type: choice
-        options:
-          - development
-          - alpha
-          - beta
-          - rc
-          - stable
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
-
-permissions:
-  contents: write
-
-jobs:
-  update-xml:
-    name: Update updates.xml
-    runs-on: release
-    if: >-
-      github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' || github.event_name == 'push'
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          token: ${{ secrets.GA_TOKEN }}
-          fetch-depth: 0
-
-      - name: Setup MokoStandards tools
-        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN }}
-          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
-          COMPOSER_AUTH: '{"http-basic":{"git.mokoconsulting.tech":{"username":"token","password":"${{ secrets.GA_TOKEN }}"}}}'
-        run: |
-          if ! command -v composer &> /dev/null; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
-          fi
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api 2>/dev/null || true
-          if [ -d "/tmp/mokostandards-api" ] && [ -f "/tmp/mokostandards-api/composer.json" ]; then
-            cd /tmp/mokostandards-api && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
-          fi
-
-      - name: Generate updates.xml entry
-        id: update
-        run: |
-          BRANCH="${{ github.ref_name }}"
-          REPO="${{ github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          VERSION=$(php /tmp/mokostandards-api/cli/version_read.php --path . 2>/dev/null || echo "0.0.0")
-
-          # Auto-bump patch on all branches (dev, alpha, beta, rc)
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          BUMPED=$(php /tmp/mokostandards-api/cli/version_bump.php --path . 2>/dev/null || true)
-          if [ -n "$BUMPED" ]; then
-            VERSION=$(php /tmp/mokostandards-api/cli/version_read.php --path . 2>/dev/null || echo "$VERSION")
-            git add -A
-            git commit -m "chore(version): auto-bump patch ${VERSION} [skip ci]" \
-              --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>" 2>/dev/null || true
-            git push 2>/dev/null || true
-          fi
-
-          # Determine stability from branch or input
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            STABILITY="${{ inputs.stability }}"
-          elif [[ "$BRANCH" == rc/* ]]; then
-            STABILITY="rc"
-          elif [[ "$BRANCH" == beta/* ]]; then
-            STABILITY="beta"
-          elif [[ "$BRANCH" == alpha/* ]]; then
-            STABILITY="alpha"
-          elif [[ "$BRANCH" == dev/* ]] || [[ "$BRANCH" == "dev" ]]; then
-            STABILITY="development"
-          else
-            STABILITY="stable"
-          fi
-
-          echo "stability=${STABILITY}" >> "$GITHUB_OUTPUT"
-
-          # Parse manifest (portable — no grep -P)
-          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" ! -path "./build/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
-          if [ -z "$MANIFEST" ]; then
-            echo "No Joomla manifest found — skipping"
-            exit 0
-          fi
-
-          # Extract fields using sed (works on all runners)
-          EXT_NAME=$(sed -n 's/.*<name>\([^<]*\)<\/name>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_TYPE=$(sed -n 's/.*<extension[^>]*type="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_ELEMENT=$(sed -n 's/.*<element>\([^<]*\)<\/element>.*/\1/p' "$MANIFEST" | head -1)
-          EXT_CLIENT=$(sed -n 's/.*<extension[^>]*client="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_FOLDER=$(sed -n 's/.*<extension[^>]*group="\([^"]*\)".*/\1/p' "$MANIFEST" | head -1)
-          EXT_VERSION=$(sed -n 's/.*<version>\([^<]*\)<\/version>.*/\1/p' "$MANIFEST" | head -1)
-          TARGET_PLATFORM=$(sed -n 's/.*\(<targetplatform[^/]*\/>\).*/\1/p' "$MANIFEST" | head -1)
-          PHP_MINIMUM=$(sed -n 's/.*<php_minimum>\([^<]*\)<\/php_minimum>.*/\1/p' "$MANIFEST" | head -1)
-
-          # Fallbacks
-          [ -z "$EXT_NAME" ] && EXT_NAME="${{ github.event.repository.name }}"
-          [ -z "$EXT_TYPE" ] && EXT_TYPE="component"
-
-          # Derive element if not in manifest: try XML filename, then repo name
-          if [ -z "$EXT_ELEMENT" ]; then
-            EXT_ELEMENT=$(basename "$MANIFEST" .xml | tr '[:upper:]' '[:lower:]')
-            case "$EXT_ELEMENT" in
-              templatedetails|manifest|*.xml) EXT_ELEMENT=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]' | tr -d ' -') ;;
-            esac
-          fi
-
-          # Use manifest version if README version is empty
-          [ "$VERSION" = "0.0.0" ] && [ -n "$EXT_VERSION" ] && VERSION="$EXT_VERSION"
-
-          [ -z "$TARGET_PLATFORM" ] && TARGET_PLATFORM=$(printf '<targetplatform name="joomla" version="((5.[0-9])|(6.[0-9]))" %s>' "/")
-
-          CLIENT_TAG=""
-          [ -n "$EXT_CLIENT" ] && CLIENT_TAG="<client>${EXT_CLIENT}</client>"
-          [ -z "$CLIENT_TAG" ] && ([ "$EXT_TYPE" = "module" ] || [ "$EXT_TYPE" = "plugin" ]) && CLIENT_TAG="<client>site</client>"
-
-          FOLDER_TAG=""
-          [ -n "$EXT_FOLDER" ] && [ "$EXT_TYPE" = "plugin" ] && FOLDER_TAG="<folder>${EXT_FOLDER}</folder>"
-
-          PHP_TAG=""
-          [ -n "$PHP_MINIMUM" ] && PHP_TAG="<php_minimum>${PHP_MINIMUM}</php_minimum>"
-
-          # Version suffix for non-stable
-          DISPLAY_VERSION="$VERSION"
-          case "$STABILITY" in
-            development) DISPLAY_VERSION="${VERSION}-dev" ;;
-            alpha)       DISPLAY_VERSION="${VERSION}-alpha" ;;
-            beta)        DISPLAY_VERSION="${VERSION}-beta" ;;
-            rc)          DISPLAY_VERSION="${VERSION}-rc" ;;
-          esac
-
-          MAJOR=$(echo "$VERSION" | awk -F. '{print $1}')
-
-          # Each stability level has its own release tag
-          case "$STABILITY" in
-            development) RELEASE_TAG="development" ;;
-            alpha)       RELEASE_TAG="alpha" ;;
-            beta)        RELEASE_TAG="beta" ;;
-            rc)          RELEASE_TAG="release-candidate" ;;
-            *)           RELEASE_TAG="v${MAJOR}" ;;
-          esac
-
-          PACKAGE_NAME="${EXT_ELEMENT}-${DISPLAY_VERSION}.zip"
-          DOWNLOAD_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/download/${RELEASE_TAG}/${PACKAGE_NAME}"
-          INFO_URL="${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}"
-
-          # -- Build install packages (ZIP + tar.gz) --------------------
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          if [ -d "$SOURCE_DIR" ]; then
-            EXCLUDES=".ftpignore sftp-config* *.ppk *.pem *.key .env*"
-            TAR_NAME="${EXT_ELEMENT}-${DISPLAY_VERSION}.tar.gz"
-
-            cd "$SOURCE_DIR"
-            zip -r "/tmp/${PACKAGE_NAME}" . -x $EXCLUDES
-            cd ..
-            tar -czf "/tmp/${TAR_NAME}" -C "$SOURCE_DIR" \
-              --exclude='.ftpignore' --exclude='sftp-config*' \
-              --exclude='*.ppk' --exclude='*.pem' --exclude='*.key' --exclude='.env*' .
-
-            SHA256=$(sha256sum "/tmp/${PACKAGE_NAME}" | cut -d' ' -f1)
-
-            # Ensure release exists on Gitea
-            RELEASE_JSON=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-              "${API_BASE}/releases/tags/${RELEASE_TAG}" 2>/dev/null || true)
-            RELEASE_ID=$(echo "$RELEASE_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-
-            if [ -z "$RELEASE_ID" ]; then
-              # Create release
-              RELEASE_JSON=$(curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/json" \
-                "${API_BASE}/releases" \
-                -d "$(python3 -c "import json; print(json.dumps({
-                  'tag_name': '${RELEASE_TAG}',
-                  'name': '${RELEASE_TAG} (${DISPLAY_VERSION})',
-                  'body': '${STABILITY} release',
-                  'prerelease': True,
-                  'target_commitish': 'main'
-                }))")" 2>/dev/null || true)
-              RELEASE_ID=$(echo "$RELEASE_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
-            fi
-
-            if [ -n "$RELEASE_ID" ]; then
-              # Delete existing assets with same name before uploading
-              ASSETS=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets" 2>/dev/null || echo "[]")
-              for ASSET_FILE in "$PACKAGE_NAME" "$TAR_NAME"; do
-                ASSET_ID=$(echo "$ASSETS" | python3 -c "
-          import sys,json
-          assets = json.load(sys.stdin)
-          for a in assets:
-              if a['name'] == '${ASSET_FILE}':
-                  print(a['id']); break
-          " 2>/dev/null || true)
-                if [ -n "$ASSET_ID" ]; then
-                  curl -sf -X DELETE -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                    "${API_BASE}/releases/${RELEASE_ID}/assets/${ASSET_ID}" 2>/dev/null || true
-                fi
-              done
-
-              # Upload both formats
-              curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/octet-stream" \
-                --data-binary @"/tmp/${PACKAGE_NAME}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets?name=${PACKAGE_NAME}" > /dev/null 2>&1 || true
-
-              curl -sf -X POST -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-                -H "Content-Type: application/octet-stream" \
-                --data-binary @"/tmp/${TAR_NAME}" \
-                "${API_BASE}/releases/${RELEASE_ID}/assets?name=${TAR_NAME}" > /dev/null 2>&1 || true
-            fi
-
-            echo "Packages: ${PACKAGE_NAME} + ${TAR_NAME} (SHA: ${SHA256})" >> $GITHUB_STEP_SUMMARY
-          else
-            SHA256=""
-          fi
-
-          # -- Build the new entry (canonical format matching release.yml) --
-          NEW_ENTRY=""
-          NEW_ENTRY="${NEW_ENTRY}  <update>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <name>${EXT_NAME}</name>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <description>${EXT_NAME} ${STABILITY} build.</description>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <element>${EXT_ELEMENT}</element>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <type>${EXT_TYPE}</type>\n"
-          [ -n "$CLIENT_TAG" ] && NEW_ENTRY="${NEW_ENTRY}    ${CLIENT_TAG}\n"
-          [ -n "$FOLDER_TAG" ] && NEW_ENTRY="${NEW_ENTRY}    ${FOLDER_TAG}\n"
-          NEW_ENTRY="${NEW_ENTRY}    <version>${VERSION}</version>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <creationDate>$(date +%Y-%m-%d)</creationDate>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <infourl title='${EXT_NAME}'>https://git.mokoconsulting.tech/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${RELEASE_TAG}</infourl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <downloads>\n"
-          NEW_ENTRY="${NEW_ENTRY}      <downloadurl type='full' format='zip'>${DOWNLOAD_URL}</downloadurl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    </downloads>\n"
-          [ -n "$SHA256" ] && NEW_ENTRY="${NEW_ENTRY}    <sha256>${SHA256}</sha256>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <tags><tag>${STABILITY}</tag></tags>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <maintainer>Moko Consulting</maintainer>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <maintainerurl>https://mokoconsulting.tech</maintainerurl>\n"
-          NEW_ENTRY="${NEW_ENTRY}    <targetplatform name='joomla' version='(5|6).*'/>\n"
-          [ -n "$PHP_MINIMUM" ] && NEW_ENTRY="${NEW_ENTRY}    <php_minimum>${PHP_MINIMUM}</php_minimum>\n"
-          NEW_ENTRY="${NEW_ENTRY}  </update>"
-
-          # -- Write new entry to temp file --------------------------------
-          printf '%b' "$NEW_ENTRY" > /tmp/new_entry.xml
-
-          # -- Merge into updates.xml ----------------------------------------
-          # Cascade: stable→all | rc→rc+lower | beta→beta+lower | alpha→alpha+dev | dev→dev
-          CASCADE_MAP="stable:development,alpha,beta,rc,stable rc:development,alpha,beta,rc beta:development,alpha,beta alpha:development,alpha development:development"
-          TARGETS=""
-          for entry in $CASCADE_MAP; do
-            key="${entry%%:*}"
-            vals="${entry#*:}"
-            if [ "$key" = "${STABILITY}" ]; then
-              TARGETS="$vals"
-              break
-            fi
-          done
-          [ -z "$TARGETS" ] && TARGETS="${STABILITY}"
-
-          echo "Cascade: ${STABILITY} → ${TARGETS}"
-
-          # Create updates.xml if missing
-          if [ ! -f "updates.xml" ]; then
-            printf '%s\n' "<?xml version='1.0' encoding='UTF-8'?>" > updates.xml
-            printf '%s\n' "<!-- Copyright (C) $(date +%Y) Moko Consulting -->" >> updates.xml
-            printf '%s\n' "<updates>" >> updates.xml
-            printf '%s\n' "</updates>" >> updates.xml
-          fi
-
-          # Update existing blocks or create missing ones
-          export PY_TARGETS="$TARGETS" PY_VERSION="$VERSION" PY_DATE="$(date +%Y-%m-%d)"
-          python3 << 'PYEOF'
-          import re, os
-
-          targets = os.environ["PY_TARGETS"].split(",")
-          version = os.environ["PY_VERSION"]
-          date = os.environ["PY_DATE"]
-
-          with open("updates.xml") as f:
-              content = f.read()
-          with open("/tmp/new_entry.xml") as f:
-              new_entry_template = f.read()
-
-          for tag in targets:
-              tag = tag.strip()
-              # Build entry with this tag's name
-              new_entry = re.sub(r"<tag>[^<]*</tag>", f"<tag>{tag}</tag>", new_entry_template)
-
-              # Try to find existing block (handles both single-line and multi-line <tags>)
-              block_pattern = r"(<update>(?:(?!</update>).)*?<tag>" + re.escape(tag) + r"</tag>.*?</update>)"
-              match = re.search(block_pattern, content, re.DOTALL)
-
-              if match:
-                  # Update in place — replace entire block
-                  content = content.replace(match.group(1), new_entry.strip())
-                  print(f"  UPDATED: <tag>{tag}</tag> → {version}")
-              else:
-                  # Create — insert before </updates>
-                  content = content.replace("</updates>", "\n" + new_entry.strip() + "\n\n</updates>")
-                  print(f"  CREATED: <tag>{tag}</tag> → {version}")
-
-          # Clean up excessive blank lines
-          content = re.sub(r"\n{3,}", "\n\n", content)
-
-          with open("updates.xml", "w") as f:
-              f.write(content)
-          PYEOF
-
-          # Commit
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
-          git add updates.xml
-          git diff --cached --quiet || {
-            git commit -m "chore: update updates.xml (${STABILITY}: ${DISPLAY_VERSION}) [skip ci]" \
-              --author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>"
-            git push
-          }
-
-      # -- Sync updates.xml to main (for non-main branches) ----------------------
-      - name: Sync updates.xml to main
-        if: github.ref_name != 'main'
-        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          GA_TOKEN="${{ secrets.GA_TOKEN }}"
-
-          FILE_SHA=$(curl -sf -H "Authorization: token ${GA_TOKEN}" \
-            "${API_BASE}/contents/updates.xml?ref=main" | python3 -c "import sys,json; print(json.load(sys.stdin).get('sha',''))" 2>/dev/null || true)
-
-          if [ -n "$FILE_SHA" ] && [ -f "updates.xml" ]; then
-            CONTENT=$(base64 -w0 updates.xml)
-            curl -sf -X PUT -H "Authorization: token ${GA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              "${API_BASE}/contents/updates.xml" \
-              -d "$(python3 -c "import json; print(json.dumps({
-                'content': '${CONTENT}',
-                'sha': '${FILE_SHA}',
-                'message': 'chore: sync updates.xml from ${STABILITY} [skip ci]',
-                'branch': 'main'
-              }))")" > /dev/null 2>&1 \
-              && echo "updates.xml synced to main (${STABILITY})" >> $GITHUB_STEP_SUMMARY \
-              || echo "WARNING: failed to sync updates.xml to main" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "WARNING: could not get updates.xml SHA from main" >> $GITHUB_STEP_SUMMARY
-          fi
-
-      - name: SFTP deploy to dev server
-        if: contains(github.ref, 'dev/') || github.ref == 'refs/heads/dev'
-        env:
-          DEV_HOST: ${{ vars.DEV_FTP_HOST }}
-          DEV_PATH: ${{ vars.DEV_FTP_PATH }}
-          DEV_SUFFIX: ${{ vars.DEV_FTP_SUFFIX }}
-          DEV_USER: ${{ vars.DEV_FTP_USERNAME }}
-          DEV_PORT: ${{ vars.DEV_FTP_PORT }}
-          DEV_KEY: ${{ secrets.DEV_FTP_KEY }}
-          DEV_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
-        run: |
-          # -- Permission check: admin or maintain role required --------
-          ACTOR="${{ github.actor }}"
-          REPO="${{ github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-
-          PERMISSION=$(curl -sf -H "Authorization: token ${{ secrets.GA_TOKEN }}" \
-            "${API_BASE}/collaborators/${ACTOR}/permission" 2>/dev/null | \
-            python3 -c "import sys,json; print(json.load(sys.stdin).get('permission','read'))" 2>/dev/null || echo "read")
-          case "$PERMISSION" in
-            admin|maintain|write) ;;
-            *)
-              echo "Deploy denied: ${ACTOR} has '${PERMISSION}' — requires admin, maintain, or write"
-              exit 0
-              ;;
-          esac
-
-          [ -z "$DEV_HOST" ] || [ -z "$DEV_PATH" ] && { echo "DEV FTP not configured — skipping SFTP"; exit 0; }
-
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          [ ! -d "$SOURCE_DIR" ] && exit 0
-
-          PORT="${DEV_PORT:-22}"
-          REMOTE="${DEV_PATH%/}"
-          [ -n "$DEV_SUFFIX" ] && REMOTE="${REMOTE}/${DEV_SUFFIX#/}"
-
-          printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
-            "$DEV_HOST" "$PORT" "$DEV_USER" "$REMOTE" > /tmp/sftp-config.json
-          if [ -n "$DEV_KEY" ]; then
-            echo "$DEV_KEY" > /tmp/deploy_key && chmod 600 /tmp/deploy_key
-            printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
-          else
-            printf ',"password":"%s"}' "$DEV_PASS" >> /tmp/sftp-config.json
-          fi
-
-          PLATFORM=$(php /tmp/mokostandards-api/cli/platform_detect.php --path . 2>/dev/null || true)
-          if [ "$PLATFORM" = "waas-component" ] && [ -f "/tmp/mokostandards-api/deploy/deploy-joomla.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-joomla.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
-          elif [ -f "/tmp/mokostandards-api/deploy/deploy-sftp.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-sftp.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
-          fi
-          rm -f /tmp/deploy_key /tmp/sftp-config.json
-          echo "SFTP deploy to dev complete" >> $GITHUB_STEP_SUMMARY
-
-      - name: Summary
-        if: always()
-        run: |
-          echo "## Joomla Update Server" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
-          echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
-          echo "| Stability | \`${STABILITY}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Version | \`${DISPLAY_VERSION}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Element | \`${EXT_ELEMENT}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| Download | [ZIP](${DOWNLOAD_URL}) |" >> $GITHUB_STEP_SUMMARY

.mokogitea/ISSUE_TEMPLATE/config.yml

@@ -1,18 +1,18 @@
 ---
 blank_issues_enabled: true
 contact_links:
-  - name: 💼 Enterprise Support
+  - name:  Enterprise Support
     url: https://mokoconsulting.tech/enterprise
     about: Enterprise-level support and consultation services
-  - name: 💬 Ask a Question
+  - name:  Ask a Question
     url: https://mokoconsulting.tech/
     about: Get help or ask questions through our website
-  - name: 📚 MokoStandards Documentation
+  - name:  MokoStandards Documentation
     url: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
     about: View our coding standards and best practices
-  - name: 🔒 Report a Security Vulnerability
+  - name:  Report a Security Vulnerability
     url: https://git.mokoconsulting.tech/mokoconsulting-tech/.github-private/security/advisories/new
     about: Report security vulnerabilities privately (for critical issues)
-  - name: 💡 Community Discussions
+  - name:  Community Discussions
     url: https://github.com/orgs/mokoconsulting-tech/discussions
     about: Join community discussions and Q&A

.mokogitea/ISSUE_TEMPLATE/security.md

@@ -8,7 +8,7 @@ assignees: ''
 ---
 
 
-## ⚠️ IMPORTANT: Private Disclosure Required
+##  IMPORTANT: Private Disclosure Required
 
 **For critical security vulnerabilities, DO NOT use this template.**
 Follow the process in [SECURITY.md](../SECURITY.md) for responsible disclosure.

.mokogitea/ISSUE_TEMPLATE/waas_site_issue.md

@@ -0,0 +1,77 @@
+---
+name: WaaS Client Site Issue
+about: Report an issue with a WaaS client site (branding, deployment, media sync)
+title: '[WAAS] '
+labels: 'waas, client-site'
+assignees: ''
+
+---
+
+## Site Issue Type
+- [ ] Branding / CSS not applying
+- [ ] Deployment failure
+- [ ] Media sync issue
+- [ ] Template override not working
+- [ ] Module positioning issue
+- [ ] Mobile / responsive layout
+- [ ] Performance issue
+
+## Client Site
+- **Client Org**: [e.g., ClarksvilleFurs]
+- **Repo**: [e.g., client-waas-clarksvillefurs]
+- **Environment**: [Dev / Production]
+- **Site URL**: [dev or production URL  omit if private]
+
+## Issue Description
+Describe the issue clearly.
+
+## Steps to Reproduce
+1. Visit [page URL]
+2. Look at [element]
+3. See error
+
+## Expected Behavior
+What the site should look like or how it should behave.
+
+## Actual Behavior
+What is happening instead.
+
+## Screenshots
+Attach screenshots showing the issue (desktop and mobile if relevant).
+
+## Deployment Status
+- **Last deploy**: [date or "unknown"]
+- **Deploy workflow**: [succeeded / failed / not run]
+- **Branch**: [dev / main]
+
+## Media Sync
+- [ ] Images missing after sync
+- [ ] Sync direction: [dev-to-prod / prod-to-dev / bidirectional]
+- [ ] Last sync: [date]
+
+## Template Details
+- **Joomla Version**: [e.g., 5.x]
+- **Template Name**: [e.g., clienttemplate]
+- **MokoWaaS Plugin**: [Active / Inactive]
+- **MokoOnyx Admin**: [Active / Inactive]
+
+## CSS Custom Properties
+If branding issue, list the relevant CSS variables:
+```css
+:root {
+    --client-primary: #...;
+    --client-secondary: #...;
+}
+```
+
+## Browser / Device
+- **Browser**: [e.g., Chrome 120, Safari 17]
+- **Device**: [Desktop / Tablet / Mobile]
+- **Screen Width**: [e.g., 1920px, 768px, 375px]
+
+## Checklist
+- [ ] I have cleared Joomla cache
+- [ ] I have hard-refreshed the browser (Ctrl+Shift+R)
+- [ ] I have checked the deploy workflow completed
+- [ ] I have verified the change is on the correct branch
+- [ ] No credentials or PII are included in this issue

.mokogitea/branch-protection.yml

@@ -0,0 +1,251 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+# SPDX-License-Identifier: GPL-3.0-or-later
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Automation
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+# PATH: /.gitea/workflows/branch-protection.yml
+# BRIEF: Apply standardised branch protection rules to all governed repositories
+#
+# +========================================================================+
+# |                   BRANCH PROTECTION SETUP                              |
+# +========================================================================+
+# |                                                                        |
+# |  Applies protection rules for: main, dev, rc, beta, alpha       |
+# |                                                                        |
+# |  main  — Require PR, block rejected reviews, no force push             |
+# |  dev   — Allow push, no force push, no delete                          |
+# |  rc  — Allow push, no force push, no delete                          |
+# |  beta — Allow push, no force push, no delete                         |
+# |  alpha — Allow push, no force push, no delete                        |
+# |                                                                        |
+# |  jmiller has override authority on all branches.                       |
+# |                                                                        |
+# +========================================================================+
+
+name: Branch Protection Setup
+
+on:
+  schedule:
+    - cron: '0 2 * * 1'  # Weekly Monday 02:00 UTC
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Preview mode (no changes)'
+        required: false
+        type: boolean
+        default: false
+      repos:
+        description: 'Comma-separated repo names (empty = all governed repos)'
+        required: false
+        type: string
+        default: ''
+
+env:
+  GITEA_URL: https://git.mokoconsulting.tech
+  GITEA_ORG: MokoConsulting
+
+permissions:
+  contents: read
+
+jobs:
+  protect:
+    name: Apply Branch Protection Rules
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Determine target repos
+        id: repos
+        env:
+          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+        run: |
+          API="${GITEA_URL}/api/v1"
+
+          # Platform/standards/infra repos to exclude
+          EXCLUDE="gitea-org-config org-profile gitea-private .mokogitea-private MokoStandards moko-platform MokoTesting"
+          EXCLUDE="$EXCLUDE MokoStandards-Template-Client MokoStandards-Template-Dolibarr MokoStandards-Template-Generic MokoStandards-Template-Joomla MokoDoliProjTemplate"
+
+          if [ -n "${{ inputs.repos }}" ]; then
+            # User-specified repos
+            REPOS=$(echo "${{ inputs.repos }}" | tr ',' ' ')
+          else
+            # Fetch all org repos
+            PAGE=1
+            REPOS=""
+            while true; do
+              BATCH=$(curl -sS \
+                -H "Authorization: token ${GA_TOKEN}" \
+                "${API}/orgs/${GITEA_ORG}/repos?page=${PAGE}&limit=50" \
+                | jq -r '.[].name // empty')
+              [ -z "$BATCH" ] && break
+              REPOS="$REPOS $BATCH"
+              PAGE=$((PAGE + 1))
+            done
+
+            # Filter out excluded repos
+            FILTERED=""
+            for REPO in $REPOS; do
+              SKIP=false
+              for EX in $EXCLUDE; do
+                if [ "$REPO" = "$EX" ]; then
+                  SKIP=true
+                  break
+                fi
+              done
+              if [ "$SKIP" = "false" ]; then
+                FILTERED="$FILTERED $REPO"
+              fi
+            done
+            REPOS="$FILTERED"
+          fi
+
+          echo "repos=$REPOS" >> "$GITHUB_OUTPUT"
+          COUNT=$(echo "$REPOS" | wc -w)
+          echo "📋 Target repos (${COUNT}): $REPOS"
+
+      - name: Apply protection rules
+        env:
+          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          DRY_RUN: ${{ inputs.dry_run || 'false' }}
+        run: |
+          API="${GITEA_URL}/api/v1"
+          REPOS="${{ steps.repos.outputs.repos }}"
+
+          SUCCESS=0
+          FAILED=0
+          SKIPPED=0
+
+          # ── Rule definitions ──────────────────────────────────────
+          # Only the CI bot (jmiller token) can push directly.
+          # All human contributors must use PRs.
+          # Force push disabled on all branches.
+
+          RULE_MAIN='{
+            "rule_name": "main",
+            "enable_push": true,
+            "enable_push_whitelist": true,
+            "push_whitelist_usernames": ["jmiller"],
+            "enable_force_push": false,
+            "enable_force_push_allowlist": false,
+            "force_push_allowlist_usernames": [],
+            "enable_merge_whitelist": false,
+            "required_approvals": 0,
+            "dismiss_stale_approvals": true,
+            "block_on_rejected_reviews": true,
+            "block_on_outdated_branch": false,
+            "priority": 1
+          }'
+
+          RULE_DEV='{
+            "rule_name": "dev",
+            "enable_push": true,
+            "enable_push_whitelist": true,
+            "push_whitelist_usernames": ["jmiller"],
+            "enable_force_push": false,
+            "enable_force_push_allowlist": false,
+            "force_push_allowlist_usernames": [],
+            "enable_merge_whitelist": false,
+            "required_approvals": 0,
+            "block_on_rejected_reviews": false,
+            "priority": 2
+          }'
+
+          RULE_RC='{
+            "rule_name": "rc",
+            "enable_push": true,
+            "enable_push_whitelist": true,
+            "push_whitelist_usernames": ["jmiller"],
+            "enable_force_push": false,
+            "enable_force_push_allowlist": false,
+            "force_push_allowlist_usernames": [],
+            "enable_merge_whitelist": false,
+            "required_approvals": 0,
+            "block_on_rejected_reviews": false,
+            "priority": 3
+          }'
+
+          RULE_BETA='{
+            "rule_name": "beta",
+            "enable_push": true,
+            "enable_push_whitelist": true,
+            "push_whitelist_usernames": ["jmiller"],
+            "enable_force_push": false,
+            "enable_force_push_allowlist": false,
+            "force_push_allowlist_usernames": [],
+            "enable_merge_whitelist": false,
+            "required_approvals": 0,
+            "block_on_rejected_reviews": false,
+            "priority": 4
+          }'
+
+          RULE_ALPHA='{
+            "rule_name": "alpha",
+            "enable_push": true,
+            "enable_push_whitelist": true,
+            "push_whitelist_usernames": ["jmiller"],
+            "enable_force_push": false,
+            "enable_force_push_allowlist": false,
+            "force_push_allowlist_usernames": [],
+            "enable_merge_whitelist": false,
+            "required_approvals": 0,
+            "block_on_rejected_reviews": false,
+            "priority": 5
+          }'
+
+          RULES=("$RULE_MAIN" "$RULE_DEV" "$RULE_RC" "$RULE_BETA" "$RULE_ALPHA")
+          RULE_NAMES=("main" "dev" "rc" "beta" "alpha")
+
+          # ── Apply rules to each repo ──────────────────────────────
+          for REPO in $REPOS; do
+            echo ""
+            echo "═══ ${REPO} ═══"
+
+            for i in "${!RULES[@]}"; do
+              RULE="${RULES[$i]}"
+              NAME="${RULE_NAMES[$i]}"
+
+              if [ "$DRY_RUN" = "true" ]; then
+                echo "  [DRY RUN] Would apply rule: ${NAME}"
+                SKIPPED=$((SKIPPED + 1))
+                continue
+              fi
+
+              # Delete existing rule if present (idempotent recreate)
+              ENCODED_NAME=$(echo "$NAME" | sed 's|/|%2F|g')
+              curl -sS -o /dev/null -w "" \
+                -X DELETE \
+                -H "Authorization: token ${GA_TOKEN}" \
+                "${API}/repos/${GITEA_ORG}/${REPO}/branch_protections/${ENCODED_NAME}" 2>/dev/null || true
+
+              # Create rule
+              RESPONSE=$(curl -sS -w "\n%{http_code}" \
+                -X POST \
+                -H "Authorization: token ${GA_TOKEN}" \
+                -H "Content-Type: application/json" \
+                -d "$RULE" \
+                "${API}/repos/${GITEA_ORG}/${REPO}/branch_protections")
+
+              HTTP=$(echo "$RESPONSE" | tail -1)
+              BODY=$(echo "$RESPONSE" | sed '$d')
+
+              if [ "$HTTP" = "201" ]; then
+                echo "  ✅ ${NAME}"
+                SUCCESS=$((SUCCESS + 1))
+              else
+                echo "  ❌ ${NAME} (HTTP ${HTTP}): $(echo "$BODY" | jq -r '.message // .' 2>/dev/null | head -1)"
+                FAILED=$((FAILED + 1))
+              fi
+            done
+          done
+
+          # ── Summary ───────────────────────────────────────────────
+          echo ""
+          echo "════════════════════════════════════════"
+          echo "  ✅ Success: ${SUCCESS}"
+          echo "  ❌ Failed:  ${FAILED}"
+          echo "  ⏭️  Skipped: ${SKIPPED}"
+          echo "════════════════════════════════════════"
+
+          if [ "$FAILED" -gt 0 ]; then
+            echo "::warning::${FAILED} rule(s) failed to apply"
+          fi

.mokogitea/cascade-dev.yml

@@ -0,0 +1,8 @@
+# DISABLED - auto-release handles dev recreation
+name: Cascade (DISABLED)
+on: workflow_dispatch
+jobs:
+  noop:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo disabled

.mokogitea/cleanup.yml

@@ -8,7 +8,7 @@
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
 # PATH: /.gitea/workflows/cleanup.yml
 # VERSION: 01.00.00
-# BRIEF: Scheduled cleanup — delete merged branches and old workflow runs
+# BRIEF: Scheduled cleanup  delete merged branches and old workflow runs
 
 name: Repository Cleanup
 

.mokogitea/deploy-manual.yml

@@ -40,7 +40,7 @@ jobs:
         run: |
           php -v && composer --version
 
-      - name: Setup MokoStandards tools
+      - name: Setup moko-platform
         env:
           GA_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
           MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}

.mokogitea/gitleaks.yml

@@ -8,7 +8,7 @@
 # REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
 # PATH: /templates/workflows/gitleaks.yml.template
 # VERSION: 01.00.00
-# BRIEF: Secret scanning — detect leaked credentials, API keys, and tokens
+# BRIEF: Secret scanning  detect leaked credentials, API keys, and tokens
 #
 # +========================================================================+
 # |                        SECRET SCANNING                                 |
@@ -89,7 +89,7 @@ jobs:
         run: |
           REPO="${{ github.event.repository.name }}"
           curl -sS \
-            -H "Title: ${REPO} — secrets detected in code" \
+            -H "Title: ${REPO}  secrets detected in code" \
             -H "Tags: rotating_light,key" \
             -H "Priority: urgent" \
             -d "Gitleaks found potential secrets. Review and rotate credentials immediately." \

.mokogitea/manifest.xml

@@ -1,14 +1,15 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-  MokoStandards Repository Manifest
-  Auto-generated by cleanup script.
+  Moko Platform Repository Manifest
   See: https://git.mokoconsulting.tech/MokoConsulting/moko-platform/wiki/Home
 -->
 <moko-platform xmlns="https://standards.mokoconsulting.tech/moko-platform/1.0" schema-version="1.0">
   <identity>
     <name>MokoOnyx</name>
+    <display-name>Template - MokoOnyx</display-name>
     <org>MokoConsulting</org>
     <description>MokoOnyx - Joomla site template (successor to MokoCassiopeia)</description>
+    <version>02.19.06</version>
     <license spdx="GPL-3.0-or-later">GNU General Public License v3</license>
   </identity>
   <governance>

.mokogitea/notify.yml

@@ -18,7 +18,7 @@ on:
       - "Joomla Build & Release"
       - "Joomla Extension CI"
       - "Deploy"
-      - "Cascade Main → Dev"
+      - "Cascade Main  Dev"
     types:
       - completed
 

.mokogitea/pr-check.yml

@@ -8,7 +8,7 @@
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
 # PATH: /.gitea/workflows/pr-check.yml
 # VERSION: 01.00.00
-# BRIEF: PR gate — validates code quality and manifest before merge to main
+# BRIEF: PR gate  validates code quality and manifest before merge to main
 
 name: PR Check
 
@@ -81,7 +81,7 @@ jobs:
       - name: Check updates.xml format
         run: |
           if [ ! -f "updates.xml" ]; then
-            echo "No updates.xml — skipping"
+            echo "No updates.xml  skipping"
             exit 0
           fi
           echo "=== updates.xml Validation ==="
@@ -102,5 +102,5 @@ jobs:
           fi
           # Dry-run: ensure zip would succeed
           FILE_COUNT=$(find "$SOURCE_DIR" -type f | wc -l)
-          echo "Source contains ${FILE_COUNT} files — package will build"
+          echo "Source contains ${FILE_COUNT} files  package will build"
           [ "$FILE_COUNT" -gt 0 ] || { echo "::error::Source directory is empty"; exit 1; }

.mokogitea/pre-release.yml

@@ -8,7 +8,7 @@
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
 # PATH: /.gitea/workflows/pre-release.yml
 # VERSION: 01.00.00
-# BRIEF: Manual pre-release — builds dev/alpha/beta/rc packages from any branch
+# BRIEF: Manual pre-release  builds dev/alpha/beta/rc packages from any branch
 
 name: Pre-Release
 
@@ -72,7 +72,7 @@ jobs:
           MINOR=$(echo "$CURRENT" | cut -d. -f2)
           PATCH=$(echo "$CURRENT" | cut -d. -f3)
 
-          # Patch bump with rollover: ZZ=99 → bump minor, YY=99 → bump major
+          # Patch bump with rollover: ZZ=99  bump minor, YY=99  bump major
           NEW_PATCH=$((10#$PATCH + 1))
           NEW_MINOR=$((10#$MINOR))
           NEW_MAJOR=$((10#$MAJOR))
@@ -89,7 +89,7 @@ jobs:
           VERSION=$(printf "%02d.%02d.%02d" $NEW_MAJOR $NEW_MINOR $NEW_PATCH)
           TODAY=$(date +%Y-%m-%d)
 
-          echo "Bumping: ${CURRENT} → ${VERSION} (patch)"
+          echo "Bumping: ${CURRENT}  ${VERSION} (patch)"
 
           # Update README.md
           sed -i "s/VERSION:[[:space:]]*${CURRENT}/VERSION: ${VERSION}/" README.md
@@ -108,7 +108,7 @@ jobs:
           git remote set-url origin "https://jmiller:${{ secrets.GA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
           git add -A
           git diff --cached --quiet || {
-            git commit -m "chore(version): bump ${CURRENT} → ${VERSION} [skip ci]"
+            git commit -m "chore(version): bump ${CURRENT}  ${VERSION} [skip ci]"
             git push origin HEAD 2>&1
           }
 
@@ -231,7 +231,7 @@ jobs:
           DATE=$(date +%Y-%m-%d)
 
           if [ ! -f "updates.xml" ]; then
-            echo "No updates.xml — skipping"
+            echo "No updates.xml  skipping"
             exit 0
           fi
 
@@ -297,7 +297,7 @@ jobs:
           for BRANCH in main dev; do
             [ "$BRANCH" = "$CURRENT_BRANCH" ] && continue
 
-            echo "Syncing updates.xml → ${BRANCH}"
+            echo "Syncing updates.xml  ${BRANCH}"
             git fetch origin "${BRANCH}" 2>/dev/null || continue
             git checkout "origin/${BRANCH}" -- . 2>/dev/null || continue
             git checkout "${CURRENT_BRANCH}" -- updates.xml
@@ -316,7 +316,7 @@ jobs:
           TOKEN="${{ secrets.GA_TOKEN }}"
           STABILITY="${{ steps.meta.outputs.stability }}"
 
-          # Cascade: rc → beta,alpha,dev | beta → alpha,dev | alpha → dev | dev → nothing
+          # Cascade: rc  beta,alpha,dev | beta  alpha,dev | alpha  dev | dev  nothing
           case "$STABILITY" in
             release-candidate) TAGS_TO_DELETE="beta alpha development" ;;
             beta)              TAGS_TO_DELETE="alpha development" ;;

.mokogitea/workflows/auto-bump.yml

@@ -0,0 +1,66 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Release
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+# PATH: /.mokogitea/workflows/auto-bump.yml
+# VERSION: 09.02.00
+# BRIEF: Auto patch-bump version on every push to dev (skips merge commits)
+
+name: "Universal: Auto Version Bump"
+
+on:
+  push:
+    branches:
+      - dev
+      - rc
+      - 'feature/**'
+      - 'patch/**'
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+
+permissions:
+  contents: write
+
+jobs:
+  bump:
+    name: Version Bump
+    runs-on: release
+    if: >-
+      !contains(github.event.head_commit.message, '[skip ci]') &&
+      !contains(github.event.head_commit.message, '[skip bump]') &&
+      !startsWith(github.event.head_commit.message, 'Merge pull request')
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          fetch-depth: 1
+
+      - name: Setup moko-platform tools
+        run: |
+          if ! command -v composer &> /dev/null; then
+            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+          fi
+          if [ -d "/opt/moko-platform/cli" ]; then
+            echo "MOKO_CLI=/opt/moko-platform/cli" >> "$GITHUB_ENV"
+          else
+            git clone --depth 1 --branch main --quiet \
+              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/moko-platform.git" \
+              /tmp/moko-platform-api
+            cd /tmp/moko-platform-api && composer install --no-dev --no-interaction --quiet
+            echo "MOKO_CLI=/tmp/moko-platform-api/cli" >> "$GITHUB_ENV"
+          fi
+
+      - name: Bump version
+        run: |
+          php ${MOKO_CLI}/version_auto_bump.php \
+            --path . --branch "${GITHUB_REF_NAME}" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"

