chore: merge dev to main #195

Closed

jmiller wants to merge 0 commits from dev into main

pull from: dev

merge into: :main

:main

:dev

:rc

:feature/193-article-update-notification-plugin-with-

:feature/190-architecture-expand-mokowaas-to-full-crm

:feature/191-architecture-project-management-componen

:feature/192-expand-mokowaas-into-full-crm-offering-w

:feature/188-chore-rename-src-to-source-per-moko-plat

:feature/187-fix-preserve-download-keys-dlid-across-j

:feature/185-architecture-multi-tenant-provisioning-s

:feature/186-feat-extension-catalog-with-update-serve

:feature/184-feat-auto-category-menu-module-for-knowl

:feature/183-bug-installcontroller-execute-signature-

:feature/160-replace-regular-labs-advanced-module-man

:feature/161-replace-regular-labs-articles-anywhere

:feature/162-replace-regular-labs-articles-field

:feature/163-replace-regular-labs-better-frontend-lin

:feature/164-replace-regular-labs-conditional-content

:feature/165-replace-regular-labs-content-templater

:feature/166-replace-regular-labs-db-replacer

:feature/167-replace-regular-labs-email-protector

:feature/168-replace-regular-labs-extension-manager

:feature/169-replace-regular-labs-geoip

:feature/170-replace-regular-labs-ip-login

:feature/171-replace-regular-labs-keyboard-shortcuts

:feature/172-replace-regular-labs-modals

:feature/173-replace-regular-labs-modules-anywhere

:feature/174-replace-regular-labs-quick-index

:feature/175-replace-regular-labs-rereplacer

:feature/176-replace-regular-labs-snippets

:feature/178-replace-regular-labs-tabs-and-accordions

:feature/179-replace-regular-labs-tooltips

:feature/180-replace-regular-labs-users-anywhere

:feature/181-replace-regular-labs-cache-cleaner

:feature/153-slim-core-plugin-to-thin-coordinator-100

:feature/154-remove-branding-identity-features-from-c

:feature/155-move-security-hardening-from-core-to-fir

:feature/156-move-site-alias-handling-to-tenant-plugi

:feature/157-extract-grafana-health-monitoring-from-c

:feature/158-extract-content-sync-handlers-from-core-

:feature/159-extract-demo-mode-handlers-from-core-plu

:feature/151-feat-expanded-ticket-automation-with-joo

:feature/150-feat-privacy-guard-and-data-compliance-g

:feature/135-feat-helpdesk-email-notifications

:feature/136-feat-helpdesk-email-to-ticket-imap-polli

:feature/137-feat-helpdesk-automation-rules-admin-ui

:feature/138-feat-helpdesk-canned-responses-admin-ui

:feature/139-feat-helpdesk-ticket-categories-admin-ui

:feature/140-feat-helpdesk-satisfaction-ratings

:feature/141-feat-helpdesk-file-attachments

:feature/142-feat-helpdesk-rest-api-endpoints

:feature/143-feat-waf-auto-ban-after-repeated-blocks

:feature/144-feat-waf-log-viewer-admin-ui

:feature/145-feat-database-repair-and-optimization-to

:feature/146-feat-scheduled-temp-directory-cleanup

:feature/147-feat-email-based-notifications-for-secur

:feature/148-feat-ssl-certificate-expiry-monitoring

:feature/149-feat-component-config-options-ui

:feature/122-feat-web-application-firewall-waf-full-i

:feature/123-feat-htaccess-nginx-web-config-configura

:feature/124-feat-http-security-headers-manager

:feature/125-feat-php-file-change-scanner

:feature/126-feat-file-and-folder-permissions-fixer

:feature/127-feat-database-repair-optimisation-and-ma

:feature/128-feat-temp-directory-and-cache-cleanup-to

:feature/129-feat-dashboard-data-tables-logins-update

:feature/130-feat-enhanced-cpanel-module-collapsible-

:feature/131-feat-notification-system-email-alerts-lo

:feature/132-feat-settings-import-export-across-sites

:feature/133-feat-admin-secret-url-parameter-and-cust

:feature/121-bug-cpanel-module-escape-crash-not-in-ob

:feature/110-bug-com-mokowaas-dashboard-404-invalid-c

:feature/111-feat-admin-control-panel-dashboard-com-m

:feature/112-feat-firewall-feature-plugin-plg-system-

:feature/113-feat-tenant-restrictions-feature-plugin-

:feature/114-feat-developer-tools-feature-plugin-plg-

:feature/115-feat-health-monitor-feature-plugin-plg-s

:feature/116-feat-plugins-and-dashboard-rest-api-endp

:feature/117-feat-cpanel-module-for-joomla-admin-dash

:feature/118-feat-display-current-ip-wherever-ip-addr

:feature/119-feat-static-updates-xml-licensing-deferr

:feature/120-chore-sync-all-package-version-numbers

Conversation 0 Commits - Files Changed -

+16706 -10094

jmiller commented 2026-06-06 16:41:25 +00:00

Owner

Copy Link

Copy Source

Workflow fixes, token standardization, and cleanup.

Workflow fixes, token standardization, and cleanup.

jmiller added 275 commits 2026-06-06 16:41:25 +00:00

chore: sync updates.xml 02.33.00 from main [skip ci] 7be52a964e

feat: add admin submenus under MokoWaaS sidebar menu ... 4f2aea75f5

Submenus:
- Dashboard (control panel)
- Moko Extensions (install packages)
- Feature Plugins (filtered plugin manager)
- Joomla Updates (com_installer update view)
- Global Check-in (com_checkin)
- Cache Management (com_cache)

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev d0a3b5d6a4

chore(version): auto-bump 02.32.22 [skip ci] 3d3c918848

chore: update development channel 02.32.22 [skip ci] 5d94419d9f

feat: add all quick action buttons to dashboard + Community Builder detection ... 6a02a2b4e5

8 action buttons in a 4-column grid:
- Clear Cache, Check Updates, Moko Extensions (primary)
- Global Check-in, View Logs, Scheduled Tasks, User Manager, Redirects (secondary)

User Manager auto-detects Community Builder — links to com_comprofiler
if installed, otherwise com_users.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 8240e693fb

chore(version): auto-bump 02.32.23 [skip ci] a013755ce4

feat: .htaccess / NginX configuration maker (#123) ... 0632981d88

GUI-based server config generator with toggle switches:

Security: directory listing, sensitive files, PHP in uploads,
server signature, clickjacking, MIME sniffing, XSS, TRACE/TRACK,
referrer policy, HSTS, CSP, permissions policy

Performance: GZip compression, browser caching with configurable
expiry times, ETag control

SEO: www/non-www redirect, index.php redirect, trailing slash

Features:
- Live preview updates as toggles change (AJAX)
- Save to disk with automatic .htaccess.mokowaas.bak backup
- Download generated config
- NginX equivalent tab
- Current file viewer tab
- Options persist in component params
- Added to sidebar submenu

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev eeb4822b37

chore(version): auto-bump 02.32.24 [skip ci] 12e9115a6a

chore: update development channel 02.32.24 [skip ci] 8ce3452125

fix: dashboard plugin cards - correct protected/enabled/configure-only states ... af841ace19

- Task plugins (demo reset, content sync) show Enabled/Disabled badge
  instead of Protected — DB protected flag is for uninstall protection,
  not dashboard display
- DevTools shows Enabled badge only (configure-only, no toggle) since
  features are controlled inside the plugin settings
- Health Monitor marked as protected (cannot be disabled)
- Added explicit metadata for task plugins instead of relying on
  guessPluginMeta

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branches 'dev' and 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 23dc30b5f9

chore(version): auto-bump 02.32.25 [skip ci] ed4b06d330

chore: update development channel 02.32.25 [skip ci] 5a1a2f98b0

chore: update MokoOnyx submodule to 02.17.00 stable ... 267beea8f9

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

refactor: remove Health Monitor plugin - heartbeat built into core (#115) ... d563e2eac8

The health monitor/Grafana heartbeat is mandatory infrastructure that
must always be active. The core system plugin (plg_system_mokowaas)
already has handleGrafanaProvisioning() and sendHeartbeat(), making
the separate monitor plugin redundant.

- Removed plg_system_mokowaas_monitor from package manifest
- Removed from script.php enable/protect lists
- Removed from cascade enable/disable logic
- Removed from dashboard plugin metadata
- Excluded from dashboard plugin discovery query
- Disabled on dev server (can be uninstalled manually)

Health monitoring is now entirely handled by the core plugin which
is protected and cannot be disabled.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branches 'dev' and 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev b4beaf5bc9

chore(version): auto-bump 02.32.26 [skip ci] dac5c6c052

chore: update development channel 02.32.26 [skip ci] 79c3cfc1f0

feat: auto-remove retired monitor plugin on package update ... a78178b5dd

Added removeRetiredExtensions() to package postflight script.
On every install/update, it checks for retired extensions and
removes them (DB record + files). Currently retires:
- plg_system_mokowaas_monitor (merged into core in 02.32.00)

Future retired extensions can be added to the $retired array.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: duplicate Core card on dashboard - webservices plugin matching core metadata [skip ci] ... 1e6a255fab

The webservices plugin (element=mokowaas, folder=webservices) was
matching the PLUGIN_META entry for the core system plugin since the
lookup key was just the element name. Fixed by only matching system
and task plugins against PLUGIN_META; webservices/other folders use
folder_element as the key and fall through to guessPluginMeta.

Also includes auto-remove retired monitor plugin on package update.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

refactor: remove duplicate features from core plugin ... 1ad1f1c010

Removed from onAfterInitialise:
- enforceHttps (now in firewall plugin)
- enforceDevMode (now in devtools plugin)
- enforceAdminSessionTimeout (now in firewall plugin)
- enforceUploadRestrictions (now in firewall plugin)

Removed from onAfterRoute:
- warnMissingLicenseKey (deferred - licensing not ready)
- enforceAdminRestrictions (now in tenant plugin)

Removed event handlers:
- onPreprocessMenuItems (now in tenant plugin)
- onUserBeforeSave (now in firewall plugin)

Removed from onExtensionAfterSave:
- resetAllHits / deleteAllVersions (now in devtools plugin)

Removed param fieldsets from manifest:
- tenant_restrictions (now in tenant plugin)
- dev_mode, reset_hits, delete_versions (now in devtools plugin)
- force_https, session_timeout, trusted_ips, password_*, upload_*
  (now in firewall plugin)

Core plugin now only handles: branding, master user, emergency access,
site aliases, Atum branding, language overrides, health API, Grafana
heartbeat, demo banner, plugin protection, and content sync.

Settings migration handled by migrateFeatureParams() in script.php.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): auto-bump 02.32.27 [skip ci] cf39c169d2

chore: update development channel 02.32.27 [skip ci] a89d516623

refactor: remove 12 dead method bodies from core plugin (-607 lines) ... 9a375740b9

Removed: resetAllHits, deleteAllVersions, warnMissingLicenseKey,
enforceDevMode, onDevModeDisabled, enforceHttps,
enforceAdminSessionTimeout, ipIsTrusted, enforceUploadRestrictions,
enforceAdminRestrictions, blockAccess, getHiddenMenuComponents

These methods were already unreachable after the call sites were
removed in the previous commit. The functionality lives in the
firewall, tenant, and devtools feature plugins.

Core plugin: 5366 -> 4759 lines

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 9565911089

chore(version): auto-bump 02.32.28 [skip ci] 3be42ec37a

chore: update development channel 02.32.28 [skip ci] b7d90f9b18

feat: integrate MokoJoomTOS as Offline Bypass feature plugin + add OpenGraph to catalog ... 1cdbfd035d

New plugin: plg_system_mokowaas_tos (Offline Bypass)
- Keeps configured pages accessible during offline mode
- SEF path matching + Itemid fallback
- Custom MenuslugField for multi-select menu items
- Include children option for parent menu matching
- Renamed from MokoJoomTOS to MokoWaaS Offline Bypass

Also:
- Added MokoJoomOpenGraph to extension manager catalog
- Added to package manifest, script.php, dashboard, cascade list

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev f3d6ef948b

chore(version): auto-bump 02.32.29 [skip ci] b5eebb0acc

chore: update development channel 02.32.29 [skip ci] 25e2c29e2e

fix: move boot() session lifetime logic from core to firewall plugin ... 0e5caf6b3f

Core plugin's boot() called ipIsTrusted() which was deleted in the
cleanup. The session lifetime extension for trusted IPs is now in the
firewall plugin's boot() method where ipIsTrusted() still exists.