.mokogitea/workflows/auto-release.yml

@@ -0,0 +1,285 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Release
+# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/moko-platform
+# PATH: /templates/workflows/universal/auto-release.yml.template
+# VERSION: 05.00.00
+# BRIEF: Universal build & release � detects platform from manifest.xml
+#
+# +========================================================================+
+# |              UNIVERSAL BUILD & RELEASE PIPELINE                        |
+# +========================================================================+
+# |                                                                        |
+# |  Reads manifest.xml (joomla|dolibarr|generic) to branch logic.       |
+# |                                                                        |
+# |  Platform-specific:                                                    |
+# |    joomla:   XML manifest, updates.xml, type-prefixed packages         |
+# |    dolibarr: mod*.class.php, update.txt, dev version reset             |
+# |    generic:  README-only, no update stream                             |
+# |                                                                        |
+# +========================================================================+
+
+name: "Universal: Build & Release"
+
+on:
+  pull_request:
+    types: [opened, closed]
+    branches:
+      - main
+  workflow_dispatch:
+    inputs:
+      action:
+        description: 'Action to perform'
+        required: false
+        type: choice
+        default: release
+        options:
+          - release
+          - promote-rc
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
+  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+
+permissions:
+  contents: write
+
+jobs:
+  # ── PR Opened → Rename branch to RC and build RC release ─────────────────────
+  promote-rc:
+    name: Promote to RC
+    runs-on: release
+    if: >-
+      (github.event.action == 'opened' && github.event.pull_request.merged != true) ||
+      (github.event_name == 'workflow_dispatch' && inputs.action == 'promote-rc')
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          fetch-depth: 1
+
+      - name: Setup moko-platform tools
+        env:
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
+        run: |
+          if ! command -v composer &> /dev/null; then
+            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+          fi
+          # Always fetch latest CLI tools — never use stale cache from previous runs
+          rm -rf /tmp/moko-platform-api
+          git clone --depth 1 --branch main --quiet \
+            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/moko-platform.git" \
+            /tmp/moko-platform-api
+          cd /tmp/moko-platform-api
+          composer install --no-dev --no-interaction --quiet
+
+      - name: Rename branch to rc
+        run: |
+          php /tmp/moko-platform-api/cli/branch_rename.php \
+            --from "${{ github.event.pull_request.head.ref || 'dev' }}" --to rc \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --api-base "${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}" \
+            --pr "${{ github.event.pull_request.number }}"
+
+      - name: Checkout rc and configure git
+        run: |
+          git fetch origin rc
+          git checkout rc
+          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "gitea-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+
+      - name: Publish RC release
+        run: |
+          php /tmp/moko-platform-api/cli/release_publish.php \
+            --path . --stability rc --bump minor --branch rc \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --skip-update-stream
+
+      - name: Summary
+        if: always()
+        run: |
+          echo "## Promoted to Release Candidate" >> $GITHUB_STEP_SUMMARY
+          echo "Branch renamed to rc, minor bump, RC release built (updates.xml managed by Gitea Pages)" >> $GITHUB_STEP_SUMMARY
+
+  # ── Merged PR → Build & Release (or promote RC to stable) ────────────────────
+  release:
+    name: Build & Release Pipeline
+    runs-on: release
+    if: >-
+      github.event.pull_request.merged == true ||
+      (github.event_name == 'workflow_dispatch' && inputs.action != 'promote-rc')
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          fetch-depth: 0
+
+      - name: Configure git for bot pushes
+        run: |
+          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "gitea-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+
+      - name: Check for merge conflict markers
+        run: |
+          CONFLICTS=$(grep -rn '<<<<<<< \|>>>>>>> \|^=======$' --include='*.php' --include='*.xml' --include='*.css' --include='*.js' --include='*.json' --include='*.md' --include='*.yml' --include='*.yaml' --include='*.ini' --include='*.txt' . 2>/dev/null | grep -v '.git/' || true)
+          if [ -n "$CONFLICTS" ]; then
+            echo "::error::Merge conflict markers found — aborting release"
+            echo "## Release Blocked: Conflict Markers" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            echo "$CONFLICTS" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+          echo "No conflict markers found"
+
+      - name: Setup moko-platform tools
+        env:
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_MIRROR_TOKEN }}"}}'
+        run: |
+          # Ensure PHP + Composer are available
+          if ! command -v composer &> /dev/null; then
+            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+          fi
+          # Always fetch latest CLI tools — never use stale cache from previous runs
+          rm -rf /tmp/moko-platform-api
+          git clone --depth 1 --branch main --quiet \
+            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/moko-platform.git" \
+            /tmp/moko-platform-api
+          cd /tmp/moko-platform-api
+          composer install --no-dev --no-interaction --quiet
+
+
+      - name: "Publish stable release"
+        run: |
+          php /tmp/moko-platform-api/cli/release_publish.php \
+            --path . --stability stable --bump minor --branch main \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --skip-update-stream
+
+      # -- STEP 9: Mirror to GitHub (stable only) --------------------------------
+      - name: "Step 9: Mirror release to GitHub"
+        if: >-
+          steps.version.outputs.skip != 'true' &&
+          secrets.GH_MIRROR_TOKEN != ''
+        continue-on-error: true
+        run: |
+          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
+          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
+          GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          php /tmp/moko-platform-api/cli/release_mirror.php \
+            --version "$VERSION" --tag "$RELEASE_TAG" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
+            --gh-token "${{ secrets.GH_MIRROR_TOKEN }}" --gh-repo "$GH_REPO" \
+            --branch main 2>&1 || true
+          echo "GitHub mirror updated" >> $GITHUB_STEP_SUMMARY
+
+      # -- STEP 10: Sync main branch to GitHub mirror ----------------------------
+      - name: "Step 10: Push main to GitHub mirror"
+        if: >-
+          steps.version.outputs.skip != 'true' &&
+          secrets.GH_MIRROR_TOKEN != ''
+        continue-on-error: true
+        run: |
+          GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
+          GH_ORG=$(echo "$GH_REPO" | cut -d/ -f1)
+          GH_NAME=$(echo "$GH_REPO" | cut -d/ -f2)
+          git remote add github "https://x-access-token:${{ secrets.GH_MIRROR_TOKEN }}@github.com/${GH_ORG}/${GH_NAME}.git" 2>/dev/null || \
+            git remote set-url github "https://x-access-token:${{ secrets.GH_MIRROR_TOKEN }}@github.com/${GH_ORG}/${GH_NAME}.git"
+          git fetch origin main --depth=1
+          git push github origin/main:refs/heads/main --force 2>/dev/null \
+            && echo "main branch pushed to GitHub mirror" \
+            || echo "WARNING: GitHub mirror push failed"
+
+      - name: "Step 11: Delete rc branch and recreate dev from main"
+        if: steps.version.outputs.skip != 'true'
+        continue-on-error: true
+        run: |
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+
+          # Delete rc branch (ephemeral — created by promote-rc)
+          curl -sf -X DELETE -H "Authorization: token ${TOKEN}" \
+            "${API_BASE}/branches/rc" 2>/dev/null \
+            && echo "Deleted rc branch" || echo "rc branch not found"
+
+          # Delete dev branch
+          curl -sf -X DELETE -H "Authorization: token ${TOKEN}" \
+            "${API_BASE}/branches/dev" 2>/dev/null && echo "Deleted dev branch"
+
+          # Recreate dev from main (now includes version bump + changelog promotion)
+          curl -sf -X POST -H "Authorization: token ${TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${API_BASE}/branches" \
+            -d '{"new_branch_name":"dev","old_branch_name":"main"}' 2>/dev/null && echo "Recreated dev from main"
+
+          echo "Pre-release branches cleaned, dev reset from main" >> $GITHUB_STEP_SUMMARY
+
+      - name: "Step 12: Create version branch from main"
+        if: steps.version.outputs.skip != 'true'
+        continue-on-error: true
+        run: |
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
+          BRANCH_NAME="version/${VERSION}"
+          MAIN_SHA=$(git rev-parse HEAD)
+
+          # Delete old version branch if it exists (same version re-release)
+          curl -sf -X DELETE -H "Authorization: token ${TOKEN}"             "${API_BASE}/branches/${BRANCH_NAME}" 2>/dev/null && echo "Deleted old ${BRANCH_NAME}"
+
+          # Create version/XX.YY.ZZ from main
+          curl -sf -X POST -H "Authorization: token ${TOKEN}"             -H "Content-Type: application/json"             "${API_BASE}/branches"             -d "{\"new_branch_name\":\"${BRANCH_NAME}\",\"old_branch_name\":\"main\"}" 2>/dev/null             && echo "Created ${BRANCH_NAME} from main (${MAIN_SHA})"             || echo "WARNING: ${BRANCH_NAME} creation failed"
+
+          echo "Version branch created: ${BRANCH_NAME} (${MAIN_SHA})" >> $GITHUB_STEP_SUMMARY
+
+
+
+      # -- Dolibarr post-release: Reset dev version -----------------------------
+      - name: "Post-release: Reset dev version"
+        if: steps.version.outputs.skip != 'true'
+        continue-on-error: true
+        run: |
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          php /tmp/moko-platform-api/cli/version_reset_dev.php \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "${API_BASE}" \
+            --branch dev --path . 2>&1 || true
+
+      # -- Summary --------------------------------------------------------------
+      - name: Pipeline Summary
+        if: always()
+        run: |
+          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
+          PLATFORM="${{ steps.platform.outputs.platform }}"
+          if [ "${{ steps.version.outputs.skip }}" = "true" ]; then
+            echo "## Release Skipped" >> $GITHUB_STEP_SUMMARY
+            echo "No VERSION in README.md" >> $GITHUB_STEP_SUMMARY
+          elif [ "${{ steps.check.outputs.already_released }}" = "true" ]; then
+            echo "## Already Released — ${VERSION}" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "## Build & Release Complete (${PLATFORM})" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "| Step | Result |" >> $GITHUB_STEP_SUMMARY
+            echo "|------|--------|" >> $GITHUB_STEP_SUMMARY
+            echo "| Platform | \`${PLATFORM}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Branch | \`${{ steps.version.outputs.branch }}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Tag | \`${{ steps.version.outputs.tag }}\` |" >> $GITHUB_STEP_SUMMARY
+            echo "| Release | [View](${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
+          fi

.mokogitea/workflows/branch-cleanup.yml

@@ -0,0 +1,48 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: MokoStandards.Universal
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+# PATH: /.mokogitea/workflows/branch-cleanup.yml
+# VERSION: 01.00.00
+# BRIEF: Delete feature branches after PR merge
+
+name: "Branch Cleanup"
+
+on:
+  pull_request:
+    types: [closed]
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  cleanup:
+    name: Delete merged branch
+    runs-on: ubuntu-latest
+    if: >-
+      github.event.pull_request.merged == true &&
+      github.event.pull_request.head.ref != 'dev' &&
+      github.event.pull_request.head.ref != 'main'
+
+    steps:
+      - name: Delete source branch
+        run: |
+          BRANCH="${{ github.event.pull_request.head.ref }}"
+          API="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}/api/v1/repos/${{ github.repository }}/branches"
+          ENCODED=$(php -r "echo rawurlencode('${BRANCH}');")
+
+          STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X DELETE \
+            -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \
+            "${API}/${ENCODED}" 2>/dev/null || true)
+
+          if [ "$STATUS" = "204" ]; then
+            echo "Deleted branch: ${BRANCH}" >> $GITHUB_STEP_SUMMARY
+          elif [ "$STATUS" = "404" ]; then
+            echo "Branch already deleted: ${BRANCH}" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "::warning::Failed to delete branch ${BRANCH} (HTTP ${STATUS})"
+          fi

.mokogitea/workflows/cascade-dev.yml

@@ -0,0 +1,10 @@
+# DISABLED — auto-release Step 11 recreates dev from main after every release.
+# Cascade-dev is redundant and causes version conflicts when both main and dev
+# have different version numbers in templateDetails.xml / manifest.xml.
+name: "Cascade Main → Dev (DISABLED)"
+on: workflow_dispatch
+jobs:
+  noop:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "Cascade disabled — auto-release handles dev recreation"

.mokogitea/workflows/ci-joomla.yml

@@ -10,7 +10,7 @@
 # REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
 # PATH: /templates/workflows/joomla/ci-joomla.yml.template
 # VERSION: 04.06.00
-# BRIEF: CI workflow for Joomla extensions — lint, validate, test
+# BRIEF: CI workflow for Joomla extensions -- lint, validate, test
 
 name: "Joomla: Extension CI"
 
@@ -43,9 +43,9 @@ jobs:
 
       - name: Clone MokoStandards
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_HOST: ${{ secrets.GA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
+          GA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN || secrets.MOKOGITEA_TOKEN || github.token }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN || secrets.MOKOGITEA_TOKEN || github.token }}
+          MOKO_CLONE_HOST: ${{ secrets.MOKOGITEA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
         run: |
           git clone --depth 1 --branch main --quiet \
             "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
@@ -53,7 +53,7 @@ jobs:
 
       - name: Install dependencies
         env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.MOKOGITEA_TOKEN || github.token }}"}}'
         run: |
           if [ -f "composer.json" ]; then
             composer install \
@@ -61,7 +61,7 @@ jobs:
               --prefer-dist \
               --optimize-autoloader
           else
-            echo "No composer.json found — skipping dependency install"
+            echo "No composer.json found -- skipping dependency install"
           fi
 
       - name: PHP syntax check
@@ -161,7 +161,7 @@ jobs:
             # Extract language file references from manifest
             LANG_FILES=$(grep -oP 'language\s+tag="[^"]*"[^>]*>\K[^<]+' "$MANIFEST" 2>/dev/null || true)
             if [ -z "$LANG_FILES" ]; then
-              echo "No language file references found in manifest — skipping." >> $GITHUB_STEP_SUMMARY
+              echo "No language file references found in manifest -- skipping." >> $GITHUB_STEP_SUMMARY
             else
               while IFS= read -r LANG_FILE; do
                 LANG_FILE=$(echo "$LANG_FILE" | xargs)
@@ -185,7 +185,7 @@ jobs:
               done <<< "$LANG_FILES"
             fi
           else
-            echo "No manifest found — skipping language check." >> $GITHUB_STEP_SUMMARY
+            echo "No manifest found -- skipping language check." >> $GITHUB_STEP_SUMMARY
           fi
 
           if [ "${ERRORS}" -gt 0 ]; then
@@ -216,7 +216,7 @@ jobs:
           done
 
           if [ "${CHECKED}" -eq 0 ]; then
-            echo "No src/ or htdocs/ directories found — skipping." >> $GITHUB_STEP_SUMMARY
+            echo "No src/ or htdocs/ directories found -- skipping." >> $GITHUB_STEP_SUMMARY
           elif [ "${MISSING}" -gt 0 ]; then
             echo "" >> $GITHUB_STEP_SUMMARY
             echo "**${MISSING} director(ies) missing index.html out of ${CHECKED} checked.**" >> $GITHUB_STEP_SUMMARY
@@ -346,7 +346,7 @@ jobs:
 
       - name: Install dependencies
         env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.MOKOGITEA_TOKEN || github.token }}"}}'
         run: |
           if [ -f "composer.json" ]; then
             composer install \
@@ -354,7 +354,7 @@ jobs:
               --prefer-dist \
               --optimize-autoloader
           else
-            echo "No composer.json found — skipping dependency install"
+            echo "No composer.json found -- skipping dependency install"
           fi
 
       - name: Run tests
@@ -366,14 +366,14 @@ jobs:
             if [ $EXIT -eq 0 ]; then
               echo "All tests passed." >> $GITHUB_STEP_SUMMARY
             else
-              echo "Test failures detected — see log." >> $GITHUB_STEP_SUMMARY
+              echo "Test failures detected -- see log." >> $GITHUB_STEP_SUMMARY
               echo '```' >> $GITHUB_STEP_SUMMARY
               cat /tmp/test-output.log >> $GITHUB_STEP_SUMMARY
               echo '```' >> $GITHUB_STEP_SUMMARY
             fi
             exit $EXIT
           else
-            echo "No phpunit.xml found — skipping tests." >> $GITHUB_STEP_SUMMARY
+            echo "No phpunit.xml found -- skipping tests." >> $GITHUB_STEP_SUMMARY
           fi
 
   static-analysis:
@@ -391,7 +391,7 @@ jobs:
 
       - name: Install dependencies
         env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.MOKOGITEA_TOKEN || github.token }}"}}'
         run: |
           if [ -f "composer.json" ]; then
             composer install --no-interaction --prefer-dist --optimize-autoloader
@@ -422,7 +422,7 @@ jobs:
           done
 
           if [ -z "$SRC_DIR" ]; then
-            echo "No source directory found (src/, htdocs/, lib/) — skipping." >> $GITHUB_STEP_SUMMARY
+            echo "No source directory found (src/, htdocs/, lib/) -- skipping." >> $GITHUB_STEP_SUMMARY
             exit 0
           fi
 
@@ -432,7 +432,7 @@ jobs:
             echo "Using project PHPStan config." >> $GITHUB_STEP_SUMMARY
           else
             ARGS="$ARGS --level=3"
-            echo "No phpstan.neon found — using level 3 (type inference)." >> $GITHUB_STEP_SUMMARY
+            echo "No phpstan.neon found -- using level 3 (type inference)." >> $GITHUB_STEP_SUMMARY
           fi
 
           $PHPSTAN $ARGS 2>&1 | tee /tmp/phpstan-output.txt
@@ -448,3 +448,20 @@ jobs:
             echo '```' >> $GITHUB_STEP_SUMMARY
           fi
           exit $EXIT
+
+  pre-release:
+    name: Build RC Pre-Release
+    runs-on: ubuntu-latest
+    needs: [lint-and-validate, test]
+    if: github.event_name == 'pull_request'
+
+    steps:
+      - name: Trigger pre-release build
+        env:
+          GA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          REPO: ${{ github.repository }}
+          BRANCH: ${{ github.head_ref }}
+        run: |
+          curl -s -X POST             "${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches"             -H "Authorization: token ${GITEA_TOKEN}"             -H "Content-Type: application/json"             -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
+          echo "### Pre-Release" >> $GITHUB_STEP_SUMMARY
+          echo "Triggered RC build on branch \`${BRANCH}\`" >> $GITHUB_STEP_SUMMARY

.mokogitea/workflows/cleanup.yml

@@ -4,8 +4,8 @@
 #
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Maintenance
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
+# INGROUP: moko-platform.Maintenance
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
 # PATH: /.gitea/workflows/cleanup.yml
 # VERSION: 01.00.00
 # BRIEF: Scheduled cleanup — delete merged branches and old workflow runs
@@ -33,17 +33,17 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GA_TOKEN }}
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
 
       - name: Delete merged branches
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          GA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Merged Branch Cleanup ==="
           API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
 
           # List branches via API
-          BRANCHES=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          BRANCHES=$(curl -sS -H "Authorization: token ${GITEA_TOKEN}" \
             "${API}/branches?limit=50" | jq -r '.[].name')
 
           DELETED=0
@@ -56,7 +56,7 @@ jobs:
             # Check if branch is merged into main
             if git merge-base --is-ancestor "origin/${BRANCH}" origin/main 2>/dev/null; then
               echo "  Deleting merged branch: ${BRANCH}"
-              curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+              curl -sS -X DELETE -H "Authorization: token ${GITEA_TOKEN}" \
                 "${API}/branches/${BRANCH}" 2>/dev/null || true
               DELETED=$((DELETED + 1))
             fi
@@ -66,20 +66,20 @@ jobs:
 
       - name: Clean old workflow runs
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          GA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Workflow Run Cleanup ==="
           API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
           CUTOFF=$(date -d "30 days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -v-30d +%Y-%m-%dT%H:%M:%SZ)
 
           # Get old completed runs
-          RUNS=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          RUNS=$(curl -sS -H "Authorization: token ${GITEA_TOKEN}" \
             "${API}/actions/runs?status=completed&limit=50" | \
             jq -r ".workflow_runs[] | select(.created_at < \"${CUTOFF}\") | .id" 2>/dev/null)
 
           DELETED=0
           for RUN_ID in $RUNS; do
-            curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+            curl -sS -X DELETE -H "Authorization: token ${GITEA_TOKEN}" \
               "${API}/actions/runs/${RUN_ID}" 2>/dev/null || true
             DELETED=$((DELETED + 1))
           done

.mokogitea/workflows/gitleaks.yml

@@ -4,8 +4,8 @@
 #
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Security
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
+# INGROUP: moko-platform.Security
+# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/moko-platform
 # PATH: /templates/workflows/gitleaks.yml.template
 # VERSION: 01.00.00
 # BRIEF: Secret scanning — detect leaked credentials, API keys, and tokens

.mokogitea/workflows/issue-branch.yml

@@ -0,0 +1,73 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Automation
+# VERSION: 02.19.06
+# BRIEF: Auto-create feature branch when an issue is opened
+
+name: "Universal: Issue Branch"
+
+on:
+  issues:
+    types: [opened]
+
+permissions:
+  contents: write
+  issues: write
+
+env:
+  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+
+jobs:
+  create-branch:
+    name: Create feature branch
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create branch and comment
+        run: |
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          ISSUE_NUM="${{ github.event.issue.number }}"
+          ISSUE_TITLE="${{ github.event.issue.title }}"
+
+          # Build slug from title: lowercase, replace non-alnum with dash, trim
+          SLUG=$(echo "${ISSUE_TITLE}" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9]/-/g' | sed 's/--*/-/g' | sed 's/^-//;s/-$//' | cut -c1-40)
+          BRANCH="feature/${ISSUE_NUM}-${SLUG}"
+
+          # Check dev branch exists
+          DEV_EXISTS=$(curl -sf -o /dev/null -w '%{http_code}' \
+            -H "Authorization: token ${TOKEN}" \
+            "${API}/branches/dev" 2>/dev/null || echo "000")
+
+          if [ "${DEV_EXISTS}" != "200" ]; then
+            echo "No dev branch -- skipping"
+            exit 0
+          fi
+
+          # Create branch from dev
+          HTTP=$(curl -sf -o /dev/null -w '%{http_code}' -X POST \
+            -H "Authorization: token ${TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${API}/branches" \
+            -d "{\"new_branch_name\":\"${BRANCH}\",\"old_branch_name\":\"dev\"}" 2>/dev/null || echo "000")
+
+          if [ "${HTTP}" = "201" ]; then
+            echo "Created branch: ${BRANCH}"
+
+            # Comment on issue with branch link
+            REPO_URL="${GITEA_URL}/${{ github.repository }}"
+            BODY="Branch created: [\`${BRANCH}\`](${REPO_URL}/src/branch/${BRANCH})\n\n\`\`\`bash\ngit fetch origin\ngit checkout ${BRANCH}\n\`\`\`"
+
+            curl -sf -X POST \
+              -H "Authorization: token ${TOKEN}" \
+              -H "Content-Type: application/json" \
+              "${API}/issues/${ISSUE_NUM}/comments" \
+              -d "{\"body\":\"${BODY}\"}" > /dev/null 2>&1
+
+            echo "Commented on issue #${ISSUE_NUM}"
+          else
+            echo "Failed to create branch (HTTP ${HTTP}) -- may already exist"
+          fi

.mokogitea/workflows/notify.yml

@@ -4,8 +4,8 @@
 #
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Notifications
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
+# INGROUP: moko-platform.Notifications
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
 # PATH: /.gitea/workflows/notify.yml
 # VERSION: 01.00.00
 # BRIEF: Push notifications via ntfy on release success or workflow failure
@@ -18,7 +18,6 @@ on:
       - "Joomla Build & Release"
       - "Joomla Extension CI"
       - "Deploy"
-      - "Cascade Main → Dev"
     types:
       - completed
 

.mokogitea/workflows/pr-check.yml

@@ -0,0 +1,508 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.CI
+# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/moko-platform
+# PATH: /templates/workflows/universal/pr-check.yml.template
+# VERSION: 09.23.00
+# BRIEF: PR gate — branch policy + code validation before merge
+
+name: "Universal: PR Check"
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  # ── Branch Policy ──────────────────────────────────────────────────────
+  branch-policy:
+    name: Branch Policy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check branch merge target
+        run: |
+          HEAD="${{ github.head_ref }}"
+          BASE="${{ github.base_ref }}"
+
+          echo "PR: ${HEAD} → ${BASE}"
+
+          ALLOWED=true
+          REASON=""
+
+          case "$HEAD" in
+            feature/*|feat/*)
+              if [ "$BASE" != "dev" ]; then
+                ALLOWED=false
+                REASON="Feature branches must target 'dev', not '${BASE}'"
+              fi
+              ;;
+            fix/*|bugfix/*)
+              if [ "$BASE" != "dev" ]; then
+                ALLOWED=false
+                REASON="Fix branches must target 'dev', not '${BASE}'"
+              fi
+              ;;
+            patch/*)
+              if [ "$BASE" != "dev" ] && [ "$BASE" != "rc" ]; then
+                ALLOWED=false
+                REASON="Patch branches must target 'dev' or 'rc', not '${BASE}'"
+              fi
+              ;;
+            hotfix/*)
+              if [ "$BASE" != "dev" ] && [ "$BASE" != "main" ]; then
+                ALLOWED=false
+                REASON="Hotfix branches can only target 'dev' or 'main', not '${BASE}'"
+              fi
+              ;;
+            rc)
+              if [ "$BASE" != "main" ]; then
+                ALLOWED=false
+                REASON="RC branch can only merge into 'main', not '${BASE}'"
+              fi
+              ;;
+            dev)
+              if [ "$BASE" != "main" ]; then
+                ALLOWED=false
+                REASON="Dev branch can only merge into 'main', not '${BASE}'"
+              fi
+              ;;
+          esac
+
+          if [ "$ALLOWED" = false ]; then
+            echo "::error::${REASON}"
+            echo "## Branch Policy Violation" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "${REASON}" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "### Allowed merge paths:" >> $GITHUB_STEP_SUMMARY
+            echo "- \`feature/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
+            echo "- \`fix/*\` → \`dev\`" >> $GITHUB_STEP_SUMMARY
+            echo "- \`hotfix/*\` → \`dev\` or \`main\`" >> $GITHUB_STEP_SUMMARY
+            echo "- \`dev\` → \`main\`" >> $GITHUB_STEP_SUMMARY
+            echo "- \`rc/*\` → \`main\`" >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+
+          echo "Branch policy: OK (${HEAD} → ${BASE})"
+          echo "## Branch Policy: Passed" >> $GITHUB_STEP_SUMMARY
+
+  # ── Code Validation ────────────────────────────────────────────────────
+  validate:
+    name: Validate PR
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check for merge conflict markers
+        run: |
+          CONFLICTS=$(grep -rn '<<<<<<< \|>>>>>>> \|^=======$' --include='*.php' --include='*.xml' --include='*.css' --include='*.js' --include='*.json' --include='*.md' --include='*.yml' --include='*.yaml' --include='*.ini' --include='*.txt' . 2>/dev/null | grep -v '.git/' || true)
+          if [ -n "$CONFLICTS" ]; then
+            echo "::error::Merge conflict markers found in source files"
+            echo "## Conflict Markers Found" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            echo "$CONFLICTS" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+          echo "No conflict markers found"
+
+      - name: Detect platform
+        id: platform
+        run: |
+          # Read platform from XML manifest (<platform> tag) or plain text fallback
+          PLATFORM=$(sed -n 's/.*<platform>\([^<]*\)<\/platform>.*/\1/p' .mokogitea/manifest.xml 2>/dev/null | head -1)
+          [ -z "$PLATFORM" ] && PLATFORM=$(cat .mokogitea/manifest.xml 2>/dev/null | tr -d '[:space:]')
+          [ -z "$PLATFORM" ] && PLATFORM="generic"
+          echo "platform=$PLATFORM" >> "$GITHUB_OUTPUT"
+
+      - name: Setup PHP
+        if: steps.platform.outputs.platform == 'joomla' || steps.platform.outputs.platform == 'dolibarr'
+        run: |
+          if ! command -v php &> /dev/null; then
+            sudo apt-get update -qq
+            sudo apt-get install -y -qq php-cli php-mbstring php-xml >/dev/null 2>&1
+          fi
+
+      - name: PHP syntax check
+        if: steps.platform.outputs.platform == 'joomla' || steps.platform.outputs.platform == 'dolibarr'
+        run: |
+          ERRORS=0
+          while IFS= read -r -d '' file; do
+            if ! php -l "$file" 2>&1 | grep -q "No syntax errors"; then
+              ERRORS=$((ERRORS + 1))
+            fi
+          done < <(find . -name "*.php" -not -path "./.git/*" -not -path "./vendor/*" -print0)
+          echo "PHP lint: ${ERRORS} error(s)"
+          [ "$ERRORS" -eq 0 ] || { echo "::error::PHP syntax errors found"; exit 1; }
+
+      - name: Joomla JEXEC guard check
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          ERRORS=0
+          while IFS= read -r -d '' file; do
+            # Skip vendor, node_modules, and index.html stub files
+            case "$file" in ./vendor/*|./node_modules/*) continue ;; esac
+            # Check first 10 lines for JEXEC or JPATH guard
+            if ! head -20 "$file" | grep -qE "defined\s*\(\s*['\"](_JEXEC|JPATH_BASE|\\\\JPATH_PLATFORM)['\"]"; then
+              echo "::error file=${file}::Missing JEXEC guard: ${file}"
+              ERRORS=$((ERRORS + 1))
+            fi
+          done < <(find . -name "*.php" -path "*/src/*" -not -path "./.git/*" -not -path "./vendor/*" -print0)
+          if [ "$ERRORS" -gt 0 ]; then
+            echo "::error::${ERRORS} PHP file(s) missing defined('_JEXEC') or die guard"
+            echo "## JEXEC Guard Check: Failed" >> $GITHUB_STEP_SUMMARY
+            echo "${ERRORS} file(s) in src/ are missing the Joomla execution guard." >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+          echo "JEXEC guard: OK"
+
+      - name: Joomla directory listing protection
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          MISSING=0
+          SOURCE_DIR="src"
+          [ ! -d "$SOURCE_DIR" ] && exit 0
+          while IFS= read -r dir; do
+            if [ ! -f "${dir}/index.html" ]; then
+              echo "::warning::Missing index.html in ${dir} (directory listing protection)"
+              MISSING=$((MISSING + 1))
+            fi
+          done < <(find "$SOURCE_DIR" -type d -not -path "./.git/*" -not -path "*/vendor/*" -not -path "*/node_modules/*")
+          if [ "$MISSING" -gt 0 ]; then
+            echo "## Directory Protection" >> $GITHUB_STEP_SUMMARY
+            echo "${MISSING} director(ies) missing index.html" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "Directory protection: ${MISSING} missing (advisory)"
+
+      - name: Joomla script file and asset checks
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          ERRORS=0
+          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
+          [ -z "$MANIFEST" ] && exit 0
+          MANIFEST_DIR=$(dirname "$MANIFEST")
+
+          # Check scriptfile exists if declared
+          SCRIPTFILE=$(sed -n 's/.*<scriptfile>\([^<]*\)<\/scriptfile>.*/\1/p' "$MANIFEST" 2>/dev/null)
+          if [ -n "$SCRIPTFILE" ]; then
+            if [ ! -f "${MANIFEST_DIR}/${SCRIPTFILE}" ]; then
+              echo "::error::Manifest declares <scriptfile>${SCRIPTFILE}</scriptfile> but file not found at ${MANIFEST_DIR}/${SCRIPTFILE}"
+              ERRORS=$((ERRORS + 1))
+            else
+              echo "Script file: ${MANIFEST_DIR}/${SCRIPTFILE} (OK)"
+            fi
+          fi
+
+          # Require joomla.asset.json and validate it
+          ASSET_JSON=$(find "$MANIFEST_DIR" -name "joomla.asset.json" -not -path "./.git/*" 2>/dev/null | head -1)
+          if [ -z "$ASSET_JSON" ]; then
+            echo "::error::joomla.asset.json not found — Joomla asset system is required"
+            ERRORS=$((ERRORS + 1))
+          else
+            if command -v php &> /dev/null; then
+              php -r "json_decode(file_get_contents('$ASSET_JSON')); if(json_last_error()!==JSON_ERROR_NONE){echo json_last_error_msg();exit(1);}" 2>&1 || {
+                echo "::error::joomla.asset.json is not valid JSON"
+                ERRORS=$((ERRORS + 1))
+              }
+            fi
+            echo "joomla.asset.json: valid"
+          fi
+
+          # Validate all XML files in src/ are well-formed
+          XML_ERRORS=0
+          if command -v php &> /dev/null; then
+            while IFS= read -r -d '' xmlfile; do
+              if ! php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('$xmlfile'); if(!\$x){foreach(libxml_get_errors() as \$e) echo trim(\$e->message) . ' in $xmlfile'; exit(1);}" 2>&1; then
+                XML_ERRORS=$((XML_ERRORS + 1))
+              fi
+            done < <(find "$MANIFEST_DIR" -name "*.xml" -not -path "./.git/*" -print0)
+          fi
+          if [ "$XML_ERRORS" -gt 0 ]; then
+            echo "::error::${XML_ERRORS} XML file(s) are malformed"
+            ERRORS=$((ERRORS + 1))
+          else
+            echo "XML well-formedness: OK"
+          fi
+
+          [ "$ERRORS" -gt 0 ] && exit 1
+          echo "Joomla asset checks: OK"
+
+      - name: Validate platform manifest
+        run: |
+          PLATFORM="${{ steps.platform.outputs.platform }}"
+          case "$PLATFORM" in
+            joomla)
+              MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
+              if [ -z "$MANIFEST" ]; then
+                echo "::warning::No Joomla manifest found (WaaS site)"
+                exit 0
+              fi
+              echo "Manifest: ${MANIFEST}"
+              if command -v php &> /dev/null; then
+                php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('$MANIFEST'); if(!\$x){foreach(libxml_get_errors() as \$e) echo \$e->message; exit(1);}" || { echo "::error::Manifest XML is malformed"; exit 1; }
+              fi
+              for ELEMENT in name version description; do
+                grep -q "<${ELEMENT}>" "$MANIFEST" || { echo "::error::Missing <${ELEMENT}> in manifest"; exit 1; }
+              done
+              # Block legacy raw/branch update server URLs on MokoGitea
+              RAW_URLS=$(grep -n 'raw/branch' "$MANIFEST" | grep -i 'mokoconsulting\|mokogitea\|git\.mokoconsulting\.tech' || true)
+              if [ -n "$RAW_URLS" ]; then
+                echo "::error::Manifest contains legacy raw/branch update server URL on MokoGitea. Use the Gitea Pages URL instead (e.g. /{REPO}/updates.xml not /{REPO}/raw/branch/main/updates.xml)"
+                echo "$RAW_URLS"
+                exit 1
+              fi
+              echo "Joomla manifest valid"
+              ;;
+            dolibarr)
+              MOD_FILE=$(find . -maxdepth 4 -name "mod*.class.php" ! -path "./.git/*" -exec grep -l 'extends DolibarrModules' {} \; 2>/dev/null | head -1)
+              if [ -z "$MOD_FILE" ]; then
+                echo "::error::No mod*.class.php found"
+                exit 1
+              fi
+              echo "Dolibarr module: ${MOD_FILE}"
+              ;;
+            *)
+              echo "Generic platform — no manifest validation"
+              ;;
+          esac
+
+      - name: Check update stream format
+        run: |
+          PLATFORM="${{ steps.platform.outputs.platform }}"
+          case "$PLATFORM" in
+            joomla)
+              if [ -f "updates.xml" ]; then
+                if command -v php &> /dev/null; then
+                  php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('updates.xml'); if(!\$x){foreach(libxml_get_errors() as \$e) echo \$e->message; exit(1);}" || { echo "::error::updates.xml is malformed"; exit 1; }
+                fi
+                echo "updates.xml valid"
+              fi
+              ;;
+            dolibarr)
+              [ -f "update.txt" ] && echo "update.txt present" || echo "::warning::No update.txt"
+              ;;
+          esac
+
+      - name: Validate Joomla language files
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          ERRORS=0
+          WARNINGS=0
+
+          # Require both en-GB and en-US language directories
+          LANG_ROOT=$(find . -path "*/language" -type d -not -path "./.git/*" 2>/dev/null | head -1)
+          if [ -z "$LANG_ROOT" ]; then
+            echo "No language/ directory found — skipping"
+            exit 0
+          fi
+
+          if [ ! -d "$LANG_ROOT/en-GB" ]; then
+            echo "::error::Missing en-GB language directory (${LANG_ROOT}/en-GB)"
+            ERRORS=$((ERRORS + 1))
+          fi
+          if [ ! -d "$LANG_ROOT/en-US" ]; then
+            echo "::error::Missing en-US language directory (${LANG_ROOT}/en-US)"
+            ERRORS=$((ERRORS + 1))
+          fi
+
+          # Check that en-GB and en-US have matching .ini files
+          if [ -d "$LANG_ROOT/en-GB" ] && [ -d "$LANG_ROOT/en-US" ]; then
+            for GB_INI in "$LANG_ROOT/en-GB"/*.ini; do
+              [ ! -f "$GB_INI" ] && continue
+              US_INI="$LANG_ROOT/en-US/$(basename "$GB_INI")"
+              if [ ! -f "$US_INI" ]; then
+                echo "::error::$(basename "$GB_INI") exists in en-GB but missing from en-US"
+                ERRORS=$((ERRORS + 1))
+              fi
+            done
+            for US_INI in "$LANG_ROOT/en-US"/*.ini; do
+              [ ! -f "$US_INI" ] && continue
+              GB_INI="$LANG_ROOT/en-GB/$(basename "$US_INI")"
+              if [ ! -f "$GB_INI" ]; then
+                echo "::error::$(basename "$US_INI") exists in en-US but missing from en-GB"
+                ERRORS=$((ERRORS + 1))
+              fi
+            done
+          fi
+
+          # Find all .ini language files
+          INI_FILES=$(find . -path "*/language/*/*.ini" -not -path "./.git/*" 2>/dev/null)
+          if [ -z "$INI_FILES" ]; then
+            echo "No .ini language files found"
+            [ "$ERRORS" -gt 0 ] && exit 1
+            exit 0
+          fi
+
+          echo "Found $(echo "$INI_FILES" | wc -l) language file(s)"
+
+          for FILE in $INI_FILES; do
+            FNAME=$(basename "$FILE")
+            LINENUM=0
+            SEEN_KEYS=""
+
+            while IFS= read -r line || [ -n "$line" ]; do
+              LINENUM=$((LINENUM + 1))
+
+              # Skip empty lines and comments
+              [ -z "$line" ] && continue
+              echo "$line" | grep -qE '^\s*;' && continue
+              echo "$line" | grep -qE '^\s*$' && continue
+
+              # Must match KEY="VALUE" format
+              if ! echo "$line" | grep -qE '^[A-Z_][A-Z0-9_]*=".*"$'; then
+                echo "::error file=${FILE},line=${LINENUM}::Malformed line: ${line}"
+                ERRORS=$((ERRORS + 1))
+                continue
+              fi
+
+              # Extract key and check for duplicates
+              KEY=$(echo "$line" | sed 's/=.*//')
+              if echo "$SEEN_KEYS" | grep -qx "$KEY"; then
+                echo "::error file=${FILE},line=${LINENUM}::Duplicate key: ${KEY}"
+                ERRORS=$((ERRORS + 1))
+              fi
+              SEEN_KEYS="${SEEN_KEYS}
+          ${KEY}"
+            done < "$FILE"
+
+            echo "  ${FILE}: checked ${LINENUM} lines"
+          done
+
+          # Cross-check en-GB vs en-US key consistency
+          GB_DIR=$(find . -path "*/language/en-GB" -type d -not -path "./.git/*" 2>/dev/null | head -1)
+          US_DIR=$(find . -path "*/language/en-US" -type d -not -path "./.git/*" 2>/dev/null | head -1)
+
+          if [ -n "$GB_DIR" ] && [ -n "$US_DIR" ]; then
+            for GB_FILE in "$GB_DIR"/*.ini; do
+              [ ! -f "$GB_FILE" ] && continue
+              FNAME=$(basename "$GB_FILE")
+              US_FILE="$US_DIR/$FNAME"
+              [ ! -f "$US_FILE" ] && continue
+
+              GB_KEYS=$(grep -oP '^[A-Z_][A-Z0-9_]*(?==)' "$GB_FILE" 2>/dev/null | sort)
+              US_KEYS=$(grep -oP '^[A-Z_][A-Z0-9_]*(?==)' "$US_FILE" 2>/dev/null | sort)
+
+              # Keys in en-GB but not en-US
+              MISSING_US=$(comm -23 <(echo "$GB_KEYS") <(echo "$US_KEYS"))
+              if [ -n "$MISSING_US" ]; then
+                echo "::warning::Keys in en-GB/$FNAME but missing from en-US/$FNAME:"
+                echo "$MISSING_US" | while read -r k; do echo "  - $k"; done
+                WARNINGS=$((WARNINGS + 1))
+              fi
+
+              # Keys in en-US but not en-GB
+              MISSING_GB=$(comm -13 <(echo "$GB_KEYS") <(echo "$US_KEYS"))
+              if [ -n "$MISSING_GB" ]; then
+                echo "::warning::Keys in en-US/$FNAME but missing from en-GB/$FNAME:"
+                echo "$MISSING_GB" | while read -r k; do echo "  - $k"; done
+                WARNINGS=$((WARNINGS + 1))
+              fi
+            done
+          fi
+
+          {
+            echo "### Language File Validation"
+            echo "| Metric | Count |"
+            echo "|---|---|"
+            echo "| Files checked | $(echo "$INI_FILES" | wc -l) |"
+            echo "| Errors | ${ERRORS} |"
+            echo "| Warnings | ${WARNINGS} |"
+          } >> $GITHUB_STEP_SUMMARY
+
+          if [ "$ERRORS" -gt 0 ]; then
+            echo "::error::Language validation failed with ${ERRORS} error(s)"
+            exit 1
+          fi
+          echo "Language files: OK (${WARNINGS} warning(s))"
+
+      - name: Check changelog has unreleased entry
+        run: |
+          if [ ! -f "CHANGELOG.md" ]; then
+            echo "::warning::No CHANGELOG.md found"
+            exit 0
+          fi
+          # Check for content under [Unreleased] section
+          if ! grep -q "## \[Unreleased\]" CHANGELOG.md; then
+            echo "::error::CHANGELOG.md missing [Unreleased] section"
+            exit 1
+          fi
+          # Check there's at least one entry (Added/Changed/Fixed/Removed) under Unreleased
+          UNRELEASED_CONTENT=$(sed -n '/## \[Unreleased\]/,/## \[/p' CHANGELOG.md | grep -cE '^\s*-\s' || true)
+          if [ "$UNRELEASED_CONTENT" -eq 0 ]; then
+            echo "::error::CHANGELOG.md [Unreleased] section has no entries. Add a changelog entry describing your changes."
+            echo "## Changelog Check: Failed" >> $GITHUB_STEP_SUMMARY
+            echo "The \`[Unreleased]\` section in CHANGELOG.md has no entries." >> $GITHUB_STEP_SUMMARY
+            echo "Add a line like \`- Description of your change\` under a heading (\`### Added\`, \`### Changed\`, \`### Fixed\`, etc.)" >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+          echo "Changelog: ${UNRELEASED_CONTENT} entry/entries in [Unreleased]"
+
+      - name: Verify package source
+        run: |
+          SOURCE_DIR="src"
+          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
+          if [ ! -d "$SOURCE_DIR" ]; then
+            echo "::warning::No src/ or htdocs/ directory"
+            exit 0
+          fi
+          FILE_COUNT=$(find "$SOURCE_DIR" -type f | wc -l)
+          echo "Source: ${FILE_COUNT} files"
+          [ "$FILE_COUNT" -gt 0 ] || { echo "::error::Source directory is empty"; exit 1; }
+
+  # ── Pre-Release RC Build ─────────────────────────────────────────────────
+  pre-release:
+    name: Build RC Package
+    runs-on: ubuntu-latest
+    needs: [branch-policy, validate]
+
+    steps:
+      - name: Trigger RC pre-release
+        env:
+          GA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          REPO: ${{ github.repository }}
+          BRANCH: ${{ github.head_ref }}
+          GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+        run: |
+          curl -s -X POST             "${GITEA_URL}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches"             -H "Authorization: token ${GITEA_TOKEN}"             -H "Content-Type: application/json"             -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
+          echo "### Pre-Release" >> $GITHUB_STEP_SUMMARY
+          echo "Triggered RC build on branch \`${BRANCH}\`" >> $GITHUB_STEP_SUMMARY
+
+  # ── Issue Reporter ──────────────────────────────────────────────────────
+  report-issues:
+    name: Report Issues
+    runs-on: ubuntu-latest
+    needs: [branch-policy, validate]
+    if: >-
+      always() &&
+      needs.validate.result == 'failure'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: automation/ci-issue-reporter.sh
+          sparse-checkout-cone-mode: false
+
+      - name: "File issue for PR validation failure"
+        env:
+          GITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+        run: |
+          chmod +x automation/ci-issue-reporter.sh
+          ./automation/ci-issue-reporter.sh \
+            --gate "PR Validation" \
+            --workflow "PR Check" \
+            --severity error \
+            --details "PR validation failed (syntax, manifest, changelog, or source checks). See the CI run for the specific check that failed."

.mokogitea/workflows/pre-release.yml

@@ -0,0 +1,241 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Release
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+# PATH: /templates/workflows/universal/pre-release.yml.template
+# VERSION: 05.01.00
+# BRIEF: Manual pre-release -- builds dev/alpha/beta/rc packages from any branch
+
+name: "Universal: Pre-Release"
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - dev
+  pull_request_target:
+    types: [synchronize, opened, reopened]
+    branches:
+      - main
+  workflow_dispatch:
+    inputs:
+      stability:
+        description: 'Pre-release channel'
+        required: true
+        type: choice
+        options:
+          - development
+          - alpha
+          - beta
+          - release-candidate
+
+permissions:
+  contents: write
+
+env:
+  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
+  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+
+jobs:
+  build:
+    name: "Build Pre-Release (${{ inputs.stability || 'development' }})"
+    runs-on: release
+    if: >-
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request' && github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'dev') ||
+      (github.event_name == 'pull_request_target' && github.event.pull_request.base.ref == 'main')
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || '' }}
+
+      - name: Setup moko-platform tools
+        env:
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
+        run: |
+          # Use pre-installed /opt/moko-platform if available (updated by cron every 6h)
+          if [ -f “/opt/moko-platform/cli/version_bump.php” ] && [ -f “/opt/moko-platform/vendor/autoload.php” ]; then
+            echo “Using pre-installed /opt/moko-platform”
+            echo “MOKO_CLI=/opt/moko-platform/cli” >> “$GITHUB_ENV”
+          else
+            echo “Falling back to fresh clone”
+            if ! command -v composer &> /dev/null; then
+              sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+            fi
+            rm -rf /tmp/moko-platform-api
+            git clone --depth 1 --branch main --quiet \
+              “https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/moko-platform.git” \
+              /tmp/moko-platform-api
+            cd /tmp/moko-platform-api && composer install --no-dev --no-interaction --quiet
+            echo “MOKO_CLI=/tmp/moko-platform-api/cli” >> “$GITHUB_ENV”
+          fi
+
+      - name: Detect platform
+        id: platform
+        run: |
+          php ${MOKO_CLI}/manifest_read.php --path . --github-output
+
+      - name: Resolve metadata and bump version
+        id: meta
+        run: |
+          # Auto-detect stability: RC for PRs targeting main, else use input or default to development
+          if [ "${{ github.event_name }}" = "pull_request_target" ] && [ "${{ github.event.pull_request.base.ref }}" = "main" ]; then
+            STABILITY="release-candidate"
+          else
+            STABILITY="${{ inputs.stability || 'development' }}"
+          fi
+
+          case "$STABILITY" in
+            development)        SUFFIX="-dev";   TAG="development" ;;
+            alpha)              SUFFIX="-alpha"; TAG="alpha" ;;
+            beta)               SUFFIX="-beta";  TAG="beta" ;;
+            release-candidate)  SUFFIX="-rc";    TAG="release-candidate" ;;
+          esac
+
+          # Bump version via CLI: patch for dev/alpha/beta, minor for RC
+          case "$STABILITY" in
+            release-candidate) BUMP="minor" ;;
+            *)                 BUMP="patch" ;;
+          esac
+
+          php ${MOKO_CLI}/version_bump.php --path . $([ "$BUMP" = "minor" ] && echo "--minor") 2>/dev/null || true
+
+          # Set stability suffix and verify consistency
+          VERSION=$(php ${MOKO_CLI}/version_read.php --path . 2>/dev/null || echo "00.00.01")
+          VERSION=$(echo "$VERSION" | sed 's/-\(dev\|alpha\|beta\|rc\)$//')
+
+          php ${MOKO_CLI}/version_set_platform.php \
+            --path . --version "$VERSION" --branch "${{ github.ref_name }}" --stability "$STABILITY" 2>/dev/null || true
+          php ${MOKO_CLI}/version_check.php --path . --fix 2>/dev/null || true
+
+          # Append suffix for output
+          if [ -n "$SUFFIX" ]; then
+            VERSION="${VERSION}${SUFFIX}"
+          fi
+
+          # Commit version bump
+          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "gitea-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+          git add -A
+          git diff --cached --quiet || {
+            git commit -m "chore(version): pre-release bump to ${VERSION} [skip ci]"
+            git push origin HEAD 2>&1
+          }
+
+          # Auto-detect element via manifest_element.php
+          php ${MOKO_CLI}/manifest_element.php \
+            --path . --version "$VERSION" --stability "$STABILITY" \
+            --repo "${GITEA_REPO}" --github-output
+
+          # Read back element outputs
+          EXT_ELEMENT=$(grep '^ext_element=' "$GITHUB_OUTPUT" | tail -1 | cut -d= -f2)
+          ZIP_NAME=$(grep '^zip_name=' "$GITHUB_OUTPUT" | tail -1 | cut -d= -f2)
+          [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
+          [ -z "$ZIP_NAME" ] && ZIP_NAME="${EXT_ELEMENT}-${VERSION}.zip"
+
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "stability=${STABILITY}" >> "$GITHUB_OUTPUT"
+          echo "suffix=${SUFFIX}" >> "$GITHUB_OUTPUT"
+          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
+          echo "zip_name=${ZIP_NAME}" >> "$GITHUB_OUTPUT"
+          echo "ext_element=${EXT_ELEMENT}" >> "$GITHUB_OUTPUT"
+
+          echo "=== Pre-Release: ${EXT_ELEMENT} ${VERSION}${SUFFIX} ==="
+
+      - name: Create release
+        id: release
+        run: |
+          TAG="${{ steps.meta.outputs.tag }}"
+          VERSION="${{ steps.meta.outputs.version }}"
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          php ${MOKO_CLI}/release_create.php \
+            --path . --version "$VERSION" --tag "$TAG" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
+            --repo "${GITEA_REPO}" --branch dev --prerelease
+
+      - name: Update release notes from CHANGELOG.md
+        run: |
+          TAG="${{ steps.meta.outputs.tag }}"
+          VERSION="${{ steps.meta.outputs.version }}"
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+
+          # Extract [Unreleased] section from changelog (everything between [Unreleased] and next ## heading)
+          if [ -f "CHANGELOG.md" ]; then
+            NOTES=$(awk '/^## \[Unreleased\]/{found=1; next} /^## \[/{if(found) exit} found{print}' CHANGELOG.md)
+            [ -z "$NOTES" ] && NOTES="Release ${VERSION}"
+          else
+            NOTES="Release ${VERSION}"
+          fi
+
+          # Update release body via API
+          RELEASE_ID=$(curl -sf -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \
+            "${API_BASE}/releases/tags/${TAG}" | python3 -c "import json,sys; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
+
+          if [ -n "$RELEASE_ID" ]; then
+            python3 -c "
+          import json, urllib.request
+          body = open('/dev/stdin').read()
+          payload = json.dumps({'body': body}).encode()
+          req = urllib.request.Request(
+              '${API_BASE}/releases/${RELEASE_ID}',
+              data=payload, method='PATCH',
+              headers={
+                  'Authorization': 'token ${{ secrets.MOKOGITEA_TOKEN }}',
+                  'Content-Type': 'application/json'
+              })
+          urllib.request.urlopen(req)
+          " <<< "$NOTES"
+            echo "Release notes updated from CHANGELOG.md"
+          fi
+
+      - name: Build package and upload
+        id: package
+        run: |
+          VERSION="${{ steps.meta.outputs.version }}"
+          TAG="${{ steps.meta.outputs.tag }}"
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          php ${MOKO_CLI}/release_package.php \
+            --path . --version "$VERSION" --tag "$TAG" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
+            --repo "${GITEA_REPO}" --output /tmp || true
+
+      # updates.xml is generated dynamically by MokoGitea license server
+      # No need to build, commit, or sync updates.xml from workflows
+
+      - name: "Delete lesser pre-release channels (cascade)"
+        continue-on-error: true
+        run: |
+          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+
+          php ${MOKO_CLI}/release_cascade.php \
+            --stability "${{ steps.meta.outputs.stability }}" \
+            --token "${TOKEN}" \
+            --api-base "${API_BASE}"
+
+      - name: Summary
+        if: always()
+        run: |
+          VERSION="${{ steps.meta.outputs.version }}"
+          STABILITY="${{ steps.meta.outputs.stability }}"
+          ZIP_NAME="${{ steps.meta.outputs.zip_name }}"
+          SHA256="${{ steps.package.outputs.sha256_zip }}"
+          echo "## Pre-Release Complete" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
+          echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
+          echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
+          echo "| Channel | ${STABILITY} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Package | \`${ZIP_NAME}\` |" >> $GITHUB_STEP_SUMMARY
+          echo "| SHA-256 | \`${SHA256:-n/a}\` |" >> $GITHUB_STEP_SUMMARY

.mokogitea/workflows/security-audit.yml

@@ -4,8 +4,8 @@
 #
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Security
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
+# INGROUP: moko-platform.Security
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
 # PATH: /.gitea/workflows/security-audit.yml
 # VERSION: 01.00.00
 # BRIEF: Dependency vulnerability scanning for composer and npm packages
@@ -80,3 +80,19 @@ jobs:
             -H "Priority: high" \
             -d "Security audit found vulnerabilities. Review dependency updates." \
             "${NTFY_URL}/${NTFY_TOPIC}" || true
+
+
+      - name: Joomla version audit
+        if: always()
+        run: |
+          if [ -f "monitoring/joomla-version-audit.php" ] && [ -n "$JOOMLA_SITES" ]; then
+            echo "$JOOMLA_SITES" > /tmp/sites.json
+            php monitoring/joomla-version-audit.php --sites /tmp/sites.json || true
+            echo "### Joomla Version Audit" >> $GITHUB_STEP_SUMMARY
+            rm -f /tmp/sites.json
+          else
+            echo "Joomla audit skipped (no script or JOOMLA_SITES_JSON not configured)"
+          fi
+        env:
+          JOOMLA_SITES: ${{ vars.JOOMLA_SITES_JSON }}
+

CHANGELOG.md

@@ -1,8 +1,4 @@
 <!-- Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
-## [Unreleased]
- 
-## [02.04.00] --- 2026-05-16
- 
 
  This file is part of a Moko Consulting project.
 
@@ -12,652 +8,26 @@
  DEFGROUP: Joomla.Template.Site
  INGROUP: MokoOnyx.Documentation
  PATH: ./CHANGELOG.md
- VERSION: 03.09.03
+ VERSION: 02.19.06
  BRIEF: Changelog file documenting version history of MokoOnyx
  -->
 
-# Changelog — MokoOnyx (VERSION: 03.09.03)
-
-All notable changes to the MokoOnyx Joomla template are documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [02.03.00] --- 2026-05-16
+# Changelog — MokoOnyx (VERSION: 02.19.06)
+## [Unreleased]
 
 ### Fixed
-- **Dropdown menu background** — Dropdown menus now use `--nav-bg-color` instead of `--body-bg` so they inherit the navigation theme colour
-- **Language pretty name** — Updated template pretty name to follow Joomla naming convention
-
-### Added
-- **Article metadata footer** — Renders Joomla custom fields (`jcfields`) as a styled metadata footer on article layouts, grouped by field group with responsive grid and BEM styling
-- **Smart Visitor Detection** — Pushes anonymised visitor properties (login status, user group, page type) to the dataLayer for Google Analytics / Tag Manager. Sets GA4 `user_properties` for persistent session-scoped dimensions. No PII is sent. Default enabled when GTM or GA4 is active.
-- **Auto-cascade workflow** — Forward-merges `main` → `dev` after every push; auto-creates a PR on conflict
-- **Component/print-view stylesheet** — Dedicated `component.css` replaces `template.css` in the component view with print-optimised styles using theme variables
-- **Print-view GA4 tracking** — Component view sends `content_group=print_view` to Google Analytics for tracking print/modal usage
-- **Custom light theme in component view** — Component view now loads `light.custom.css` when configured
-- **Auto-minification** — `user.css`, `user.js`, and custom theme files are automatically minified on page load via `MokoMinifyHelper`
-- **Media folder cleanup on install/update** — `script.php` now removes stale `.min` files, deprecated assets, and unminified vendor files during install or update
-- **Changelog auto-bump in auto-release** — `## [02.03.00] --- 2026-05-16` is automatically promoted to the release version on stable release, with a fresh `## [02.04.00] --- 2026-05-16` section inserted above
-- **CI: PHPStan static analysis** — Added to CI pipeline
-- **CI: Gitleaks secret scanning** — Added to CI pipeline
-- **CI: CSS sync workflow** — Syncs CSS to template repo and checks client variable coverage
+- Strip Joomla-injected `p-2` padding class from Font Awesome icons in all menu overrides (default, mainmenu, horizontal)
 
 ### Changed
-- **Custom head params replaced with user files** — Removed `custom_head_start` / `custom_head_end` template params in favour of `user.css` and `user.js` (loaded via Web Asset Manager)
-- **User override files added to .gitignore** — `user.css` and `user.js` are client-repo only; not committed to the template repo
-- **Asset registry simplified** — Removed duplicate `.min` entries from `joomla.asset.json`; Joomla's Web Asset Manager auto-resolves `.min` variants when debug is off
-- **Font Awesome vendor ships minified only** — Removed unminified FA7 Free CSS (saves ~21 kLOC); asset entries now point to `.min.css` directly
-- **Workflows restructured — CI/CD workflows and issue templates reorganized under `.gitea/` with template sync
+- Migrated update server URL from raw file endpoint to Gitea Pages
+- Release workflow no longer manages updates.xml (decoupled to Gitea Pages)
+- Added conflict-marker guard to PR check and release workflows
+- Added Joomla language file validation (syntax, duplicates, en-GB/en-US consistency)
+- Added JEXEC guard, joomla.asset.json, XML well-formedness, and script file CI checks
+- Removed RS_FTP_PATH_SUFFIX from repo health requirements
 
-### Removed
-- **Migration tab** — Removed MokoCassiopeia migration fieldset and associated language strings from template params
-- **Migration description** — Removed migration callout and "formerly MokoCassiopeia" reference from template description
-- **Custom head fields** — Removed `custom_head_start` / `custom_head_end` fields and `Custom Code` fieldset from template configuration
-- **Footer from component view** — Removed footer module positions from `component.php` (print/modal view)
-- **Unminified vendor CSS** — Removed `all.css`, `brands.css`, `fontawesome.css`, `regular.css`, `solid.css` from FA7 Free (21k+ lines)
+## [02.20.00] --- 2026-06-04
 
-## [03.10.00] - 2026-04-18
+## [02.18.00] --- 2026-06-02
 
-### Important
-- **Template Consolidation** — This release finalised the MokoOnyx identity, adding automatic migration from legacy MokoCassiopeia installations. Settings, menu assignments, and files are imported on first page load.
-
-### Added
-- **Offline page redesign** — Full-viewport background from Joomla offline_image or header background, glass card overlay, centered logo with glow, login accordion, copyright footer
-- **CSS variable click-to-copy** — Text containing `--variable-name` patterns is wrapped in clickable chips that copy to clipboard with toast notification
-- **Brand-aside 3-column layout** — Flex columns like top-a with card style
-- **mod_stats table layout** — Converted from definition list to semantic table
-- **Favicon multi-format support** — Now handles PNG, JPEG, GIF, WebP, BMP (not just PNG)
-- **Theme variables** — `--theme-fab-bg`, `--theme-fab-color`, `--theme-fab-btn-bg`, `--theme-fab-border`, `--offline-card-bg`
-- **Footer CSS variables** — Added to CSS Variables reference tab
-- **Bridge migration script** — `helper/bridge.php` handles automatic MokoCassiopeia → MokoOnyx migration
-- **Dedicated release runner** — Release workflows run on isolated `release` label runner
-- **Runner fleet** — 3 CI + 1 release runner (12 concurrent jobs)
-
-### Changed
-- **Gitea-primary CI/CD** — All workflows use Gitea API, GitHub is backup for stable/RC only
-- **Theme switcher** — Larger, bordered, theme-aware colors (off-white on dark, primary on light)
-- **Auto switch** — Red when off, green when on
-- **A11y toolbar** — Theme-aware colors for dark mode visibility
-- **Search button border** — Matches input border (`--input-border-color`)
-- **Offline message** — 0=hidden, 1=custom message, 2=system language string
-- **Light theme fonts** — Fixed trailing `)` syntax error, normalized quote style to match dark
-- **`--accent-color-secondary`** — Unified to `#6fb3ff` across both themes
-- **`--alert-color`** — Set to `#000` in light theme
-
-### Removed
-- Brand showcase tab (redundant with theme preview)
-- Position selectors for a11y/theme FAB (forced to bottom-right)
-- Custom theme CSS from git tracking (site-specific, gitignored)
-
-### Fixed
-- SHA-256 checksum format — Removed `sha256:` prefix (Joomla expects raw hex)
-- Favicon path resolution — Strips `#joomlaImage://` fragment, tries multiple path candidates
-- `REQUIRE_SIGNIN_VIEW` — Set to `false` for public release downloads
-- Release workflow — Uses Gitea API to update `updates.xml` on main (bypasses branch protection)
-- Language loading on offline page — `com_users` and core language files loaded explicitly
-
----
-
-## [03.09.03] - 2026-04-02
-
-### Added
-- **Favicon configuration** — New "Favicon" tab in template config; upload a PNG and all favicon sizes are auto-generated via PHP GD (ICO, Apple Touch Icon 180px, Android Chrome 192/512px, site.webmanifest)
-- **Module overrides** — 11 new `default.php` layout overrides for Joomla core modules: `mod_custom`, `mod_articles_latest`, `mod_articles_popular`, `mod_articles_news`, `mod_articles_category`, `mod_breadcrumbs`, `mod_footer`, `mod_login`, `mod_finder`, `mod_tags_popular`, `mod_tags_similar`, `mod_related_items`
-- **Module title support** — All module overrides respect `$module->showtitle`, `header_tag`, `header_class`, and `moduleclass_sfx` parameters
-- **Module CSS** — BEM-scoped styles for module titles, article lists, tag badges, search forms, login forms, breadcrumbs, and footer content
-- **Hero card variables** — Full variable-driven hero system: `--hero-card-bg`, `--hero-card-color`, `--hero-card-overlay`, `--hero-card-border-radius`, `--hero-card-padding-x/y`, `--hero-card-max-width`, plus `--hero-alt-card-*` for secondary variant
-- **Hero mobile breakpoint** — Photo background hidden on mobile (≤767.98px), hero card becomes full-bleed (100dvh, no border-radius)
-- **CSS fallback values** — 1365 `var()` calls in template.css now include inline fallback values
-- **Card border-radius** — `.card` now has `.25rem` fallback on `var(--card-border-radius)`
-
-### Changed
-- **Button backgrounds** — `--btn-bg: transparent` changed to `var(--body-bg)` in dark and light themes
-- **Offcanvas close button** — `.offcanvas-header .btn-close` now gets `background-color` from `--offcanvas-bg`
-- **Custom template sync** — Both `dark.custom.css` and `light.custom.css` now contain all variables from their standard counterparts (was missing 223 variables)
-- **Overlay layer** — Added `--hero-overlay-bg-position` and `--hero-overlay-bg-size` variables
-- **Legacy CSS cleanup** — Removed vendor prefixes (`-webkit-box`, `-ms-flexbox`) from `.overlay` rules, replaced with modern flexbox
-
-### Removed
-- **FILE INFORMATION headers** — Stripped DEFGROUP/INGROUP/PATH/VERSION/BRIEF metadata from all PHP, CSS, JS, INI, and HTML files (kept in XML and README per policy)
-- **Mobile overrides** — Deleted 26 `mobile.php` layout files and their empty parent directories
-- **Joomla-specific gitignore entries** — Removed ~700 lines of Joomla CMS core paths from `.gitignore` (not applicable to a template repository)
-
-### Fixed
-- **CI: composer install** — Workflow `standards-compliance.yml` now conditionally runs `composer install` only when `composer.json` exists
-- **CI: YAML syntax** — Fixed invalid YAML in `auto-update-sha.yml` caused by multiline commit message in run block
-
----
-
-## [03.09.02] - 2026-03-26
-
-### Added - Hero Variant System & Block Color System
-
-#### Hero Variants
-- **`.hero#primary`** and **`.hero#secondary`** CSS variant system for visually distinct hero treatments
-- Shared `.hero` base class with `background-size: cover`, `border-radius: .5rem`, and `overflow: hidden`
-- Six new CSS variables (`--hero-primary-bg-color`, `--hero-primary-overlay`, `--hero-primary-color`, and secondary equivalents)
-- Light and dark mode defaults in custom palette templates
-
-#### Block Color System
-- Automatic `:nth-child()` slot palette for `top-a`, `top-b`, `bottom-a`, `bottom-b` module positions
-- Four color slots (`--block-color-1` through `--block-color-4`) with matching text variables
-- Named per-module overrides: `#block-highlight`, `#block-cta`, `#block-alert`
-- ID specificity wins over `:nth-child()` — no `!important` needed
-
-#### Files Modified
-- `src/media/css/template.css` — hero variant rules, block color `:nth-child()` rules, named override rules
-- `src/media/css/theme/light.standard.css` — hero and block color variables (light standard)
-- `src/media/css/theme/dark.standard.css` — hero and block color variables (dark standard)
-- `src/templates/light.custom.css` — hero and block color variables (light custom starter)
-- `src/templates/dark.custom.css` — hero and block color variables (dark custom starter)
-- `src/templateDetails.xml` — Theme Preview tab, hero/block note fields, scriptfile registration, version bump to 03.09.02
-- `src/language/en-GB/tpl_mokoonyx.ini` — language strings for new admin fields (British English)
-- `src/language/en-US/tpl_mokoonyx.ini` — language strings for new admin fields (American English)
-- `docs/CSS_VARIABLES.md` — full variable reference for both systems, sync script documentation
-- `CHANGELOG.md` — this entry
-
-#### Files Added
-- `src/templates/theme-test.html` — Bootstrap-style test page with branded showcase, CSS variable swatches, hero demos, block color demos, and color test image
-- `src/script.php` — Joomla install/update lifecycle script (runs CSS variable sync on upgrade, checks PHP/Joomla minimum versions)
-- `src/sync_custom_vars.php` — CLI/library utility that detects missing CSS variables in user custom palettes and injects them
-- `src/templates/brand-showcase.html` — Interactive color system gradients with hover pixel sampler, Bootstrap component showcase
-
-#### Variable Audit
-- All 20 hero/block variables confirmed present in all 4 theme files (light/dark standard + custom)
-- No duplicate variable declarations found across any theme file
-- `--gutter-x` references in template.css are self-scoped to grid containers (standard Bootstrap 5 behavior, not a `:root` variable)
-
----
-
-## [03.08.03] - 2026-02-27
-
-### Added - Main Menu Collapsible Dropdown Override
-
-**New feature**: Added responsive "Main Menu" mod_menu override with Bootstrap 5 collapsible dropdown functionality.
-
-#### What's New
-- **Main Menu module override** with full Bootstrap 5 responsive navbar
-- Collapsible hamburger menu for mobile devices
-- Multi-level dropdown support with hover on desktop, tap on mobile
-- WCAG 2.1 compliant touch targets (48px on mobile, 44px on desktop)
-- BEM naming convention: `.mod-menu-main__*`
-- **Appears as "Mainmenu" layout option** in Joomla admin module settings
-
-#### Files Added
-- `src/templates/html/mod_menu/mainmenu.php` - Main layout with Bootstrap navbar
-- `src/templates/html/mod_menu/mainmenu_component.php` - Component menu items
-- `src/templates/html/mod_menu/mainmenu_heading.php` - Heading menu items
-- `src/templates/html/mod_menu/mainmenu_separator.php` - Separator menu items
-- `src/templates/html/mod_menu/mainmenu_url.php` - URL menu items
-- `src/templates/html/mod_menu/index.html` - Security file
-
-#### Features
-- **Bootstrap 5 Navbar**: Uses Bootstrap's native navbar-nav structure
-- **Collapsible on Mobile**: Hamburger menu with smooth collapse animation
-- **Dropdown Menus**: Multi-level dropdown support with caret indicators
-- **Responsive Breakpoints**: Mobile-first design adapting at 768px and 992px
-- **Touch-Friendly**: 48px minimum touch targets on mobile
-- **Accessible**: ARIA labels and keyboard navigation support
-- **Active States**: Visual indicators for current and active menu items
-- **Alternative Layout**: Named `mainmenu.php` (not `default.php`) to appear as selectable layout option in Joomla admin
-
-#### CSS Architecture
-- 200+ lines of responsive CSS in template.css
-- BEM naming: `.mod-menu-main`, `.mod-menu-main__list`, `.mod-menu-main__link`
-- CSS variables integration for colors and borders
-- Hover effects on desktop, tap effects on mobile
-- Smooth transitions and animations
-
-#### Module Count Update
-- **Before**: 16 module overrides
-- **After**: 17 module overrides (added mod_menu "Main Menu")
-- **Component overrides**: Still 7 (unchanged)
-
-### Removed - mod_search Override
-
-**Cassiopeia approach**: Removed mod_search override to align with Cassiopeia template philosophy of not overriding standard Joomla modules.
-
-#### Reason for Removal
-- mod_search is a standard Joomla core module
-- Following Cassiopeia template approach: use core layouts for standard modules
-- Prevents potential language loading issues
-- Ensures compatibility with future Joomla updates
-- Core mod_search already includes responsive design and accessibility features
-
-#### Files Removed
-- `src/templates/html/mod_search/default.php` - Custom search module layout
-- `src/templates/html/mod_search/index.html` - Security file
-
-#### Module Count Update (After Removal)
-- **Before**: 17 module overrides
-- **After**: 16 module overrides (removed mod_search)
-- **Component overrides**: Still 7 (unchanged)
-
-### Removed - Documentation Cleanup
-
-**Documentation policy**: Removed all markdown files from `src/templates/html/` directory. All documentation belongs in `docs/` folder only.
-
-#### Files Removed (9 markdown files)
-- `src/templates/html/STANDARD_MODULES_README.md`
-- `src/templates/html/INDUSTRY_MODULES_README.md`
-- `src/templates/html/VIRTUEMART_MODULES_README.md`
-- `src/templates/html/mod_virtuemart_cart/README.md`
-- `src/templates/html/mod_virtuemart_category/README.md`
-- `src/templates/html/mod_virtuemart_currencies/README.md`
-- `src/templates/html/mod_virtuemart_manufacturer/README.md`
-- `src/templates/html/mod_virtuemart_product/README.md`
-- `src/templates/html/mod_search/README.md`
-
-**Note**: All module override documentation is consolidated in `docs/MODULE_OVERRIDES.md`. The `src/templates/html/` directory now contains only PHP override files and `index.html` security files.
-
-**Note**: Unlike the previously removed mod_menu override (v03.08.01), this new "Main Menu" override is properly structured based on Joomla core layouts and Bootstrap 5, ensuring language strings load correctly and menu functionality works as expected. The layout is named `mainmenu.php` (not `default.php`) to appear as an alternative layout option "Mainmenu" in the Joomla admin module dropdown selector, preserving Joomla's core default menu layout.
-
-## [03.08.02] - 2026-02-27
-
-### Removed - Fix Language Loading in All Module Overrides
-
-**Critical fix**: Removed standard Joomla module overrides to fix language string loading issues. Following Cassiopeia template approach.
-
-#### Problem
-- Default language strings not loading in module overrides (mod_breadcrumbs, mod_login, mod_articles_latest)
-- Language constants displayed instead of translated text (e.g., "MOD_LOGIN_VALUE_USERNAME" instead of "Username")
-- Custom overrides interfered with Joomla's module initialization and language loading process
-
-#### Solution - Cassiopeia Approach
-- **Removed** standard Joomla module overrides:
-  - `src/templates/html/mod_breadcrumbs/` (2 files)
-  - `src/templates/html/mod_login/` (2 files)
-  - `src/templates/html/mod_articles_latest/` (2 files)
-- Template now uses Joomla's core module layouts for standard modules
-- Language files load automatically via Joomla's module system
-- Custom styling can still be applied via CSS using module-specific classes
-- **Retained** third-party extension overrides where they add mobile-responsive value:
-  - VirtueMart modules (5): mod_virtuemart_cart, _category, _currencies, _manufacturer, _product
-  - Community Builder modules (2): mod_cblogin, mod_comprofilerOnline
-  - Other extensions (9): mod_acymailing, mod_hikashop_cart, mod_k2_content, mod_kunena*, mod_osmembership, mod_search
-
-#### Cassiopeia Template Philosophy
-- Cassiopeia (Joomla's default template) does NOT override standard module layouts
-- It relies on core Joomla module files and applies styling via CSS
-- Overrides are only created when structural changes are absolutely necessary
-- This ensures compatibility, automatic language loading, and easier maintenance
-
-#### Module Count Update
-- **Before**: 19 module overrides
-- **After**: 16 module overrides  
-- **Removed**: 3 standard Joomla modules (breadcrumbs, login, articles_latest)
-- **Component overrides**: Still 7 (unchanged)
-
-#### Files Removed
-- `src/templates/html/mod_breadcrumbs/default.php`
-- `src/templates/html/mod_breadcrumbs/index.html`
-- `src/templates/html/mod_login/default.php`
-- `src/templates/html/mod_login/index.html`
-- `src/templates/html/mod_articles_latest/default.php`
-- `src/templates/html/mod_articles_latest/index.html`
-
-**Note**: This follows Joomla best practices by using core layouts for standard modules. Styling is handled via CSS. Third-party extension overrides remain for mobile responsiveness.
-
-## [03.08.01] - 2026-02-27
-
-### Removed - Fix Breaking Overrides
-
-**Critical fix**: Removed mod_menu override that was causing menu links to break and language strings not to load.
-
-#### Problem
-- mod_menu override files (default.php, default_component.php, default_url.php) were attempting to load menu-specific layouts that don't exist in the template
-- This broke Joomla's core menu rendering system
-- Menu links were not functional
-- Language strings were not loading properly in menus
-
-#### Solution
-- **Removed** entire `src/templates/html/mod_menu/` directory (4 files)
-- Template now uses Joomla's default menu rendering
-- Custom styling can still be applied via CSS using `.mod-menu` class
-- All menu functionality restored to standard Joomla behavior
-
-#### Documentation Updates
-- Updated MODULE_OVERRIDES.md: Changed count from 20 to 19 module overrides, removed mod_menu section, added note about removal
-- Updated STANDARD_MODULES_README.md: Removed mod_menu documentation, renumbered remaining modules, updated file structure
-- Updated testing checklists to remove mod_menu references
-- **Added clarification**: MokoOnyx is a standalone template extension (not a package)
-- Updated updates.xml to version 03.08.01
-
-#### Files Removed
-- `src/templates/html/mod_menu/default.php`
-- `src/templates/html/mod_menu/default_component.php`
-- `src/templates/html/mod_menu/default_url.php`
-- `src/templates/html/mod_menu/index.html`
-
-**Note**: This is a patch release that removes problematic overrides to restore core functionality. Menu styling via CSS remains intact. MokoOnyx remains a standalone Joomla template extension (type="template"), not bundled as a package.
-
-## [03.08.00] - 2026-02-22
-
-### Added - Community Builder Component Overrides
-
-Minor version bump adding **4 Community Builder component view overrides** to complement the existing CB module overrides (mod_cblogin, mod_comprofilerOnline).
-
-#### Community Builder Components (4 views)
-- **com_comprofiler/userprofile**: User profile display with avatar, tabs, and custom fields in responsive layout
-- **com_comprofiler/userslist**: User directory with search functionality and responsive grid (1-3 columns)
-- **com_comprofiler/registers**: User registration form with multi-step fieldsets, validation, captcha support
-- **com_comprofiler/login**: Login page with remember me checkbox, registration and password recovery links
-
-#### CSS Architecture (600+ lines)
-- Mobile-first responsive design with Bootstrap breakpoints (576px, 768px, 992px)
-- BEM naming convention (`.cb-profile__`, `.cb-userslist__`, `.cb-register__`, `.cb-login__`)
-- Integrated with template CSS variables for consistent theming
-- 48px touch targets on mobile, 44px on desktop (WCAG 2.1 Level AA)
-- 16px input font size on mobile to prevent iOS zoom
-- Responsive grids adapting from 1 column (mobile) to 2-3 columns (desktop)
-
-#### Accessibility Features
-- Full ARIA labels and descriptions for screen readers
-- Semantic HTML5 structure with proper landmarks
-- Keyboard navigation support throughout
-- Required field indicators with visually-hidden labels
-- Focus states with visible outlines
-
-#### Security Best Practices
-- Proper output escaping with htmlspecialchars() and ENT_QUOTES
-- _JEXEC security checks in all PHP files
-- index.html protection files in all directories (6 files)
-- CSRF token support in forms
-- Input validation and error display
-
-### Technical Details
-- **Files Added**: 11 (4 component view files + 6 index.html + 1 root index.html)
-- **CSS Lines Added**: 600+ lines of responsive styles
-- **PHP Validation**: All files pass syntax validation
-- **Component Views**: userprofile, userslist, registers, login
-- **Documentation**: Ready for MODULE_OVERRIDES.md update
-
-## [03.07.00] - 2026-02-22
-
-### Added - Mobile-Responsive Module & Component Overrides
-
-This major release introduces **20 mobile-responsive module overrides** and **3 component overrides** designed to enhance the mobile user experience across standard Joomla, VirtueMart, Community Builder, and popular third-party extensions.
-
-#### Search Module
-- **mod_search**: Mobile-responsive search with multiple button positions (left, right, top, bottom), 48px touch targets, 16px input font to prevent iOS zoom
-
-#### VirtueMart E-Commerce Modules (5 modules)
-- **mod_virtuemart_cart**: Shopping cart with responsive product cards, remove buttons, price display
-- **mod_virtuemart_product**: Product showcase with responsive grid (1-4 columns), hover effects, ratings
-- **mod_virtuemart_currencies**: Currency selector dropdown with accessible styling
-- **mod_virtuemart_category**: Category navigation with hierarchical display, product counts
-- **mod_virtuemart_manufacturer**: Manufacturer/brand display with responsive grid (2-4 columns)
-- **VIRTUEMART_MODULES_README.md**: Comprehensive master documentation for all VirtueMart overrides
-
-#### Standard Joomla & Community Builder Modules (6 modules)
-- **mod_menu**: Main navigation with multiple layout files (default, component, URL), responsive horizontal/vertical layouts
-- **mod_breadcrumbs**: Breadcrumb navigation with Schema.org markup for SEO
-- **mod_login**: User login/logout form with 2FA support, remember me checkbox
-- **mod_articles_latest**: Latest articles with responsive cards, metadata, featured badges
-- **mod_cblogin**: Community Builder login with avatar display, profile links
-- **mod_comprofilerOnline**: CB online users with avatar grid, online status indicators
-- **STANDARD_MODULES_README.md**: Comprehensive master documentation for standard module overrides
-
-#### Industry Extension Modules (8 modules + 2 components)
-- **mod_k2_content**: K2 content display with responsive grid (1-3 columns), featured images, metadata
-- **mod_acymailing**: Newsletter subscription form with validation, GDPR compliance
-- **mod_hikashop_cart**: HikaShop shopping cart with product list, quantity adjustment
-- **mod_kunenalatest**: Kunena forum latest posts with excerpts, avatars, reply counts
-- **mod_kunenalogin**: Kunena forum login with user avatar, statistics, quick login
-- **mod_kunenasearch**: Kunena forum search with multiple button positions
-- **mod_kunenastats**: Kunena forum statistics with visual cards, member/topic counts
-- **mod_osmembership**: OS Membership Pro plans with pricing cards, feature lists, badges
-- **com_kunena/category**: Kunena forum category list component view
-- **com_osmembership/plans**: OS Membership Pro responsive pricing table component view
-- **INDUSTRY_MODULES_README.md**: Comprehensive master documentation for industry extensions
-
-#### CSS & Styling
-- Added **2,000+ lines** of mobile-responsive CSS to `src/media/css/template.css`
-- Four dedicated CSS sections for organized styling:
-  - MOD_SEARCH MOBILE RESPONSIVE STYLES
-  - VIRTUEMART MODULE MOBILE RESPONSIVE STYLES
-  - STANDARD JOOMLA & COMMUNITY BUILDER MODULE STYLES
-  - INDUSTRY EXTENSION MODULE STYLES
-  - ADDITIONAL KUNENA & MEMBERSHIP PRO MODULE STYLES
-- BEM naming convention for all CSS classes (`.mod-search__button`, `.mod-vm-product__grid`, etc.)
-- Integration with existing template CSS variables for seamless theming
-- Responsive grids with Bootstrap-aligned breakpoints (sm, md, lg, xl, xxl)
-
-#### Documentation
-- **docs/MODULE_OVERRIDES.md**: Comprehensive guide covering all 23 overrides
-  - Feature descriptions and specifications
-  - CSS architecture and customization guide
-  - Accessibility features documentation
-  - Troubleshooting guide
-  - Best practices and usage examples
-- Individual README.md files for VirtueMart module groups (5 modules)
-- Master README files for each category (VirtueMart, Standard, Industry)
-- Security index.html files in all override directories (23 files)
-
-### Key Features Across All Overrides
-
-#### Mobile-First Responsive Design
-- Touch targets: 48px on mobile, 44px on desktop (WCAG 2.1 compliant)
-- 16px minimum input font size on mobile (prevents iOS zoom)
-- Responsive layouts: 1-4 columns based on screen size
-- Mobile-first CSS with progressive enhancement
-- Bootstrap-aligned breakpoints: 576px, 768px, 992px, 1200px, 1400px
-
-#### Accessibility
-- Full ARIA labels and descriptions on all interactive elements
-- Keyboard navigation support throughout
-- Screen reader compatible with semantic HTML5
-- WCAG 2.1 Level AA compliance
-- Proper heading hierarchy and focus management
-- Alternative text for images and icons
-
-#### Security
-- Proper output escaping with Joomla escapeHtml()
-- _JEXEC security checks in all PHP files
-- index.html protection files in all directories
-- Input validation where applicable
-- CSRF token support in forms
-
-#### Maintainability
-- BEM naming convention for CSS classes
-- Consistent code structure across all overrides
-- Comprehensive inline documentation
-- Modular, reusable components
-- Integration with template CSS variables
-
-### Changed
-- **Version**: Updated to 03.07.00 across all files
-
-### Technical Details
-- **Total Files**: 66 new files created
-  - 42 PHP override files
-  - 23 index.html security files  
-  - 1 comprehensive MODULE_OVERRIDES.md documentation
-- **CSS Added**: 2,000+ lines of responsive styles
-- **Documentation**: 15,000+ words across all README files
-
-### Migration Notes
-- All overrides are opt-in and non-breaking
-- Existing sites will continue to work without changes
-- Overrides automatically apply when modules are used
-- No database changes or migration required
-- Custom overrides can coexist with template overrides
-
-### Testing
-- All PHP syntax validated
-- Code review completed (all issues resolved)
-- CodeQL security scan passed
-- Responsive design tested across breakpoints
-- Accessibility validated with ARIA compliance
-
----
-
-## [03.06.03] - 2026-01-30
-
-### Added
-- **Templates Directory**: Created `/templates/` directory with ready-to-use color palette templates
-  - `colors_custom_light.css` - Comprehensive light mode color template with all available variables
-  - `colors_custom_dark.css` - Comprehensive dark mode color template with all available variables
-- **CSS Variables Documentation**: Added complete CSS variables reference guide (`docs/CSS_VARIABLES.md`)
-  - Complete list of all customizable CSS variables
-  - Organized by category (colors, typography, borders, etc.)
-  - Usage examples and tips for customization
-  - Light and dark mode variable differences documented
-
-### Changed
-- **README**: Updated title to "README - MokoOnyx (VERSION: 03.09.03)"
-- **README**: Fixed custom color variables instructions with correct file paths
-- **README**: Updated example CSS variables to use actual template variable names (e.g., `--color-link` instead of `--cassiopeia-color-link`)
-- **README**: Added note that custom color files are excluded from version control via `.gitignore`
-- **README**: Enhanced Custom Color Palettes section with step-by-step instructions
-- **README**: Added link to CSS Variables documentation for complete reference
-- **TOC CSS**: Updated bootstrap-toc.css to use template color variables for proper theme integration
-- **Version**: Updated version to 03.06.03 across all files
-
-### Documentation
-- **docs/README.md**: Added CSS Variables Reference to developer documentation section
-- **docs/README.md**: Updated project structure to include `/templates/` directory
-- **docs/README.md**: Updated version to 03.06.03
-- Clarified that `colors_custom.css` files are gitignored to prevent fork-specific customizations from being committed
-
-## [03.06.02] - 2026-01-30
-
-### Major Rebrand
-This release includes a complete rebrand from "Moko-Cassiopeia" (hyphenated) to "MokoOnyx" (camelCase).
-
-### Changed
-- **Naming Convention**: Changed template identifier from `moko-cassiopeia` to `mokoonyx` across all files
-- **Display Name**: Updated from "Moko-Cassiopeia" to "MokoOnyx" in all documentation and language files
-- **Language Constants**: Renamed all language keys from `TPL_MOKO-CASSIOPEIA_*` to `TPL_MOKOONYX_*`
-- **Language Files**: Renamed from `tpl_moko-cassiopeia.*` to `tpl_mokoonyx.*` (4 files)
-- **Media Paths**: Updated from `media/templates/site/moko-cassiopeia/` to `media/templates/site/mokoonyx/`
-- **Repository URLs**: Updated all references to use `MokoOnyx` casing
-- **Template Element**: Changed Joomla extension element name from `moko-cassiopeia` to `mokoonyx`
-- **Documentation**: Updated all markdown files, XML manifests, and code comments
-
-### Removed
-- **Default Assets**: Removed `logo.svg` and `favicon.ico` to allow clean installations
-- **Template Overrides**: Removed all template override files (48 files, ~4,500 lines)
-  - Removed `src/templates/html/` folder entirely
-  - Removed overrides for: com_content, com_contact, com_engage, mod_menu, mod_custom, mod_gabble, layouts/chromes
-  - Template now inherits all rendering from Joomla Cassiopeia defaults
-  - Updated `templateDetails.xml` to remove html folder reference
-
-### Breaking Changes
-⚠️ **Important**: This release contains breaking changes:
-- Existing installations will see template name change in Joomla admin
-- Custom code referencing old language constants (`TPL_MOKO-CASSIOPEIA_*`) will need updates
-- Custom code referencing old media paths will need updates
-- Sites relying on custom template overrides will revert to Cassiopeia defaults
-- Extension element name changed (may require reinstallation in some cases)
-
-### Migration Notes
-- Backup your site before upgrading
-- Review any custom code for references to old naming convention
-- Test thoroughly after upgrade, especially if using custom overrides
-
-## [03.06.00] - 2026-01-28
-
-### Changed
-- Updated version to 03.06.00 across all files
-- Standardized version numbering format
-
-## [03.05.01] - 2026-01-09
-
-### Added
-- Added `dependency-review.yml` workflow for dependency vulnerability scanning
-- Added `standards-compliance.yml` workflow for MokoStandards validation
-- Added `.github/dependabot.yml` configuration for automated security updates
-- Added `docs/README.md` as documentation index
-
-### Changed
-- Removed custom `codeql-analysis.yml` workflow (repository uses GitHub's default CodeQL setup)
-- Enforced repository compliance with MokoStandards requirements
-- Improved security posture with automated scanning and dependency management
-
-## [03.05.00] - 2026-01-04
-
-### Added
-- Created `.github/workflows` directory structure
-
-### Changed
-- Replaced `./CODE_OF_CONDUCT.md` from `MokoStandards`
-- Replaced `./CONTRIBUTING.md` from `MokoStandards`
-- TODO split to own file
-
-## [03.01.00] - 2025-12-16
-
-### Added
-- Created `.github/workflows/` directory for GitHub Actions
-
-## [03.00.00] - 2025-12-09
-
-### Changed
-- Copyright Headers updated to MokoCodingDefaults standards
-- Fixed `./templates/mokoonyx/index.php` color style injection
-- Upgraded Font Awesome 6 to Font Awesome 7 Free
-- Added Font Awesome 7 Free style fallback
-
-### Removed
-- Removed `./CODE_OF_CONDUCT.md` (replaced with MokoStandards version)
-- Removed `./CONTRIBUTING.md` (replaced with MokoStandards version)
-
-## [02.01.05] - 2025-09-04
-
-### Changed
-- Repaired template.css and colors_standard.css
-
-### Removed
-- Removed vmbasic.css
-
-## [02.00.00] - 2025-08-30
-
-### Added - Dark Mode Toggle
-- Frontend toggle switch included in template
-- JavaScript handles switching between light/dark modes
-- Dark mode CSS rules applied across template styles
-- Automatic persistence of user choice (via localStorage)
-- Admins can override default mode in template settings
-
-### Added - Header Parameters Update
-- Added logo parameter support in template settings
-- Updated metadata & copyright header
-
-### Added - Expanded TOC (Table of Contents)
-- Automatic TOC injection when enabled
-- User selects placement via article > options > layout (`toc-left` or `toc-right`)
-
-### Changed
-- Cleaned up `index.php` by removing skip-to-content duplicate calls
-- Consolidated JavaScript asset loading (ensuring dark-mode script is loaded correctly from external JS file)
-- Streamlined CSS for toggle switch, ensuring it inherits Bootstrap/Cassiopeia defaults
-- General accessibility refinements in typography and color contrast
-- Fixed missing logo param in header output
-- Corrected stylesheet inconsistencies between Bootstrap 5 helpers and template overrides
-- Patched redundant calls in script includes
-
-## [01.00.00] - 2025-01-01
-
-### Added - Initial Public Release
-- Font Awesome 6 integration (later upgraded to FA7)
-- Bootstrap 5 helpers (grid, utility classes)
-- Automatic Table of Contents (TOC) utility
-- Moko Expansions: Google Tag Manager / GA4 hooks
-- Built on top of Joomla's default Cassiopeia template
-- Minimal core template overrides for maximum upgrade compatibility
-
----
-
-## Links
-
-- **Full Roadmap**: [MokoOnyx Roadmap](https://mokoconsulting.tech/support/joomla-cms/mokoonyx-roadmap)
-- **Repository**: [GitHub](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-- **Issue Tracker**: [GitHub Issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-
-## Version Format
-
-This project uses semantic versioning: `MAJOR.MINOR.PATCH`
-- **MAJOR**: Incompatible API changes or major overhauls
-- **MINOR**: New features, backwards-compatible
-- **PATCH**: Bug fixes, backwards-compatible
+## [02.15.00] --- 2026-05-30