Firewall now implements BootableExtensionInterface.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 94b20b0c54

chore(version): auto-bump 02.32.30 [skip ci] 8ea724116c

chore: update development channel 02.32.30 [skip ci] db260008a2

feat: helpdesk / ticket system with SLA tracking ... 7f64651517

Full helpdesk built into com_mokowaas:

Ticket List View (view=tickets):
- Status summary cards (open, in progress, waiting, resolved, closed, SLA overdue)
- Filterable table (status, priority, category)
- SLA highlighting (red=overdue, yellow=at risk)
- New ticket modal with category, priority, description

Ticket Detail View (view=ticket):
- Conversation thread with replies
- Internal notes (staff-only, yellow highlight)
- Canned response selector
- Status action buttons (reopen, in progress, waiting, resolve, close)
- SLA response/resolution due with overdue indicators
- Ticket metadata sidebar

Model (TicketsModel):
- getTickets with filters, getTicket with replies
- createTicket with auto-assign from category + SLA deadlines
- addReply with SLA response tracking
- updateStatus with resolved/closed timestamps
- getCategories, getCannedResponses
- getStatusCounts, getOverdueTickets

Database:
- #__mokowaas_tickets (status, priority, SLA fields)
- #__mokowaas_ticket_replies (with internal notes)
- #__mokowaas_ticket_categories (SLA + auto-assign config)
- #__mokowaas_ticket_canned (response templates)
- 5 default categories with SLA presets

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 7425c412fc

chore(version): auto-bump 02.32.31 [skip ci] 6798a5da7e

chore: update development channel 02.32.31 [skip ci] 1ce287cb2e

feat: component ACL permissions for MokoWaaS ... b50661d9ee

Added access.xml with granular permissions:
- core.admin / core.manage (Joomla standard)
- mokowaas.dashboard — view the control panel
- mokowaas.extensions — install/uninstall Moko packages
- mokowaas.htaccess — edit .htaccess configuration
- mokowaas.tickets — view helpdesk tickets
- mokowaas.tickets.create — create new tickets
- mokowaas.tickets.assign — assign tickets to users
- mokowaas.plugins.toggle — enable/disable feature plugins
- mokowaas.cache — clear Joomla cache

Configurable per user group in Options > Permissions tab.
Also moved MokoWaaS to top of admin sidebar menu.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev e69953ad17

chore(version): auto-bump 02.32.32 [skip ci] 4684c4a1eb

chore: update development channel 02.32.32 [skip ci] cf85a560e4

feat: wire ACL checks into all controller actions and views ... 33ce8b115c

Every view and AJAX task now checks its specific ACL permission:
- display() checks VIEW_ACL map per view name
- togglePlugin → mokowaas.plugins.toggle
- clearCache → mokowaas.cache
- installExtension → mokowaas.extensions
- saveHtaccess/generateHtaccess → mokowaas.htaccess
- createTicket → mokowaas.tickets.create
- addTicketReply/updateTicketStatus → mokowaas.tickets

Super admins (core.admin) always bypass all checks.
Refactored to use checkAcl/jsonResponse/jsonForbidden helpers.

Default ACL applied on dev:
- Super Users: all permissions
- Administrator: cache + ticket assign
- Manager: dashboard + tickets (view/create)
- Others: no access

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 614b813056

chore(version): auto-bump 02.32.33 [skip ci] 6ae5daffa2

chore: update development channel 02.32.33 [skip ci] bb03cd94d6

feat: rename mokowaas_tos to mokowaas_offline + auto-migrate from standalone MokoJoomTOS ... adccf3bd2a

Renamed plugin element from mokowaas_tos to mokowaas_offline to better
reflect its purpose (offline bypass, not just TOS).

Added migrateStandalonePlugins() to package script:
- Detects if standalone mokojoomtos plugin is installed
- Copies its params (configured slugs) to mokowaas_offline
- Removes old extension record, update sites, and files
- Logs the migration

Future standalone-to-MokoWaaS migrations can be added to the
$migrations array.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: resolve merge conflict in offline plugin manifest [skip ci] ... c4b3892d9c

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: Akeeba Ticket System importer ... fe87e9038a

Auto-detects ATS tables (#__ats_tickets, #__ats_posts, #__ats_cannedreplies)
and shows an import button on the helpdesk ticket list with counts.

Imports:
- Tickets: maps ATS status (O/P/C) to MokoWaaS statuses, priority 1-5
  to low/normal/high/urgent, preserves created_by/assigned_to/dates
- Posts: first post becomes ticket body, subsequent posts become replies
- Canned replies: imported with title and body (HTML stripped)
- Skips duplicates on re-import (idempotent)

ACL enforced: requires mokowaas.tickets permission.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): auto-bump 02.32.34 [skip ci] cb33aabb0c

chore: update development channel 02.32.34 [skip ci] 883e7c72f0

feat: Akeeba Admin Tools + Ticket System importers with auto-disable ... ed138fdc57

New ImportModel with two importers:

Admin Tools Importer:
- Reads #__admintools_wafconfig → maps WAF shields, admin secret,
  session timeout, template blocking to firewall plugin params
- Reads #__admintools_storage → maps server signature, HSTS, GZip,
  expires, ETag, www redirect, directory listing to htaccess options
- Reads #__admintools_ipblock → merges into firewall IP deny list
- Disables com_admintools + all admintools plugins after import

Akeeba Ticket System Importer:
- Imports tickets with status/priority mapping
- First post becomes ticket body, rest become replies
- Imports canned replies
- Disables com_ats + all ATS plugins after import

Dashboard shows blue import banner when Akeeba data is detected.
Both importers require core.admin (Super Users only).
Idempotent — safe to run multiple times.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 2706d81267

chore(version): auto-bump 02.32.35 [skip ci] 23d6a1ad44

chore: update development channel 02.32.35 [skip ci] eab0ed1b80

chore(ci): sync CI issue reporter from Template-Joomla a2091b1a67

chore(ci): sync CI issue reporter from Template-Joomla 240a947bec

chore(ci): sync CI issue reporter from Template-Joomla 995fc4b591

feat: customer portal - frontend ticket submission and history ... 80c2658b06

Frontend (site-side) views for authenticated users:

Ticket List (view=tickets):
- Shows user's own tickets with status badges
- Collapsible new ticket form with category + priority
- Redirects guests to login with return URL

Ticket Detail (view=ticket):
- Conversation thread (excludes internal notes)
- Staff replies highlighted with badge
- Reply form (disabled for closed/resolved tickets)
- User can only see their own tickets

Also fixed .gitignore to allow src/packages/*/site/ directories.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 7f0b7756e4

feat: auto-create Support menu item on package install ... b37120341f

Creates a frontend menu item at /support pointing to the customer
portal (com_mokowaas&view=tickets). Access level: Registered.
Idempotent — skips if already exists.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci] ce04701616

feat: search KB before submitting ticket (frontend + backend) ... 4a18318cb9

Both frontend and admin ticket creation now show a KB search step
first. User types their issue, Smart Search (com_finder) returns
matching articles. If nothing helps, they click through to the
ticket form with the search query pre-filled as the subject.