CLAUDE.md

@@ -32,6 +32,8 @@ This is a Joomla extension. Key directories:
 
 ## Rules
 
+- **Workflow directory**: `.mokogitea/` (not `.gitea/` or `.github/`)
+
 - **Never commit** `.claude/`, `.mcp.json`, `TODO.md`, or `*.min.css`/`*.min.js`
 - **Attribution**: use `Authored-by: Moko Consulting` in commits
 - **Branch strategy**: develop on `dev`, merge to `main` for release

CONTRIBUTING.md

@@ -1,145 +1,161 @@
-<!--
- Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template
- INGROUP: MokoOnyx.Governance
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: CONTRIBUTING.md
- VERSION: 03.09.03
- BRIEF: Contribution guidelines for the MokoOnyx project.
- PATH: /CONTRIBUTING.md
- NOTE: This document defines contribution workflow, standards, and governance alignment.
--->
-
-## Contributing
-
-This document defines how to contribute to the MokoOnyx project. The goal is to ensure changes are reviewable, auditable, and aligned with project governance and release processes.
-
-## Scope
-
-These guidelines apply to all contributions, including:
-
-* Source code changes
-* Documentation updates
-* Bug reports and enhancement proposals
-
-## Prerequisites
-
-Contributors are expected to:
-
-* Have a working understanding of Joomla template structure.
-* Be familiar with Git and GitHub pull request workflows.
-* Review repository governance documents prior to submitting changes.
-* Set up the development environment using the provided tools.
-
-### Quick Setup
-
-For first-time contributors:
-
-```bash
-# Clone the repository
-git clone https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx.git
-cd MokoOnyx
-```
-
-See [docs/QUICK_START.md](./docs/QUICK_START.md) for detailed setup instructions.
-
-## Development Tools
-
-The repository provides several tools to streamline development:
-
-* **Pre-commit Hooks**: Automatic local validation before commits
-
-## Contribution Workflow
-
-1. Fork the repository.
-2. Create a branch from the active development branch.
-3. Make focused, minimal changes that address a single concern.
-4. Submit a pull request with a clear description of intent and impact.
-
-Direct commits to protected branches are not permitted.
-
-## Branching and Versioning
-
-* Development work occurs on designated development branches.
-* Releases are produced from versioned branches following repository standards.
-* Contributors should not bump version numbers unless explicitly requested.
-
-## Coding and Formatting Standards
-
-All contributions must:
-
-* Follow Joomla coding standards where applicable.
-* Conform to Moko Consulting repository standards for headers, metadata, and file structure.
-* Avoid introducing tabs, inconsistent path separators, or non portable assumptions.
-
-Automated checks may reject changes that do not meet these requirements.
-
-## Documentation Standards
-
-Documentation changes must:
-
-* Include required metadata and revision history sections.
-* Avoid embedding version numbers in revision history tables.
-* Preserve existing structure unless a structural change is explicitly proposed.
-
-## Commit Messages
-
-Commit messages should:
-
-* Be concise and descriptive.
-* Focus on what changed and why.
-* Avoid referencing internal issue trackers unless required.
-
-## Reporting Issues
-
-Bug reports and enhancement requests should be filed as GitHub issues and include:
-
-* Clear reproduction steps or use cases.
-* Expected versus actual behavior.
-* Relevant environment details.
-
-Security related issues must follow the process defined in SECURITY.md and must not be reported publicly.
-
-## Review Process
-
-All pull requests are subject to review. Review criteria include:
-
-* Technical correctness
-* Alignment with project goals
-* Maintainability and clarity
-* Risk introduced to release and update processes
-
-Maintainers may request changes prior to approval.
-
-## License
-
-By contributing, you agree that your contributions will be licensed under GPL-3.0-or-later, consistent with the rest of the project.
-
-## Code of Conduct
-
-Participation in this project is governed by the Code of Conduct. Unacceptable behavior may result in contribution restrictions.
-
----
-
-## Metadata
-
-* **Document:** CONTRIBUTING.md
-* **Repository:** [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* **Path:** /CONTRIBUTING.md
-* **Owner:** Moko Consulting
-* **Version:** 03.06.00
-* **Status:** Active
-* **Effective Date:** 2025-12-18
-* **Last Reviewed:** 2025-12-18
-
-## Revision History
-
-| Date       | Change Summary                                                            | Author          |
-| ---------- | ------------------------------------------------------------------------- | --------------- |
-| 2025-12-18 | Initial publication of contribution guidelines and workflow expectations. | Moko Consulting |
+# Contributing to Moko Consulting Projects
+
+Thank you for your interest in contributing. All Moko Consulting repositories follow this universal workflow and version policy.
+
+## Branching Workflow
+
+```
+feature/* ──PR──> dev ──draft PR──> (renamed to rc) ──merge──> main
+```
+
+### Step by step
+
+1. **Create a feature branch** from `dev`:
+   ```bash
+   git checkout dev && git pull
+   git checkout -b feature/my-change
+   ```
+
+2. **Work and commit** on your feature branch. Push to origin.
+
+3. **Open a PR**: `feature/my-change` → `dev`. After review and checks, merge it.
+
+4. **When ready for release**, open a **draft PR**: `dev` → `main`.
+   - This automatically renames the source branch to `rc` (release candidate)
+   - An RC pre-release is built and uploaded
+
+5. **Alpha and beta branches** are created by manually renaming the branch before the RC stage:
+   - Rename `dev` to `alpha` for early testing → alpha pre-release is built
+   - Rename `alpha` to `beta` for feature-complete testing → beta pre-release is built
+   - When the draft PR is created, the branch is renamed to `rc`
+
+6. **Once PR checks pass** on the `rc` branch, mark the PR as ready and merge to `main`.
+
+7. **Merging to main** triggers the stable release pipeline:
+   - Minor version bump (e.g., `02.09.xx` → `02.10.00`)
+   - Stability suffix stripped (clean version)
+   - Gitea release created with ZIP/tar.gz packages
+   - `updates.xml` updated (Joomla extensions)
+   - `dev` branch recreated from `main`
+
+### Branch summary
+
+| Branch | Purpose | Created by |
+|--------|---------|-----------|
+| `feature/*` | New features and fixes | Developer |
+| `dev` | Integration branch | Auto-recreated after release |
+| `alpha` | Alpha pre-release testing | Manual rename from `dev` |
+| `beta` | Beta pre-release testing | Manual rename from `alpha` |
+| `rc` | Release candidate | Auto-renamed on draft PR to main |
+| `main` | Stable releases | Protected, merge only |
+| `version/XX.YY.ZZ` | Archived release snapshots | Auto-created by CI |
+
+### Protected branches
+
+| Branch | Direct push | Merge via |
+|--------|------------|-----------|
+| `main` | Blocked (CI bot whitelisted) | PR merge only |
+| `dev` | Blocked (CI bot whitelisted) | PR merge from feature/* |
+| `rc` | Blocked (CI bot whitelisted) | Auto-created on draft PR |
+| `alpha` | Blocked (CI bot whitelisted) | Manual rename |
+| `beta` | Blocked (CI bot whitelisted) | Manual rename |
+| `feature/*` | Open | N/A (source branch) |
+
+## Version Policy
+
+### Format
+
+All versions use `XX.YY.ZZ` — three two-digit segments, zero-padded:
+
+- **XX** — Major version (breaking changes)
+- **YY** — Minor version (new features, bumped on release to main)
+- **ZZ** — Patch version (auto-incremented on every push to dev/feature branches)
+
+Rollover: patch `99` → `00` increments minor; minor `99` → `00` increments major.
+
+### Stability suffixes
+
+Each branch appends a suffix to indicate stability:
+
+| Branch | Suffix | Example |
+|--------|--------|---------|
+| `main` | (none) | `02.09.00` |
+| `dev` | `-dev` | `02.09.01-dev` |
+| `feature/*` | `-dev` | `02.09.01-dev` |
+| `alpha` | `-alpha` | `02.09.01-alpha` |
+| `beta` | `-beta` | `02.09.01-beta` |
+| `rc` | `-rc` | `02.09.01-rc` |
+
+### Auto version bump
+
+On every push to `dev`, `feature/*`, or `patch/*`:
+
+1. Patch version incremented
+2. Stability suffix `-dev` applied
+3. All version-bearing files updated (manifests, CHANGELOG, PHP headers, etc.)
+4. Commit created with `[skip ci]` to avoid loops
+
+### Release version flow
+
+Version bumps happen at specific release events:
+
+| Event | Bump | Example |
+|-------|------|---------|
+| Feature merged to dev | Patch bump after dev release | `02.09.01-dev` → release → `02.09.02-dev` |
+| Dev promoted to RC | Minor bump | `02.09.02-dev` → `02.10.00-rc` |
+| RC merged to main | Minor bump | `02.10.00-rc` → `02.11.00` (stable) |
+| Dev recreated from main | Patch bump | `02.11.00` → `02.11.01-dev` |
+
+### Release stream copies
+
+When a higher-stability release is published, copies are created for all lesser streams with the same base version:
+
+- **RC `02.10.00-rc`** also creates: `02.10.00-dev`, `02.10.00-alpha`, `02.10.00-beta`
+- **Stable `02.11.00`** also creates: `02.11.00-dev`, `02.11.00-alpha`, `02.11.00-beta`, `02.11.00-rc`
+
+This ensures Joomla sites on ANY stability channel see the update (Joomla only shows versions higher than what's installed).
+
+### Version files
+
+The version tools update all files containing version stamps:
+
+- `.mokogitea/manifest.xml` (canonical source)
+- Joomla XML manifests (`<version>` tag)
+- `README.md`, `CHANGELOG.md` (`VERSION:` pattern)
+- `package.json`, `pyproject.toml`
+- Any text file with a `VERSION: XX.YY.ZZ` label
+
+Files synced from other repos (with a `# REPO:` header) are not touched.
+
+## Code Standards
+
+- **PHP**: PSR-12, tabs for indentation
+- **Copyright**: all files must include the Moko Consulting copyright header
+- **License**: SPDX identifier `GPL-3.0-or-later` (or as specified per repo)
+- **Attribution**: use `Authored-by: Moko Consulting` in commits, not individual names
+
+## Commit Messages
+
+Use conventional commit format:
+
+```
+type(scope): short description
+
+Optional body with context.
+
+Authored-by: Moko Consulting
+```
+
+Types: `feat`, `fix`, `chore`, `docs`, `style`, `refactor`, `test`, `ci`
+
+Special flags in commit messages:
+- `[skip ci]` — skip all CI workflows
+- `[skip bump]` — skip auto version bump only
+
+## Reporting Issues
+
+Use the repository's issue tracker with the appropriate template.
+
+---
+
+*Moko Consulting <hello@mokoconsulting.tech>*

README.md

@@ -12,7 +12,7 @@ A modern, lightweight Joomla site template built on Cassiopeia with Font Awesome
 | | |
 |---|---|
 | **Type** | Joomla Site Template |
-| **Version** | 02.04.00 |
+| **Version** | 02.07.00 |
 | **Joomla** | 5.x / 6.x |
 | **PHP** | 8.1+ |
 | **License** | GPL-3.0-or-later |

SECURITY.md

@@ -10,7 +10,7 @@
  INGROUP: MokoOnyx.Governance
  REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
  FILE: SECURITY.md
- VERSION: 03.09.03
+ VERSION: 02.19.06
  BRIEF: Security policy and vulnerability reporting process for MokoOnyx.
  PATH: /SECURITY.md
  NOTE: This policy is process oriented and does not replace secure engineering practices.

automation/ci-issue-reporter.sh

@@ -0,0 +1,237 @@
+#!/usr/bin/env bash
+# ============================================================================
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Automation.CI
+# INGROUP: moko-platform.Automation
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+# PATH: /automation/ci-issue-reporter.sh
+# VERSION: 09.23.00
+# BRIEF: Creates or updates a Gitea issue when a CI gate fails.
+#        Deduplicates by searching open issues with the "ci-auto" label
+#        whose title matches the gate. If a matching issue exists, a comment
+#        is appended instead of opening a duplicate.
+# ============================================================================
+
+set -euo pipefail
+
+# ── Defaults ────────────────────────────────────────────────────────────────
+GITEA_URL="${GITEA_URL:-https://git.mokoconsulting.tech}"
+GITEA_TOKEN="${GITEA_TOKEN:-}"
+REPO="${GITHUB_REPOSITORY:-}"
+RUN_URL="${GITHUB_SERVER_URL:-${GITEA_URL}}/${REPO}/actions/runs/${GITHUB_RUN_ID:-0}"
+LABEL_NAME="ci-auto"
+LABEL_COLOR="#e11d48"
+
+GATE=""
+DETAILS=""
+SEVERITY="error"
+WORKFLOW=""
+
+# ── Parse arguments ─────────────────────────────────────────────────────────
+usage() {
+  cat <<EOF
+Usage: ci-issue-reporter.sh --gate NAME --details TEXT [OPTIONS]
+
+Required:
+  --gate      CI gate name (e.g. "Code Quality", "Self-Health")
+  --details   Human-readable failure description
+
+Optional:
+  --severity  "error" (default) or "warning"
+  --workflow  Workflow name for the issue title
+  --repo      owner/repo (default: \$GITHUB_REPOSITORY)
+  --run-url   URL to the CI run (auto-detected from env)
+  --token     Gitea API token (default: \$GITEA_TOKEN)
+  --url       Gitea base URL (default: \$GITEA_URL)
+EOF
+  exit 1
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --gate)     GATE="$2";       shift 2 ;;
+    --details)  DETAILS="$2";    shift 2 ;;
+    --severity) SEVERITY="$2";   shift 2 ;;
+    --workflow) WORKFLOW="$2";   shift 2 ;;
+    --repo)     REPO="$2";      shift 2 ;;
+    --run-url)  RUN_URL="$2";   shift 2 ;;
+    --token)    GITEA_TOKEN="$2"; shift 2 ;;
+    --url)      GITEA_URL="$2"; shift 2 ;;
+    -h|--help)  usage ;;
+    *)          echo "Unknown option: $1"; usage ;;
+  esac
+done
+
+[[ -z "$GATE" ]]         && { echo "ERROR: --gate is required"; usage; }
+[[ -z "$DETAILS" ]]      && { echo "ERROR: --details is required"; usage; }
+[[ -z "$GITEA_TOKEN" ]]  && { echo "ERROR: GITEA_TOKEN not set"; exit 1; }
+[[ -z "$REPO" ]]         && { echo "ERROR: GITHUB_REPOSITORY not set"; exit 1; }
+
+API="${GITEA_URL}/api/v1/repos/${REPO}"
+
+# ── Build title ─────────────────────────────────────────────────────────────
+if [[ -n "$WORKFLOW" ]]; then
+  TITLE="[CI] ${WORKFLOW}: ${GATE} failed"
+else
+  TITLE="[CI] ${GATE} failed"
+fi
+
+# ── Ensure label exists ─────────────────────────────────────────────────────
+ensure_label() {
+  local exists
+  exists=$(curl -sf -o /dev/null -w '%{http_code}' \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    "${API}/labels" 2>/dev/null || echo "000")
+
+  if [[ "$exists" == "200" ]]; then
+    # Check if label already exists
+    local found
+    found=$(curl -sf \
+      -H "Authorization: token ${GITEA_TOKEN}" \
+      "${API}/labels" 2>/dev/null \
+      | grep -o "\"name\":\"${LABEL_NAME}\"" || true)
+
+    if [[ -z "$found" ]]; then
+      curl -sf -X POST \
+        -H "Authorization: token ${GITEA_TOKEN}" \
+        -H "Content-Type: application/json" \
+        "${API}/labels" \
+        -d "{\"name\":\"${LABEL_NAME}\",\"color\":\"${LABEL_COLOR}\",\"description\":\"Auto-created by CI issue reporter\"}" \
+        > /dev/null 2>&1 || true
+    fi
+  fi
+}
+
+# ── Search for existing open issue ──────────────────────────────────────────
+find_existing_issue() {
+  # URL-encode the gate name for the query
+  local query
+  query=$(printf '%s' "[CI] ${GATE}" | sed 's/ /%20/g; s/\[/%5B/g; s/\]/%5D/g')
+
+  local response
+  response=$(curl -sf \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    "${API}/issues?type=issues&state=open&labels=${LABEL_NAME}&q=${query}&limit=5" \
+    2>/dev/null || echo "[]")
+
+  # Extract the first matching issue number
+  echo "$response" \
+    | grep -oP '"number":\s*\K[0-9]+' \
+    | head -1
+}
+
+# ── Build issue body ────────────────────────────────────────────────────────
+build_body() {
+  local severity_badge
+  if [[ "$SEVERITY" == "error" ]]; then
+    severity_badge="**Severity:** Error"
+  else
+    severity_badge="**Severity:** Warning"
+  fi
+
+  cat <<BODY
+## CI Gate Failure: ${GATE}
+
+${severity_badge}
+**Workflow:** ${WORKFLOW:-unknown}
+**Branch:** ${GITHUB_REF_NAME:-unknown}
+**Commit:** \`${GITHUB_SHA:0:8}\`
+**Run:** [View CI run](${RUN_URL})
+
+### Details
+
+${DETAILS}
+
+### Resolution
+
+Fix the issue described above and push a new commit. This issue will be closed automatically when the gate passes, or can be closed manually.
+
+---
+*Auto-created by [ci-issue-reporter](${GITEA_URL}/${REPO}/src/branch/main/automation/ci-issue-reporter.sh)*
+BODY
+}
+
+# ── Build comment body (for existing issues) ────────────────────────────────
+build_comment() {
+  cat <<COMMENT
+### CI failure recurrence
+
+**Branch:** ${GITHUB_REF_NAME:-unknown}
+**Commit:** \`${GITHUB_SHA:0:8}\`
+**Run:** [View CI run](${RUN_URL})
+
+${DETAILS}
+COMMENT
+}
+
+# ── Main ────────────────────────────────────────────────────────────────────
+ensure_label
+
+EXISTING=$(find_existing_issue)
+
+if [[ -n "$EXISTING" ]]; then
+  # Append comment to existing issue
+  COMMENT_BODY=$(build_comment)
+  COMMENT_JSON=$(printf '%s' "$COMMENT_BODY" | python3 -c "
+import sys, json
+print(json.dumps({'body': sys.stdin.read()}))" 2>/dev/null)
+
+  HTTP=$(curl -sf -o /dev/null -w '%{http_code}' -X POST \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    -H "Content-Type: application/json" \
+    "${API}/issues/${EXISTING}/comments" \
+    -d "${COMMENT_JSON}" 2>/dev/null || echo "000")
+
+  if [[ "$HTTP" == "201" ]]; then
+    echo "Commented on existing issue #${EXISTING}"
+  else
+    echo "WARNING: Failed to comment on issue #${EXISTING} (HTTP ${HTTP})"
+  fi
+else
+  # Create new issue
+  ISSUE_BODY=$(build_body)
+  ISSUE_JSON=$(python3 -c "
+import sys, json
+body = sys.stdin.read()
+print(json.dumps({
+    'title': sys.argv[1],
+    'body': body,
+    'labels': []
+}))" "$TITLE" <<< "$ISSUE_BODY" 2>/dev/null)
+
+  # Create the issue
+  RESPONSE=$(curl -sf -X POST \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    -H "Content-Type: application/json" \
+    "${API}/issues" \
+    -d "${ISSUE_JSON}" 2>/dev/null || echo "{}")
+
+  ISSUE_NUM=$(echo "$RESPONSE" | grep -oP '"number":\s*\K[0-9]+' | head -1)
+
+  if [[ -n "$ISSUE_NUM" ]]; then
+    # Apply label (separate call — more reliable across Gitea versions)
+    LABEL_ID=$(curl -sf \
+      -H "Authorization: token ${GITEA_TOKEN}" \
+      "${API}/labels" 2>/dev/null \
+      | grep -oP "\"id\":\s*\K[0-9]+(?=[^}]*\"name\":\s*\"${LABEL_NAME}\")" \
+      | head -1 || true)
+
+    if [[ -n "$LABEL_ID" ]]; then
+      curl -sf -X POST \
+        -H "Authorization: token ${GITEA_TOKEN}" \
+        -H "Content-Type: application/json" \
+        "${API}/issues/${ISSUE_NUM}/labels" \
+        -d "{\"labels\":[${LABEL_ID}]}" \
+        > /dev/null 2>&1 || true
+    fi
+
+    echo "Created issue #${ISSUE_NUM}: ${TITLE}"
+  else
+    echo "WARNING: Failed to create issue"
+    echo "Response: ${RESPONSE}"
+  fi
+fi

docs/JOOMLA_DEVELOPMENT.md

@@ -1,376 +0,0 @@
-# Joomla Development Workflows and Scripts
-
-This document describes the Joomla-aware development workflows and scripts available in this repository.
-
-## Table of Contents
-
-- [Overview](#overview)
-- [Requirements](#requirements)
-- [Scripts](#scripts)
-- [GitHub Actions Workflows](#github-actions-workflows)
-- [Testing](#testing)
-- [Code Quality](#code-quality)
-- [Deployment](#deployment)
-
-## Overview
-
-This repository includes comprehensive Joomla development workflows and scripts for:
-
-1. **Extension Packaging** - Create distributable ZIP packages
-2. **Joomla Testing** - Automated testing with multiple Joomla versions
-3. **Code Quality** - PHPStan, PHP_CodeSniffer, and compatibility checks
-4. **Deployment** - Staging and production deployment workflows
-
-## Requirements
-
-### Local Development
-
-- PHP 8.0 or higher
-- Composer (for PHPStan and PHP_CodeSniffer)
-- Node.js 18+ (for some workflows)
-- MySQL/MariaDB (for Joomla testing)
-
-### CI/CD (GitHub Actions)
-
-All requirements are automatically installed in CI/CD pipelines.
-
-## Scripts
-
-### Extension Packaging
-
-Package the Joomla template as a distributable ZIP file:
-
-```bash
-make package
-```
-
-This creates a ZIP file in the `dist` directory with all necessary template files, excluding development files.
-
-## GitHub Actions Workflows
-
-### 1. PHP Code Quality (`php_quality.yml`)
-
-Runs on every push and pull request to main branches.
-
-**Jobs:**
-- **PHP_CodeSniffer** - Checks code style and standards
-- **PHPStan** - Static analysis at level 5
-- **PHP Compatibility** - Ensures PHP 8.0+ compatibility
-
-**Matrix Testing:**
-- PHP versions: 8.0, 8.1, 8.2, 8.3
-
-**Trigger:**
-```bash
-# Automatically runs on push/PR
-git push origin dev/3.5.0
-```
-
-### 2. Joomla Testing (`joomla_testing.yml`)
-
-Tests template with multiple Joomla and PHP versions.
-
-**Jobs:**
-- **Joomla Setup** - Installs Joomla CMS
-- **Template Installation** - Installs template into Joomla
-- **Validation** - Validates template functionality
-- **Codeception** - Runs test framework
-
-**Matrix Testing:**
-- PHP versions: 8.0, 8.1, 8.2, 8.3
-- Joomla versions: 4.4 (LTS), 5.0, 5.1
-- MySQL version: 8.0
-
-**Example:**
-```bash
-# Automatically runs on push to main branches
-git push origin main
-```
-
-### 3. Deploy to Staging (`deploy_staging.yml`)
-
-Manual deployment to staging/development environments.
-
-**Parameters:**
-- `environment`: Target environment (staging, development, preview)
-- `version`: Version to deploy (optional, defaults to latest)
-
-**Usage:**
-1. Go to Actions → Deploy to Staging
-2. Click "Run workflow"
-3. Select environment and version
-4. Click "Run workflow"
-
-**Required Secrets:**
-For staging deployment, configure these repository secrets:
-- `STAGING_HOST` - SFTP server hostname
-- `STAGING_USER` - SFTP username
-- `STAGING_KEY` - SSH private key (recommended) or use `STAGING_PASSWORD`
-- `STAGING_PATH` - Remote path for deployment
-- `STAGING_PORT` - SSH port (optional, default: 22)
-
-## Testing
-
-### Codeception Framework
-
-The repository is configured with Codeception for acceptance and unit testing.
-
-#### Running Tests Locally
-
-1. Install Codeception:
-```bash
-composer global require "codeception/codeception" --with-all-dependencies
-```
-
-2. Run tests:
-```bash
-# Run all tests
-codecept run
-
-# Run acceptance tests only
-codecept run acceptance
-
-# Run unit tests only
-codecept run unit
-
-# Run with verbose output
-codecept run --debug
-```
-
-#### Test Structure
-
-```
-tests/
-├── _data/              # Test data and fixtures
-├── _output/            # Test reports and screenshots
-├── _support/           # Helper classes
-├── acceptance/         # Acceptance tests
-│   └── TemplateInstallationCest.php
-├── unit/               # Unit tests
-│   └── TemplateConfigurationTest.php
-├── acceptance.suite.yml
-└── unit.suite.yml
-```
-
-#### Writing Tests
-
-**Unit Test Example:**
-```php
-<?php
-namespace Tests\Unit;
-
-use Codeception\Test\Unit;
-
-class MyTemplateTest extends Unit
-{
-    public function testSomething()
-    {
-        $this->assertTrue(true);
-    }
-}
-```
-
-**Acceptance Test Example:**
-```php
-<?php
-namespace Tests\Acceptance;
-
-use Tests\Support\AcceptanceTester;
-
-class MyAcceptanceCest
-{
-    public function testPageLoad(AcceptanceTester $I)
-    {
-        $I->amOnPage('/');
-        $I->see('Welcome');
-    }
-}
-```
-
-## Code Quality
-
-### PHPStan
-
-Static analysis configuration in `phpstan.neon`:
-
-```bash
-# Run PHPStan locally
-phpstan analyse --configuration=phpstan.neon
-```
-
-**Configuration:**
-- Analysis level: 5
-- Target paths: `src/`
-- PHP version: 8.0+
-
-### PHP_CodeSniffer
-
-Coding standards configuration in `phpcs.xml`:
-
-```bash
-# Check code style
-phpcs --standard=phpcs.xml
-
-# Fix auto-fixable issues
-phpcbf --standard=phpcs.xml
-```
-
-**Standards:**
-- PSR-12 as base
-- PHP 8.0+ compatibility checks
-- Joomla coding conventions (when available)
-
-### Running Quality Checks Locally
-
-1. Install tools:
-```bash
-composer global require "squizlabs/php_codesniffer:^3.0" --with-all-dependencies
-composer global require "phpstan/phpstan:^1.0" --with-all-dependencies
-composer global require "phpcompatibility/php-compatibility:^9.0" --with-all-dependencies
-```
-
-2. Configure PHPCompatibility:
-```bash
-phpcs --config-set installed_paths ~/.composer/vendor/phpcompatibility/php-compatibility
-```
-
-3. Run checks:
-```bash
-# PHP syntax check
-make validate-required
-
-# CodeSniffer
-phpcs --standard=phpcs.xml src/
-
-# PHPStan
-phpstan analyse --configuration=phpstan.neon
-
-# PHP Compatibility
-phpcs --standard=PHPCompatibility --runtime-set testVersion 8.0- src/
-```
-
-## Deployment
-
-### Manual Deployment
-
-Use the package script to create a distribution:
-
-```bash
-# Create package
-make package
-
-# Upload to server
-scp dist/moko-cassiopeia-3.5.0-template.zip user@server:/path/to/joomla/
-```
-
-### Automated Deployment
-
-Use the GitHub Actions workflow:
-
-1. **Staging Deployment:**
-   - Go to Actions → Deploy to Staging
-   - Select "staging" environment
-   - Click "Run workflow"
-
-2. **Development Testing:**
-   - Select "development" environment
-   - Useful for quick testing without affecting staging
-
-3. **Preview Deployment:**
-   - Select "preview" environment
-   - For showcasing features before staging
-
-### Post-Deployment Steps
-
-After deployment to Joomla:
-
-1. Log in to Joomla administrator
-2. Go to System → Extensions → Discover
-3. Click "Discover" to find the template
-4. Click "Install" to complete installation
-5. Go to System → Site Templates
-6. Configure template settings
-7. Set as default template if desired
-
-## CI/CD Pipeline Details
-
-### Build Process
-
-1. **Validation** - All scripts validate before packaging
-2. **Packaging** - Create ZIP with proper structure
-3. **Testing** - Run on multiple PHP/Joomla versions
-4. **Quality** - PHPStan and PHPCS analysis
-5. **Deployment** - SFTP upload to target environment
-
-### Matrix Testing Strategy
-
-- **PHP Versions:** 8.0, 8.1, 8.2, 8.3
-- **Joomla Versions:** 4.4 LTS, 5.0, 5.1
-- **Exclusions:** PHP 8.3 not tested with Joomla 4.4 (incompatible)
-
-## Troubleshooting
-
-### Common Issues
-
-**Issue: PHP_CodeSniffer not found**
-```bash
-composer global require "squizlabs/php_codesniffer:^3.0"
-export PATH="$PATH:$HOME/.composer/vendor/bin"
-```
-
-**Issue: PHPStan errors**
-```bash
-# Increase analysis memory
-php -d memory_limit=1G $(which phpstan) analyse
-```
-
-**Issue: Joomla installation fails in CI**
-- Check MySQL service is running
-- Verify database credentials
-- Ensure PHP extensions are installed
-
-**Issue: SFTP deployment fails**
-- Verify SSH key is correctly formatted
-- Check firewall allows port 22
-- Ensure STAGING_PATH exists on server
-
-## Contributing
-
-When adding new workflows or scripts:
-
-1. Follow existing script structure
-2. Add proper error handling
-3. Include usage documentation
-4. Test with multiple PHP versions
-5. Update this documentation
-
-## Support
-
-For issues or questions:
-- Open an issue on GitHub
-- Check existing workflow runs for examples
-- Review test output in Actions tab
-
-## License
-
-All scripts and workflows are licensed under GPL-3.0-or-later, same as the main project.
-
----
-
-## Metadata
-
-* Document: docs/JOOMLA_DEVELOPMENT.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/JOOMLA_DEVELOPMENT.md
-* Owner: Moko Consulting
-* Version: 03.06.03
-* Status: Active
-* Effective Date: 2026-01-30
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-01-30 | Updated metadata to MokoStandards format             | GitHub Copilot  |
-| 2025-01-04 | Initial Joomla development guide created             | GitHub Copilot  |

docs/MANUAL_DEPLOYMENT.md

@@ -1,310 +0,0 @@
-# Manual Deployment Guide - MokoOnyx
-
-This guide explains how to manually deploy the MokoOnyx template from the `src` directory to a Joomla installation without using the build/packaging process.
-
-## Table of Contents
-
-- [Overview](#overview)
-- [Understanding the Structure](#understanding-the-structure)
-- [Manual Deployment Methods](#manual-deployment-methods)
-- [Troubleshooting](#troubleshooting)
-- [When to Use Manual Deployment](#when-to-use-manual-deployment)
-
-## Overview
-
-**Important**: The `src` directory in this repository is the development source, not a ready-to-install package. For production use, we recommend using the packaged ZIP file from [Releases](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/releases).
-
-However, for development or testing purposes, you can manually deploy files from the `src` directory to your Joomla installation.
-
-## Understanding the Structure
-
-### Repository Structure
-
-The `src/` directory contains:
-
-```
-src/
-├── component.php           # Template file
-├── error.php               # Template file
-├── index.php               # Main template file
-├── offline.php             # Template file
-├── templateDetails.xml     # Template manifest
-├── joomla.asset.json       # Asset registration
-├── html/                   # Module & component overrides
-├── language/               # Frontend language files
-├── administrator/          # Backend language files
-│   └── language/
-└── media/                  # Assets (CSS, JS, images, fonts)
-    ├── css/
-    ├── js/
-    ├── images/
-    └── fonts/
-```
-
-### Joomla Installation Structure
-
-Joomla expects template files in these locations:
-
-```
-YOUR_JOOMLA_ROOT/
-├── templates/
-│   └── mokoonyx/              # Template files go here
-│       ├── component.php
-│       ├── error.php
-│       ├── index.php
-│       ├── offline.php
-│       ├── templateDetails.xml
-│       ├── joomla.asset.json
-│       ├── html/
-│       ├── language/
-│       └── administrator/
-└── media/
-    └── templates/
-        └── site/
-            └── mokoonyx/      # Media files go here
-                ├── css/
-                ├── js/
-                ├── images/
-                └── fonts/
-```
-
-**Key Point**: Template files and media files go to **different locations** in Joomla!
-
-## Manual Deployment Methods
-
-### Method 1: Recommended - Upload as ZIP (Still Manual)
-
-This method mimics what Joomla's installer does automatically.
-
-1. **Prepare the template directory**:
-   ```bash
-   # From the repository root
-   cd src
-   
-   # Copy all files EXCEPT media to a temp directory
-   mkdir -p /tmp/mokoonyx
-   cp component.php /tmp/mokoonyx/
-   cp error.php /tmp/mokoonyx/
-   cp index.php /tmp/mokoonyx/
-   cp offline.php /tmp/mokoonyx/
-   cp templateDetails.xml /tmp/mokoonyx/
-   cp joomla.asset.json /tmp/mokoonyx/
-   cp -r html /tmp/mokoonyx/
-   cp -r language /tmp/mokoonyx/
-   cp -r administrator /tmp/mokoonyx/
-   
-   # Copy media to a separate temp directory
-   mkdir -p /tmp/mokoonyx_media
-   cp -r media/* /tmp/mokoonyx_media/
-   ```
-
-2. **Upload to Joomla via FTP/SFTP**:
-   ```bash
-   # Upload template files
-   # Replace with your actual Joomla path
-   scp -r /tmp/mokoonyx/* user@yourserver:/path/to/joomla/templates/mokoonyx/
-   
-   # Upload media files
-   scp -r /tmp/mokoonyx_media/* user@yourserver:/path/to/joomla/media/templates/site/mokoonyx/
-   ```
-
-3. **Set proper permissions**:
-   ```bash
-   # On your server
-   cd /path/to/joomla
-   chmod 755 templates/mokoonyx
-   chmod 644 templates/mokoonyx/*
-   chmod 755 templates/mokoonyx/html
-   chmod 755 media/templates/site/mokoonyx
-   ```
-
-### Method 2: Direct Copy to Existing Installation
-
-If you have direct filesystem access (e.g., local development):
-
-1. **Copy template files** (excluding media):
-   ```bash
-   # From repository root
-   cd src
-   
-   # Copy to Joomla templates directory
-   cp component.php /path/to/joomla/templates/mokoonyx/
-   cp error.php /path/to/joomla/templates/mokoonyx/
-   cp index.php /path/to/joomla/templates/mokoonyx/
-   cp offline.php /path/to/joomla/templates/mokoonyx/
-   cp templateDetails.xml /path/to/joomla/templates/mokoonyx/
-   cp joomla.asset.json /path/to/joomla/templates/mokoonyx/
-   
-   # Copy directories
-   cp -r html /path/to/joomla/templates/mokoonyx/
-   cp -r language /path/to/joomla/templates/mokoonyx/
-   cp -r administrator /path/to/joomla/templates/mokoonyx/
-   ```
-
-2. **Copy media files separately**:
-   ```bash
-   # Copy media to the media directory
-   cp -r media/* /path/to/joomla/media/templates/site/mokoonyx/
-   ```
-
-3. **Clear Joomla cache**:
-   - In Joomla admin: **System → Clear Cache**
-   - Or delete: `/path/to/joomla/cache/*` and `/path/to/joomla/administrator/cache/*`
-
-### Method 3: Symlink for Development (Linux/Mac only)
-
-For active development where you want changes to immediately reflect:
-
-1. **Create symlinks**:
-   ```bash
-   # Remove existing directory if present
-   rm -rf /path/to/joomla/templates/mokoonyx
-   rm -rf /path/to/joomla/media/templates/site/mokoonyx
-   
-   # Create parent directories if needed
-   mkdir -p /path/to/joomla/templates
-   mkdir -p /path/to/joomla/media/templates/site
-   
-   # Symlink template files
-   ln -s /path/to/MokoOnyx/src /path/to/joomla/templates/mokoonyx
-   
-   # Symlink media files
-   ln -s /path/to/MokoOnyx/src/media /path/to/joomla/media/templates/site/mokoonyx
-   ```
-
-2. **Note**: This won't work as-is because the src directory includes the media folder. You'll need to:
-   ```bash
-   # Better approach for symlinks:
-   # Link everything except media at template root
-   cd /path/to/joomla/templates
-   mkdir -p mokoonyx
-   cd mokoonyx
-   
-   ln -s /path/to/MokoOnyx/src/component.php
-   ln -s /path/to/MokoOnyx/src/error.php
-   ln -s /path/to/MokoOnyx/src/index.php
-   ln -s /path/to/MokoOnyx/src/offline.php
-   ln -s /path/to/MokoOnyx/src/templateDetails.xml
-   ln -s /path/to/MokoOnyx/src/joomla.asset.json
-   ln -s /path/to/MokoOnyx/src/html
-   ln -s /path/to/MokoOnyx/src/language
-   ln -s /path/to/MokoOnyx/src/administrator
-   
-   # Link media separately
-   ln -s /path/to/MokoOnyx/src/media /path/to/joomla/media/templates/site/mokoonyx
-   ```
-
-## Troubleshooting
-
-### Language Files Not Loading
-
-**Problem**: Language strings appear as language keys (e.g., `TPL_MOKOONYX_LABEL`)
-
-**Solution**: Ensure the `language` and `administrator` folders are present in your template directory:
-
-```bash
-# Check if folders exist
-ls -la /path/to/joomla/templates/mokoonyx/language
-ls -la /path/to/joomla/templates/mokoonyx/administrator
-```
-
-The `templateDetails.xml` should contain (lines 54-55):
-```xml
-<files>
-    <!-- ... other files ... -->
-    <folder>language</folder>
-    <folder>administrator</folder>
-</files>
-```
-
-### CSS/JS Not Loading
-
-**Problem**: Styles or scripts don't apply
-
-**Solution**: Verify media files are in the correct location:
-
-```bash
-# Check media directory structure
-ls -la /path/to/joomla/media/templates/site/mokoonyx/
-# Should show: css/, js/, images/, fonts/
-```
-
-Clear Joomla cache:
-- Admin: **System → Clear Cache**
-- Check browser developer console for 404 errors
-
-### Template Not Appearing in Template Manager
-
-**Problem**: MokoOnyx doesn't show in **System → Site Templates**
-
-**Solution**:
-1. Verify `templateDetails.xml` is present in `/path/to/joomla/templates/mokoonyx/`
-2. Check file permissions (should be readable by web server)
-3. Verify XML is well-formed:
-   ```bash
-   xmllint --noout /path/to/joomla/templates/mokoonyx/templateDetails.xml
-   ```
-4. Check Joomla's error logs for XML parsing errors
-
-### File Permission Issues
-
-**Problem**: "Permission denied" or template files not readable
-
-**Solution**:
-```bash
-# Set proper ownership (replace www-data with your web server user)
-chown -R www-data:www-data /path/to/joomla/templates/mokoonyx
-chown -R www-data:www-data /path/to/joomla/media/templates/site/mokoonyx
-
-# Set proper permissions
-find /path/to/joomla/templates/mokoonyx -type d -exec chmod 755 {} \;
-find /path/to/joomla/templates/mokoonyx -type f -exec chmod 644 {} \;
-find /path/to/joomla/media/templates/site/mokoonyx -type d -exec chmod 755 {} \;
-find /path/to/joomla/media/templates/site/mokoonyx -type f -exec chmod 644 {} \;
-```
-
-## When to Use Manual Deployment
-
-### ✅ Use Manual Deployment For:
-
-- **Active Development**: Testing changes immediately without rebuilding packages
-- **Local Development**: Working on a local Joomla instance
-- **Quick Fixes**: Making emergency hotfixes directly on a development server
-- **Learning**: Understanding the template structure and Joomla's file organization
-
-### ❌ Don't Use Manual Deployment For:
-
-- **Production Sites**: Always use packaged ZIP files from releases
-- **Client Sites**: Use proper Joomla extension installation
-- **Version Control**: Can lead to inconsistent deployments
-- **Staging Environments**: Use CI/CD or release packages
-
-## Best Practices
-
-1. **Always Test Locally First**: Don't deploy untested changes to production
-2. **Keep Backups**: Back up both template and media directories before updating
-3. **Use Version Control**: Track your customizations separately from manual deployments
-4. **Document Changes**: Note any manual file modifications
-5. **Clear Cache**: Always clear Joomla cache after manual file updates
-6. **Verify Permissions**: Ensure web server can read all files
-
-## Related Documentation
-
-- **[Quick Start Guide](QUICK_START.md)** - Development environment setup
-- **[Joomla Development Guide](JOOMLA_DEVELOPMENT.md)** - Complete development workflows
-- **[Release Process](RELEASE_PROCESS.md)** - How to create proper release packages
-
-## Support
-
-If you encounter issues with manual deployment:
-
-1. Check this troubleshooting guide first
-2. Review [Joomla's template documentation](https://docs.joomla.org/J4.x:Creating_a_Simple_Template)
-3. Open an issue on [GitHub](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-4. Contact: hello@mokoconsulting.tech
-
----
-
-**Document Version**: 1.0.0  
-**Last Updated**: 2026-03-01  
-**Status**: Active

docs/MODULE_COLOR_SCHEME.md

@@ -1,82 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- # FILE INFORMATION
- DEFGROUP: MokoOnyx.Documentation
- INGROUP: MokoOnyx
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/MODULE_COLOR_SCHEME.md
- VERSION: 02.00.00
- BRIEF: Per-module color scheme override documentation
--->
-
-# Per-Module Color Scheme
-
-Force any module into dark or light mode regardless of the site's current theme.
-
-## Usage
-
-1. Open the module in **Content > Site Modules**
-2. Go to the **Advanced** tab
-3. In **Module Class Suffix**, enter `theme-dark` or `theme-light`
-4. Save
-
-The module will render in the specified color scheme — even if the rest of the page uses the opposite theme.
-
-## Examples
-
-### Dark module on a light page
-
-Set Module Class Suffix to `theme-dark`:
-
-```
-Module Class Suffix: theme-dark
-```
-
-The module gets a dark background with light text, using the same dark palette variables defined in your theme.
-
-### Light module on a dark page
-
-```
-Module Class Suffix: theme-light
-```
-
-### Combining with other suffixes
-
-You can combine `theme-dark` or `theme-light` with other CSS classes:
-
-```
-Module Class Suffix: theme-dark shadow-lg rounded-3
-```
-
-## How It Works
-
-1. **CSS variables are scoped to `[data-bs-theme]`** (not just `:root`), so they apply to any element with the attribute — including module wrappers
-2. **JavaScript** scans for `.theme-dark` and `.theme-light` classes on page load and adds `data-bs-theme="dark"` or `data-bs-theme="light"` to those elements
-3. **Bootstrap 5.3+** natively supports `data-bs-theme` on any element, so all Bootstrap components inside the module (buttons, cards, alerts, etc.) also switch automatically
-
-## Supported Module Types
-
-All module types work — the feature operates at the HTML class level, not the module override level. This includes:
-
-- Custom HTML modules
-- Menu modules
-- Article modules
-- Login modules
-- Third-party modules (VirtueMart, DPCalendar, Community Builder, etc.)
-- Any module using the card layout chrome
-
-## Custom Palettes
-
-If you use custom color palettes (`light.custom.css` / `dark.custom.css`), the module will inherit those custom variables when themed. No additional configuration needed — the same palette files apply to both page-level and module-level theming.
-
-## Technical Notes
-
-- The `data-bs-theme` attribute is set via JavaScript after DOM load
-- CSS selectors use `[data-bs-theme="dark"]` without `:root` prefix, enabling nested scoping
-- Themed modules get `background-color: var(--body-bg)` and `color: var(--body-color)` automatically
-- The theme toggle (light/dark switch) only changes `:root` — it does not override module-level `data-bs-theme` attributes. Modules with an explicit suffix always stay in their specified scheme.

docs/MODULE_OVERRIDES.md

@@ -1,725 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
- 
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- 
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template.Site
- INGROUP: MokoOnyx.Documentation
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/MODULE_OVERRIDES.md
- VERSION: 03.09.03
- BRIEF: Comprehensive guide to MokoOnyx mobile-responsive module overrides
- PATH: /docs/MODULE_OVERRIDES.md
--->
-
-# Module & Component Overrides — MokoOnyx
-
-This document provides a comprehensive guide to all mobile-responsive module and component overrides included in MokoOnyx.
-
-## Overview
-
-MokoOnyx includes **16 mobile-responsive module overrides** and **12 component view overrides** designed to enhance the mobile user experience for third-party extensions and the Main Menu navigation.
-
-**Important**: Following Cassiopeia template best practices, MokoOnyx avoids overriding standard Joomla core modules (such as mod_search, mod_login, mod_breadcrumbs) to ensure proper language loading and compatibility. **Exception**: mod_menu "Main Menu" override provides essential Bootstrap 5 collapsible dropdown functionality.
-
-### Alternative Layouts, Not Replacements
-
-**All MokoOnyx overrides use alternative layout names (`mobile.php`) instead of replacing default layouts (`default.php`).** This means:
-
-- ✅ Default Joomla layouts continue to work unchanged
-- ✅ You must explicitly select the "mobile" layout in module/menu item settings
-- ✅ Joomla core updates don't break your site
-- ✅ Full control over which modules use enhanced layouts
-
-**📖 See [OVERRIDE_PHILOSOPHY.md](OVERRIDE_PHILOSOPHY.md) for complete details on how to activate and use these alternative layouts.**
-
-### Key Features
-
-All module overrides share these characteristics:
-
-- **Mobile-First Design**: Optimized for mobile devices with responsive breakpoints
-- **Touch Targets**: 48px on mobile, 44px on desktop (WCAG 2.1 compliant)
-- **Input Font Size**: 16px minimum on mobile (prevents iOS zoom)
-- **Accessibility**: Full ARIA labels, keyboard navigation, semantic HTML
-- **BEM Naming**: Consistent CSS class naming convention
-- **CSS Variables**: Integration with template color schemes
-- **Security**: Proper escaping, _JEXEC checks, index.html protection
-- **Documentation**: Each override includes comprehensive README
-
-## Module Categories
-
-### 1. VirtueMart E-Commerce Modules
-
-Five comprehensive overrides for VirtueMart shopping functionality.
-
-**Master Documentation**: [VIRTUEMART_MODULES_README.md](../src/html/VIRTUEMART_MODULES_README.md)
-
-#### mod_virtuemart_cart
-**Location**: `src/html/mod_virtuemart_cart/`
-
-Shopping cart display with product list and checkout button.
-
-**Features**:
-- Responsive product cards
-- Remove item buttons with confirmations
-- Price display with currency formatting
-- Checkout button with prominent styling
-
-#### mod_virtuemart_product
-**Location**: `src/html/mod_virtuemart_product/`
-
-Product showcase with grid layouts.
-
-**Features**:
-- Responsive grid: 1-4 columns based on screen size
-- Product images with hover effects
-- Price display and "Add to Cart" buttons
-- Rating display support
-
-#### mod_virtuemart_currencies
-**Location**: `src/html/mod_virtuemart_currencies/`
-
-Currency selector dropdown for multi-currency stores.
-
-**Features**:
-- Accessible dropdown with proper labels
-- Currency symbol and name display
-- Responsive button styling
-
-#### mod_virtuemart_category
-**Location**: `src/html/mod_virtuemart_category/`
-
-Category navigation with hierarchical display.
-
-**Features**:
-- Expandable subcategories
-- Product count display
-- Hierarchical indentation
-- Active category highlighting
-
-#### mod_virtuemart_manufacturer
-**Location**: `src/html/mod_virtuemart_manufacturer/`
-
-Manufacturer/brand display with grid layout.
-
-**Features**:
-- Responsive grid: 2-4 columns
-- Logo display support
-- Product count per manufacturer
-
----
-
-### 2. Main Menu & Community Builder Modules
-
-Three essential Community Builder and navigation module overrides.
-
-#### mod_menu (Main Menu)
-**Location**: `src/html/mod_menu/`
-
-Bootstrap 5 responsive navigation menu with collapsible dropdown functionality.
-
-**Files**:
-- `mainmenu.php` - Main layout with Bootstrap navbar
-- `mainmenu_component.php` - Component menu items
-- `mainmenu_heading.php` - Heading menu items
-- `mainmenu_separator.php` - Separator menu items
-- `mainmenu_url.php` - URL menu items
-
-**Features**:
-- Bootstrap 5 navbar structure with collapsible hamburger menu
-- Multi-level dropdown support (hover on desktop, tap on mobile)
-- WCAG 2.1 compliant touch targets (48px mobile, 44px desktop)
-- BEM naming convention: `.mod-menu-main__*`
-- Active state indicators for current menu items
-- ARIA labels and keyboard navigation support
-- Alternative layout named `mainmenu.php` (not `default.php`)
-
-**Activation**: Select "Mainmenu" layout in Joomla Administrator → Modules → Menu Module → Advanced Tab → Alternative Layout
-
-**Note**: Unlike the broken mod_menu override removed in v03.08.01, this v03.08.03 version is properly structured based on Joomla core layouts and Bootstrap 5, ensuring language strings load correctly and menu functionality works as expected.
-
-#### mod_cblogin
-**Location**: `src/html/mod_cblogin/`
-
-Community Builder login with avatar display.
-
-**Features**:
-- User avatar when logged in
-- CB-specific login form
-- Profile link
-- Logout button
-
-#### mod_comprofilerOnline
-**Location**: `src/html/mod_comprofilerOnline/`
-
-Community Builder online users display.
-
-**Features**:
-- User count display
-- Avatar grid layout
-- Username display
-- Online status indicators
-
----
-
-### 3. Industry Extension Modules
-
-Eight popular third-party extension module overrides plus component views.
-
-#### K2 Content Extension
-
-##### mod_k2_content
-**Location**: `src/html/mod_k2_content/`
-
-K2 content display with advanced layouts.
-
-**Features**:
-- Responsive grid: 1-3 columns
-- Featured images with lazy loading
-- Category, author, date metadata
-- Excerpt support
-- Tag display
-
-#### AcyMailing Newsletter
-
-##### mod_acymailing
-**Location**: `src/html/mod_acymailing/`
-
-Newsletter subscription form.
-
-**Features**:
-- Email validation
-- Privacy checkbox
-- Success/error messaging
-- GDPR compliance fields
-
-#### HikaShop E-Commerce
-
-##### mod_hikashop_cart
-**Location**: `src/html/mod_hikashop_cart/`
-
-HikaShop shopping cart module.
-
-**Features**:
-- Product list with images
-- Quantity adjustment
-- Price totals
-- Checkout button
-
-#### Kunena Forum
-
-Four comprehensive forum modules plus component view.
-
-##### mod_kunenalatest
-**Location**: `src/html/mod_kunenalatest/`
-
-Latest forum posts display.
-
-**Features**:
-- Post excerpts
-- Author avatars
-- Reply count
-- Post date
-
-##### mod_kunenalogin
-**Location**: `src/html/mod_kunenalogin/`
-
-Forum-specific login module.
-
-**Features**:
-- User avatar display
-- Forum statistics
-- Quick login form
-- Profile link
-
-##### mod_kunenasearch
-**Location**: `src/html/mod_kunenasearch/`
-
-Forum search with button positions.
-
-**Features**:
-- Multiple button positions (left, right, top)
-- Search placeholder text
-- Icon support
-- 48px touch targets
-
-##### mod_kunenastats
-**Location**: `src/html/mod_kunenastats/`
-
-Forum statistics display.
-
-**Features**:
-- Visual stat cards
-- Member count
-- Topic/post totals
-- Latest member
-- Responsive grid layout
-
-##### com_kunena (Component)
-**Location**: `src/html/com_kunena/`
-
-Forum category list view.
-
-**Views**:
-- `category/default.php` - Category listing with icons
-
-#### OS Membership Pro
-
-Module and component overrides for membership management.
-
-##### mod_osmembership
-**Location**: `src/html/mod_osmembership/`
-
-Membership plans module.
-
-**Features**:
-- Plan cards with pricing
-- Feature lists
-- Signup buttons
-- Badge displays (popular, featured)
-
-##### com_osmembership (Component)
-**Location**: `src/html/com_osmembership/`
-
-Membership pricing tables.
-
-**Views**:
-- `plans/default.php` - Responsive pricing table with comparison features
-
----
-
-### 4. Community Builder Components
-
-Four comprehensive component view overrides for Community Builder user management.
-
-#### com_comprofiler
-**Location**: `src/html/com_comprofiler/`
-
-Mobile-responsive views for Community Builder user profiles, registration, and login.
-
-##### userprofile
-User profile display with tabbed interface.
-
-**Features**:
-- Large avatar display (150px)
-- Tabbed interface for profile sections
-- Custom field display with labels
-- Online status indicator
-- Responsive layout: vertical mobile → horizontal desktop
-
-##### userslist
-User directory with search and grid layout.
-
-**Features**:
-- Search functionality with accessible form
-- Responsive grid: 1 column mobile → 2-3 columns desktop
-- User cards with avatars (80px)
-- Custom field display
-- Profile view buttons
-- Pagination support
-
-##### registers
-Multi-step registration form with validation.
-
-**Features**:
-- Fieldset organization with legends
-- Required field indicators (*)
-- Input validation and error display
-- Captcha support section
-- Terms & conditions checkbox
-- GDPR-compliant design
-- 16px input font on mobile
-
-##### login
-Login page with remember me and helper links.
-
-**Features**:
-- Centered login container (max-width: 450px)
-- Username/password fields with autocomplete
-- Remember me checkbox
-- Registration and password recovery links
-- CSRF token support
-- Responsive padding adjustments
-
-### 5. JEM (Joomla Event Manager) Components
-
-Five comprehensive component view overrides for JEM event management.
-
-#### com_jem
-**Location**: `src/html/com_jem/`
-
-Mobile-responsive views for JEM event listings, details, calendar, venues, and categories.
-
-##### eventslist
-Event listing with card-based layout.
-
-**Features**:
-- Event cards with date, time, and venue
-- Category badges with color coding
-- Responsive event grid layout
-- Event description excerpts
-- Read more buttons with clear calls-to-action
-- Pagination support
-- Empty state messaging
-
-##### event
-Single event details view with comprehensive information.
-
-**Features**:
-- Large event image display (responsive)
-- Date and time with structured data
-- Venue information with maps link
-- Event description with full content
-- Category display with badges
-- Registration information (if enabled)
-- Contact information display
-- Back to events navigation
-- Meta information with icons
-
-##### calendar
-Monthly calendar view with event indicators.
-
-**Features**:
-- Month navigation (previous/next)
-- Calendar grid with weekday headers
-- Event indicators on dates with events
-- Responsive calendar layout
-- Today highlighting
-- Event list for selected month
-- Event count per day display
-- Touch-friendly navigation buttons
-
-##### venue
-Venue details with location and upcoming events.
-
-**Features**:
-- Venue image display
-- Complete address information
-- Website link (external)
-- Google Maps integration
-- Venue description
-- Upcoming events at venue
-- Location coordinates display
-- Back navigation
-
-##### categories
-Event category listing with descriptions.
-
-**Features**:
-- Category cards with images
-- Category descriptions
-- Event count per category
-- View category buttons
-- Responsive grid layout
-- Empty state messaging
-- Pagination support
-
----
-
-## CSS Architecture
-
-All module styles are located in `src/media/css/template.css` with dedicated sections:
-
-### CSS Sections
-
-1. **MOD_SEARCH MOBILE RESPONSIVE STYLES** (Lines ~18400+)
-   - Search box layouts
-   - Button position variants
-   - Input styling
-
-2. **VIRTUEMART MODULE MOBILE RESPONSIVE STYLES** (Lines ~18500+)
-   - Cart product cards
-   - Product grids
-   - Currency selector
-   - Category navigation
-   - Manufacturer displays
-
-3. **STANDARD JOOMLA & COMMUNITY BUILDER MODULE STYLES** (Lines ~19300+)
-   - Menu navigation
-   - Breadcrumbs
-   - Login forms
-   - Article displays
-   - CB module components
-
-4. **INDUSTRY EXTENSION MODULE STYLES** (Lines ~19800+)
-   - K2 content grids
-   - AcyMailing forms
-   - HikaShop cart
-   - Kunena forum modules
-   - OS Membership pricing
-
-5. **COMMUNITY BUILDER COMPONENT STYLES** (Lines ~21000+)
-   - User profile layouts
-   - Users list grids
-   - Registration forms
-   - Login pages
-   - Tab interfaces
-
-6. **JEM COMPONENT STYLES** (Lines ~22000+)
-   - Event list cards
-   - Event details layout
-   - Calendar grid
-   - Venue information
-   - Category displays
-
-### CSS Variables Integration
-
-All modules integrate with template CSS variables:
-
-```css
-/* Common Variables Used */
---body-color              /* Text color */
---link-color              /* Link color */
---link-hover-color        /* Link hover color */
---border-color            /* Border color */
---secondary-bg            /* Background color */
---border-radius           /* Border radius */
---input-bg                /* Input background */
---input-border-color      /* Input border */
---btn-primary-bg          /* Primary button */
---btn-primary-hover-bg    /* Button hover */
-```
-
-See [CSS_VARIABLES.md](CSS_VARIABLES.md) for complete reference.
-
----
-
-## Responsive Breakpoints
-
-All modules use Bootstrap-aligned breakpoints:
-
-| Breakpoint | Size      | Typical Changes                    |
-|------------|-----------|-----------------------------------|
-| `xs`       | < 576px   | Single column, stacked layouts    |
-| `sm`       | ≥ 576px   | 2 columns for grids               |
-| `md`       | ≥ 768px   | 3 columns, horizontal layouts     |
-| `lg`       | ≥ 992px   | 4 columns, expanded spacing       |
-| `xl`       | ≥ 1200px  | Maximum width, optimal spacing    |
-| `xxl`      | ≥ 1400px  | Extra spacing                     |
-
----
-
-## Accessibility Features
-
-All overrides implement comprehensive accessibility:
-
-### ARIA Labels
-- Descriptive labels for all interactive elements
-- `aria-label` for icon-only buttons
-- `aria-describedby` for form fields
-- `aria-live` for dynamic content
-
-### Keyboard Navigation
-- Proper tab order
-- Focus states on all interactive elements
-- Keyboard-accessible dropdowns
-- Skip links where appropriate
-
-### Screen Readers
-- Semantic HTML5 elements
-- Hidden text for icon-only elements
-- Proper heading hierarchy
-- Alternative text for images
-
-### WCAG 2.1 Compliance
-- Touch targets: 48px minimum on mobile
-- Color contrast ratios meet AA standards
-- Text resizable to 200% without loss
-- No content relies on color alone
-
----
-
-## Customization Guide
-
-### Override Customization
-
-Each module can be customized in two ways:
-
-#### 1. CSS Customization
-
-Edit `src/media/css/user.css` to add custom styles:
-
-```css
-/* Example: Change product grid columns */
-@media (min-width: 768px) {
-	.mod-vm-product__grid {
-		grid-template-columns: repeat(3, 1fr);
-	}
-}
-
-/* Example: Customize cart button */
-.mod-vm-cart__checkout-button {
-	background-color: #28a745;
-}
-```
-
-#### 2. Template Override Customization
-
-Copy the entire module directory and modify:
-
-```bash
-# Keep original override as reference
-cp -r src/html/mod_virtuemart_cart src/html/mod_virtuemart_cart_original
-
-# Modify your version
-# Edit src/html/mod_virtuemart_cart/default.php
-```
-
-### CSS Variables Override
-
-Override CSS variables in your custom color scheme:
-
-```css
-/* src/media/css/theme/light.custom.css */
-:root {
-	--vm-price-color: #28a745;
-	--vm-cart-bg: #f8f9fa;
-	--vm-button-primary: #007bff;
-}
-```
-
----
-
-## Best Practices
-
-### When Using Overrides
-
-1. **Test Across Devices**: Always test on actual mobile devices
-2. **Maintain Accessibility**: Don't remove ARIA labels or keyboard navigation
-3. **Keep BEM Naming**: Use established class naming patterns
-4. **Security First**: Always escape output and validate input
-5. **Document Changes**: Comment your customizations
-
-### When Updating
-
-1. **Backup First**: Always backup your site before updating
-2. **Review Changes**: Check CHANGELOG.md for breaking changes
-3. **Test Thoroughly**: Test all modules after updates
-4. **Custom Overrides**: May need adjustments after template updates
-
----
-
-## Troubleshooting
-
-### Common Issues
-
-#### Module Not Displaying Correctly
-1. Clear Joomla cache (System → Clear Cache)
-2. Check module is published and assigned to correct position
-3. Verify template is assigned to menu items
-4. Check browser console for JavaScript errors
-
-#### Styles Not Applying
-1. Clear browser cache (Ctrl+F5 / Cmd+Shift+R)
-2. Verify `template.css` is loading
-3. Check CSS specificity conflicts
-4. Review custom CSS in `user.css`
-
-#### Mobile View Issues
-1. Test with browser dev tools responsive mode
-2. Check viewport meta tag in template
-3. Verify breakpoint media queries
-4. Test on actual devices when possible
-
-#### Accessibility Issues
-1. Run WAVE or axe DevTools accessibility check
-2. Test with keyboard navigation only
-3. Verify screen reader compatibility
-4. Check color contrast ratios
-
-### Getting Help
-
-- **Documentation**: Check module-specific README files
-- **GitHub Issues**: [Report issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-- **Support**: hello@mokoconsulting.tech
-
----
-
-## How to Activate Alternative Layouts
-
-All MokoOnyx overrides are **alternative layouts** that must be explicitly activated. They do not automatically replace default layouts.
-
-### Quick Start: Enable Mobile Layout
-
-1. **Go to Joomla Administrator** → Extensions → Modules
-2. **Open the module** you want to enhance (e.g., VirtueMart Cart)
-3. **Navigate to Advanced tab**
-4. **Find "Alternative Layout" field**
-5. **Select "MokoOnyx - mobile"** from dropdown
-6. **Save & Close**
-
-### For Menu Items (Component Views)
-
-1. **Go to Menus** → Select your menu
-2. **Open the menu item** (e.g., Events List)
-3. **Navigate to Advanced Options or Page Display tab**
-4. **Find "Alternative Layout" field**
-5. **Select "MokoOnyx - mobile"** from dropdown
-6. **Save & Close**
-
-### Apply to All Modules in a Position
-
-In your template's `index.php`, specify layout for entire module position:
-
-```php
-<jdoc:include type="modules" name="sidebar-left" style="none" layout="mobile" />
-```
-
-**📖 For complete documentation, see [OVERRIDE_PHILOSOPHY.md](OVERRIDE_PHILOSOPHY.md)**
-
----
-
-## Version History
-
-| Version  | Date       | Changes                                           |
-|----------|------------|--------------------------------------------------|
-| 03.08.04 | 2026-02-27 | Added alternative layout activation instructions, JEM overrides |
-| 03.08.03 | 2026-02-25 | Removed mod_search override per Cassiopeia philosophy |
-| 03.08.00 | 2026-02-22 | Added Community Builder component overrides       |
-| 03.07.00 | 2026-02-22 | Initial release of all mobile-responsive overrides |
-
----
-
-## Additional Resources
-
-- **Override Philosophy**: [OVERRIDE_PHILOSOPHY.md](OVERRIDE_PHILOSOPHY.md) ⭐ **Start here**
-- **Main README**: [README.md](../README.md)
-- **Changelog**: [CHANGELOG.md](../CHANGELOG.md)
-- **CSS Variables**: [CSS_VARIABLES.md](CSS_VARIABLES.md)
-- **Repository**: [GitHub](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-
----
-
-## Metadata
-
-* Document: docs/MODULE_OVERRIDES.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/MODULE_OVERRIDES.md
-* Owner: Moko Consulting
-* Version: 03.07.00
-* Status: Active
-* Effective Date: 2026-02-22
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-02-22 | Initial creation with comprehensive module override documentation | GitHub Copilot |

docs/OVERRIDE_PHILOSOPHY.md

@@ -1,332 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
- 
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- 
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template.Site
- INGROUP: MokoOnyx.Documentation
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/OVERRIDE_PHILOSOPHY.md
- VERSION: 03.09.03
- BRIEF: Philosophy and implementation of non-replacing alternative layouts
- PATH: /docs/OVERRIDE_PHILOSOPHY.md
--->
-
-# Override Philosophy — MokoOnyx
-
-## Core Principle: Add-On, Not Replacement
-
-**MokoOnyx overrides are designed as alternative layouts, not replacements of default Joomla layouts.**
-
-This means:
-- ✅ Default Joomla layouts continue to work unchanged
-- ✅ Site administrators can choose when to use our enhanced layouts
-- ✅ Updates to Joomla core layouts don't break the site
-- ✅ Compatibility with other extensions is maintained
-- ✅ Users have control over which layouts to use
-
----
-
-## Technical Implementation
-
-### Layout Naming Convention
-
-All MokoOnyx overrides use **`mobile.php`** naming instead of **`default.php`**:
-
-```
-❌ BAD (Replaces default):
-src/html/mod_virtuemart_cart/default.php
-
-✅ GOOD (Alternative layout):
-src/html/mod_virtuemart_cart/mobile.php
-```
-
-### How Joomla Handles Layouts
-
-When a module or component looks for a layout, Joomla searches in this order:
-
-1. **Template override with specified layout name**: `templates/mokoonyx/html/{extension}/{view}/{layout}.php`
-2. **Extension's specified layout**: `{extension}/tmpl/{view}/{layout}.php`
-3. **Template override for default layout**: `templates/mokoonyx/html/{extension}/{view}/default.php`
-4. **Extension's default layout**: `{extension}/tmpl/{view}/default.php`
-
-By naming our overrides `mobile.php` instead of `default.php`, they become **step 1** alternatives that must be explicitly selected, rather than **step 3** replacements that are automatically used.
-
----
-
-## How to Use Alternative Layouts
-
-### Method 1: Module/Menu Item Settings
-
-When editing a module or menu item in Joomla administrator:
-
-1. Open the module/menu item for editing
-2. Navigate to the **Advanced** tab
-3. Find the **Alternative Layout** field
-4. Select **MokoOnyx - mobile** from the dropdown
-5. Save
-
-### Method 2: Override in Module Position
-
-If you want all modules in a specific position to use the mobile layout:
-
-```php
-<!-- In your index.php template file -->
-<?php if ($this->countModules('sidebar-left')) : ?>
-    <jdoc:include type="modules" name="sidebar-left" style="none" layout="mobile" />
-<?php endif; ?>
-```
-
-### Method 3: Module Chrome (Advanced)
-
-Create a custom module chrome in `templates/mokoonyx/html/layouts/chromes/` that automatically applies the mobile layout.
-
----
-
-## Exception: Main Menu
-
-**The only exception** to this philosophy is `mod_menu` with the "Main Menu" module type.
-
-The template includes files like:
-- `src/html/mod_menu/mainmenu.php`
-- `src/html/mod_menu/mainmenu_component.php`
-- `src/html/mod_menu/mainmenu_heading.php`
-- `src/html/mod_menu/mainmenu_url.php`
-- `src/html/mod_menu/mainmenu_separator.php`
-
-These use a **custom layout name** (`mainmenu`) instead of replacing `default.php`, which allows the site to:
-- Use the enhanced Bootstrap 5 collapsible menu for main navigation
-- Keep standard Joomla menus working in other positions
-- Provide better mobile navigation without breaking existing menus
-
-To use this layout, set the module's **Alternative Layout** to **MokoOnyx - mainmenu**.
-
----
-
-## Override Inventory
-
-### Module Overrides (16 total)
-
-All use `mobile.php` naming (alternative layout):
-
-**VirtueMart (5)**:
-- `mod_virtuemart_cart/mobile.php`
-- `mod_virtuemart_product/mobile.php`
-- `mod_virtuemart_currencies/mobile.php`
-- `mod_virtuemart_category/mobile.php`
-- `mod_virtuemart_manufacturer/mobile.php`
-
-**Community Builder (2)**:
-- `mod_cblogin/mobile.php`
-- `mod_comprofilerOnline/mobile.php`
-
-**Main Menu (1)**:
-- `mod_menu/mainmenu.php` (custom layout name)
-
-**Industry Extensions (8)**:
-- `mod_k2_content/mobile.php`
-- `mod_acymailing/mobile.php`
-- `mod_hikashop_cart/mobile.php`
-- `mod_kunenalatest/mobile.php`
-- `mod_kunenalogin/mobile.php`
-- `mod_kunenasearch/mobile.php`
-- `mod_kunenastats/mobile.php`
-- `mod_osmembership/mobile.php`
-
-### Component View Overrides (12 total)
-
-All use `mobile.php` naming (alternative layout):
-
-**Community Builder (4)**:
-- `com_comprofiler/userprofile/mobile.php`
-- `com_comprofiler/userslist/mobile.php`
-- `com_comprofiler/registers/mobile.php`
-- `com_comprofiler/login/mobile.php`
-
-**JEM - Joomla Event Manager (5)**:
-- `com_jem/eventslist/mobile.php`
-- `com_jem/event/mobile.php`
-- `com_jem/calendar/mobile.php`
-- `com_jem/venue/mobile.php`
-- `com_jem/categories/mobile.php`
-
-**Kunena Forum (1)**:
-- `com_kunena/category/mobile.php`
-
-**OSMembership (2)**:
-- `com_osmembership/plan/mobile.php`
-- `com_osmembership/plans/mobile.php`
-
-**Joomla Core (2)**:
-- `com_content/article/toc-left.php` (custom layout name)
-- `com_content/article/toc-right.php` (custom layout name)
-
----
-
-## Benefits of This Approach
-
-### 1. **Zero Breaking Changes**
-
-Existing sites continue to work exactly as before. No layouts are forcibly changed.
-
-### 2. **Gradual Adoption**
-
-Site administrators can:
-- Test mobile layouts on specific modules first
-- Roll out changes module-by-module
-- Keep some modules using default layouts if needed
-- Easily revert by changing the Alternative Layout setting
-
-### 3. **Extension Compatibility**
-
-Third-party extensions' default layouts remain untouched, preventing conflicts with:
-- Extension updates
-- Other templates
-- Custom development
-
-### 4. **Joomla Core Updates**
-
-When Joomla core updates:
-- Default layouts get new features/bug fixes automatically
-- Mobile layouts remain stable and tested
-- No emergency fixes needed after Joomla updates
-
-### 5. **Multi-Language Support**
-
-Joomla's language system loads extension language files properly because:
-- Extensions aren't hijacked by template overrides
-- Language strings come from the correct source
-- Translations work as expected
-
----
-
-## Standards Not Overridden
-
-Following Cassiopeia template best practices, MokoOnyx **does not override** standard Joomla core modules:
-
-- ❌ `mod_breadcrumbs` - Use Joomla core layout
-- ❌ `mod_login` - Use Joomla core layout
-- ❌ `mod_articles_latest` - Use Joomla core layout
-- ❌ `mod_articles_category` - Use Joomla core layout
-- ❌ `mod_articles_news` - Use Joomla core layout
-- ❌ `mod_search` - Use Joomla core layout (removed in v03.08.03)
-
-**Reason**: These modules have robust core layouts with proper language loading, accessibility, and ongoing Joomla maintenance.
-
----
-
-## Developer Guidelines
-
-When adding new overrides to MokoOnyx:
-
-### ✅ DO:
-
-1. Name files `mobile.php` or use descriptive custom names (`mainmenu.php`, `toc-left.php`)
-2. Document the alternative layout in MODULE_OVERRIDES.md
-3. Add CSS with BEM naming: `.{extension}-{view}__element`
-4. Test that default layouts still work
-5. Provide clear instructions for selecting the layout
-
-### ❌ DON'T:
-
-1. Create `default.php` files that replace core layouts
-2. Override standard Joomla core modules without strong justification
-3. Break backward compatibility
-4. Assume users will automatically get your layout
-5. Forget to document how to enable the alternative layout
-
----
-
-## Migration from Replacing Overrides
-
-If you're migrating from a template that used `default.php` overrides:
-
-### Step 1: Identify Replaced Layouts
-
-```bash
-find templates/oldtemplate/html -name "default.php"
-```
-
-### Step 2: Rename to Alternative Layouts
-
-```bash
-# For each default.php found:
-mv default.php mobile.php
-```
-
-### Step 3: Update Module Settings
-
-For each module using the old override:
-1. Edit module in administrator
-2. Advanced tab → Alternative Layout
-3. Select "mobile" from dropdown
-4. Save
-
-### Step 4: Test
-
-- Verify module displays correctly
-- Check that other modules still use default layouts
-- Confirm language strings load properly
-
----
-
-## Troubleshooting
-
-### My Alternative Layout Doesn't Appear in Dropdown
-
-**Check:**
-1. File is in correct location: `templates/mokoonyx/html/{extension}/{view}/`
-2. File has `.php` extension
-3. File is not named `default.php`
-4. Cache is cleared (System → Clear Cache)
-
-### Module Still Uses Default Layout
-
-**Check:**
-1. Module's Alternative Layout setting in administrator
-2. Module position's `layout` parameter in `<jdoc:include>` tag
-3. File permissions (must be readable)
-4. Template is assigned to correct pages
-
-### Layout Works But Looks Wrong
-
-**Check:**
-1. CSS is loaded: inspect element and check for `.{extension}-{view}__` classes
-2. `template.css` is up to date
-3. Browser cache is cleared
-4. CSS variables are defined in template
-
----
-
-## References
-
-- [Joomla Docs: Layout Overrides](https://docs.joomla.org/Layout_Overrides_in_Joomla)
-- [Joomla Docs: Alternative Layouts](https://docs.joomla.org/J3.x:How_to_use_the_alternative_layout_feature)
-- [MODULE_OVERRIDES.md](MODULE_OVERRIDES.md) - Complete override inventory
-- [CSS_VARIABLES.md](CSS_VARIABLES.md) - Template styling system
-
----
-
-## Version History
-
-- **03.08.04**: Created OVERRIDE_PHILOSOPHY.md document
-- **03.08.03**: Removed mod_search override to align with philosophy
-- **03.08.02**: Removed standard Joomla module overrides for proper language loading
-- **Earlier**: Renamed all overrides from default.php to mobile.php (21 files)

docs/QUICK_START.md

@@ -1,333 +0,0 @@
-# Quick Start Guide - MokoOnyx Development
-
-Get up and running with MokoOnyx development in minutes.
-
-## Prerequisites
-
-Before you begin, ensure you have:
-
-- **Git** - For version control
-- **PHP 8.0+** - Required runtime
-- **Composer** - PHP dependency manager
-- **Make** (optional) - For convenient commands
-- **Code Editor** - VS Code recommended (tasks pre-configured)
-
-## 5-Minute Setup
-
-### 1. Clone the Repository
-
-```bash
-git clone https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx.git
-cd MokoOnyx
-```
-
-### 2. Install Development Dependencies
-
-```bash
-# Using Make (recommended)
-make dev-setup
-
-# Or manually
-composer global require "squizlabs/php_codesniffer:^3.0"
-composer global require phpstan/phpstan
-composer global require "phpcompatibility/php-compatibility:^9.0"
-composer global require codeception/codeception
-```
-
-### 3. Validate Everything Works
-
-```bash
-# Quick validation
-make validate-required
-
-# Or comprehensive validation
-make validate
-```
-
-## Common Tasks
-
-### Development Workflow
-
-```bash
-# 1. Make your changes
-vim src/index.php
-
-# 2. Validate locally
-make validate-required
-
-# 3. Check code quality
-make quality
-
-# 4. Commit
-git add -A
-git commit -m "feat: add new feature"
-# (pre-commit hook runs automatically)
-
-# 5. Push
-git push origin your-branch
-```
-
-### Testing
-
-```bash
-# Run all tests
-make test
-
-# Run unit tests only
-make test-unit
-
-# Run acceptance tests only
-make test-acceptance
-```
-
-### Code Quality
-
-```bash
-# Check everything
-make quality
-
-# PHP CodeSniffer only
-make phpcs
-
-# Auto-fix PHPCS issues
-make phpcs-fix
-
-# PHPStan only
-make phpstan
-
-# PHP compatibility check
-make phpcompat
-```
-
-### Creating a Release Package
-
-```bash
-# Package with auto-detected version
-make package
-
-# Check package contents
-ls -lh dist/
-unzip -l dist/mokoonyx-*.zip
-```
-
-## VS Code Integration
-
-If using VS Code, press `Ctrl+Shift+P` (or `Cmd+Shift+P` on Mac) and type "Run Task" to see available tasks:
-
-- **Validate All** - Run all validation scripts (default test task)
-- **Validate Required** - Run only required validations
-- **PHP CodeSniffer** - Check code style
-- **PHP CodeSniffer - Auto Fix** - Fix code style issues
-- **PHPStan** - Static analysis
-- **Run Tests** - Execute all tests
-- **Create Package** - Build distribution ZIP
-- **Install Git Hooks** - Set up pre-commit hooks
-
-## Available Make Commands
-
-Run `make help` to see all available commands:
-
-```bash
-make help              # Show all commands
-make dev-setup         # Complete environment setup
-make validate          # Run all validations
-make test              # Run all tests
-make quality           # Check code quality
-make package           # Create distribution package
-make clean             # Remove generated files
-make check             # Quick check (validate + quality)
-make all               # Complete build pipeline
-```
-
-## Project Structure
-
-```
-moko-cassiopeia/
-├── src/                      # Joomla template source (template root)
-│   ├── component.php         # Component template file
-│   ├── index.php             # Main template file
-│   ├── offline.php           # Offline page template
-│   ├── error.php             # Error page template
-│   ├── templateDetails.xml   # Template manifest
-│   ├── html/                 # Module & component overrides
-│   ├── media/                # Assets (CSS, JS, images, fonts)
-│   ├── language/             # Frontend language files (en-GB, en-US)
-│   └── administrator/        # Backend files
-│       └── language/         # Backend language files
-├── tests/                    # Test suites
-├── docs/                     # Documentation
-├── scripts/                  # Build scripts
-├── .github/workflows/        # CI/CD workflows
-├── Makefile                  # Make commands
-└── README.md                 # Project overview
-```
-
-## Next Steps
-
-### Learning the Workflow
-
-1. **Read the Workflow Guide**: [docs/WORKFLOW_GUIDE.md](./WORKFLOW_GUIDE.md)
-2. **Review Joomla Development**: [docs/JOOMLA_DEVELOPMENT.md](./JOOMLA_DEVELOPMENT.md)
-
-### Creating Your First Feature
-
-1. **Create a version branch** via GitHub Actions:
-   - Go to Actions → Create version branch
-   - Enter version (e.g., 03.06.00)
-   - Select branch prefix: `dev/`
-   - Run workflow
-
-2. **Checkout the branch**:
-   ```bash
-   git fetch origin
-   git checkout dev/03.06.00
-   ```
-
-3. **Make changes and test**:
-   ```bash
-   # Edit files
-   vim src/index.php
-   
-   # Validate
-   make validate-required
-   
-   # Check quality
-   make quality
-   ```
-
-4. **Commit and push**:
-   ```bash
-   git add -A
-   git commit -m "feat: your feature description"
-   git push origin dev/03.06.00
-   ```
-
-5. **Watch CI**: Check GitHub Actions for automated testing
-
-### Understanding the Release Process
-
-```
-Development → RC → Stable → Production
-  (dev/)     (rc/)  (version/)  (main)
-```
-
-1. **dev/X.Y.Z** - Active development
-2. **rc/X.Y.Z** - Release candidate testing
-3. **version/X.Y.Z** - Stable release
-4. **main** - Production (auto-merged from version/)
-
-Use the Release Pipeline workflow to promote between stages.
-
-## Troubleshooting
-
-### Scripts Not Executable
-
-```bash
-make fix-permissions
-### PHPStan/PHPCS Not Found
-
-```bash
-make install
-# Or manually:
-composer global require "squizlabs/php_codesniffer:^3.0" phpstan/phpstan
-```
-
-### CI Workflow Fails
-
-1. Check the workflow logs in GitHub Actions
-2. Run validation locally:
-   ```bash
-   make validate-required
-   make quality
-   ```
-
-### Need Help?
-
-- **Documentation**: Check [docs/](../docs/) directory
-- **Issues**: Open an issue on GitHub
-- **Contributing**: See [CONTRIBUTING.md](../CONTRIBUTING.md)
-
-## Best Practices
-
-### Before Committing
-
-```bash
-# Always validate first
-make validate-required
-
-# Check quality for PHP changes
-make quality
-
-# Run tests if you changed functionality
-make test
-```
-
-### Code Style
-
-- Follow PSR-12 standards
-- Use `make phpcs-fix` to auto-fix issues
-- Add SPDX license headers to new files
-- Keep functions small and focused
-
-### Documentation
-
-- Update docs when changing workflows
-- Add comments for complex logic
-- Update CHANGELOG.md with changes
-- Keep README.md current
-
-### Version Management
-
-- Use semantic versioning: Major.Minor.Patch (03.06.00)
-- Update CHANGELOG.md with all changes
-- Follow the version hierarchy: dev → rc → version → main
-- Never skip stages in the release process
-
-## Useful Resources
-
-- [Joomla Documentation](https://docs.joomla.org/)
-- [PSR-12 Coding Standard](https://www.php-fig.org/psr/psr-12/)
-- [Semantic Versioning](https://semver.org/)
-- [Conventional Commits](https://www.conventionalcommits.org/)
-
-## Quick Reference Card
-
-```bash
-# Setup
-make dev-setup              # Initial setup
-
-# Development
-make validate-required      # Quick validation
-make quality               # Code quality
-make test                  # Run tests
-
-# Building
-make package               # Create ZIP
-
-# Maintenance
-make clean                 # Clean generated files
-make fix-permissions       # Fix script permissions
-
-# Help
-make help                  # Show all commands
-```
-
----
-
-## Metadata
-
-* Document: docs/QUICK_START.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/QUICK_START.md
-* Owner: Moko Consulting
-* Version: 03.06.03
-* Status: Active
-* Effective Date: 2026-01-30
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-01-30 | Updated metadata to MokoStandards format             | GitHub Copilot  |
-| 2025-01-04 | Initial quick start guide created                    | GitHub Copilot  |