Frontend (/support/submit-ticket):
- Search input with live results from #__finder_links
- Article links open in new tab
- "Submit Anyway" shows the ticket form
- Falls back to direct form if Smart Search has no indexed content

Admin (New Ticket modal):
- Same KB search step before the form
- Results as clickable list-group items
- Modal resets on close

Also:
- Added searchKb controller task (both frontend + admin)
- Added "Submit a Ticket" child menu item under Support on install
- Fixed innerHTML → safe DOM methods for search results

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev f350cd0169

chore(version): auto-bump 02.32.36 [skip ci] fd6c79d3a2

chore: update development channel 02.32.36 [skip ci] b8fbb0d1d6

chore: sync .mokogitea/workflows/auto-release.yml from moko-platform [skip ci] 756c2bff32

feat: frontend ticket management with smart permissions ... f3a3bc90b3

Ticket List (view=tickets):
- Staff see all tickets with Submitted By + Assigned To columns
- Customers see only their own tickets
- Status filter dropdown for staff
- isStaff check: core.admin OR mokowaas.tickets ACL

Ticket Detail (view=ticket):
- Staff see all tickets + internal notes (yellow highlight)
- Customers see only their own + no internal notes
- Staff sidebar: ticket details, change status buttons, assign to me
- Staff can post internal notes from frontend
- Customers can reply (disabled for closed tickets)
- Ownership enforced: customers can't view/reply to others' tickets

Controller:
- updateStatus: staff only
- assignTicket: mokowaas.tickets.assign ACL
- submitReply: verifies ownership OR staff

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev d73b8b06ef

chore(version): auto-bump 02.32.37 [skip ci] 8168bfb2dc

chore: update development channel 02.32.37 [skip ci] c5552a94fb

feat: helpdesk automation engine + scheduled task plugin ... ac920b997a

Automation engine in TicketsModel:
- Condition evaluator: field/op/value with eq, neq, gt, lt, in, not_in
- Action executor: set_status, set_priority, assign, add_note
- Trigger events: ticket_created, ticket_replied, status_changed, scheduled
- Hooks wired into createTicket, addReply, updateStatus

Scheduled task plugin (plg_task_mokowaas_tickets):
- Runs all 'scheduled' automation rules against non-closed tickets
- Evaluates age_hours, status, priority, sla_responded
- Joomla Scheduler integration via TaskPluginTrait

Default automation rules:
1. Auto-close resolved tickets after 7 days
2. Escalate urgent tickets with no response in 1 hour
3. Notify on high/urgent ticket creation

Also:
- Added #__mokowaas_ticket_automation table
- Fixed dashboard ImportModel null error (direct instantiation)
- Added task plugin to package manifest + script.php

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev c8af0fa5ca

chore(version): auto-bump 02.32.38 [skip ci] 6f762534fe

chore: update development channel 02.32.38 [skip ci] 9cf3b51024

fix: hide import buttons after successful import + fix Factory class error ... aab196c26b

Import markers stored in com_mokowaas component params (imported_admintools,
imported_ats). checkAdminToolsAvailable() and checkAtsAvailable() return null
if already imported, hiding the dashboard banner and ticket list button.

Also fixed missing 'use Joomla\CMS\Factory' in admin tickets template.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 92cbcfeefd

chore(version): auto-bump 02.32.39 [skip ci] 755954425e

chore: update development channel 02.32.39 [skip ci] bc22f33a0c

chore: sync .mokogitea/workflows/repo-health.yml from moko-platform [skip ci] 236a148d42

feat: helpdesk email notifications (#135) ... 79bc17912a

NotificationService with dual recipient support:
- Joomla user IDs (looks up email from #__users)
- Raw email addresses (comma-separated)
- Admin emails + admin user IDs from component params
- Per-event smart routing (creator, assignee, admins)

Events:
- ticket_created → admin emails + assigned user
- ticket_replied → creator + assigned user (skip internal notes)
- status_changed → creator (includes old/new status)
- ticket_assigned → newly assigned user

Email format: plain text with ticket details + view link

Automation engine: added send_email action type for rules
to send emails to specific addresses.

Config stored in com_mokowaas params.notifications:
  admin_emails: comma-separated email addresses
  admin_user_ids: comma-separated Joomla user IDs

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 4c728ef7b6

chore(version): auto-bump 02.32.40 [skip ci] 5a274f844c

chore: update development channel 02.32.40 [skip ci] 53fe8c08a9

chore: sync .mokogitea/workflows/repo-health.yml from moko-platform [skip ci] 63fb1339b8

feat: Privacy Guard - data compliance, consent, retention (#150) ... dd20e42cb2

Admin Privacy Dashboard (view=privacy):
- Data subject requests list with approve/deny actions
- Retention policies table with active status
- Summary cards (pending, total, consent entries, policies)
- Export user data as JSON download
- ACL: core.admin only

PrivacyModel:
- createRequest/processRequest for export/delete/anonymize
- exportUserData: profile, articles, action logs, tickets, replies,
  consent history, Community Builder profile
- anonymizeUserData: replace PII, block account, clear logs
- deleteUserData: full hard delete (anonymize first, then remove)
- logConsent/getUserConsent: consent tracking
- enforceRetentionPolicies: action_logs, waf_logs, sessions,
  inactive_users, closed_tickets (scheduled task ready)
- getDashboardSummary

Frontend Self-Service (/index.php?option=com_mokowaas&view=privacy):
- Download My Data, Anonymize, Delete Account buttons
- Request history table
- Consent history table
- Login required

Database tables:
- #__mokowaas_consent_log
- #__mokowaas_data_requests
- #__mokowaas_retention_policies (5 defaults)

Submenu: MokoWaaS > Privacy Guard

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 6a4f81dd32

chore(version): auto-bump 02.32.41 [skip ci] 8cd80ae7d2

chore: update development channel 02.32.41 [skip ci] d22d470aa2

feat: WAF log viewer with filters, one-click ban, and purge (#144) ... 8f936fc92c

Admin view at MokoWaaS > WAF Log:

- Rule distribution cards showing block counts per shield
- Filterable log table: rule, IP, search (URI/detail/UA), date range
- Pagination (50 per page)
- One-click IP ban from any log entry or top IPs sidebar
- Top 10 blocked IPs sidebar with ban buttons
- Purge old logs (configurable days)
- Color-coded rule badges (sqli=red, xss=red, mua=yellow, etc.)