docs/README.md

@@ -1,188 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
- 
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- 
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template.Site
- INGROUP: MokoOnyx.Documentation
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/README.md
- VERSION: 03.09.03
- BRIEF: Documentation index for MokoOnyx template
- PATH: /docs/README.md
--->
-
-# MokoOnyx Documentation
-
-This directory contains comprehensive documentation for the MokoOnyx Joomla template.
-
-## Documentation Overview
-
-### Developer Documentation
-
-* **[Quick Start Guide](QUICK_START.md)** - Get up and running in 5 minutes
-  * Development environment setup
-  * Essential commands and workflows
-  * First-time contributor guide
-
-* **[Workflow Guide](WORKFLOW_GUIDE.md)** - Complete workflow reference
-  * Git branching strategy
-  * Development workflow
-  * Pull request guidelines
-
-* **[Release Process](RELEASE_PROCESS.md)** ⭐ - Complete release documentation
-  * Automated release workflow with GitHub Actions
-  * Manual release procedures
-  * Update server configuration
-  * Testing and rollback procedures
-  * Build scripts and tools
-
-* **[Joomla Development Guide](JOOMLA_DEVELOPMENT.md)** - Joomla-specific development
-  * Testing with Codeception
-  * PHP quality checks (PHPStan, PHPCS)
-  * Joomla extension packaging
-  * Multi-version testing
-
-* **[Manual Deployment Guide](MANUAL_DEPLOYMENT.md)** - Deploy src directory without building
-  * Understanding src vs. installed structure
-  * Manual deployment methods (copy, symlink)
-  * Troubleshooting language files and media
-  * Best practices for development deployments
-
-* **[CSS Variables Reference](CSS_VARIABLES.md)** - Complete CSS customization guide
-  * All available CSS variables
-  * Custom color palette creation
-  * Usage examples and tips
-  * Light and dark mode theming
-
-* **[Module & Component Overrides](MODULE_OVERRIDES.md)** - Mobile-responsive overrides guide
-  * 16 module overrides + 12 component overrides
-  * VirtueMart, Community Builder, JEM, Kunena, industry extensions
-  * Mobile-first responsive design patterns
-  * Accessibility features and customization
-
-* **[Override Philosophy](OVERRIDE_PHILOSOPHY.md)** ⭐ - Alternative layouts, not replacements
-  * Why overrides use `mobile.php` naming instead of `default.php`
-  * How to activate alternative layouts in Joomla
-  * Benefits of non-replacing overrides
-  * Developer guidelines and best practices
-
-* **[Roadmap](ROADMAP.md)** - Version-specific roadmap
-  * Current features (v03.07.00)
-  * Feature evolution timeline
-  * Planned enhancements
-  * Development priorities
-
-### User Documentation
-
-For end-user documentation, installation instructions, and feature guides, see the main [README.md](../README.md) in the repository root.
-
-## Project Structure
-
-```
-moko-cassiopeia/
-├── docs/                    # Documentation (you are here)
-│   ├── README.md           # This file - documentation index
-│   ├── QUICK_START.md      # Quick start guide for developers
-│   ├── WORKFLOW_GUIDE.md   # Development workflow guide
-│   ├── JOOMLA_DEVELOPMENT.md # Joomla-specific development guide
-│   ├── CSS_VARIABLES.md    # CSS variables reference
-│   ├── MODULE_OVERRIDES.md # Module & component overrides guide
-│   └── ROADMAP.md          # Version-specific roadmap
-├── src/                     # Template source code (Joomla template root)
-│   ├── component.php       # Component template
-│   ├── index.php           # Main template file
-│   ├── offline.php         # Offline template
-│   ├── error.php           # Error page template
-│   ├── templateDetails.xml # Template manifest
-│   ├── html/               # Module & component overrides (16 modules, 12 components)
-│   ├── media/              # Assets (CSS, JS, images, fonts)
-│   │   ├── css/            # Stylesheets
-│   │   │   └── colors/     # Color schemes
-│   │   │       ├── light/  # Light mode color files (colors_standard.css)
-│   │   │       └── dark/   # Dark mode color files (colors_standard.css)
-│   │   ├── js/             # JavaScript files
-│   │   ├── images/         # Image assets
-│   │   └── fonts/          # Font files
-│   ├── language/           # Frontend language files
-│   │   ├── en-GB/         # English (UK) translations
-│   │   └── en-US/         # English (US) translations
-│   └── administrator/      # Backend files
-│       └── language/       # Backend language files
-│           ├── en-GB/     # English (UK) system translations
-│           └── en-US/     # English (US) system translations
-├── templates/               # Reserved for future template files
-│   └── README.md               # Templates directory guide
-├── scripts/                 # Build and utility scripts
-├── tests/                   # Automated tests
-└── .github/                # GitHub configuration and workflows
-```
-
-## Contributing
-
-Before contributing, please read:
-
-1. **[CONTRIBUTING.md](../CONTRIBUTING.md)** - Contribution guidelines and standards
-2. **[CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md)** - Community standards and expectations
-3. **[SECURITY.md](../SECURITY.md)** - Security policy and reporting procedures
-
-## Standards Compliance
-
-This project adheres to [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/MokoStandards) for:
-
-* Coding standards and formatting
-* Documentation requirements
-* Git workflow and branching
-* CI/CD pipeline configuration
-* Security scanning and dependency management
-
-## Additional Resources
-
-* **Repository**: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* **Issue Tracker**: [GitHub Issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-* **Changelog**: [CHANGELOG.md](../CHANGELOG.md)
-* **License**: [GPL-3.0-or-later](../LICENSE)
-
-## Support
-
-* **Email**: hello@mokoconsulting.tech
-* **Website**: https://mokoconsulting.tech/support/joomla-cms/moko-cassiopeia-roadmap
-
----
-
-## Metadata
-
-* Document: docs/README.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/README.md
-* Owner: Moko Consulting
-* Version: 03.07.00
-* Status: Active
-* Effective Date: 2026-01-30
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-02-22 | Added MODULE_OVERRIDES.md reference, updated version to 03.07.00 | GitHub Copilot |
-| 2026-01-30 | Added CSS Variables reference, updated version to 03.06.03 | GitHub Copilot |
-| 2026-01-09 | Initial documentation index created for MokoStandards compliance. | GitHub Copilot |
-| 2026-01-27 | Updated with roadmap link and version to 03.05.01.   | GitHub Copilot  |

docs/RELEASE_PROCESS.md

@@ -1,638 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
- 
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- 
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template.Site
- INGROUP: MokoOnyx.Documentation
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/RELEASE_PROCESS.md
- VERSION: 03.09.03
- BRIEF: Complete release process documentation for MokoOnyx
- PATH: /docs/RELEASE_PROCESS.md
--->
-
-# Release Process — MokoOnyx
-
-This document describes the complete release process for MokoOnyx Joomla template, including automated workflows and manual procedures.
-
-## Table of Contents
-
-1. [Overview](#overview)
-2. [Release Types](#release-types)
-3. [Automated Release Process](#automated-release-process)
-4. [Manual Release Process](#manual-release-process)
-5. [Update Server Configuration](#update-server-configuration)
-6. [Testing Releases](#testing-releases)
-7. [Rollback Procedures](#rollback-procedures)
-8. [Troubleshooting](#troubleshooting)
-
----
-
-## Overview
-
-MokoOnyx uses an automated release system powered by GitHub Actions. The system:
-
-- **Builds** installation packages automatically
-- **Generates** checksums for security verification
-- **Creates** GitHub Releases with downloadable artifacts
-- **Updates** the Joomla update server (`updates.xml`) automatically
-- **Validates** package integrity with SHA-256 hashes
-
-### Key Components
-
-1. **Release Workflow** (`.github/workflows/release.yml`): Builds and publishes releases
-2. **Auto-Update SHA** (`.github/workflows/auto-update-sha.yml`): Updates `updates.xml` after release
-3. **Build Script** (`scripts/build-release.sh`): Local development builds
-4. **Update Server** (`updates.xml`): Joomla update server manifest
-
----
-
-## Release Types
-
-### Patch Release (Third Digit)
-
-**Format**: `XX.XX.XX` → `XX.XX.XX+1` (e.g., `03.08.03` → `03.08.04`)
-
-**When to use**:
-- Bug fixes
-- Security patches
-- Documentation updates
-- Minor CSS/styling tweaks
-- No breaking changes
-
-**Example**: `03.08.03` → `03.08.04`
-
-### Minor Release (Second Digit)
-
-**Format**: `XX.XX.00` → `XX.XX+1.00` (e.g., `03.08.03` → `03.09.00`)
-
-**When to use**:
-- New features
-- New module/component overrides
-- Significant styling changes
-- Backward-compatible changes
-
-**Example**: `03.08.03` → `03.09.00`
-
-### Major Release (First Digit)
-
-**Format**: `XX.00.00` → `XX+1.00.00` (e.g., `03.08.03` → `04.00.00`)
-
-**When to use**:
-- Breaking changes
-- Major architecture changes
-- Joomla version upgrades
-- Complete redesigns
-
-**Example**: `03.08.03` → `04.00.00`
-
----
-
-## Automated Release Process
-
-**Recommended for most releases**
-
-### Prerequisites
-
-- [ ] All changes merged to `main` branch
-- [ ] Tests passing
-- [ ] Documentation updated
-- [ ] CHANGELOG.md updated
-- [ ] Local testing completed
-
-### Step 1: Prepare Release Branch
-
-```bash
-# Create release branch
-git checkout main
-git pull
-git checkout -b release/03.08.04
-
-# Update version in templateDetails.xml
-# Edit: src/templateDetails.xml
-# Change: <version>03.08.03</version>
-# To:     <version>03.08.04</version>
-
-# Update CHANGELOG.md
-# Add new section:
-## [03.08.04] - 2026-02-27
-
-### Added
-- Feature descriptions
-
-### Fixed
-- Bug fix descriptions
-
-### Changed
-- Change descriptions
-
-# Commit changes
-git add src/templateDetails.xml CHANGELOG.md
-git commit -m "chore: Prepare release 03.08.04"
-git push origin release/03.08.04
-```
-
-### Step 2: Create Pull Request
-
-1. Go to GitHub repository
-2. Click "Pull requests" → "New pull request"
-3. Base: `main`, Compare: `release/03.08.04`
-4. Title: `Release 03.08.04`
-5. Description: Copy relevant CHANGELOG entries
-6. Create pull request
-7. Review and merge
-
-### Step 3: Create and Push Tag
-
-```bash
-# Switch to main and pull changes
-git checkout main
-git pull
-
-# Create tag
-git tag 03.08.04
-
-# Push tag (triggers release workflow)
-git push origin 03.08.04
-```
-
-### Step 4: Monitor Automated Process
-
-1. **Go to GitHub Actions tab**
-2. **Watch "Create Release" workflow**:
-   - Builds package
-   - Generates checksums
-   - Creates GitHub Release
-   - Uploads artifacts
-
-3. **Watch "Auto-Update SHA Hash" workflow**:
-   - Downloads release package
-   - Calculates SHA-256 hash
-   - Updates `updates.xml`
-   - Commits to main branch
-
-### Step 5: Verify Release
-
-1. **Check GitHub Release**:
-   - Go to Releases tab
-   - Verify release `03.08.04` exists
-   - Download ZIP package
-   - Verify checksums match
-
-2. **Check updates.xml**:
-   ```bash
-   git pull
-   cat updates.xml
-   ```
-   - Verify version is `03.08.04`
-   - Verify download URL is correct
-   - Verify SHA-256 hash is present
-
-3. **Test Joomla Update**:
-   - Install previous version in Joomla
-   - Go to Extensions → Update
-   - Verify update is detected
-   - Perform update
-   - Verify template works correctly
-
----
-
-## Manual Release Process
-
-**Use when automation fails or for local testing**
-
-### Step 1: Prepare Repository
-
-```bash
-# Update version numbers
-# Edit: src/templateDetails.xml
-# Edit: CHANGELOG.md
-
-# Commit changes
-git add src/templateDetails.xml CHANGELOG.md
-git commit -m "chore: Prepare release 03.08.04"
-git push
-```
-
-### Step 2: Build Package Locally
-
-```bash
-# Run build script
-./scripts/build-release.sh 03.08.04
-
-# Output will be in build/ directory:
-# - mokoonyx-src-03.08.04.zip
-# - mokoonyx-src-03.08.04.zip.sha256
-# - mokoonyx-src-03.08.04.zip.md5
-```
-
-### Step 3: Test Package
-
-```bash
-# Install in Joomla test environment
-# Extensions → Manage → Install → Upload Package File
-# Select: build/mokoonyx-src-03.08.04.zip
-
-# Test all features:
-# - Template displays correctly
-# - Module overrides work
-# - Alternative layouts selectable
-# - Dark mode works
-# - No JavaScript errors
-```
-
-### Step 4: Create GitHub Release
-
-1. **Go to GitHub Releases**
-2. **Click "Create a new release"**
-3. **Tag**: `03.08.04` (create new tag)
-4. **Release title**: `Release 03.08.04`
-5. **Description**: Copy from CHANGELOG.md
-6. **Upload files**:
-   - `mokoonyx-src-03.08.04.zip`
-   - `mokoonyx-src-03.08.04.zip.sha256`
-   - `mokoonyx-src-03.08.04.zip.md5`
-7. **Publish release**
-
-### Step 5: Update updates.xml Manually
-
-```bash
-# Extract SHA-256 hash
-cat build/mokoonyx-src-03.08.04.zip.sha256
-# Example output: a1b2c3d4e5f6...
-
-# Edit updates.xml
-# Update <version>03.08.04</version>
-# Update <creationDate>2026-02-27</creationDate>
-# Update <downloadurl>https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/releases/download/03.08.04/mokoonyx-src-03.08.04.zip</downloadurl>
-# Update <sha256>sha256:a1b2c3d4e5f6...</sha256>
-
-# Commit and push
-git add updates.xml
-git commit -m "chore: Update updates.xml for release 03.08.04"
-git push
-```
-
----
-
-## Update Server Configuration
-
-### updates.xml Structure
-
-```xml
-<updates>
-  <update>
-    <name>MokoOnyx</name>
-    <description>Moko Consulting's site template based on Cassiopeia.</description>
-    <element>mokoonyx</element>
-    <type>template</type>
-    <client>site</client>
-
-    <version>03.08.04</version>
-    <creationDate>2026-02-27</creationDate>
-    <author>Jonathan Miller || Moko Consulting</author>
-    <authorEmail>hello@mokoconsulting.tech</authorEmail>
-    <copyright>(C)GNU General Public License Version 3 - 2026 Moko Consulting</copyright>
-
-    <infourl title='MokoOnyx'>https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx</infourl>
-
-    <downloads>
-      <downloadurl type='full' format='zip'>https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/releases/download/03.08.04/mokoonyx-src-03.08.04.zip</downloadurl>
-      <sha256>sha256:a1b2c3d4e5f6...</sha256>
-    </downloads>
-
-    <tags>
-      <tag>stable</tag>
-    </tags>
-
-    <maintainer>Moko Consulting</maintainer>
-    <maintainerurl>https://www.mokoconsulting.tech</maintainerurl>
-
-    <targetplatform name='joomla' version='5.*'/>
-  </update>
-</updates>
-```
-
-### Hosting Update Server
-
-The `updates.xml` file is hosted directly on GitHub:
-
-**URL**: `https://raw.githubusercontent.com/mokoconsulting-tech/MokoOnyx/main/updates.xml`
-
-This URL is configured in `src/templateDetails.xml`:
-
-```xml
-<updateservers>
-  <server type="extension" name="MokoOnyx Updates" priority="1">
-    https://raw.githubusercontent.com/mokoconsulting-tech/MokoOnyx/main/updates.xml
-  </server>
-</updateservers>
-```
-
----
-
-## Testing Releases
-
-### Pre-Release Testing
-
-```bash
-# 1. Build package locally
-./scripts/build-release.sh
-
-# 2. Set up Joomla test environment
-# - Clean Joomla 5.x installation
-# - Previous MokoOnyx version installed
-
-# 3. Test current version features
-# - All module overrides
-# - Alternative layouts
-# - Dark mode toggle
-# - Responsive behavior
-
-# 4. Install new package
-# Extensions → Manage → Install → Upload Package
-
-# 5. Verify upgrade process
-# - No errors during installation
-# - Settings preserved
-# - Custom modifications retained
-
-# 6. Test new features
-# - New functionality works
-# - Bug fixes applied
-# - No regressions
-```
-
-### Update Server Testing
-
-```bash
-# 1. Install previous version in Joomla
-# 2. Go to: Extensions → Update
-# 3. Click "Find Updates"
-# 4. Verify update shows: "MokoOnyx 03.08.04"
-# 5. Click "Update"
-# 6. Verify successful update
-# 7. Test template functionality
-```
-
-### Checklist
-
-- [ ] Package installs without errors
-- [ ] Template activates correctly
-- [ ] All module overrides work
-- [ ] Alternative layouts selectable
-- [ ] Dark mode functions
-- [ ] Responsive on mobile/tablet/desktop
-- [ ] No JavaScript console errors
-- [ ] No PHP errors in Joomla logs
-- [ ] Update server detects new version
-- [ ] Update process completes successfully
-
----
-
-## Rollback Procedures
-
-### Rollback Release
-
-If a release has critical issues:
-
-1. **Delete GitHub Release**:
-   - Go to Releases
-   - Click release to delete
-   - Click "Delete"
-   - Confirm deletion
-
-2. **Delete Git Tag**:
-   ```bash
-   # Delete local tag
-   git tag -d 03.08.04
-   
-   # Delete remote tag
-   git push --delete origin 03.08.04
-   ```
-
-3. **Revert updates.xml**:
-   ```bash
-   # Revert to previous version
-   git revert <commit-hash-of-auto-update>
-   git push
-   ```
-
-4. **Notify Users**:
-   - Create GitHub issue explaining the problem
-   - Pin the issue
-   - Provide rollback instructions for users
-
-### User Rollback Instructions
-
-For users who installed the problematic version:
-
-1. **Download previous version** from GitHub Releases
-2. **Uninstall current version**:
-   - Extensions → Manage → Manage
-   - Find MokoOnyx
-   - Click "Uninstall"
-3. **Install previous version**:
-   - Extensions → Manage → Install
-   - Upload previous version ZIP
-4. **Verify functionality**
-
----
-
-## Troubleshooting
-
-### Release Workflow Fails
-
-**Problem**: Build fails with "rsync: command not found"
-
-**Solution**: The GitHub Actions runner always has rsync installed. If this occurs, check the workflow file syntax.
-
-**Problem**: ZIP creation fails
-
-**Solution**: Check that `src/` and `src/media/` directories exist and contain files.
-
-**Problem**: Version update fails
-
-**Solution**: Verify `sed` commands in workflow match actual XML structure.
-
-### Auto-Update SHA Fails
-
-**Problem**: Cannot download release package
-
-**Solution**: 
-- Verify release was published (not draft)
-- Check package naming: `mokoonyx-src-{version}.zip`
-- Verify release tag format
-
-**Problem**: SHA-256 hash mismatch
-
-**Solution**:
-- Package may have been modified after calculation
-- Re-run the workflow manually
-- Verify package integrity
-
-**Problem**: Commit fails
-
-**Solution**:
-- Check workflow has write permissions
-- Verify no branch protection rules blocking bot commits
-
-### Manual Build Issues
-
-**Problem**: `./scripts/build-release.sh: Permission denied`
-
-**Solution**:
-```bash
-chmod +x scripts/build-release.sh
-./scripts/build-release.sh
-```
-
-**Problem**: Build directory exists
-
-**Solution**:
-```bash
-rm -rf build/
-./scripts/build-release.sh
-```
-
-### Update Server Issues
-
-**Problem**: Joomla doesn't detect update
-
-**Solution**:
-1. Check `updates.xml` is accessible:
-   ```bash
-   curl https://raw.githubusercontent.com/mokoconsulting-tech/MokoOnyx/main/updates.xml
-   ```
-2. Verify version number is higher than installed version
-3. Clear Joomla cache: System → Clear Cache
-4. Check update URL in templateDetails.xml
-
-**Problem**: Update fails with "Invalid package"
-
-**Solution**:
-- Verify SHA-256 hash matches
-- Re-download package and check integrity
-- Verify package structure is correct
-
----
-
-## Best Practices
-
-### Version Numbering
-
-- **Always increment** version numbers sequentially
-- **Never reuse** version numbers
-- **Use consistent** format: `XX.XX.XX`
-
-### Changelog
-
-- **Update before** release
-- **Include all changes** since last version
-- **Categorize** changes: Added, Changed, Fixed, Removed
-- **Write clear descriptions** for users
-
-### Testing
-
-- **Test locally** before pushing tag
-- **Test update process** from previous version
-- **Test on clean** Joomla installation
-- **Test different** configurations
-
-### Communication
-
-- **Announce releases** on GitHub Discussions
-- **Document breaking changes** clearly
-- **Provide migration guides** for major changes
-- **Respond promptly** to issue reports
-
----
-
-## Quick Reference
-
-### Automated Release Commands
-
-```bash
-# 1. Create release branch
-git checkout -b release/03.08.04
-
-# 2. Update version and CHANGELOG
-# (edit files)
-
-# 3. Commit and push
-git add .
-git commit -m "chore: Prepare release 03.08.04"
-git push origin release/03.08.04
-
-# 4. Create and merge PR (via GitHub UI)
-
-# 5. Create and push tag
-git checkout main
-git pull
-git tag 03.08.04
-git push origin 03.08.04
-
-# 6. Wait for automation to complete
-```
-
-### Manual Release Commands
-
-```bash
-# Build locally
-./scripts/build-release.sh 03.08.04
-
-# Test installation
-# (manual Joomla testing)
-
-# Create release on GitHub
-# (via GitHub UI)
-
-# Update updates.xml
-# (edit file with SHA-256)
-git add updates.xml
-git commit -m "chore: Update updates.xml for 03.08.04"
-git push
-```
-
----
-
-## Related Documentation
-
-- **Build Scripts**: [scripts/README.md](../scripts/README.md)
-- **Workflow Guide**: [WORKFLOW_GUIDE.md](WORKFLOW_GUIDE.md)
-- **Contributing**: [CONTRIBUTING.md](../CONTRIBUTING.md)
-- **Changelog**: [CHANGELOG.md](../CHANGELOG.md)
-
----
-
-## Support
-
-- **Issues**: [GitHub Issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-- **Discussions**: [GitHub Discussions](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/discussions)
-- **Email**: hello@mokoconsulting.tech
-
----
-
-## License
-
-Copyright (C) 2026 Moko Consulting
-
-This documentation is licensed under GPL-3.0-or-later.

docs/ROADMAP.md

@@ -1,946 +0,0 @@
-<!--
- Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-
- This file is part of a Moko Consulting project.
-
- SPDX-License-Identifier: GPL-3.0-or-later
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
- 
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- 
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-
- # FILE INFORMATION
- DEFGROUP: Joomla.Template.Site
- INGROUP: MokoOnyx.Documentation
- REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- FILE: docs/ROADMAP.md
- VERSION: 03.09.03
- BRIEF: Version-specific roadmap for MokoOnyx template
- PATH: /docs/ROADMAP.md
--->
-
-# MokoOnyx Roadmap (VERSION: 03.09.03)
-
-This document provides a comprehensive, version-specific roadmap for the MokoOnyx Joomla template, tracking feature evolution, current capabilities, and planned enhancements.
-
-## Table of Contents
-
-- [Version Timeline](#version-timeline)
-  - [Past Releases](#past-releases)
-  - [Future Roadmap (5-Year Plan)](#future-roadmap-5-year-plan)
-- [Current Release (v03.06.03)](#current-release-v030603)
-- [Implemented Features](#implemented-features)
-- [Planned Features](#planned-features)
-- [Development Priorities](#development-priorities)
-- [Long-term Vision](#long-term-vision)
-- [External Resources](#external-resources)
-
----
-
-## Version Timeline
-
-### Past Releases
-
-### v03.05.01 (2026-01-09) - Standards & Security
-**Status**: Released (CHANGELOG entry exists, code files pending version update)
-
-**Added**:
-- Dependency review workflow for vulnerability scanning
-- Standards compliance workflow for MokoStandards validation
-- Dependabot configuration for automated security updates
-- Documentation index (`docs/README.md`)
-
-**Changed**:
-- Removed custom CodeQL workflow (using GitHub's default setup)
-- Enforced repository compliance with MokoStandards
-- Improved security posture with automated scanning
-
-### v03.06.00 (2026-01-28) - Version Update
-**Status**: Current Release (in code)
-
-**Changed**:
-- Updated version to 03.06.00 across all files
-
-### v03.05.00 (2026-01-04) - Workflow & Governance
-**Status**: Mentioned in CHANGELOG (v03.05.00)
-
-**Added**:
-- `.github/workflows` directory structure
-- CODE_OF_CONDUCT.md from MokoStandards
-- CONTRIBUTING.md from MokoStandards
-
-**Changed**:
-- TODO items to be split to separate file (tracked)
-
-### v03.01.00 (2025-12-16) - CI/CD Foundation
-**Added**:
-- Initial GitHub Actions workflows
-
-### v03.00.00 (2025-12-09) - Font Awesome 7 Upgrade
-**Updated**:
-- Copyright headers to MokoCodingDefaults standards
-- Fixed color style injection in `index.php`
-- Upgraded Font Awesome 6 to Font Awesome 7 Free
-- Added Font Awesome 7 Free style fallback
-
-**Removed**:
-- Deprecated CODE_OF_CONDUCT.md
-- Deprecated CONTRIBUTING.md
-
-### v02.01.05 (2025-09-04) - CSS Refinement
-**Fixed**:
-- Removed vmbasic.css
-- Repaired template.css and colors_standard.css
-
-### v02.00.00 (2025-08-30) - Dark Mode & TOC
-**Major Features**:
-- **Dark Mode Toggle System**
-  - Frontend toggle switch with localStorage persistence
-  - Admin-configurable default mode
-  - CSS rules for light/dark themes
-  - JavaScript-powered mode switching
-
-- **Enhanced Template Parameters**
-  - Logo parameter support
-  - GTM container ID configuration
-  - Dark mode defaults in settings
-  - Updated metadata and copyright headers
-
-- **Expanded Table of Contents**
-  - Automatic TOC injection
-  - User-selectable placement (`toc-left` or `toc-right`)
-  - Article options integration
-
-**Improvements**:
-- Cleaned up `index.php` (removed duplicate skip-to-content calls)
-- Consolidated JavaScript asset loading
-- Streamlined CSS for toggle switch
-- Accessibility refinements (typography, color contrast)
-- Fixed missing logo parameter in header
-- Corrected stylesheet inconsistencies
-- Patched redundant script includes
-
-### v01.00.00 - Initial Public Release
-**Core Features**:
-- Font Awesome 6 integration
-- Bootstrap 5 helpers and utilities
-- Automatic Table of Contents (TOC) utility
-- Moko Expansions: Google Tag Manager / GA4 hooks
-- Built on Joomla's Cassiopeia template
-
----
-
-### Future Roadmap (5-Year Plan)
-
-The following versions represent our planned annual major releases, each building upon the previous version's foundation.
-
-#### v02.00.00 (Q3 2026) - Clean Slate
-**Status**: Planned
-**Target Release**: Q3 2026
-
-**Breaking Changes**:
-- **Remove MokoCassiopeia migration script** — the `helper/migrate.php` bootstrap in `index.php` and the `.migrated` marker file will be removed. All MokoCassiopeia users must migrate before upgrading to v02.
-- **Remove MokoCassiopeia references** — all `str_replace(mokocassiopeia, mokoonyx)` logic, old name constants, and legacy compatibility code will be cleaned out.
-- **Remove `script.php` bridge logic** — the `postflight()` migration code for MokoCassiopeia will be removed.
-
-**New Features**:
-- Clean codebase with no migration overhead
-- Performance improvements from removing first-load migration check
-- Fresh start for MokoOnyx-native development
-
-**Migration Notice**:
-Users still running MokoCassiopeia must install MokoOnyx v01.x first to migrate their settings before upgrading to v02. The v01.x line will remain available for download.
-
----
-
-#### v04.00.00 (Q4 2027) - Enhanced Accessibility & Performance
-**Status**: Planned  
-**Target Release**: December 2027
-
-**Major Template Features**:
-- **WCAG 2.1 AA Compliance**
-  - Full accessibility audit and remediation
-  - High-contrast theme options
-  - Screen reader optimizations
-  - Keyboard navigation enhancements
-  - ARIA landmark improvements
-  - Skip navigation enhancements
-
-- **Template Performance Optimizations**
-  - Critical CSS inlining for faster first paint
-  - Lazy loading for images and below-fold content
-  - WebP image support with automatic fallbacks
-  - Advanced asset bundling and minification
-  - Template asset caching (CSS/JS bundles)
-
-- **Enhanced Layout System**
-  - Additional responsive grid layouts
-  - Flexible module position system
-  - Column layout presets (2-col, 3-col, 4-col variations)
-  - Grid/masonry article layouts
-  - Sticky sidebar options
-
-- **Typography Enhancements**
-  - Advanced typography controls in template settings
-  - Additional font pairing presets
-  - Custom font upload support
-  - Line height and letter spacing controls
-  - Responsive typography scaling
-
-- **Developer Experience**
-  - Development mode enablement (unminified assets, debug output)
-  - Live reload during development
-  - Enhanced error logging and diagnostics
-  - Template debugging tools
-  - Style guide generator
-
-- **Content Display Features**
-  - Soft offline mode (category-based access during maintenance)
-  - Enhanced article layouts (grid, masonry, timeline)
-  - Image caption styling options
-  - Quote block styling variations
-  - Enhanced breadcrumb customization
-
-**Template Infrastructure**:
-- Expanded template parameter validation
-- Enhanced template override detection
-- Automated template compatibility testing
-- Template performance profiling tools
-
----
-
-#### v05.00.00 (Q4 2028) - Advanced Layouts & Template Customization
-**Status**: Planned  
-**Target Release**: December 2028
-
-**Major Template Features**:
-- **Enhanced Layout Builder**
-  - Template-based page layout variations
-  - Configurable layout options via template parameters
-  - Layout presets library (blog, portfolio, business, magazine)
-  - Module position layout manager
-  - Visual layout preview in admin
-
-- **Advanced Styling System**
-  - Extended color palette management (unlimited custom palettes)
-  - CSS variable editor in template settings
-  - Style presets for different site types
-  - Border radius and spacing controls
-  - Box shadow and effect controls
-
-- **Template Component Enhancements**
-  - Enhanced menu styling options (mega menu support)
-  - Advanced header variations (transparent, sticky, minimal)
-  - Footer layout options (column variations, widgets)
-  - Sidebar styling and behavior options
-  - Hero section templates and variations
-
-- **Content Display Options**
-  - Article intro/full text display controls
-  - Category layout variations (grid, list, masonry, cards)
-  - Featured content sections
-  - Related articles display options
-  - Author bio box styling
-
-- **Responsive Design Improvements**
-  - Mobile-first navigation patterns
-  - Tablet-specific layout controls
-  - Responsive image sizing options
-  - Mobile header variations
-  - Touch-friendly interface elements
-
-- **Template Integration Features**
-  - Enhanced VirtueMart template overrides
-  - Contact form styling variations
-  - Search result layout options
-  - Error page customization
-  - Archive page templates
-
-**Template Infrastructure**:
-- Joomla 6.x template compatibility (if released)
-- PHP 8.2+ support
-- Template child theme support
-- Template preset import/export functionality
-
----
-
-#### v06.00.00 (Q4 2029) - Template Extensions & Advanced Features
-**Status**: Planned  
-**Target Release**: December 2029
-
-**Major Template Features**:
-- **Template Marketplace & Extensions**
-  - Template addon system for modular features
-  - Community-contributed template extensions
-  - Template preset marketplace
-  - Style pack distribution system
-  - Template component library
-
-- **Advanced Module System**
-  - Custom module chrome options
-  - Module animation effects
-  - Module visibility controls (scroll, time-based)
-  - Module group management
-  - Module style inheritance
-
-- **Enhanced Media Handling**
-  - Background image options per page/section
-  - Image overlay controls
-  - Parallax scrolling effects
-  - Video background support
-  - Gallery template variations
-
-- **Template Branding Options**
-  - Multiple logo upload (standard, retina, mobile)
-  - Favicon and app icon management
-  - Custom loading screen/animations
-  - Watermark options
-  - Brand color scheme generator
-
-- **Advanced Header/Footer**
-  - Multiple header layout presets
-  - Sticky header variations and behaviors
-  - Header transparency controls
-  - Footer widget areas expansion
-  - Floating action buttons
-
-- **Content Enhancement Features**
-  - Reading progress indicator
-  - Social sharing buttons (template-integrated)
-  - Print-friendly styles
-  - Reading time estimation display
-  - Content table enhancements
-
-- **Template SEO Features**
-  - Schema markup templates for common types
-  - Open Graph tag management
-  - Twitter Card support
-  - Breadcrumb schema integration
-  - Meta tag template controls
-
-**Template Infrastructure**:
-- Template versioning system
-- Template backup/restore functionality
-- Template A/B testing support
-- Multi-language template variations
-- Template documentation generator
-
----
-
-#### v07.00.00 (Q4 2030) - Modern Template Standards & Enhancements
-**Status**: Planned  
-**Target Release**: December 2030
-
-**Major Template Features**:
-- **Modern CSS Features**
-  - CSS Grid layout system integration
-  - CSS Container Queries support
-  - CSS Cascade Layers implementation (layered style priority system)
-  - Custom properties (CSS variables) UI
-  - Modern filter and backdrop effects
-
-- **Progressive Template Features**
-  - Offline-capable template assets
-  - Service worker template integration
-  - App manifest generation
-  - Install to home screen support
-  - Template asset preloading strategies
-
-- **Animation & Interaction**
-  - Scroll-triggered animations
-  - Hover effect library
-  - Page transition effects
-  - Micro-interactions for UI elements
-  - Loading animation options
-
-- **Advanced Responsive Features**
-  - Container-based responsive design
-  - Element visibility by viewport
-  - Responsive navigation patterns library
-  - Mobile-optimized interactions
-  - Adaptive image loading
-
-- **Template Accessibility Features**
-  - Focus indicators customization
-  - Reduced motion preferences support
-  - High contrast mode automation
-  - Keyboard navigation patterns
-  - ARIA live regions for dynamic content
-
-- **Content Presentation**
-  - Advanced blockquote styles
-  - Code snippet highlighting themes
-  - Table styling variations
-  - List styling options
-  - Custom content block templates
-
-- **Template Performance**
-  - Resource hints (preconnect, prefetch)
-  - Optimal asset delivery strategies
-  - Image format optimization (AVIF support)
-  - Font loading optimization
-  - Template metrics dashboard
-
-**Template Infrastructure**:
-- Template pattern library
-- Design token system
-- Template component documentation
-- Automated template testing suite
-- Template performance monitoring
-
----
-
-#### v08.00.00 (Q4 2031) - Next-Generation Template Features
-**Status**: Conceptual  
-**Target Release**: December 2031
-
-**Major Template Features**:
-- **Advanced Layout Systems**
-  - Subgrid support for complex layouts
-  - Multi-column layout variations
-  - Asymmetric grid systems
-  - Dynamic layout switching
-  - Layout constraint system
-
-- **Enhanced Visual Customization**
-  - Real-time style editor
-  - Template style variations manager
-  - Custom CSS injection with validation
-  - Style inheritance and override system
-  - Visual design tokens editor
-
-- **Template Component Library**
-  - Comprehensive UI component set
-  - Reusable template blocks
-  - Component variation system
-  - Template snippet library
-  - Pattern library integration
-
-- **Advanced Typography System**
-  - Variable font support
-  - Advanced typographic scales
-  - Font pairing recommendations
-  - Fluid typography system
-  - Custom font fallback chains
-
-- **Template Integration Features**
-  - Enhanced component overrides
-  - Template hooks system
-  - Event-based template modifications
-  - Custom field rendering templates
-  - Module position API enhancements
-
-- **Responsive & Adaptive Design**
-  - Advanced breakpoint management
-  - Element-specific responsive controls
-  - Adaptive images with art direction
-  - Responsive typography system
-  - Context-aware component rendering
-
-- **Template Ecosystem**
-  - Child template framework
-  - Template derivative system
-  - Community template marketplace
-  - Template rating and review system
-  - Professional template support network
-
-- **Template Quality & Maintenance**
-  - Automated accessibility testing
-  - Template performance auditing
-  - Code quality monitoring
-  - Update notification system
-  - Template health dashboard
-
-**Template Infrastructure**:
-- Template API for extensibility
-- Template package manager
-- Template development CLI tools
-- Template migration utilities
-- Comprehensive template documentation system
-
----
-
-## Current Release (v03.06.03)
-
-### System Requirements
-- **Joomla**: 4.4.x or 5.x
-- **PHP**: 8.0+
-- **Database**: MySQL/MariaDB compatible
-
-### Architecture
-- **Base Template**: Joomla Cassiopeia
-- **Enhancement Layer**: Non-invasive overrides
-- **Asset Management**: Joomla Web Asset Manager (WAM)
-- **Frontend Framework**: Bootstrap 5
-- **Icon Library**: Font Awesome 7 Free
-
----
-
-## Implemented Features
-
-### 🎨 Theming & Visual Design
-
-#### Color Palette System
-- **3 Built-in Palettes**: Standard, Alternative, Custom
-- **Dual Mode Support**: Separate light and dark configurations
-- **Custom Palettes**: User-definable via `colors_custom.css`
-- **Location**: `src/media/css/colors/{light|dark}/`
-
-#### Dark Mode System
-- **Toggle Controls**: Switch (Light↔Dark) or Radios (Light/Dark/System)
-- **Default Mode**: Admin-configurable (system, light, or dark)
-- **Persistence**: localStorage for user preferences
-- **Auto-Detection**: Optional system preference detection
-- **Meta Tags**: `color-scheme` and `theme-color` support
-- **ARIA Bridge**: Bootstrap ARIA compatibility
-
-#### Typography
-- **Font Schemes**:
-  - Local: Roboto
-  - Web (Google Fonts): Fira Sans, Roboto + Noto Sans
-- **Admin-Configurable**: Template settings dropdown
-
-#### Branding
-- **Logo Support**: Custom logo upload
-- **Site Title**: Text-based branding option
-- **Site Description**: Tagline/subtitle field
-- **Font Awesome Kit**: Optional custom kit integration
-
-### 📐 Layout & Structure
-
-#### Module Positions (23 Total)
-**Header Area**:
-- topbar, below-topbar, below-logo, menu, search, banner
-
-**Content Area**:
-- top-a, top-b, main-top, main-bottom, breadcrumbs
-- sidebar-left, sidebar-right
-
-**Footer Area**:
-- bottom-a, bottom-b, footer-menu, footer
-
-**Special**:
-- debug, offline-header, offline, offline-footer
-- drawer-left, drawer-right
-
-#### Layout Options
-- **Container Type**: Fluid or Static
-- **Sticky Header**: Optional fixed navigation
-- **Back-to-Top Button**: Scrollable page support
-
-### 📝 Content Features
-
-#### Table of Contents (TOC)
-- **Automatic Generation**: From article headings
-- **Placement Options**: `toc-left` or `toc-right` layouts
-- **Article Integration**: Via Options → Layout dropdown
-- **Responsive**: Mobile-friendly sidebar placement
-
-#### Article Layouts
-- **Default**: Standard Cassiopeia layout
-- **TOC Variants**: Left-sidebar or right-sidebar TOC
-- **Custom Overrides**: Located in `html/com_content/article/`
-
-### 📊 Analytics & Tracking
-
-#### Google Tag Manager (GTM)
-- **Enable/Disable**: Admin toggle
-- **Container ID**: Template parameter field
-- **Implementation**: Head and body script injection
-- **GDPR-Ready**: Configurable consent defaults
-
-#### Google Analytics 4 (GA4)
-- **Enable/Disable**: Admin toggle
-- **Property ID**: Template parameter field
-- **Universal Analytics Fallback**: Legacy UA support
-- **Privacy-First**: Conditional loading based on settings
-
-#### Smart Visitor Detection
-- **Enable/Disable**: Admin toggle (default: enabled)
-- **Visitor Type**: Pushes `logged_in` or `guest` to dataLayer
-- **Visitor Group**: Pushes highest-privilege Joomla user group name (e.g., "Registered", "Author")
-- **Page Type**: Pushes component + view (e.g., `com_content.article`)
-- **GA4 User Properties**: Sets `visitor_type` and `visitor_group` as persistent user-scoped dimensions
-- **Privacy-Safe**: No PII (usernames, emails, or user IDs) is ever sent
-- **Dual Integration**: Works with both GTM (`moko.visitor_detect` event) and standalone GA4 (`user_properties`)
-
-### 🎛️ Customization & Developer Tools
-
-#### Custom Code Injection
-- **Head Start**: Custom HTML/JS before `</head>`
-- **Head End**: Custom HTML/JS at end of `<head>`
-- **Raw HTML**: Unfiltered code injection for advanced users
-
-#### Drawer System
-- **Left/Right Drawers**: Offcanvas menu areas
-- **Icon Customization**: Font Awesome icon selection
-- **Default Icons**:
-  - Left: `fa-solid fa-chevron-right`
-  - Right: `fa-solid fa-chevron-left`
-
-#### Asset Management
-- **Joomla WAM**: Complete asset registry in `joomla.asset.json`
-- **Development/Production Modes**: Minified and unminified assets
-- **Dependency Management**: Automatic script/style loading
-
-### 🏗️ Template Overrides
-
-#### Component Overrides
-**Content (com_content)**:
-- Article layouts (default, toc-left, toc-right)
-- Category layouts (blog, list)
-- Featured articles
-
-**Contact (com_contact)**:
-- Contact form layouts
-
-**Engage (com_engage)**:
-- Comment system integration
-
-#### Module Overrides
-**Menu (mod_menu)**:
-- Metis dropdown menu
-- Offcanvas navigation
-
-**VirtueMart**:
-- Product display (`mod_virtuemart_product`)
-- Shopping cart (`mod_virtuemart_cart`)
-- Manufacturer display (`mod_virtuemart_manufacturer`)
-- Category display (`mod_virtuemart_category`)
-- Currency selector (`mod_virtuemart_currencies`)
-
-**Other Modules**:
-- Custom HTML (`mod_custom`)
-- GABble social integration (`mod_gabble`)
-
-**Membership System (OS Membership)**:
-- Plan layouts (default, pricing tables)
-- Member management interfaces
-
-### 🔧 Configuration Parameters
-
-#### Theme Tab
-**General**:
-- `theme_enabled` - Enable/disable theme system
-- `theme_control_type` - Toggle UI type (switch/radios/none)
-- `theme_default_choice` - Default mode (system/light/dark)
-- `theme_auto_dark` - Auto-detect system preference
-- `theme_meta_color_scheme` - Inject `color-scheme` meta tag
-- `theme_meta_theme_color` - Inject `theme-color` meta tag
-- `theme_bridge_bs_aria` - Bootstrap ARIA compatibility
-
-**Variables & Palettes**:
-- `colorLightName` - Light mode color scheme
-- `colorDarkName` - Dark mode color scheme
-
-**Typography**:
-- `useFontScheme` - Font selection (local/web)
-
-**Branding & Icons**:
-- `brand` - Show/hide branding
-- `logoFile` - Logo upload path
-- `siteTitle` - Site title text
-- `siteDescription` - Site tagline
-- `fA6KitCode` - Font Awesome kit code
-
-**Header & Navigation**:
-- `stickyHeader` - Fixed navigation
-- `backTop` - Back-to-top button
-
-**Toggle UI**:
-- `theme_fab_enabled` - Floating action button for theme toggle
-- `theme_fab_pos` - FAB position (br/bl/tr/tl)
-
-#### Google Tab
-- `googletagmanager` - Enable GTM
-- `googletagmanagerid` - GTM container ID
-- `googleanalytics` - Enable GA4
-- `googleanalyticsid` - GA4 property ID
-- `googlevisitordetection` - Smart Visitor Detection (default: enabled)
-
-#### Custom Code Tab
-- `custom_head_start` - Custom code at head start
-- `custom_head_end` - Custom code at head end
-
-#### Drawers Tab
-- `drawerLeftIcon` - Left drawer icon (Font Awesome class)
-- `drawerRightIcon` - Right drawer icon (Font Awesome class)
-
-#### Advanced Tab
-- `fluidContainer` - Container layout (static/fluid)
-
-### 🛠️ Development Tools
-
-#### Quality Assurance
-- **Codeception**: Automated testing framework
-- **PHPStan**: Static analysis (level 8+)
-- **PHPCS**: Code style validation (PSR-12)
-- **PHPCompatibility**: PHP 8.0+ compatibility checks
-
-#### CI/CD Workflows
-- **Dependency Review**: Vulnerability scanning
-- **Standards Compliance**: MokoStandards validation
-- **CodeQL**: Security analysis (GitHub default)
-- **Dependabot**: Automated dependency updates
-
-#### Documentation
-- **Quick Start**: 5-minute developer setup
-- **Workflow Guide**: Git strategy, branching, releases
-- **Joomla Development**: Testing, packaging, multi-version support
-
----
-
-## Planned Features
-
-### 🚧 In Development
-
-#### Soft Offline Mode (v03.07.00 - Planned)
-**Status**: Planned for v03.07.00  
-**Priority**: High  
-**Description**: Keep selected categories accessible during site maintenance mode with persistent links to essential pages
-
-**Use Cases**:
-- Legal documents remain viewable during downtime
-- Policy pages accessible for compliance requirements
-- Terms of service always available to users
-- Privacy policy accessible at all times
-- Essential public information during maintenance
-
-**Technical Specifications**:
-- **Configuration Method**: Template parameters in `templateDetails.xml`
-- **Category Access**: Category IDs stored as comma-separated values
-- **Persistent Links**: Direct article/menu item links always visible
-- **Access Control**: Check in `offline.php` template file
-- **Content Rendering**: Use Joomla's content component to fetch articles
-- **Security**: Maintain proper access levels and permissions
-
-**Implementation Plan**:
-1. Add category selection field to template parameters
-2. Add persistent link configuration (Terms of Service, Privacy Policy, etc.)
-3. Modify `offline.php` to check for allowed categories
-4. Add persistent link display in offline mode header/footer
-5. Implement category content fetching during offline mode
-6. Add styling for offline mode category display and persistent links
-7. Test with various category and link configurations
-8. Document admin configuration steps
-
-**Configuration Interface**:
-- **Category Field Type**: Category multiselect in template settings
-  - **Label**: "Categories Accessible During Offline Mode"
-  - **Default**: None (all content hidden by default)
-- **Persistent Links**: Text fields for essential always-available links
-  - **Terms of Service URL**: Direct link to TOS article/page
-  - **Privacy Policy URL**: Direct link to privacy policy
-  - **Contact URL**: Optional contact page link
-  - **Custom Link 1-3**: Additional persistent links if needed
-- **Admin Path**: System → Site Templates → MokoOnyx → Advanced → Offline Mode Settings
-
-**Persistent Links Feature**:
-- **Display Location**: Footer of offline page
-- **Styling**: Clearly visible, accessible links
-- **Format**: "Terms of Service | Privacy Policy | Contact"
-- **Behavior**: Links bypass offline mode restrictions
-- **Validation**: Check if URLs are valid Joomla routes
-
-**Benefits**:
-- ✅ Compliance: Keep legal pages accessible
-- ✅ Transparency: Users can access essential information
-- ✅ Flexibility: Admin control over which categories remain visible
-- ✅ Security: Respects Joomla access levels
-- ✅ Legal Protection: Terms of Service always accessible
-- ✅ User Trust: Privacy policy always available
-
-**Milestone**: Target release v03.07.00 (Q2 2026)
-
-#### TODO Tracking System
-**Status**: Mentioned in CHANGELOG (v03.05.00)  
-**Description**: Separate TODO tracking file  
-**Purpose**: Centralized issue and feature tracking outside changelog
-
-### 🔮 Future Enhancements
-
-#### Development Mode (Commented Out)
-**Status**: Code exists but disabled  
-**Location**: `templateDetails.xml` line 91  
-**Description**: Comprehensive development mode toggle  
-**Potential Features**:
-- Unminified asset loading
-- Debug output
-- Performance profiling
-- Template cache bypass
-
-#### Potential Features (Community Requested)
-*Note: These are conceptual and not yet officially planned*
-
-**Enhanced Accessibility**:
-- WCAG 2.1 AAA compliance mode
-- High-contrast themes
-- Screen reader optimizations
-- Keyboard navigation improvements
-
-**Template Layout Features**:
-- Advanced responsive grid layouts
-- Multiple column variations
-- Custom module position system
-- Layout preset library
-
-**Template Styling Features**:
-- Extended color palette management
-- Custom font upload support
-- Typography scale controls
-- Visual style editor
-
----
-
-## Development Priorities
-
-### Immediate Focus (v03.x - 2026)
-1. **Bootstrap TOC Integration**: Complete and document v1.0.1 implementation ✅
-2. **Soft Offline Mode**: Implement category-based offline access (Target: v03.07.00)
-3. **TODO Tracking System**: Implement separate file for issue tracking
-4. **Security Updates**: Maintain Dependabot and CodeQL scans
-5. **Documentation**: Keep docs synchronized with features
-6. **Bug Fixes**: Address reported issues and edge cases
-
-### v04.00.00 Priorities (2027) - Template Foundation
-1. **WCAG 2.1 AA Compliance**: Full template accessibility audit and implementation
-2. **Template Performance**: Critical CSS, lazy loading, WebP support
-3. **Layout System**: Enhanced responsive grid and module positions
-4. **Development Mode**: Enable comprehensive template developer tools
-
-### v05.00.00 Priorities (2028) - Template Customization
-1. **Layout Builder**: Template-based page layout system
-2. **Styling System**: Extended color palettes and CSS variable management
-3. **Template Components**: Enhanced header, footer, and menu variations
-4. **Responsive Design**: Mobile-first navigation and layout improvements
-
-### v06.00.00 Priorities (2029) - Template Extensions
-1. **Template Marketplace**: Addon system and community extensions
-2. **Module System**: Advanced module chrome and animation options
-3. **Media Handling**: Background images, parallax, video backgrounds
-4. **Template SEO**: Schema markup templates and meta tag controls
-
-### v07.00.00+ Priorities (2030+) - Modern Standards
-1. **Modern CSS**: Grid, Container Queries, Cascade Layers
-2. **Progressive Template**: Offline-capable assets and PWA features
-3. **Animation System**: Scroll-triggered effects and micro-interactions
-4. **Template Performance**: Advanced optimization and monitoring
-
----
-
-## Long-term Vision
-
-### Mission Statement
-MokoOnyx aims to be the **most developer-friendly, user-customizable, and standards-compliant Joomla template** while maintaining minimal core overrides for maximum upgrade compatibility.
-
-### Core Principles
-1. **Non-Invasive**: Minimal Cassiopeia overrides
-2. **Standards-First**: MokoStandards compliance
-3. **Accessibility**: WCAG 2.1 compliance
-4. **Performance**: Fast, optimized delivery
-5. **Developer Experience**: Clear docs, easy setup, powerful tools
-6. **Template-Focused**: Pure template features without complex external dependencies
-
-### 5-Year Strategic Roadmap (Template Features)
-
-#### 2027 (v04.00.00) - Accessibility & Performance
-- Achieve WCAG 2.1 AA compliance for all template elements
-- Implement critical template performance optimizations
-- Enhance template layout system with flexible grids
-- Enable comprehensive development mode for template developers
-
-#### 2028 (v05.00.00) - Layouts & Customization
-- Launch template-based layout builder system
-- Deploy extended styling and customization options
-- Enhance template component variations (headers, footers, menus)
-- Improve responsive design patterns for all devices
-
-#### 2029 (v06.00.00) - Extensions & Enhancements
-- Introduce template addon and extension system
-- Launch template preset marketplace
-- Deploy advanced module styling and animation features
-- Implement comprehensive template SEO controls
-
-#### 2030 (v07.00.00) - Modern Standards
-- Adopt modern CSS standards (Grid, Container Queries, Cascade Layers)
-- Implement progressive template features (PWA support)
-- Deploy advanced animation and interaction system
-- Enhance template performance monitoring and optimization
-
-#### 2031 (v08.00.00) - Next-Generation Template
-- Advanced layout systems with subgrid support
-- Comprehensive template component library
-- Enhanced visual customization tools
-- Template ecosystem with child themes and derivatives
-
----
-
-## External Resources
-
-### Official Links
-- **Full Roadmap**: [https://mokoconsulting.tech/support/joomla-cms/mokoonyx-roadmap](https://mokoconsulting.tech/support/joomla-cms/mokoonyx-roadmap)
-- **Repository**: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-- **Issue Tracker**: [GitHub Issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues)
-- **Changelog**: [CHANGELOG.md](../CHANGELOG.md)
-
-### Community
-- **Email Support**: hello@mokoconsulting.tech
-- **Contributing**: [CONTRIBUTING.md](../CONTRIBUTING.md)
-- **Code of Conduct**: [CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md)
-
-### Documentation
-- **Quick Start**: [docs/QUICK_START.md](./QUICK_START.md)
-- **Workflow Guide**: [docs/WORKFLOW_GUIDE.md](./WORKFLOW_GUIDE.md)
-- **Joomla Development**: [docs/JOOMLA_DEVELOPMENT.md](./JOOMLA_DEVELOPMENT.md)
-- **Main README**: [README.md](../README.md)
-
----
-
-## Contributing to the Roadmap
-
-Have ideas for future features? We welcome community input!
-
-**How to Suggest Features**:
-1. Check the [GitHub Issues](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/issues) for existing requests
-2. Open a new issue with the `enhancement` label
-3. Provide clear use cases and benefits
-4. Engage in community discussion
-
-**Feature Evaluation Criteria**:
-- Alignment with core principles
-- User demand and use cases
-- Technical feasibility
-- Maintenance burden
-- Performance impact
-- Security implications
-
----
-
-## Metadata
-
-* Document: docs/ROADMAP.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/ROADMAP.md
-* Owner: Moko Consulting
-* Version: 03.06.03
-* Status: Active
-* Effective Date: 2026-01-30
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-01-27 | Initial version-specific roadmap generated from codebase scan. | GitHub Copilot |
-| 2026-01-27 | Added 5-year future roadmap with annual major version releases (v04-v08). | GitHub Copilot |
-| 2026-01-27 | Refocused roadmap to concentrate on template-oriented features only. | GitHub Copilot |

docs/WORKFLOW_GUIDE.md

@@ -1,459 +0,0 @@
-# Workflow Guide - Moko Cassiopeia
-
-Quick reference guide for GitHub Actions workflows and common development tasks.
-
-## Table of Contents
-
-- [Overview](#overview)
-- [Workflow Quick Reference](#workflow-quick-reference)
-- [Common Development Tasks](#common-development-tasks)
-- [Troubleshooting](#troubleshooting)
-- [Best Practices](#best-practices)
-
-## Overview
-
-This repository uses GitHub Actions for continuous integration, testing, quality checks, and deployment. All workflows are located in `.github/workflows/`.
-
-### Workflow Execution Model
-
-```
-┌─────────────────┐
-│  Code Changes   │
-└────────┬────────┘
-         │
-         ▼
-┌─────────────────┐
-│   CI Pipeline   │  ← Validation, Testing, Quality
-└────────┬────────┘
-         │
-         ▼
-┌─────────────────┐
-│ Version Branch  │  ← Create dev/X.Y.Z branch
-└────────┬────────┘
-         │
-         ▼
-┌─────────────────┐
-│ Release Pipeline│  ← dev → rc → version → main
-└────────┬────────┘
-         │
-         ▼
-┌─────────────────┐
-│  Distribution   │  ← ZIP package + GitHub Release
-└─────────────────┘
-```
-
-## Workflow Quick Reference
-
-### Continuous Integration (ci.yml)
-
-**Trigger:** Automatic on push/PR to main, dev/*, rc/*, version/* branches
-
-**Purpose:** Validates code quality and repository structure
-
-**What it does:**
-- ✅ Validates Joomla manifest XML
-- ✅ Checks XML well-formedness
-- ✅ Validates GitHub Actions workflows
-- ✅ Runs PHP syntax checks
-- ✅ Checks for secrets in code
-- ✅ Validates license headers
-- ✅ Verifies version alignment
-
-**When to check:** After every commit
-
-**How to view results:**
-```bash
-# Via GitHub CLI
-gh run list --workflow=ci.yml --limit 5
-gh run view <run-id> --log
-```
-
-### PHP Quality Checks (php_quality.yml)
-
-**Trigger:** Automatic on push/PR to main, dev/*, rc/*, version/* branches
-
-**Purpose:** Ensures PHP code quality and compatibility
-
-**What it does:**
-- 🔍 PHPStan static analysis (level 5)
-- 📏 PHP_CodeSniffer with PSR-12 standards
-- ✔️ PHP 8.0+ compatibility checks
-
-**Matrix:** PHP 8.0, 8.1, 8.2, 8.3
-
-**When to check:** Before committing PHP changes
-
-**How to run locally:**
-```bash
-# Install tools
-composer global require "squizlabs/php_codesniffer:^3.0" --with-all-dependencies
-composer global require "phpstan/phpstan:^1.0" --with-all-dependencies
-
-# Run checks
-phpcs --standard=phpcs.xml src/
-phpstan analyse --configuration=phpstan.neon
-```
-
-### Joomla Testing (joomla_testing.yml)
-
-**Trigger:** Automatic on push/PR to main, dev/*, rc/* branches
-
-**Purpose:** Tests template compatibility with Joomla versions
-
-**What it does:**
-- 📦 Downloads and installs Joomla (4.4, 5.0, 5.1)
-- 🔧 Installs template into Joomla
-- ✅ Validates template installation
-- 🧪 Runs Codeception tests
-
-**Matrix:** Joomla 4.4/5.0/5.1 × PHP 8.0/8.1/8.2/8.3
-
-**When to check:** Before releasing new versions
-
-**How to test locally:**
-```bash
-# See docs/JOOMLA_DEVELOPMENT.md for local testing setup
-codecept run
-```
-
-### Version Branch Creation (version_branch.yml)
-
-**Trigger:** Manual workflow dispatch
-
-**Purpose:** Creates a new version branch and bumps version numbers
-
-**What it does:**
-- 🏷️ Creates dev/*, rc/*, or version/* branch
-- 📝 Updates version in all files
-- 📅 Updates manifest dates
-- 📋 Moves CHANGELOG unreleased to version
-- ✅ Validates version hierarchy
-
-**When to use:** Starting work on a new version
-
-**How to run:**
-1. Go to Actions → Create version branch
-2. Click "Run workflow"
-3. Enter version (e.g., 03.06.00)
-4. Select branch prefix (dev/, rc/, or version/)
-5. Click "Run workflow"
-
-**Example:**
-```yaml
-new_version: 03.06.00
-branch_prefix: dev/
-version_text: beta
-```
-
-### Release Pipeline (release_pipeline.yml)
-
-**Trigger:** Manual workflow dispatch or release event
-
-**Purpose:** Promotes branches through release stages and creates distributions
-
-**What it does:**
-- 🔄 Promotes branches: dev → rc → version → main
-- 📅 Normalizes dates in manifest and CHANGELOG
-- 📦 Builds distributable ZIP package
-- 🚀 Uploads to SFTP server
-- 🏷️ Creates Git tag
-- 📋 Creates GitHub Release
-- 🔒 Attests build provenance
-
-**When to use:** Promoting a version through release stages
-
-**How to run:**
-1. Go to Actions → Release Pipeline
-2. Click "Run workflow"
-3. Select classification (auto/rc/stable)
-4. Click "Run workflow"
-
-**Release flow:**
-```
-dev/X.Y.Z → rc/X.Y.Z → version/X.Y.Z → main
-  (dev)      (RC)        (stable)      (production)
-```
-
-### Deploy to Staging (deploy_staging.yml)
-
-**Trigger:** Manual workflow dispatch
-
-**Purpose:** Deploys template to staging/development environments
-
-**What it does:**
-- ✅ Validates deployment prerequisites
-- 📦 Builds deployment package
-- 🚀 Uploads via SFTP to environment
-- 📝 Creates deployment summary
-
-**When to use:** Testing in staging before production release
-
-**How to run:**
-1. Go to Actions → Deploy to Staging
-2. Click "Run workflow"
-3. Select environment (staging/development/preview)
-4. Optionally specify version
-5. Click "Run workflow"
-
-**Required secrets:**
-- `STAGING_HOST` - SFTP hostname
-- `STAGING_USER` - SFTP username
-- `STAGING_KEY` - SSH private key (or `STAGING_PASSWORD`)
-- `STAGING_PATH` - Remote deployment path
-
-### Repository Health (repo_health.yml)
-
-**Trigger:** Manual workflow dispatch (admin only)
-
-**Purpose:** Comprehensive repository health and configuration checks
-
-**What it does:**
-- 🔐 Validates release configuration
-- 🌐 Tests SFTP connectivity
-- 📂 Checks scripts governance
-- 📄 Validates required artifacts
-- 🔍 Extended checks (SPDX, ShellCheck, etc.)
-
-**When to use:** Before major releases or when debugging deployment issues
-
-**How to run:**
-1. Go to Actions → Repo Health
-2. Click "Run workflow"
-3. Select profile (all/release/repo)
-4. Click "Run workflow"
-
-**Profiles:**
-- `all` - Run all checks
-- `release` - Release configuration and SFTP only
-- `scripts` - Scripts governance only
-- `repo` - Repository health only
-
-## Common Development Tasks
-
-### Starting a New Feature
-
-```bash
-# 1. Create a new version branch via GitHub Actions
-# Actions → Create version branch → dev/X.Y.Z
-
-# 2. Clone and checkout the new branch
-git fetch origin
-git checkout dev/X.Y.Z
-
-# 3. Make your changes
-vim src/index.php
-
-# 4. Validate locally
-make validate-required
-
-# 5. Commit and push
-git add -A
-git commit -m "feat: add new feature"
-git push origin dev/X.Y.Z
-```
-
-### Running All Validations Locally
-
-```bash
-# Run comprehensive validation suite
-make validate-required
-
-# Run quality checks
-make quality
-```
-
-### Creating a Release Package
-
-```bash
-# Package with auto-detected version
-```bash
-# Package with auto-detected version
-make package
-
-# Verify package contents
-unzip -l dist/moko-cassiopeia-*.zip
-```
-
-### Updating Version Numbers
-
-```bash
-# Via GitHub Actions (recommended)
-# Actions → Release Management workflow
-```
-
-### Updating CHANGELOG
-
-Update CHANGELOG.md manually or via pull request following the existing format.
-
-## Troubleshooting
-
-### CI Failures
-
-#### PHP Syntax Errors
-
-```bash
-# Check specific file
-php -l src/index.php
-
-# Run validation
-make validate-required
-```
-
-#### Manifest Validation Failed
-
-```bash
-# Validate manifest and XML files
-make validate-required
-```
-
-#### Version Alignment Issues
-
-```bash
-# Check version consistency
-make validate-required
-```
-
-### Workflow Failures
-
-#### "Branch already exists"
-
-```bash
-# Check existing branches
-git branch -r | grep dev/
-
-# Delete remote branch if needed (carefully!)
-git push origin --delete dev/03.06.00
-```
-
-#### "Missing required secrets"
-
-Go to repository Settings → Secrets and variables → Actions, and add:
-- `FTP_SERVER`
-- `FTP_USER`
-- `FTP_KEY` or `FTP_PASSWORD`
-- `FTP_PATH`
-
-#### SFTP Connection Failed
-
-1. Verify credentials in repo_health workflow:
-   - Actions → Repo Health → profile: release
-
-2. Check SSH key format (OpenSSH, not PuTTY PPK)
-
-3. Verify server allows connections from GitHub IPs
-
-### Quality Check Failures
-
-#### PHPStan Errors
-
-```bash
-# Run locally to see full output
-phpstan analyse --configuration=phpstan.neon
-
-# Generate baseline to ignore existing issues
-phpstan analyse --configuration=phpstan.neon --generate-baseline
-```
-
-#### PHPCS Violations
-
-```bash
-# Check violations
-phpcs --standard=phpcs.xml src/
-
-# Auto-fix where possible
-phpcbf --standard=phpcs.xml src/
-
-# Show specific error codes
-phpcs --standard=phpcs.xml --report=source src/
-```
-
-#### Joomla Testing Failed
-
-1. Check PHP/Joomla version matrix compatibility
-2. Review MySQL connection errors
-3. Verify template manifest structure
-4. Check template file paths
-
-## Best Practices
-
-### Version Management
-
-1. **Always use version branches:** dev/X.Y.Z, rc/X.Y.Z, version/X.Y.Z
-2. **Follow hierarchy:** dev → rc → version → main
-3. **Update CHANGELOG:** Document all changes in Unreleased section
-4. **Semantic versioning:** Major.Minor.Patch (03.06.00)
-
-### Code Quality
-
-1. **Run validations locally** before pushing
-2. **Fix PHPStan warnings** at level 5
-3. **Follow PSR-12** coding standards
-4. **Add SPDX license headers** to new files
-5. **Keep functions small** and well-documented
-
-### Workflow Usage
-
-1. **Use CI for every commit** - automated validation
-2. **Run repo_health before releases** - comprehensive checks
-3. **Test on staging first** - never deploy directly to production
-4. **Monitor workflow runs** - fix failures promptly
-5. **Review workflow logs** - understand what changed
-
-### Release Process
-
-1. **Create dev branch** → Work on features
-2. **Promote to rc** → Release candidate testing
-3. **Promote to version** → Stable release
-4. **Merge to main** → Production (auto-merged via PR)
-5. **Create GitHub Release** → Public distribution
-
-### Security
-
-1. **Never commit secrets** - use GitHub Secrets
-2. **Use SSH keys** for SFTP (not passwords)
-3. **Scan for secrets** - runs automatically in CI
-4. **Keep dependencies updated** - security patches
-5. **Review security advisories** - GitHub Dependabot
-
-### Documentation
-
-1. **Update docs with code** - keep in sync
-2. **Document workflow changes** - update this guide
-3. **Add examples** - show, don't just tell
-4. **Link to relevant docs** - cross-reference
-5. **Keep README current** - first impression matters
-
-## Quick Links
-
-- [Main README](../README.md) - Project overview
-- [Joomla Development Guide](./JOOMLA_DEVELOPMENT.md) - Testing and quality
-- [CHANGELOG](../CHANGELOG.md) - Version history
-- [CONTRIBUTING](../CONTRIBUTING.md) - Contribution guidelines
-
-## Getting Help
-
-1. **Check workflow logs** - Most issues have clear error messages
-2. **Review this guide** - Common solutions documented
-3. **Run validation scripts** - Identify specific issues
-4. **Open an issue** - For bugs or questions
-5. **Contact maintainers** - For access or configuration issues
-
----
-
-## Metadata
-
-* Document: docs/WORKFLOW_GUIDE.md
-* Repository: [https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx](https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx)
-* Path: /docs/WORKFLOW_GUIDE.md
-* Owner: Moko Consulting
-* Version: 03.06.03
-* Status: Active
-* Effective Date: 2026-01-30
-* Classification: Public Open Source Documentation
-
-## Revision History
-
-| Date       | Change Summary                                        | Author          |
-| ---------- | ----------------------------------------------------- | --------------- |
-| 2026-01-30 | Updated metadata to MokoStandards format             | GitHub Copilot  |
-| 2025-01-04 | Initial workflow guide created                       | GitHub Copilot  |

package-lock.json

@@ -1,144 +0,0 @@
-{
-	"name": "mokoonyx-build",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "mokoonyx-build",
-			"devDependencies": {
-				"clean-css": "^5.3.3",
-				"terser": "^5.39.0"
-			}
-		},
-		"node_modules/@jridgewell/gen-mapping": {
-			"version": "0.3.13",
-			"resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
-			"integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"@jridgewell/sourcemap-codec": "^1.5.0",
-				"@jridgewell/trace-mapping": "^0.3.24"
-			}
-		},
-		"node_modules/@jridgewell/resolve-uri": {
-			"version": "3.1.2",
-			"resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
-			"integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
-			"dev": true,
-			"license": "MIT",
-			"engines": {
-				"node": ">=6.0.0"
-			}
-		},
-		"node_modules/@jridgewell/source-map": {
-			"version": "0.3.11",
-			"resolved": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.11.tgz",
-			"integrity": "sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"@jridgewell/gen-mapping": "^0.3.5",
-				"@jridgewell/trace-mapping": "^0.3.25"
-			}
-		},
-		"node_modules/@jridgewell/sourcemap-codec": {
-			"version": "1.5.5",
-			"resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
-			"integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/@jridgewell/trace-mapping": {
-			"version": "0.3.31",
-			"resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
-			"integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"@jridgewell/resolve-uri": "^3.1.0",
-				"@jridgewell/sourcemap-codec": "^1.4.14"
-			}
-		},
-		"node_modules/acorn": {
-			"version": "8.16.0",
-			"resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz",
-			"integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
-			"dev": true,
-			"license": "MIT",
-			"bin": {
-				"acorn": "bin/acorn"
-			},
-			"engines": {
-				"node": ">=0.4.0"
-			}
-		},
-		"node_modules/buffer-from": {
-			"version": "1.1.2",
-			"resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
-			"integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/clean-css": {
-			"version": "5.3.3",
-			"resolved": "https://registry.npmjs.org/clean-css/-/clean-css-5.3.3.tgz",
-			"integrity": "sha512-D5J+kHaVb/wKSFcyyV75uCn8fiY4sV38XJoe4CUyGQ+mOU/fMVYUdH1hJC+CJQ5uY3EnW27SbJYS4X8BiLrAFg==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"source-map": "~0.6.0"
-			},
-			"engines": {
-				"node": ">= 10.0"
-			}
-		},
-		"node_modules/commander": {
-			"version": "2.20.3",
-			"resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
-			"integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/source-map": {
-			"version": "0.6.1",
-			"resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
-			"integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
-			"dev": true,
-			"license": "BSD-3-Clause",
-			"engines": {
-				"node": ">=0.10.0"
-			}
-		},
-		"node_modules/source-map-support": {
-			"version": "0.5.21",
-			"resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
-			"integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"buffer-from": "^1.0.0",
-				"source-map": "^0.6.0"
-			}
-		},
-		"node_modules/terser": {
-			"version": "5.46.2",
-			"resolved": "https://registry.npmjs.org/terser/-/terser-5.46.2.tgz",
-			"integrity": "sha512-uxfo9fPcSgLDYob/w1FuL0c99MWiJDnv+5qXSQc5+Ki5NjVNsYi66INnMFBjf6uFz6OnX12piJQPF4IpjJTNTw==",
-			"dev": true,
-			"license": "BSD-2-Clause",
-			"dependencies": {
-				"@jridgewell/source-map": "^0.3.3",
-				"acorn": "^8.15.0",
-				"commander": "^2.20.0",
-				"source-map-support": "~0.5.20"
-			},
-			"bin": {
-				"terser": "bin/terser"
-			},
-			"engines": {
-				"node": ">=10"
-			}
-		}
-	}
-}

package.json

@@ -1,12 +0,0 @@
-{
-	"name": "mokoonyx-build",
-	"private": true,
-	"description": "Build tooling for MokoOnyx Joomla template",
-	"scripts": {
-		"minify": "node scripts/minify.js"
-	},
-	"devDependencies": {
-		"clean-css": "^5.3.3",
-		"terser": "^5.39.0"
-	}
-}

scripts/download-google-fonts.php

@@ -1,73 +0,0 @@
-<?php
-/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * # FILE INFORMATION
- * DEFGROUP: Joomla.Template.Site
- * INGROUP: MokoOnyx
- * PATH: scripts/download-google-fonts.php
- * VERSION: 03.09.03
- * BRIEF: Download Google Fonts (woff2) for local self-hosting
- */
-
-$fontsDir = __DIR__ . '/../src/media/fonts';
-
-if (!is_dir($fontsDir)) {
-    fwrite(STDERR, "Error: Fonts directory not found: {$fontsDir}\n");
-    exit(1);
-}
-
-$fonts = [
-    'Roboto'    => 'https://fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;700&display=swap',
-    'Noto Sans' => 'https://fonts.googleapis.com/css2?family=Noto+Sans:wght@100;300;400;700&display=swap',
-    'Fira Sans' => 'https://fonts.googleapis.com/css2?family=Fira+Sans:wght@100;300;400;700&display=swap',
-];
-
-$userAgent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
-
-echo "Google Fonts Downloader for MokoOnyx\n";
-echo str_repeat('=', 48) . "\n";
-echo "Target: {$fontsDir}\n\n";
-
-foreach ($fonts as $name => $url) {
-    echo "Downloading {$name}...\n";
-
-    $ctx = stream_context_create(['http' => ['header' => "User-Agent: {$userAgent}\r\n"]]);
-    $css = @file_get_contents($url, false, $ctx);
-
-    if ($css === false) {
-        fwrite(STDERR, "  FAIL: could not fetch CSS for {$name}\n");
-        continue;
-    }
-
-    preg_match_all('#https://fonts\.gstatic\.com[^)]*\.woff2#', $css, $matches);
-
-    if (empty($matches[0])) {
-        fwrite(STDERR, "  FAIL: no woff2 URLs found for {$name}\n");
-        continue;
-    }
-
-    $count = 0;
-    foreach ($matches[0] as $fontUrl) {
-        $filename = basename($fontUrl);
-        $dest     = $fontsDir . '/' . $filename;
-
-        $data = @file_get_contents($fontUrl, false, $ctx);
-        if ($data === false) {
-            fwrite(STDERR, "  FAIL: {$filename}\n");
-            continue;
-        }
-
-        file_put_contents($dest, $data);
-        $size = round(strlen($data) / 1024, 1);
-        echo "  OK: {$filename} ({$size} KB)\n";
-        $count++;
-    }
-
-    echo "  {$count} file(s) downloaded\n\n";
-}
-
-echo "Done.\n";

scripts/minify.js

@@ -1,87 +0,0 @@
-#!/usr/bin/env node
-/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * FILE INFORMATION
- * DEFGROUP: MokoOnyx.Build
- * INGROUP: MokoOnyx
- * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- * PATH: /scripts/minify.js
- * VERSION: 01.00.00
- * BRIEF: Minify project CSS and JS assets (excludes vendor/)
- */
-
-const fs = require('fs');
-const path = require('path');
-const CleanCSS = require('clean-css');
-const { minify: terserMinify } = require('terser');
-
-const SRC = path.resolve(__dirname, '..', 'src', 'media');
-
-// Project-owned files only — vendor assets ship pre-minified
-const CSS_FILES = [
-	'css/editor.css',
-	'css/template.css',
-	'css/theme/dark.standard.css',
-	'css/theme/light.standard.css',
-];
-
-const JS_FILES = [
-	'js/gtm.js',
-	'js/template.js',
-];
-
-async function minifyCSS(relPath) {
-	const src = path.join(SRC, relPath);
-	const dest = src.replace(/\.css$/, '.min.css');
-	const input = fs.readFileSync(src, 'utf8');
-	const result = new CleanCSS({ level: 1 }).minify(input);
-
-	if (result.errors.length) {
-		console.error(`  FAIL ${relPath}:`, result.errors);
-		return false;
-	}
-
-	fs.writeFileSync(dest, result.styles);
-	const ratio = ((1 - result.styles.length / input.length) * 100).toFixed(0);
-	console.log(`  ${relPath} → .min.css  (${ratio}% smaller)`);
-	return true;
-}
-
-async function minifyJS(relPath) {
-	const src = path.join(SRC, relPath);
-	const dest = src.replace(/\.js$/, '.min.js');
-	const input = fs.readFileSync(src, 'utf8');
-	const result = await terserMinify(input, { compress: true, mangle: true });
-
-	if (result.error) {
-		console.error(`  FAIL ${relPath}:`, result.error);
-		return false;
-	}
-
-	fs.writeFileSync(dest, result.code);
-	const ratio = ((1 - result.code.length / input.length) * 100).toFixed(0);
-	console.log(`  ${relPath} → .min.js  (${ratio}% smaller)`);
-	return true;
-}
-
-async function main() {
-	console.log('Minifying project assets...\n');
-
-	let ok = true;
-
-	for (const f of CSS_FILES) {
-		if (!await minifyCSS(f)) ok = false;
-	}
-	for (const f of JS_FILES) {
-		if (!await minifyJS(f)) ok = false;
-	}
-
-	console.log(ok ? '\nDone.' : '\nCompleted with errors.');
-	process.exit(ok ? 0 : 1);
-}
-
-main();

src/.build-trigger

@@ -1 +1 @@
-2026-04-26
+Sat May 23 23:50:00 CDT 2026

src/helper/migrate.php

@@ -236,11 +236,11 @@ use Joomla\CMS\Log\Log;
 
     // Update the update server
     try {
-        $onyxUpdatesUrl = 'https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/raw/branch/main/updates.xml';
+        $onyxUpdatesUrl = 'https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx/updates.xml';
         $query = $db->getQuery(true)
             ->update('#__update_sites')
             ->set($db->quoteName('location') . ' = ' . $db->quote($onyxUpdatesUrl))
-            ->set($db->quoteName('name') . ' = ' . $db->quote($newDisplay))
+            ->set($db->quoteName('name') . ' = ' . $db->quote('Template - MokoOnyx'))
             ->where($db->quoteName('location') . ' LIKE ' . $db->quote('%MokoCassiopeia%'));
         $db->setQuery($query)->execute();
         $n = $db->getAffectedRows();

src/helper/minify.php

@@ -161,7 +161,7 @@ class MokoMinifyHelper
         $js = preg_replace('/\s*([{}();,=+\-*\/<>!&|?:])\s*/', '$1', $js);
 
         // Restore necessary spaces (after keywords)
-        $js = preg_replace('/(var|let|const|return|typeof|instanceof|new|delete|throw|case|in|of)([^\s;})><=!&|?:,])/', '$1 $2', $js);
+        $js = preg_replace('/\b(var|let|const|return|typeof|instanceof|new|delete|throw|case|in|of)\b([^\s;})><=!&|?:,])/', '$1 $2', $js);
 
         return trim($js);
     }

src/html/com_joomgallery/category/default.php

@@ -1,51 +0,0 @@
-<?php
-/**
- * Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * FILE INFORMATION
- * DEFGROUP: MokoOnyx.Override
- * INGROUP: MokoOnyx
- * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- * PATH: /html/com_joomgallery/category/default.php
- * VERSION: 01.00.00
- * BRIEF: Category view override — password gate then loads default_cat sub-layout
- */
-
-// No direct access
-defined('_JEXEC') or die;
-
-use Joomla\CMS\Router\Route;
-use Joomla\CMS\Language\Text;
-use Joomla\CMS\HTML\HTMLHelper;
-
-// Import CSS & JS
-$wa = $this->document->getWebAssetManager();
-$wa->useStyle('com_joomgallery.site');
-$wa->useStyle('com_joomgallery.jg-icon-font');
-?>
-
-<?php if ($this->item->pw_protected) : ?>
-	<div class="com-joomgallery-category--locked">
-		<form action="<?php echo Route::_('index.php?task=category.unlock&catid=' . $this->item->id); ?>" method="post" class="row g-3 align-items-end" autocomplete="off">
-			<div class="col-12">
-				<h3><i class="jg-icon-lock me-2" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_CATEGORY_PASSWORD_PROTECTED'); ?></h3>
-			</div>
-			<div class="col-auto">
-				<label for="jg_password" class="form-label"><?php echo Text::_('JGLOBAL_PASSWORD'); ?></label>
-				<input type="password" name="password" id="jg_password" class="form-control" required />
-			</div>
-			<div class="col-auto">
-				<button type="submit" class="btn btn-primary" id="jg_unlock_button">
-					<i class="jg-icon-unlock me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_CATEGORY_BUTTON_UNLOCK'); ?>
-				</button>
-			</div>
-			<?php echo HTMLHelper::_('form.token'); ?>
-		</form>
-	</div>
-<?php else : ?>
-	<?php echo $this->loadTemplate('cat'); ?>
-<?php endif; ?>

src/html/com_joomgallery/category/default_cat.php

@@ -1,219 +0,0 @@
-<?php
-/**
- * Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * FILE INFORMATION
- * DEFGROUP: MokoOnyx.Override
- * INGROUP: MokoOnyx
- * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- * PATH: /html/com_joomgallery/category/default_cat.php
- * VERSION: 01.00.00
- * BRIEF: Category sub-layout — subcategories grid + images grid with pagination
- */
-
-// No direct access
-defined('_JEXEC') or die;
-
-use Joomla\CMS\Factory;
-use Joomla\CMS\Router\Route;
-use Joomla\CMS\Language\Text;
-use Joomla\CMS\Session\Session;
-use Joomla\CMS\HTML\HTMLHelper;
-use Joomla\CMS\Layout\LayoutHelper;
-use Joomgallery\Component\Joomgallery\Administrator\Helper\JoomHelper;
-
-// Image params
-$image_type             = $this->params['configs']->get('jg_category_view_type_image', 'thumbnail', 'STRING');
-$gallery_class          = $this->params['configs']->get('jg_category_view_class', 'masonry', 'STRING');
-$num_columns            = $this->params['configs']->get('jg_category_view_num_columns', 3, 'INT');
-$image_class            = $this->params['configs']->get('jg_category_view_image_class', 0, 'INT');
-$justified_height       = $this->params['configs']->get('jg_category_view_justified_height', 200, 'INT');
-$justified_gap          = $this->params['configs']->get('jg_category_view_justified_gap', 5, 'INT');
-$image_link             = $this->params['configs']->get('jg_category_view_image_link', 'defaultview', 'STRING');
-$lightbox_image         = $this->params['configs']->get('jg_category_view_lightbox_image', 'detail', 'STRING');
-$pagination_type        = $this->params['configs']->get('jg_category_view_pagination', 0, 'INT');
-$show_subcategories     = $this->params['configs']->get('jg_category_view_subcategories', 1, 'INT');
-$subcategory_type_image = $this->params['configs']->get('jg_category_view_type_subcategory_image', 'thumbnail', 'STRING');
-$num_columns_subcats    = $this->params['configs']->get('jg_category_view_subcategories_num_columns', 3, 'INT');
-
-// Import CSS & JS
-$wa = $this->document->getWebAssetManager();
-
-if ($gallery_class == 'masonry') {
-	$wa->useScript('com_joomgallery.masonry');
-}
-
-if ($gallery_class == 'justified') {
-	$wa->useScript('com_joomgallery.justified');
-	$wa->addInlineStyle('.jg-images[class*=" justified-"] .jg-image-caption-hover { right: ' . $justified_gap . 'px; }');
-}
-
-$lightbox = false;
-if ($image_link == 'lightgallery') {
-	$lightbox = true;
-	$wa->useScript('com_joomgallery.lightgallery');
-	$wa->useScript('com_joomgallery.lg-thumbnail');
-	$wa->useStyle('com_joomgallery.lightgallery-bundle');
-}
-
-// Initialise the grid script
-$iniJS  = 'window.joomGrid = {';
-$iniJS .= '  itemid: ' . $this->item->id . ',';
-$iniJS .= '  pagination: ' . $pagination_type . ',';
-$iniJS .= '  layout: "' . $gallery_class . '",';
-$iniJS .= '  num_columns: ' . $num_columns . ',';
-$iniJS .= '  lightbox: ' . ($lightbox ? 'true' : 'false') . ',';
-$iniJS .= '  justified: {height: ' . $justified_height . ', gap: ' . $justified_gap . '}';
-$iniJS .= '};';
-
-$wa->addInlineScript($iniJS, ['position' => 'before'], [], ['com_joomgallery.joomgrid']);
-$wa->useScript('com_joomgallery.joomgrid');
-
-// Access check
-$canEdit    = $this->getAcl()->checkACL('edit', 'com_joomgallery.category', $this->item->id, $this->item->parent_id, true);
-$canAdd     = $this->getAcl()->checkACL('add', 'com_joomgallery.image', 0, $this->item->id, true);
-$canDelete  = $this->getAcl()->checkACL('delete', 'com_joomgallery.category', $this->item->id, $this->item->parent_id, true);
-$canCheckin = $this->getAcl()->checkACL('editstate', 'com_joomgallery.category', $this->item->id, $this->item->parent_id, true) || $this->item->checked_out == Factory::getUser()->id;
-$returnURL  = base64_encode(JoomHelper::getViewRoute('category', $this->item->id, $this->item->parent_id, $this->item->language, $this->getLayout()));
-
-$hasSubcats = $show_subcategories && !empty($this->item->children->items) && count($this->item->children->items) > 0;
-$hasImages  = !empty($this->item->images->items) && count($this->item->images->items) > 0;
-?>
-
-<div class="com-joomgallery-category" itemscope itemtype="https://schema.org/ImageGallery">
-	<?php // Page heading ?>
-	<?php if ($this->params['menu']->get('show_page_heading')) : ?>
-		<div class="page-header">
-			<h1><?php echo $this->escape($this->params['menu']->get('page_heading')); ?></h1>
-		</div>
-	<?php endif; ?>
-
-	<?php // Category title ?>
-	<h2 itemprop="name"><?php echo $this->escape($this->item->title); ?></h2>
-
-	<?php // Category description ?>
-	<?php if (!empty($this->item->description)) : ?>
-		<div class="com-joomgallery-category__description mb-3" itemprop="description">
-			<?php echo $this->item->description; ?>
-		</div>
-	<?php endif; ?>
-
-	<?php // Admin buttons ?>
-	<?php if ($canEdit || $canCheckin || $canAdd || $canDelete) : ?>
-		<div class="com-joomgallery-category__actions btn-toolbar mb-3" role="toolbar" aria-label="<?php echo Text::_('JTOOLBAR'); ?>">
-			<?php if ($canCheckin && $this->item->checked_out > 0) : ?>
-				<a class="btn btn-outline-secondary btn-sm me-2" href="<?php echo Route::_('index.php?option=com_joomgallery&task=category.checkin&id=' . $this->item->id . '&return=' . $returnURL . '&' . Session::getFormToken() . '=1'); ?>">
-					<i class="jg-icon-checkin me-1" aria-hidden="true"></i><?php echo Text::_('JLIB_HTML_CHECKIN'); ?>
-				</a>
-			<?php endif; ?>
-
-			<?php if ($canEdit) : ?>
-				<a class="btn btn-outline-primary btn-sm me-2<?php echo ($this->item->checked_out > 0) ? ' disabled' : ''; ?>" href="<?php echo Route::_('index.php?option=com_joomgallery&task=category.edit&id=' . $this->item->id . '&return=' . $returnURL); ?>">
-					<i class="jg-icon-edit me-1" aria-hidden="true"></i><?php echo Text::_('JGLOBAL_EDIT'); ?>
-				</a>
-			<?php endif; ?>
-
-			<?php if ($canAdd) : ?>
-				<a class="btn btn-outline-success btn-sm me-2<?php echo ($this->item->checked_out > 0) ? ' disabled' : ''; ?>" href="<?php echo Route::_('index.php?option=com_joomgallery&task=image.add&catid=' . $this->item->id . '&return=' . $returnURL); ?>">
-					<i class="jg-icon-upload me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_IMG_UPLOAD_IMAGE'); ?>
-				</a>
-			<?php endif; ?>
-
-			<?php if ($canDelete) : ?>
-				<a class="btn btn-outline-danger btn-sm<?php echo ($this->item->checked_out > 0) ? ' disabled' : ''; ?>" href="#deleteCatModal" role="button" data-bs-toggle="modal">
-					<i class="jg-icon-delete me-1" aria-hidden="true"></i><?php echo Text::_('JACTION_DELETE'); ?>
-				</a>
-				<?php echo HTMLHelper::_(
-					'bootstrap.renderModal',
-					'deleteCatModal',
-					[
-						'title'      => Text::_('JACTION_DELETE'),
-						'modalWidth' => '50',
-						'bodyHeight' => '100',
-						'footer'     => '<button class="btn btn-secondary" data-bs-dismiss="modal">' . Text::_('JCANCEL') . '</button>'
-							. '<a href="' . Route::_('index.php?option=com_joomgallery&task=category.remove&id=' . $this->item->id . '&return=' . $returnURL . '&' . Session::getFormToken() . '=1', false, 2) . '" class="btn btn-danger">' . Text::_('JACTION_DELETE') . '</a>',
-					],
-					Text::_('COM_JOOMGALLERY_COMMON_ALERT_SURE_DELETE_SELECTED_ITEM')
-				); ?>
-			<?php endif; ?>
-		</div>
-	<?php endif; ?>
-
-	<?php // Subcategories ?>
-	<?php if ($hasSubcats) : ?>
-		<section class="com-joomgallery-category__subcategories mb-4" aria-label="<?php echo Text::_('COM_JOOMGALLERY_SUBCATEGORIES'); ?>">
-			<h3><?php echo Text::_('COM_JOOMGALLERY_SUBCATEGORIES'); ?></h3>
-			<?php
-			$catsData = [
-				'id'          => (int) $this->item->id,
-				'items'       => $this->item->children->items,
-				'num_columns' => (int) $num_columns_subcats,
-				'image_type'  => $subcategory_type_image,
-			];
-			echo LayoutHelper::render('joomgallery.grids.categories', $catsData);
-			?>
-		</section>
-	<?php endif; ?>
-
-	<?php // Images ?>
-	<?php if ($hasImages) : ?>
-		<section class="com-joomgallery-category__images" aria-label="<?php echo Text::_('COM_JOOMGALLERY_IMAGES'); ?>">
-			<?php if ($hasSubcats) : ?>
-				<h3><?php echo Text::_('COM_JOOMGALLERY_IMAGES'); ?></h3>
-			<?php endif; ?>
-
-			<?php
-			$imgsData = [
-				'id'            => (int) $this->item->id,
-				'layout'        => $gallery_class,
-				'items'         => $this->item->images->items,
-				'num_columns'   => (int) $num_columns,
-				'caption_align' => 'center',
-				'image_class'   => $image_class,
-				'image_type'    => $image_type,
-				'lightbox_type' => $lightbox_image,
-				'image_link'    => $image_link,
-				'image_title'   => false,
-				'title_link'    => 'defaultview',
-				'image_desc'    => false,
-				'image_date'    => false,
-				'image_author'  => false,
-				'image_tags'    => false,
-			];
-			echo LayoutHelper::render('joomgallery.grids.images', $imgsData);
-			?>
-
-			<?php // Pagination ?>
-			<nav class="mt-4" aria-label="<?php echo Text::_('JLIB_HTML_PAGINATION'); ?>">
-				<?php echo $this->item->images->pagination->getListFooter(); ?>
-			</nav>
-		</section>
-	<?php elseif (!$hasSubcats) : ?>
-		<div class="alert alert-info" role="alert">
-			<p class="mb-0"><?php echo Text::_('COM_JOOMGALLERY_GALLERY_NO_IMAGES'); ?></p>
-		</div>
-	<?php endif; ?>
-
-	<?php // Back to parent category ?>
-	<?php if ($this->item->parent_id > 0 && $this->item->parent_id != 1) : ?>
-		<div class="mt-4">
-			<a class="btn btn-outline-secondary" href="<?php echo Route::_('index.php?option=com_joomgallery&view=category&id=' . (int) $this->item->parent_id); ?>">
-				<i class="jg-icon-arrow-left-alt me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_BACK'); ?>
-			</a>
-		</div>
-	<?php endif; ?>
-
-	<script>
-	if (window.joomGrid.layout != 'justified') {
-		document.querySelectorAll('.' + window.joomGrid.imgclass).forEach(function(image) {
-			image.addEventListener('load', function() {
-				this.closest('.' + window.joomGrid.imgboxclass).classList.add('loaded');
-			});
-		});
-	}
-	</script>
-</div>