WaflogModel:
- getLogs with filters + pagination
- getTotal for page count
- getRuleCounts for distribution cards
- getTopIps for sidebar
- getRuleNames for filter dropdown
- purgeLogs(days) with affected count
- banIp adds to firewall plugin IP blocklist params

ACL: core.admin (Super Users only)
Submenu: MokoWaaS > WAF Log

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 645fbc66c6

chore(version): auto-bump 02.32.42 [skip ci] 4b4d5c714b

chore: update development channel 02.32.42 [skip ci] 46a9701b62

feat: Part 1 batch — security headers, auto-ban, SSL monitor, IP display, settings export ... 2919722dab

#118 Display current IP on dashboard info bar
#124 HTTP security headers at runtime (X-Frame, X-Content-Type, X-XSS,
     Referrer-Policy, HSTS, CSP, Permissions-Policy) — new firewall
     fieldset with per-header toggles
#143 WAF auto-ban: threshold + window params, auto-adds to IP blocklist
     after N blocks in M minutes
#148 SSL certificate expiry monitoring in cpanel module (green/yellow/red
     badge with days remaining)
#132 Settings import/export — export all plugin + component params as
     JSON, import on another site

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 788c516fd6

chore(version): auto-bump 02.32.43 [skip ci] abd7a4a35e

chore: update development channel 02.32.43 [skip ci] 6ca195fd9f

feat: Part 1 batch 2 — helpdesk admin UIs (#137, #138, #139) ... d3561dd5c9

Ticket Categories admin (view=categories):
- Inline editable table with SLA times, auto-assign user
- Add/save/delete with AJAX
- SLA response + resolution minutes per category

Canned Responses admin (view=canned):
- Card list with title + preview
- Modal form for new responses with category filter
- Delete with AJAX

Automation Rules admin (view=automation):
- Card list with conditions + actions displayed inline
- Enable/disable toggle per rule
- Modal form with trigger, conditions JSON, actions JSON
- Delete with AJAX

Controller tasks: saveCategory, deleteCategory, saveCanned,
deleteCanned, saveAutomation, deleteAutomation, toggleAutomation

All ACL-protected (tickets ACL for categories/canned, core.admin
for automation rules).

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev ade768b94c

chore(version): auto-bump 02.32.44 [skip ci] 9cb49ec4b9

chore: update development channel 02.32.44 [skip ci] 6f7495703c

feat: MokoWaaS admin sidebar menu module (like CB's mod_cbadmin) ... 69776d9b77

New module mod_mokowaas_menu renders a dedicated MokoWaaS section
in the admin sidebar at position=menu, ordering=0 (before CB at 1
and Joomla's mod_menu at 2).

Menu items: Dashboard, Helpdesk, Extensions, .htaccess Maker,
Privacy Guard, WAF Log, Feature Plugins

Active state highlighting on current view.
Auto-created on package install with access=Special.
Added to package manifest.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 1389c26895

chore(version): auto-bump 02.32.45 [skip ci] 72e5e31a31

chore: update development channel 02.32.45 [skip ci] 0b49a959f4

feat: expanded automation — Joomla event triggers, create_ticket action, behavior options (#151) ... 0620ffd735

New trigger events hooked into core plugin:
- user_login — fires on successful Joomla login
- user_register — fires on new user creation
- user_login_failed — fires on failed login attempt

New action type: create_ticket with behavior options:
- append: add reply to existing open ticket (same user+category)
- always_new: always create a new ticket
- skip_if_open: do nothing if open ticket exists

New method: runSystemEventAutomation() for non-ticket events
that builds a virtual context object from event data.

Automation rules can now create tickets from any system event,
with intelligent deduplication to avoid ticket spam.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev d193d0992e

chore: remove duplicate <version> tags from 3 manifests (#120) [skip ci] ... ca2160d42f

CI auto-bump was inserting duplicate version lines. Removed extras
from plg_webservices_mokowaas, plg_webservices_perfectpublisher,
and plg_task_mokowaasdemo. All 14 extensions now at 02.32.45.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: code review — 10 security and quality fixes ... 861086bf33

#1  exportSettings: added CSRF token check (Session::checkToken('get'))
#2  All controllers: added explicit return after jsonForbidden() and
    early-exit jsonResponse() calls — prevents execution fallthrough
#3  Delete/update handlers: return validation implicit via getInt
#6  WAF scanInput: double urldecode to catch %25xx encoding tricks
#7  PrivacyModel anonymize: now clears #__user_profiles and
    #__contact_details (GDPR completeness)
#12 SLA responded: only marked on staff replies, not customer self-replies
    — prevents customers from clearing their own SLA timer
#13 MokoWaaSHelper: getMasterUsernames() changed to private static
    — prevents third-party code from accessing decoded master usernames

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): auto-bump 02.32.46 [skip ci] 53dec689b3

chore: update development channel 02.32.46 [skip ci] a30db55024

fix: license key warning shows on every admin page load, non-dismissable ... 500644bc8d

Restored warnMissingLicenseKey() in onAfterRoute. No session caching —
the warning fires on every admin page load if no download key (dlid)
is configured in the MokoWaaS update site. Only shown to master users.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev f057f0ba86

fix: merge + stash pop [skip ci] ... 055562b06a

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: database tools, cache cleanup, admin menu update, license key warning moved to postflight ... 234c6037c0

- Add database tools view (view=database) with table status, optimize, repair, session purge (#127)
- Add cache cleanup view (view=cleanup) with directory size reporting and one-click cleanup (#128)
- Add Database Tools and Cache Cleanup links to admin sidebar menu module
- Add MokoWaaS-specific update badge (blue) separate from other updates in cpanel module
- Add SSL certificate expiry monitoring to cpanel module (#148)
- Move license key warning from every-page onAfterRoute to package postflight (install/update only)
- Add privacy and waflog menu entries to component manifest submenu

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): auto-bump 02.32.47 [skip ci] 1c7738e276

chore: update development channel 02.32.47 [skip ci] 8903af5d7f

feat: collapsible admin menu, cache cleaner status module, update server URL ... 1819fa276c

- Admin menu module now collapses by default, auto-expands on MokoWaaS pages (CB-style)
- Add mod_mokowaas_cache: one-click cache cleaner button in admin status bar (replaces Regular Labs Cache Cleaner)
- clearCache now purges all cache files (not just expired), matching RL behavior
- Update server URL changed to https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS/updates.xml
- Add setupCacheModule() to package install script

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 7d9dbe702b

chore(version): auto-bump 02.32.48 [skip ci] de7a945470

chore: update development channel 02.32.48 [skip ci] 290fc0fb99

chore: sync .mokogitea/workflows/auto-release.yml from moko-platform [skip ci] 3f6a7af83e

fix: admin menu native classes, sys.ini to global language dir for menu icons ... 130aa26f27

- Rewrite mod_mokowaas_menu template to use native MetisMenu classes (item, has-arrow, mm-collapse, mm-active, sidebar-item-title) — no custom CSS/JS
- Add <languages> element to component manifest so sys.ini deploys to administrator/language/en-GB/ for menu title translation

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 8de7b473a8

chore(version): auto-bump 02.32.49 [skip ci] 0552c0a0b0

chore: update development channel 02.32.49 [skip ci] a2006c2287

fix: add fixMenuIcons to postflight for submenu icon params ... 30a6f6607a

Joomla only renders img column icons for level-1 menu items. Level 2+
need menu_icon in the params JSON. This runs on every install/update.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 75f73b0dff

chore(version): auto-bump 02.32.50 [skip ci] dcf115e572

chore: update development channel 02.32.50 [skip ci] 3bc1e66acf

fix: cache button native Atum markup, tickets unassigned HTML encoding ... 36082bd2e3

- Cache cleaner button uses native header-item-content/header-item-icon markup
- Fix <em>Unassigned</em> showing raw HTML in tickets list (escape only non-null values)

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 2fbaf09e88

chore(version): auto-bump 02.32.51 [skip ci] 8d4a302730

chore: update development channel 02.32.51 [skip ci] 07fd04d27e

chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci] 1ab8230191

feat: migrate all Moko update server URLs, fix menu icons ... 31e1843fe1

- Add migrateUpdateServerUrls() to postflight: rewrites /raw/branch/main/updates.xml to /updates.xml for all Moko extensions
- Fix Helpdesk icon to fa-handshake-angle, .htaccess to fa-solid fa-file-code (unmapped in joomla-fontawesome.css)

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 7c6d8a1b65

chore(version): auto-bump 02.32.52 [skip ci] bd403e4617

chore: update development channel 02.32.52 [skip ci] 81781e393d

chore: remove update-server workflow and static updates.xml, update changelog ... 64eade2589

- Remove update-server.yml — MokoGitea generates update feed dynamically
- Remove static updates.xml — no longer needed
- Fix cache cleaner CSRF: send token as POST FormData
- Update CHANGELOG.md with all 02.33.00 changes

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev ... b32a7c12e7

# Conflicts:
#	updates.xml

chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci] 5d303287c0

feat: retire MokoJoomTOS, MokoATS-Automation, MokoDPCalendarAPI, MokoGalleryCalendar ... 3f69fe6fc1

Add to removeRetiredExtensions(): uninstalls plugins, removes update sites,
and deletes files on MokoWaaS install/update. These features are now built
into MokoWaaS directly.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev fea6ae9f0a

fix: migrate MokoJoomTOS settings before retiring the plugin ... 6d29e9a853

Swap order: migrateStandalonePlugins() now runs before
removeRetiredExtensions() so TOS params are copied to
mokowaas_offline before the old plugin is deleted.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci] 375d11c199

fix: preflight ALTER for #__extensions.element default (strict mode) ... e01167f679

Joomla 6 + MySQL STRICT_TRANS_TABLES: the element column is NOT NULL
with no default. Package installer creates placeholder rows before
processing sub-extension manifests, causing INSERT failures. preflight()
adds DEFAULT '' so the INSERT succeeds.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 6fa3f4fa82

Merge remote-tracking branch 'origin/main' into dev ... b24e4e097b

# Conflicts:
#	.mokogitea/manifest.xml
#	.mokogitea/workflows/issue-branch.yml
#	CHANGELOG.md
#	CODE_OF_CONDUCT.md
#	GOVERNANCE.md
#	LICENSE.md
#	README.md
#	SECURITY.md
#	docs/guides/build-guide.md
#	docs/guides/configuration-guide.md
#	docs/guides/installation-guide.md
#	docs/guides/operations-guide.md
#	docs/guides/rollback-and-recovery-guide.md
#	docs/guides/testing-guide.md
#	docs/guides/troubleshooting-guide.md
#	docs/guides/upgrade-and-versioning-guide.md
#	docs/index.md
#	docs/plugin-basic.md
#	docs/update-server.md
#	src/packages/com_mokowaas/mokowaas.xml
#	src/packages/mod_mokowaas_cpanel/mod_mokowaas_cpanel.xml
#	src/packages/plg_system_mokowaas/Extension/MokoWaaS.php
#	src/packages/plg_system_mokowaas/Field/AllowedIpsField.php
#	src/packages/plg_system_mokowaas/Field/CopyableTokenField.php
#	src/packages/plg_system_mokowaas/Field/CurrentIpField.php
#	src/packages/plg_system_mokowaas/Field/DemoTaskInfoField.php
#	src/packages/plg_system_mokowaas/Field/NextResetField.php
#	src/packages/plg_system_mokowaas/Field/SnapshotTablesField.php
#	src/packages/plg_system_mokowaas/Service/ContentSyncReceiver.php
#	src/packages/plg_system_mokowaas/Service/ContentSyncService.php
#	src/packages/plg_system_mokowaas/Service/DemoResetService.php
#	src/packages/plg_system_mokowaas/mokowaas.xml
#	src/packages/plg_system_mokowaas/script.php
#	src/packages/plg_system_mokowaas/services/provider.php
#	src/packages/plg_system_mokowaas_devtools/mokowaas_devtools.xml
#	src/packages/plg_system_mokowaas_firewall/mokowaas_firewall.xml
#	src/packages/plg_system_mokowaas_monitor/mokowaas_monitor.xml
#	src/packages/plg_system_mokowaas_tenant/mokowaas_tenant.xml
#	src/packages/plg_task_mokowaasdemo/mokowaasdemo.xml
#	src/packages/plg_task_mokowaassync/mokowaassync.xml
#	src/packages/plg_webservices_mokowaas/mokowaas.xml
#	src/packages/plg_webservices_perfectpublisher/perfectpublisher.xml
#	src/packages/plg_webservices_perfectpublisher/services/provider.php
#	src/packages/plg_webservices_perfectpublisher/src/Extension/PerfectPublisherApi.php
#	src/pkg_mokowaas.xml

chore: standardize updateservers URL [skip ci] f6c73c4f82

chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci] 6b9a0867ac

ci: add dev-release workflow for pre-release builds from dev ... ef654ad3fc

Manual dispatch workflow that builds package from dev branch and
uploads to "development" release tag. No static updates.xml —
MokoGitea generates the update feed dynamically.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev d30f8eb0db

chore: recreate updates.xml with stable and development entries ... e76248a1c9

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: dev-release stability value is 'dev' not 'development' [skip ci] c862a01a0f

chore(release): build 02.33.01-dev [skip ci] dfa38b6e0e

chore: remove dev-release.yml, pre-release.yml handles dev builds [skip ci] 9c4d9f060e

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 3976ce78c3

chore: update development channel 02.33.01-dev [skip ci] 1a42a71852

chore: update server pretty name - MokoWaaS - Moko Consulting Admin Tools Suite ... eae734afca

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev ... 9a8b3b53fc

# Conflicts:
#	updates.xml

chore: shorten update server name to Package - MokoWaaS [skip ci] 27959a0afe

fix: remove tpl_mokoonyx from package manifest ... 92b32dd924

MokoOnyx is a separate repo with its own release pipeline.
Bundling it as a submodule causes "Install path does not exist"
because the build doesn't create the ZIP correctly from submodule content.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: update development channel 02.33.01-dev [skip ci] 0a5d43e12b

ci: extract changelog into release notes for both pre-release and auto-release ... 5ab21a0fac