src/html/com_joomgallery/category/index.html

@@ -1 +0,0 @@
-<!DOCTYPE html><title></title>

src/html/com_joomgallery/gallery/default.php

@@ -1,138 +0,0 @@
-<?php
-/**
- * Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * FILE INFORMATION
- * DEFGROUP: MokoOnyx.Override
- * INGROUP: MokoOnyx
- * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- * PATH: /html/com_joomgallery/gallery/default.php
- * VERSION: 01.00.00
- * BRIEF: Gallery view override — main image grid with masonry/justified layout
- */
-
-// No direct access
-defined('_JEXEC') or die;
-
-use Joomla\CMS\Router\Route;
-use Joomla\CMS\Language\Text;
-use Joomla\CMS\Layout\LayoutHelper;
-
-// Image params
-$image_type              = $this->params['configs']->get('jg_gallery_view_type_image', 'thumbnail', 'STRING');
-$gallery_class           = $this->params['configs']->get('jg_gallery_view_class', 'masonry', 'STRING');
-$num_columns             = $this->params['configs']->get('jg_gallery_view_num_columns', 3, 'INT');
-$image_class             = $this->params['configs']->get('jg_gallery_view_image_class', 0, 'INT');
-$justified_height        = $this->params['configs']->get('jg_gallery_view_justified_height', 200, 'INT');
-$justified_gap           = $this->params['configs']->get('jg_gallery_view_justified_gap', 5, 'INT');
-$image_link              = $this->params['configs']->get('jg_gallery_view_image_link', 'defaultview', 'STRING');
-$lightbox_image          = $this->params['configs']->get('jg_category_view_lightbox_image', 'detail', 'STRING');
-$browse_categories_link  = $this->params['configs']->get('jg_gallery_view_browse_categories_link', 1, 'INT');
-
-// Import CSS & JS
-$wa = $this->document->getWebAssetManager();
-$wa->useStyle('com_joomgallery.site');
-$wa->useStyle('com_joomgallery.jg-icon-font');
-
-if ($gallery_class == 'masonry') {
-	$wa->useScript('com_joomgallery.masonry');
-}
-
-if ($gallery_class == 'justified') {
-	$wa->useScript('com_joomgallery.justified');
-	$wa->addInlineStyle('.jg-images[class*=" justified-"] .jg-image-caption-hover { right: ' . $justified_gap . 'px; }');
-}
-
-$lightbox = false;
-if ($image_link == 'lightgallery') {
-	$lightbox = true;
-	$wa->useScript('com_joomgallery.lightgallery');
-	$wa->useScript('com_joomgallery.lg-thumbnail');
-	$wa->useStyle('com_joomgallery.lightgallery-bundle');
-}
-
-// Initialise the grid script
-$iniJS  = 'window.joomGrid = {';
-$iniJS .= '  itemid: ' . $this->item->id . ',';
-$iniJS .= '  pagination: 0,';
-$iniJS .= '  layout: "' . $gallery_class . '",';
-$iniJS .= '  num_columns: ' . $num_columns . ',';
-$iniJS .= '  lightbox: ' . ($lightbox ? 'true' : 'false') . ',';
-$iniJS .= '  justified: {height: ' . $justified_height . ', gap: ' . $justified_gap . '}';
-$iniJS .= '};';
-
-$wa->addInlineScript($iniJS, ['position' => 'before'], [], ['com_joomgallery.joomgrid']);
-$wa->useScript('com_joomgallery.joomgrid');
-?>
-
-<div class="com-joomgallery-gallery" itemscope itemtype="https://schema.org/ImageGallery">
-	<?php if ($this->params['menu']->get('show_page_heading')) : ?>
-		<div class="page-header">
-			<h1><?php echo $this->escape($this->params['menu']->get('page_heading')); ?></h1>
-		</div>
-	<?php endif; ?>
-
-	<?php // Browse categories link (top) ?>
-	<?php if ($browse_categories_link == '1') : ?>
-		<div class="text-center mb-4">
-			<a class="btn btn-outline-primary" href="<?php echo Route::_('index.php?option=com_joomgallery&view=category&id=1'); ?>">
-				<i class="jg-icon-folder me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_GALLERY_VIEW_BROWSE_CATEGORIES'); ?>
-			</a>
-		</div>
-	<?php endif; ?>
-
-	<?php if (count($this->item->images->items) == 0) : ?>
-		<div class="alert alert-info" role="alert">
-			<p class="mb-0"><?php echo Text::_('COM_JOOMGALLERY_GALLERY_NO_IMAGES'); ?></p>
-		</div>
-	<?php else : ?>
-		<?php
-		$imgsData = [
-			'id'            => (int) $this->item->id,
-			'layout'        => $gallery_class,
-			'items'         => $this->item->images->items,
-			'num_columns'   => (int) $num_columns,
-			'caption_align' => 'center',
-			'image_class'   => $image_class,
-			'image_type'    => $image_type,
-			'lightbox_type' => $lightbox_image,
-			'image_link'    => $image_link,
-			'image_title'   => false,
-			'title_link'    => 'defaultview',
-			'image_desc'    => false,
-			'image_date'    => false,
-			'image_author'  => false,
-			'image_tags'    => false,
-		];
-		?>
-		<?php echo LayoutHelper::render('joomgallery.grids.images', $imgsData); ?>
-
-		<?php // Pagination ?>
-		<nav class="mt-4" aria-label="<?php echo Text::_('JLIB_HTML_PAGINATION'); ?>">
-			<?php echo $this->item->images->pagination->getListFooter(); ?>
-		</nav>
-	<?php endif; ?>
-
-	<?php // Browse categories link (bottom) ?>
-	<?php if ($browse_categories_link == '2') : ?>
-		<div class="text-center mt-4">
-			<a class="btn btn-outline-primary" href="<?php echo Route::_('index.php?option=com_joomgallery&view=category&id=1'); ?>">
-				<i class="jg-icon-folder me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_GALLERY_VIEW_BROWSE_CATEGORIES'); ?>
-			</a>
-		</div>
-	<?php endif; ?>
-
-	<script>
-	if (window.joomGrid.layout != 'justified') {
-		document.querySelectorAll('.' + window.joomGrid.imgclass).forEach(function(image) {
-			image.addEventListener('load', function() {
-				this.closest('.' + window.joomGrid.imgboxclass).classList.add('loaded');
-			});
-		});
-	}
-	</script>
-</div>

src/html/com_joomgallery/gallery/index.html

@@ -1 +0,0 @@
-<!DOCTYPE html><title></title>

src/html/com_joomgallery/image/default.php

@@ -1,249 +0,0 @@
-<?php
-/**
- * Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
- *
- * This file is part of a Moko Consulting project.
- *
- * SPDX-License-Identifier: GPL-3.0-or-later
- *
- * FILE INFORMATION
- * DEFGROUP: MokoOnyx.Override
- * INGROUP: MokoOnyx
- * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
- * PATH: /html/com_joomgallery/image/default.php
- * VERSION: 01.00.00
- * BRIEF: Image detail view override — single image with metadata, tags, custom fields
- */
-
-// No direct access
-defined('_JEXEC') or die;
-
-use Joomla\CMS\Factory;
-use Joomla\CMS\Router\Route;
-use Joomla\CMS\Language\Text;
-use Joomla\CMS\Session\Session;
-use Joomla\CMS\HTML\HTMLHelper;
-use Joomla\CMS\Layout\FileLayout;
-use Joomla\CMS\User\UserFactoryInterface;
-use Joomla\Component\Fields\Administrator\Helper\FieldsHelper;
-use Joomgallery\Component\Joomgallery\Administrator\Helper\JoomHelper;
-
-// Image params
-$image_type        = $this->params['configs']->get('jg_detail_view_type_image', 'detail', 'STRING');
-$show_title        = $this->params['configs']->get('jg_detail_view_show_title', 0, 'INT');
-$show_category     = $this->params['configs']->get('jg_detail_view_show_category', 0, 'INT');
-$show_description  = $this->params['configs']->get('jg_detail_view_show_description', 0, 'INT');
-$show_imgdate      = $this->params['configs']->get('jg_detail_view_show_imgdate', 0, 'INT');
-$show_imgauthor    = $this->params['configs']->get('jg_detail_view_show_imgauthor', 0, 'INT');
-$show_created_by   = $this->params['configs']->get('jg_detail_view_show_created_by', 0, 'INT');
-$show_votes        = $this->params['configs']->get('jg_detail_view_show_votes', 0, 'INT');
-$show_rating       = $this->params['configs']->get('jg_detail_view_show_rating', 0, 'INT');
-$show_hits         = $this->params['configs']->get('jg_detail_view_show_hits', 0, 'INT');
-$show_downloads    = $this->params['configs']->get('jg_detail_view_show_downloads', 0, 'INT');
-$show_tags         = $this->params['configs']->get('jg_detail_view_show_tags', 0, 'INT');
-$show_metadata     = $this->params['configs']->get('jg_detail_view_show_metadata', 0, 'INT');
-
-// Import CSS & JS
-$wa = $this->document->getWebAssetManager();
-$wa->useStyle('com_joomgallery.site');
-$wa->useStyle('com_joomgallery.jg-icon-font');
-
-// Access check
-$canEdit    = $this->getAcl()->checkACL('edit', 'com_joomgallery.image', $this->item->id, $this->item->catid, true);
-$canDelete  = $this->getAcl()->checkACL('delete', 'com_joomgallery.image', $this->item->id, $this->item->catid, true);
-$canCheckin = $this->getAcl()->checkACL('editstate', 'com_joomgallery.image', $this->item->id, $this->item->catid, true) || $this->item->checked_out == Factory::getUser()->id;
-$returnURL  = base64_encode(JoomHelper::getViewRoute('image', $this->item->id, $this->item->catid, $this->item->language, $this->getLayout()));
-
-// Tags
-$tagLayout = new FileLayout('joomgallery.content.tags');
-$tags = $tagLayout->render($this->item->tags);
-
-// Metadata
-$metadataLayout = new FileLayout('joomgallery.content.metadata');
-$metadata = $metadataLayout->render($this->item->imgmetadata);
-
-// Custom Fields
-$fields = FieldsHelper::getFields('com_joomgallery.image', $this->item);
-
-// Check if we have any info rows to show
-$hasInfo = $show_category || $show_imgdate || $show_imgauthor || $show_created_by
-	|| $show_votes || $show_rating || $show_hits || $show_downloads
-	|| $show_tags || $show_metadata || count($fields) > 0;
-?>
-
-<div class="com-joomgallery-image" itemscope itemtype="https://schema.org/ImageObject">
-	<?php if ($show_title) : ?>
-		<h2 itemprop="name"><?php echo $this->escape($this->item->title); ?></h2>
-	<?php endif; ?>
-
-	<?php // Back to category ?>
-	<a class="btn btn-outline-primary btn-sm mb-3" href="<?php echo Route::_('index.php?option=com_joomgallery&view=category&id=' . (int) $this->item->catid); ?>">
-		<i class="jg-icon-arrow-left-alt me-1" aria-hidden="true"></i><?php echo Text::_('COM_JOOMGALLERY_IMAGE_BACK_TO_CATEGORY') . ' ' . $this->escape($this->item->cattitle); ?>
-	</a>
-
-	<?php // Admin buttons ?>
-	<?php if ($canEdit || $canCheckin || $canDelete) : ?>
-		<div class="com-joomgallery-image__actions btn-toolbar mb-3" role="toolbar" aria-label="<?php echo Text::_('JTOOLBAR'); ?>">
-			<?php if ($canCheckin && $this->item->checked_out > 0) : ?>
-				<a class="btn btn-outline-secondary btn-sm me-2" href="<?php echo Route::_('index.php?option=com_joomgallery&task=image.checkin&id=' . $this->item->id . '&return=' . $returnURL . '&' . Session::getFormToken() . '=1'); ?>">
-					<i class="jg-icon-checkin me-1" aria-hidden="true"></i><?php echo Text::_('JLIB_HTML_CHECKIN'); ?>
-				</a>
-			<?php endif; ?>
-
-			<?php if ($canEdit) : ?>
-				<a class="btn btn-outline-primary btn-sm me-2<?php echo ($this->item->checked_out > 0) ? ' disabled' : ''; ?>" href="<?php echo Route::_('index.php?option=com_joomgallery&task=image.edit&id=' . $this->item->id . '&return=' . $returnURL); ?>">
-					<i class="jg-icon-edit me-1" aria-hidden="true"></i><?php echo Text::_('JGLOBAL_EDIT'); ?>
-				</a>
-			<?php endif; ?>
-
-			<?php if ($canDelete) : ?>
-				<a class="btn btn-outline-danger btn-sm<?php echo ($this->item->checked_out > 0) ? ' disabled' : ''; ?>" href="#deleteImgModal" role="button" data-bs-toggle="modal">
-					<i class="jg-icon-delete me-1" aria-hidden="true"></i><?php echo Text::_('JACTION_DELETE'); ?>
-				</a>
-				<?php echo HTMLHelper::_(
-					'bootstrap.renderModal',
-					'deleteImgModal',
-					[
-						'title'      => Text::_('JACTION_DELETE'),
-						'modalWidth' => '50',
-						'bodyHeight' => '100',
-						'footer'     => '<button class="btn btn-secondary" data-bs-dismiss="modal">' . Text::_('JCANCEL') . '</button>'
-							. '<a href="' . Route::_('index.php?option=com_joomgallery&task=image.remove&id=' . $this->item->id . '&return=' . $returnURL . '&' . Session::getFormToken() . '=1', false, 2) . '" class="btn btn-danger">' . Text::_('COM_JOOMGALLERY_COMMON_DELETE_IMAGE_TIPCAPTION') . '</a>',
-					],
-					Text::_('COM_JOOMGALLERY_COMMON_ALERT_SURE_DELETE_SELECTED_ITEM')
-				); ?>
-			<?php endif; ?>
-		</div>
-	<?php endif; ?>
-
-	<?php // Image ?>
-	<figure class="figure com-joomgallery-image__figure text-center w-100 mb-4">
-		<div id="jg-loader"></div>
-		<img
-			src="<?php echo JoomHelper::getImg($this->item, $image_type); ?>"
-			class="figure-img img-fluid rounded"
-			alt="<?php echo $this->escape($this->item->title); ?>"
-			style="width:auto;"
-			itemprop="contentUrl"
-			loading="lazy"
-		/>
-		<?php if ($show_description && !empty($this->item->description)) : ?>
-			<figcaption class="figure-caption" itemprop="description"><?php echo $this->item->description; ?></figcaption>
-		<?php endif; ?>
-	</figure>
-
-	<?php // Image info table ?>
-	<?php if ($hasInfo) : ?>
-		<div class="com-joomgallery-image__info">
-			<h3><?php echo Text::_('COM_JOOMGALLERY_IMAGE_INFO'); ?></h3>
-			<table class="table table-striped">
-				<tbody>
-					<?php if ($show_category) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('JCATEGORY'); ?></th>
-							<td>
-								<a href="<?php echo Route::_('index.php?option=com_joomgallery&view=category&id=' . (int) $this->item->catid); ?>">
-									<?php echo $this->escape($this->item->cattitle); ?>
-								</a>
-							</td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_imgdate) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_DATE'); ?></th>
-							<td>
-								<time datetime="<?php echo HTMLHelper::_('date', $this->item->date, 'c'); ?>" itemprop="dateCreated">
-									<?php echo HTMLHelper::_('date', $this->item->date, Text::_('DATE_FORMAT_LC4')); ?>
-								</time>
-							</td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_imgauthor) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('JAUTHOR'); ?></th>
-							<td itemprop="author"><?php echo $this->escape($this->item->author); ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_created_by) : ?>
-						<?php $user = Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById($this->item->created_by); ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_OWNER'); ?></th>
-							<td><?php echo $this->escape($user->name); ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_votes) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_VOTES'); ?></th>
-							<td><?php echo $this->escape($this->item->votes); ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_rating) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_IMAGE_RATING'); ?></th>
-							<td><?php echo $this->escape($this->item->rating); ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_hits) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('JGLOBAL_HITS'); ?></th>
-							<td><?php echo (int) $this->item->hits; ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_downloads) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_DOWNLOADS'); ?></th>
-							<td><?php echo (int) $this->item->downloads; ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_tags) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_TAGS'); ?></th>
-							<td><?php echo $tags; ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php if ($show_metadata) : ?>
-						<tr>
-							<th scope="row"><?php echo Text::_('COM_JOOMGALLERY_IMGMETADATA'); ?></th>
-							<td><?php echo $metadata; ?></td>
-						</tr>
-					<?php endif; ?>
-
-					<?php // Custom fields ?>
-					<?php if (count($fields) > 0) : ?>
-						<tr>
-							<th scope="row" colspan="2"><strong><?php echo Text::_('JGLOBAL_FIELDS'); ?></strong></th>
-						</tr>
-						<?php foreach ($fields as $field) : ?>
-							<?php if ($this->component->getAccess()->checkViewLevel($field->access) && $field->params->get('display') > 0) : ?>
-								<tr class="<?php echo $this->escape($field->params->get('render_class')); ?>">
-									<?php if ($field->params->get('showlabel', true)) : ?>
-										<th scope="row" class="<?php echo $this->escape($field->params->get('label_render_class')); ?>"><?php echo $this->escape($field->title); ?></th>
-									<?php else : ?>
-										<th scope="row"></th>
-									<?php endif; ?>
-									<td class="<?php echo $this->escape($field->params->get('value_render_class')); ?>"><?php echo $field->value; ?></td>
-								</tr>
-							<?php endif; ?>
-						<?php endforeach; ?>
-					<?php endif; ?>
-				</tbody>
-			</table>
-		</div>
-	<?php endif; ?>
-
-	<script>
-	window.onload = function() {
-		var el = document.querySelector('#jg-loader');
-		if (el) el.classList.add('hidden');
-	};
-	</script>
-</div>

src/html/com_joomgallery/image/index.html

@@ -1 +0,0 @@
-<!DOCTYPE html><title></title>

src/html/layouts/joomla/module/card.php

@@ -10,7 +10,7 @@
  * INGROUP: MokoOnyx
  * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
  * PATH: /html/layouts/joomla/module/card.php
- * VERSION: 01.00.07
+ * VERSION: 02.19.06
  * BRIEF: Custom card module chrome — renders module titles for all modules
  */
 

src/html/layouts/mokoonyx/article-metadata.php

@@ -11,7 +11,7 @@
  * INGROUP: MokoOnyx.Layouts
  * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoOnyx
  * PATH: /src/html/layouts/mokoonyx/article-metadata.php
- * VERSION: 03.09.04
+ * VERSION: 02.19.06
  * BRIEF: Article metadata footer layout -- renders jcfields grouped by field group
  */
 

src/html/mod_menu/default_component.php

@@ -0,0 +1,55 @@
+<?php
+/**
+ * Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ */
+
+/**
+ * Default menu — Component item layout (sidebar/footer vertical lists)
+ */
+
+defined('_JEXEC') or die;
+
+use Joomla\CMS\Filter\OutputFilter;
+use Joomla\CMS\HTML\HTMLHelper;
+
+$attributes = [];
+
+if ($item->anchor_title) {
+    $attributes['title'] = $item->anchor_title;
+}
+
+if ($item->anchor_css) {
+    $attributes['class'] = $item->anchor_css;
+}
+
+if ($item->anchor_rel) {
+    $attributes['rel'] = $item->anchor_rel;
+}
+
+$linktype = $item->title;
+
+if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
+    if ($itemParams->get('menu_text', 1)) {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+    } else {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+    }
+}
+
+if ($item->browserNav == 1) {
+    $attributes['target'] = '_blank';
+    $attributes['rel'] = 'noopener noreferrer';
+} elseif ($item->browserNav == 2) {
+    $options = 'toolbar=no,location=no,status=no,menubar=no,scrollbars=yes,resizable=yes,' . $params->get('window_open');
+    $attributes['onclick'] = "window.open(this.href, 'targetWindow', '" . $options . "'); return false;";
+}
+
+$attributes['class'] = 'nav-link mod-menu__link';
+
+echo HTMLHelper::_('link', OutputFilter::ampReplace(htmlspecialchars($item->flink, ENT_COMPAT, 'UTF-8', false)), $linktype, $attributes);

src/html/mod_menu/default_heading.php

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ */
+
+/**
+ * Default menu — Heading item layout (sidebar/footer vertical lists)
+ */
+
+defined('_JEXEC') or die;
+
+$title = $item->anchor_title ? ' title="' . $item->anchor_title . '"' : '';
+$anchor_css = $item->anchor_css ?: '';
+
+$linktype = $item->title;
+
+if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
+    if ($itemParams->get('menu_text', 1)) {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+    } else {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+    }
+}
+
+?>
+<span class="nav-link mod-menu__heading <?php echo $anchor_css; ?>"<?php echo $title; ?>><?php echo $linktype; ?></span>

src/html/mod_menu/default_separator.php

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ */
+
+/**
+ * Default menu — Separator item layout (sidebar/footer vertical lists)
+ */
+
+defined('_JEXEC') or die;
+
+$title      = $item->anchor_title ? ' title="' . $item->anchor_title . '"' : '';
+$anchor_css = $item->anchor_css ?: '';
+
+$linktype = $item->title;
+
+if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
+    if ($itemParams->get('menu_text', 1)) {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+    } else {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+    }
+}
+
+?>
+<hr class="mod-menu__separator <?php echo $anchor_css; ?>"<?php echo $title; ?> />

src/html/mod_menu/default_url.php

@@ -0,0 +1,61 @@
+<?php
+/**
+ * Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ */
+
+/**
+ * Default menu — URL item layout (sidebar/footer vertical lists)
+ */
+
+defined('_JEXEC') or die;
+
+use Joomla\CMS\Filter\OutputFilter;
+use Joomla\CMS\HTML\HTMLHelper;
+
+$attributes = [];
+
+if ($item->anchor_title) {
+    $attributes['title'] = $item->anchor_title;
+}
+
+if ($item->anchor_css) {
+    $attributes['class'] = $item->anchor_css;
+}
+
+if ($item->anchor_rel) {
+    $attributes['rel'] = $item->anchor_rel;
+}
+
+$linktype = $item->title;
+
+if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
+    if ($itemParams->get('menu_text', 1)) {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+    } else {
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+    }
+}
+
+if ($item->browserNav == 1) {
+    $attributes['target'] = '_blank';
+    $attributes['rel'] = 'noopener noreferrer';
+} elseif ($item->browserNav == 2) {
+    $options = 'toolbar=no,location=no,status=no,menubar=no,scrollbars=yes,resizable=yes,' . $params->get('window_open');
+    $attributes['onclick'] = "window.open(this.href, 'targetWindow', '" . $options . "'); return false;";
+}
+
+$linkClass = 'nav-link mod-menu__link';
+
+if (isset($attributes['class'])) {
+    $attributes['class'] .= ' ' . $linkClass;
+} else {
+    $attributes['class'] = $linkClass;
+}
+
+echo HTMLHelper::_('link', OutputFilter::ampReplace(htmlspecialchars($item->flink, ENT_COMPAT, 'UTF-8', false)), $linktype, $attributes);

src/html/mod_menu/horizontal.php

@@ -8,8 +8,8 @@
  */
 
 /**
- * Main Menu - Mobile responsive collapsible dropdown menu override
- * Bootstrap 5 responsive navbar with hamburger menu
+ * Horizontal menu — always-visible inline links that wrap on mobile.
+ * No hamburger, no collapse. Suitable for Quick Links, utility nav, topbar menus.
  */
 
 defined('_JEXEC') or die;
@@ -22,19 +22,13 @@ if ($tagId = $params->get('tag_id', '')) {
     $id = ' id="' . $tagId . '"';
 }
 
-// Get module class suffix
 $moduleclass_sfx = htmlspecialchars($params->get('moduleclass_sfx', ''), ENT_COMPAT, 'UTF-8');
-
-// The menu class is deprecated. Use mod-menu instead
 ?>
-<nav class="mod-menu mod-menu-main navbar navbar-expand-lg<?php echo $moduleclass_sfx; ?>"<?php echo $id; ?>>
-    <div class="container-fluid p-0">
-        <!-- Collapsible menu content — toggle controlled by .nav-mobile-bar in index.php -->
-        <div class="collapse navbar-collapse" id="moko-main-menu-collapse">
-            <ul class="navbar-nav mod-menu-main__list">
+<nav class="mod-menu mod-menu-horizontal<?php echo $moduleclass_sfx; ?>"<?php echo $id; ?> aria-label="<?php echo htmlspecialchars($module->title, ENT_COMPAT, 'UTF-8'); ?>">
+    <ul class="nav mod-menu-horizontal__list flex-wrap">
 <?php foreach ($list as $i => &$item) :
     $itemParams = $item->getParams();
-    $class = 'nav-item mod-menu-main__item item-' . $item->id;
+    $class = 'nav-item mod-menu-horizontal__item item-' . $item->id;
 
     if ($item->id == $default_id) {
         $class .= ' default';
@@ -83,19 +77,14 @@ $moduleclass_sfx = htmlspecialchars($params->get('moduleclass_sfx', ''), ENT_COM
             break;
     endswitch;
 
-    // The next item is deeper.
     if ($item->deeper) {
-        echo '<ul class="dropdown-menu mod-menu-main__dropdown">';
+        echo '<ul class="dropdown-menu mod-menu-horizontal__dropdown">';
     } elseif ($item->shallower) {
-        // The next item is shallower.
         echo '</li>';
         echo str_repeat('</ul></li>', $item->level_diff);
     } else {
-        // The next item is on the same level.
         echo '</li>';
     }
 endforeach;
 ?></ul>
-        </div>
-    </div>
 </nav>

src/html/mod_menu/horizontal_component.php

@@ -8,7 +8,7 @@
  */
 
 /**
- * Main Menu - Component item layout
+ * Horizontal menu — Component item layout
  */
 
 defined('_JEXEC') or die;
@@ -33,13 +33,12 @@ if ($item->anchor_rel) {
 $linktype = $item->title;
 
 if ($item->menu_icon) {
-    // The link is an icon
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     if ($itemParams->get('menu_text', 1)) {
-        // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
-        // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 
@@ -48,12 +47,10 @@ if ($item->browserNav == 1) {
     $attributes['rel'] = 'noopener noreferrer';
 } elseif ($item->browserNav == 2) {
     $options = 'toolbar=no,location=no,status=no,menubar=no,scrollbars=yes,resizable=yes,' . $params->get('window_open');
-
     $attributes['onclick'] = "window.open(this.href, 'targetWindow', '" . $options . "'); return false;";
 }
 
-// Add dropdown toggle for items with children
-$linkClass = 'nav-link mod-menu-main__link';
+$linkClass = 'nav-link mod-menu-horizontal__link';
 if ($item->deeper) {
     $linkClass .= ' dropdown-toggle';
     $attributes['data-bs-toggle'] = 'dropdown';

src/html/mod_menu/horizontal_heading.php

@@ -8,7 +8,7 @@
  */
 
 /**
- * Main Menu - Heading item layout
+ * Horizontal menu — Heading item layout
  */
 
 defined('_JEXEC') or die;
@@ -19,18 +19,16 @@ $anchor_css = $item->anchor_css ?: '';
 $linktype = $item->title;
 
 if ($item->menu_icon) {
-    // The link is an icon
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     if ($itemParams->get('menu_text', 1)) {
-        // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
-        // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 
-// Add dropdown toggle for items with children
-$headingClass = 'nav-link mod-menu-main__heading';
+$headingClass = 'nav-link mod-menu-horizontal__heading';
 if ($item->deeper) {
     $headingClass .= ' dropdown-toggle';
 }

src/html/mod_menu/horizontal_separator.php

@@ -8,7 +8,7 @@
  */
 
 /**
- * Main Menu - Separator item layout
+ * Horizontal menu — Separator item layout
  */
 
 defined('_JEXEC') or die;
@@ -19,15 +19,14 @@ $anchor_css = $item->anchor_css ?: '';
 $linktype = $item->title;
 
 if ($item->menu_icon) {
-    // The link is an icon
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     if ($itemParams->get('menu_text', 1)) {
-        // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
-        // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 
 ?>
-<span class="dropdown-divider mod-menu-main__separator <?php echo $anchor_css; ?>"<?php echo $title; ?>><?php echo $linktype; ?></span>
+<span class="dropdown-divider mod-menu-horizontal__separator <?php echo $anchor_css; ?>"<?php echo $title; ?>><?php echo $linktype; ?></span>

src/html/mod_menu/horizontal_url.php

@@ -8,7 +8,7 @@
  */
 
 /**
- * Main Menu - URL item layout
+ * Horizontal menu — URL item layout
  */
 
 defined('_JEXEC') or die;
@@ -33,13 +33,12 @@ if ($item->anchor_rel) {
 $linktype = $item->title;
 
 if ($item->menu_icon) {
-    // The link is an icon
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     if ($itemParams->get('menu_text', 1)) {
-        // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
-        // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 
@@ -48,12 +47,10 @@ if ($item->browserNav == 1) {
     $attributes['rel'] = 'noopener noreferrer';
 } elseif ($item->browserNav == 2) {
     $options = 'toolbar=no,location=no,status=no,menubar=no,scrollbars=yes,resizable=yes,' . $params->get('window_open');
-
     $attributes['onclick'] = "window.open(this.href, 'targetWindow', '" . $options . "'); return false;";
 }
 
-// Add dropdown toggle for items with children
-$linkClass = 'nav-link mod-menu-main__link';
+$linkClass = 'nav-link mod-menu-horizontal__link';
 if ($item->deeper) {
     $linkClass .= ' dropdown-toggle';
     $attributes['data-bs-toggle'] = 'dropdown';
@@ -61,7 +58,6 @@ if ($item->deeper) {
     $attributes['aria-expanded'] = 'false';
 }
 
-// Merge existing class with our class
 if (isset($attributes['class'])) {
     $attributes['class'] .= ' ' . $linkClass;
 } else {

src/html/mod_menu/mainmenu.php

@@ -28,14 +28,9 @@ $moduleclass_sfx = htmlspecialchars($params->get('moduleclass_sfx', ''), ENT_COM
 // The menu class is deprecated. Use mod-menu instead
 ?>
 <nav class="mod-menu mod-menu-main navbar navbar-expand-lg<?php echo $moduleclass_sfx; ?>"<?php echo $id; ?>>
-    <div class="container-fluid">
-        <!-- Hamburger toggle button for mobile -->
-        <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#mainMenuCollapse-<?php echo $module->id; ?>" aria-controls="mainMenuCollapse-<?php echo $module->id; ?>" aria-expanded="false" aria-label="Toggle Main Menu">
-            <span class="fa-solid fa-bars" aria-hidden="true"></span>
-        </button>
-
-        <!-- Collapsible menu content -->
-        <div class="collapse navbar-collapse" id="mainMenuCollapse-<?php echo $module->id; ?>">
+    <div class="container-fluid p-0">
+        <!-- Collapsible menu content — toggle controlled by .nav-mobile-bar in index.php -->
+        <div class="collapse navbar-collapse" id="moko-main-menu-collapse">
             <ul class="navbar-nav mod-menu-main__list">
 <?php foreach ($list as $i => &$item) :
     $itemParams = $item->getParams();

src/html/mod_menu/mainmenu_component.php

@@ -33,13 +33,15 @@ if ($item->anchor_rel) {
 $linktype = $item->title;
 
 if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     // The link is an icon
     if ($itemParams->get('menu_text', 1)) {
         // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
         // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 

src/html/mod_menu/mainmenu_heading.php

@@ -19,13 +19,15 @@ $anchor_css = $item->anchor_css ?: '';
 $linktype = $item->title;
 
 if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     // The link is an icon
     if ($itemParams->get('menu_text', 1)) {
         // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
         // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 

src/html/mod_menu/mainmenu_separator.php

@@ -19,13 +19,15 @@ $anchor_css = $item->anchor_css ?: '';
 $linktype = $item->title;
 
 if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     // The link is an icon
     if ($itemParams->get('menu_text', 1)) {
         // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
         // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 

src/html/mod_menu/mainmenu_url.php

@@ -33,13 +33,15 @@ if ($item->anchor_rel) {
 $linktype = $item->title;
 
 if ($item->menu_icon) {
+    // Strip Joomla-injected padding classes that conflict with FA icon sizing
+    $item->menu_icon = trim(preg_replace('/\bp-[0-5]\b/', '', $item->menu_icon));
     // The link is an icon
     if ($itemParams->get('menu_text', 1)) {
         // If the link text is to be displayed, the icon is added with aria-hidden
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span>' . $item->title;
     } else {
         // If the icon itself is the link, it needs a visually hidden text
-        $linktype = '<span class="p-2 ' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
+        $linktype = '<span class="' . $item->menu_icon . '" aria-hidden="true"></span><span class="visually-hidden">' . $item->title . '</span>';
     }
 }
 

src/index.php

@@ -205,7 +205,10 @@ if ($this->countModules('drawer-left', true) || $this->countModules('drawer-righ
 
 // Container
 $wrapper      = $this->params->get('fluidContainer') ? 'wrapper-fluid' : 'wrapper-static';
-$stickyHeader = $this->params->get('stickyHeader') ? 'position-sticky sticky-top' : '';
+$stickyHeader    = $this->params->get('stickyHeader') ? 'position-sticky sticky-top' : '';
+$isHomePage      = Factory::getApplication()->getMenu()->getActive() === Factory::getApplication()->getMenu()->getDefault();
+$hideHeaderHome  = $isHomePage && (int) $this->params->get('hideHeaderHome', 0);
+$hideMenuHome    = $isHomePage && (int) $this->params->get('hideMenuHome', 0);
 
 // Meta
 $this->setMetaData('viewport', 'width=device-width, initial-scale=1');
@@ -430,6 +433,7 @@ $wa->useScript('user.js');         // js/user.js
 	<!-- End Google Analytics -->
 <?php endif; ?>
 
+<?php if (!$hideHeaderHome) : ?>
 <header id="top" class="header container-header full-width<?php echo $stickyHeader ? ' ' . $stickyHeader : ''; ?>" role="banner">
 
 	<?php if ($this->countModules('topbar')) : ?>
@@ -493,7 +497,7 @@ $wa->useScript('user.js');         // js/user.js
 	  </button>
 	<?php endif; ?>
 
-	<?php if ($this->countModules('menu', true) || $this->countModules('search', true)) : ?>
+	<?php if (($this->countModules('menu', true) || $this->countModules('search', true)) && !$hideMenuHome) : ?>
 		<div class="grid-child container-nav">
 			<?php // Mobile: hamburger (left) + search icon (right) on one line ?>
 			<div class="nav-mobile-bar d-lg-none">
@@ -521,6 +525,7 @@ $wa->useScript('user.js');         // js/user.js
 		</div>
 	<?php endif; ?>
 </header>
+<?php endif; ?>
 
 <div class="site-grid">
 	<?php if ($this->countModules('banner', true)) : ?>

src/language/en-GB/tpl_mokoonyx.ini

@@ -61,6 +61,10 @@ TPL_MOKOONYX_FONT_NOTE_TEXT="Loading fonts from external sources might be agains
 
 ; ===== Header & navigation (Theme tab) =====
 TPL_MOKOONYX_STICKY_LABEL="Sticky Header"
+TPL_MOKOONYX_HIDE_HEADER_HOME_LABEL="Hide Header on Home Page"
+TPL_MOKOONYX_HIDE_HEADER_HOME_DESC="Hide the site header (logo, branding) on the front page only."
+TPL_MOKOONYX_HIDE_MENU_HOME_LABEL="Hide Main Menu on Home Page"
+TPL_MOKOONYX_HIDE_MENU_HOME_DESC="Hide the main navigation menu on the front page only."
 TPL_MOKOONYX_BACKTOTOP="Back to Top"
 TPL_MOKOONYX_TOC_TITLE="Table of Contents"
 TPL_MOKOONYX_BACKTOTOP_LABEL="Back-to-top Link"
@@ -258,11 +262,6 @@ TPL_MOKOONYX_CSS_VARS_GABLE_DESC="Colour tokens used by the Gable extension.<br>
 TPL_MOKOONYX_CSS_VARS_FOOTER_LABEL="Footer"
 TPL_MOKOONYX_CSS_VARS_FOOTER_DESC="<strong>Spacing</strong><br><code>--footer-padding-top</code> — Top padding (default: <code>1rem</code>)<br><code>--footer-padding-bottom</code> — Bottom padding (default: <code>80px</code>)<br><code>--footer-grid-padding-y</code> — Grid vertical padding (default: <code>2.5rem</code>)<br><code>--footer-grid-padding-x</code> — Grid horizontal padding (default: <code>0.5em</code>)"
 
-; ===== Theme Preview tab =====
-TPL_MOKOONYX_THEME_PREVIEW_FIELDSET_LABEL="Theme Preview"
-TPL_MOKOONYX_THEME_PREVIEW_INTRO="<p>Live preview of all CSS variables, hero variants, block colours, and Bootstrap components rendered with your active theme. Use the <strong>Toggle Light / Dark</strong> button inside the preview to switch modes. This page is also available as a standalone file at <code>templates/mokoonyx/templates/theme-test.html</code>.</p>"
-TPL_MOKOONYX_THEME_PREVIEW_FRAME="<iframe src='../templates/mokoonyx/templates/theme-test.html' style='width:100%;height:80vh;border:1px solid #dee2e6;border-radius:.375rem;' loading='lazy' title='Theme test sheet preview'></iframe>"
-
 ; ===== Misc =====
 MOD_BREADCRUMBS_HERE="YOU ARE HERE:"
 

src/language/en-GB/tpl_mokoonyx.sys.ini

@@ -4,7 +4,7 @@
 ;
 ; SPDX-License-Identifier: GPL-3.0-or-later
 ;
-TPL_MOKOONYX="MokoOnyx"
+TPL_MOKOONYX="Template - MokoOnyx"
 TPL_MOKOONYX_GOOGLE_FIELDSET_LABEL="Google"
 TPL_MOKOONYX_DRAWERS_FIELDSET_LABEL="Drawers"
 TPL_MOKOONYX_MOD_MENU_LAYOUT_COLLAPSE_METISMENU="Collapsible Dropdown"

src/language/en-US/tpl_mokoonyx.ini

@@ -61,6 +61,10 @@ TPL_MOKOONYX_FONT_NOTE_TEXT="Loading fonts from external sources might be agains
 
 ; ===== Header & navigation (Theme tab) =====
 TPL_MOKOONYX_STICKY_LABEL="Sticky Header"
+TPL_MOKOONYX_HIDE_HEADER_HOME_LABEL="Hide Header on Home Page"
+TPL_MOKOONYX_HIDE_HEADER_HOME_DESC="Hide the site header (logo, branding) on the front page only."
+TPL_MOKOONYX_HIDE_MENU_HOME_LABEL="Hide Main Menu on Home Page"
+TPL_MOKOONYX_HIDE_MENU_HOME_DESC="Hide the main navigation menu on the front page only."
 TPL_MOKOONYX_BACKTOTOP="Back to Top"
 TPL_MOKOONYX_TOC_TITLE="Table of Contents"
 TPL_MOKOONYX_BACKTOTOP_LABEL="Back-to-top Link"
@@ -258,11 +262,6 @@ TPL_MOKOONYX_CSS_VARS_GABLE_DESC="Color tokens used by the Gable extension.<br><
 TPL_MOKOONYX_CSS_VARS_FOOTER_LABEL="Footer"
 TPL_MOKOONYX_CSS_VARS_FOOTER_DESC="<strong>Spacing</strong><br><code>--footer-padding-top</code> — Top padding (default: <code>1rem</code>)<br><code>--footer-padding-bottom</code> — Bottom padding (default: <code>80px</code>)<br><code>--footer-grid-padding-y</code> — Grid vertical padding (default: <code>2.5rem</code>)<br><code>--footer-grid-padding-x</code> — Grid horizontal padding (default: <code>0.5em</code>)"
 
-; ===== Theme Preview tab =====
-TPL_MOKOONYX_THEME_PREVIEW_FIELDSET_LABEL="Theme Preview"
-TPL_MOKOONYX_THEME_PREVIEW_INTRO="<p>Live preview of all CSS variables, hero variants, block colors, and Bootstrap components rendered with your active theme. Use the <strong>Toggle Light / Dark</strong> button inside the preview to switch modes. This page is also available as a standalone file at <code>templates/mokoonyx/templates/theme-test.html</code>.</p>"
-TPL_MOKOONYX_THEME_PREVIEW_FRAME="<iframe src='../templates/mokoonyx/templates/theme-test.html' style='width:100%;height:80vh;border:1px solid #dee2e6;border-radius:.375rem;' loading='lazy' title='Theme test sheet preview'></iframe>"
-
 ; ===== Misc =====
 MOD_BREADCRUMBS_HERE="YOU ARE HERE:"
 

src/language/en-US/tpl_mokoonyx.sys.ini

@@ -4,7 +4,7 @@
 ;
 ; SPDX-License-Identifier: GPL-3.0-or-later
 ;
-TPL_MOKOONYX="MokoOnyx Site template"
+TPL_MOKOONYX="Template - MokoOnyx"
 TPL_MOKOONYX_GOOGLE_FIELDSET_LABEL="Google"
 TPL_MOKOONYX_DRAWERS_FIELDSET_LABEL="Drawers"
 TPL_MOKOONYX_MOD_MENU_LAYOUT_COLLAPSE_METISMENU="Collapsible Dropdown"