Adds a step after release creation that reads CHANGELOG.md, extracts
the latest version section, and PATCHes it onto the Gitea release body.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 65a6cdf505

chore: update development channel 02.33.01-dev [skip ci] 5ca1eb98a8

ci: RC pre-release bumps minor version, consolidating dev patches ... 7bd9213ec5

Dev patches (02.33.01, 02.33.02, etc.) exist for the update system.
RC consolidates to next minor: 02.33.xx → 02.34.00-rc.
auto-release already uses --bump minor for stable.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 71133cdc24

chore: changelog [Unreleased] workflow, CI gate, contributing docs ... f401a76227

- CHANGELOG.md now uses [Unreleased] section as staging area
- Only minor version headings (no dev patch numbers)
- pr-check.yml blocks PRs to main if [Unreleased] is empty
- pre-release.yml and auto-release.yml extract from [Unreleased] for release notes
- CONTRIBUTING.md documents the changelog workflow
- RC pre-release bumps minor version consolidating dev patches

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: dashboard charts, visual separator, remove small class ... f0e2228700

- Add WAF activity bar chart and login activity line chart (Chart.js, 14 days)
- Add border-left separator between plugin grid and info panel
- Remove all 'small' CSS class usage for better readability
- Add getWafBlocksByDay() and getLoginsByDay() to DashboardModel

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: hide cpanel module on MokoWaaS dashboard (redundant info) ... e858130375

The dashboard already shows site info, plugins, WAF blocks, logins,
and updates. The cpanel module duplicates this. Now it auto-hides
when option=com_mokowaas and view is dashboard or empty.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: Chart.js CDN with SRI hash, rename Community Builder to MokoJoomCommunity ... 524523b8c6

Chart.js not bundled with Joomla 6 — use jsdelivr CDN with integrity check.
Dashboard user manager button shows MokoJoomCommunity (not Community Builder).

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.33.01-dev [skip ci] 557c15cbe0

chore: update development channel 02.33.01-dev [skip ci] b304d6c9a2

refactor: remove branding/identity from core plugin (#154) ... 8ea6df020b

Remove 8 branding methods and 4 call sites (-428 lines):
- enforceAtumBranding(), hexToHsl(), injectFavicon()
- enforceLoginSupportUrls(), loadLanguageOverrides()
- getPlaceholders(), parseLanguageFile(), setTemplateParam()

MokoWaaS is an admin tools suite, not a branding layer.
Core plugin docblock updated to reflect new purpose.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 9498a56f98

fix: change /kb/ URLs to /support/products/ across all references ... ee7260b435

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: MokoWaaS guided tours — hijack Joomla's system, rebrand to MokoWaaS ... 79ac068bc4

- Unpublish all default Joomla guided tours (joomla-* UIDs)
- Create 4 MokoWaaS tours: Welcome, Firewall Setup, Helpdesk, Extensions
- Re-enable mod_guidedtours with title "MokoWaaS Tours"
- Add language override MOD_GUIDEDTOURS → "MokoWaaS Tours"
- Re-enable guided tours plugin if disabled

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge remote-tracking branch 'origin/main' into dev ... 42b47be564

# Conflicts:
#	.mokogitea/workflows/pre-release.yml
#	updates.xml

chore: update development channel 02.33.01-dev [skip ci] 329eca3db6

feat: auto-discover installed Moko extensions in admin sidebar menu ... 1f89a323d5

Static MokoWaaS views listed first, then installed Moko components
auto-discovered from #__extensions. Supported: MokoJoomBackup,
MokoJoomCommunity, MokoJoomCalendar, MokoJoomGallery, MokoJoomCross,
Akeeba Backup, Akeeba Ticket System. New extensions appear automatically.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev e808a168cb

feat: add Open button to extensions manager for installed components ... 171f489e3d

Shows an "Open" link to the component dashboard for installed
components and packages that have a com_ admin directory.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: update development channel 02.33.01-dev [skip ci] 1f7419f33d

feat: create privacy data requests from backend with auto-process option ... ecd5b6c786

- Add collapsible "New Request" form to privacy view (user select, type, auto-process)
- Controller handles 'create' action (pending) and 'approve' without request_id (auto-process: create + immediate approve)
- User dropdown populated from #__users

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev f30d7dd7af

chore: update development channel 02.33.01-dev [skip ci] b3082f27e3

fix: pre-release bumps patch for dev/alpha/beta so each build gets unique version ... 04a4bf8aba

Without this, repeated dev releases produce the same version and
Joomla won't offer the update (version not higher than installed).

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev e482a293c9

refactor: pre-release uses CLI version_bump.php instead of inline shell math ... 36d958f31f

Delegates version bumping to moko-platform CLI tools:
- version_bump.php (patch default, --minor for RC)
- version_set_platform.php (stability suffix)
- version_check.php (consistency)

This keeps the workflow thin and the logic in the shared CLI.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add dlid (license key) and blockChildUninstall to package manifest ... 4e0151be1b

- dlid prefix="dlid=" tells Joomla to send license key with update requests
- blockChildUninstall prevents removing sub-extensions without full package uninstall

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.33.02-dev [skip ci] 60910c2b8b

chore: update development channel 02.33.02-dev [skip ci] 4ab3b163f6

fix: remove Factory::getCache()->gc() from clearCache (crashes in Joomla 6) ... dfff3c327f

File-based cache cleanup already handles purging. The gc() calls
used a Joomla 5 API that may not work in Joomla 6, causing the
AJAX response to fail and show an error icon.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 3db14d29ef

fix: use Joomla native CacheControllerFactory for cache clearing ... 0d096acfa8

Replace manual file deletion with Joomla's built-in cache API
(CacheControllerFactoryInterface::createCacheController->clean).
Same approach as com_cache uses. Cleans both site and admin cache.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.33.03-dev [skip ci] 561fdcd881

chore: update development channel 02.33.03-dev [skip ci] 4c8bb93952

chore: minor version bump to 02.34.00 [skip ci] ... 415eeaac56

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: remove temp files [skip ci] e2e2ac8b56

chore(version): pre-release bump to 02.34.01-dev [skip ci] 4694e67e1c

chore: update development channel 02.34.01-dev [skip ci] 66b19f184c

feat: admin menu auto-discovers Moko component submenus from #__menu ... 1c8625f828

Queries #__menu for all com_moko* components (except com_mokowaas).
Renders each as a collapsible parent with its submenu items nested
at level 3. Icons and titles loaded from the DB menu records.
Uses Text::_() for language key translation.

MokoJoomBackup, MokoJoomCommunity, MokoJoomCross, etc. automatically
appear with their full submenu when installed — zero config needed.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 57a54e8959

chore(version): pre-release bump to 02.34.02-dev [skip ci] b46da78e6c

chore: update development channel 02.34.02-dev [skip ci] 51ac178281

fix: self-heal orphaned update records (extension_id=0) in postflight ... 361a58f8cd

Joomla's update finder sometimes fails to link #__updates records
to the installed extension. fixUpdateRecords() joins on element+type
to set the correct extension_id.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 1ecc8be8d1

ci: remove updates.xml steps from pre-release (MokoGitea handles it) ... e71b075d94

MokoGitea license server generates updates.xml dynamically.
Removed: updates_xml_build.php call, updates.xml commit/push,
updates.xml branch sync. These are no longer needed.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ci: use pre-installed /opt/moko-platform on runner, fallback to clone ... 95097c4d3f

All workflows check for /opt/moko-platform first (updated by cron
every 6h). Falls back to fresh clone if not available. Eliminates
composer install timeouts that were causing build failures.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: load component sys.ini language files for admin menu translation ... fadd3a01cd

Text::_() returned raw keys (COM_MOKOBACKUP, COM_MOKOJOOMCOMMUNITY)
because Joomla hadn't loaded those components' language files yet.
Now loads both .sys.ini and .ini for each discovered component.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: override admin Help sidebar link to mokoconsulting.tech/support ... 21e57eaadc

Targets a[href*="dashboard=help"] in addition to existing
help.joomla.org/docs.joomla.org overrides. Opens in new window.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: remove stray chevron icon from cpanel module header ... 8c927b0a1b

The icon-chevron-down appeared as random noise when the card was
collapsed. The entire header row is already clickable as a collapse
toggle — no separate indicator needed.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: replace smart quotes with ASCII in workflow files ... a8a41e9bad

Unicode left/right quotes caused git clone to fail with
"protocol 'https' is not supported" inside Docker runner.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.34.03-dev [skip ci] 3834ba4c1c

fix: cpanel collapse toggle as caret button on far left ... 9f3e4b9d31

Replaced clickable header with a dedicated caret button (fa-caret-right/down)
on the far left that toggles the collapse. Dashboard button pushed to far right.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 0c4857d6e0

chore(version): pre-release bump to 02.34.04-dev [skip ci] 48ff2b2109

chore(version): pre-release bump to 02.34.05-dev [skip ci] 1b47876a6c

fix: offline bypass redirect loop, add default bypassed pages ... 3b99c5b6bc

- Move from onAfterRoute to onAfterInitialise (earlier in lifecycle)
- Remove forced tmpl=component which broke rendering
- Default bypassed pages: terms-of-service, privacy-policy,
  community-guidelines, support, tickets, submit-a-ticket

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 04af4a93a8

refactor: rename core plugin, remove branding from support files, rename Heartbeat Token ... 46bb7c31c2

- Plugin name: System - MokoWaaS Core (was System - MokoWaaS)
- Description updated to reflect admin tools suite coordinator role
- Removed updateAtumBranding() from plugin install script
- Removed brand_name placeholder from language override deployment
- Renamed "Health API Token" label to "Heartbeat Token" in language files
- Updated all .ini and .sys.ini descriptions (en-GB + en-US)

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.34.06-dev [skip ci] 0e28958ede

fix: revert /opt/moko-platform check — DinD inner containers can't see host volumes ... c93ae27b64

The act_runner DinD architecture means the job container (inner Docker)
doesn't share the outer container's volume mounts. Always clone fresh.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev c847b4a274

chore(version): pre-release bump to 02.34.07-dev [skip ci] 9c75d0254e

refactor: move security hardening to firewall plugin (#155) ... 0956757445

Move protectPlugin(), ensureProtectedFlag(), isOurExtension() from
core to firewall. Core no longer handles extension protection —
the firewall's onAfterRoute does it. Uses MokoWaaSHelper::isMasterUser().

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 3cc39cfa8f

fix: menu icons use FA6 for unmapped classes, query all MokoWaaS submenu items ... 01056afe74

- Helpdesk: fa-solid fa-handshake-angle (was icon-headphones, unmapped)
- .htaccess: fa-solid fa-file-code (was icon-file-code, unmapped)
- Query now finds ALL submenu items under the MokoWaaS parent menu,
  including those linking to com_plugins, com_installer, com_checkin, com_cache

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: reduce indent on admin menu module level 2 and 3 items ... 4ce8c6b4ea

Override Atum's deep padding-left with tighter padding-inline-start
(0.5rem for level 2, 0.75rem for level 3 sub-components).

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: custom CSS classes for admin menu indent control ... 5645516845

- .sidebar-wrapper .item-level-1 > a: padding-inline-start 1.5rem
- .mokowaas-menu-item > a: 1rem (replaces item-level-2)
- .mokowaas-menu-child > a: 1.5rem (replaces item-level-3)
Decouples from Atum's deep indentation cascade.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore(version): pre-release bump to 02.34.08-dev [skip ci] 36658fa8ca

fix: hardcode branding values in overrides, adjust menu indent, add reset download keys ... e42d6e7596

Hardcode {{BRAND_NAME}}, {{COMPANY_NAME}}, {{SUPPORT_URL}} placeholders
to literal values in all language override .ini files. Adjust admin menu
indent (2rem parent, 2.5rem child). Add one-shot reset download keys
toggle to DevTools plugin.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev e01791ae68

refactor: remove tpl_mokoonyx submodule ... 384b8824c6

Template is managed independently; submodule reference no longer needed.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

refactor: strip core plugin to heartbeat-only config ... 93c82a9cee

Remove branding, security hardening, demo mode, content sync, and API
actions from the core plugin. Config now shows only the heartbeat token.
Extension class reduced from 4226 to 2051 lines. Deleted 5 Field classes,
3 Service classes, 2 form XMLs, and media assets. Core retains health
checks, Grafana provisioning, site aliases, and extension cascade.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.09-dev ... 3d5f9346c6

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.10-dev ... 79047e37b5

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: update updates.xml for 02.34.10-dev ... 7f9b59a36d

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: API controller execute() signatures compatible with BaseController (#183) ... d1ee2ef3f4

All API controllers now accept the $task parameter required by
Joomla\CMS\MVC\Controller\BaseController::execute($task).

Closes #183

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add auto-category menu module for knowledge base sections (#184) ... 082fa0798c

New module mod_mokowaas_categories auto-discovers article categories
from a configurable root and renders them as a collapsible sidebar tree.
Supports configurable depth, article counts, empty category filtering,
and ACL-aware access. Matches existing MokoWaaS sidebar styling.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.11-dev, update updates.xml ... b170894228

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: XML-based extension catalog with update server discovery (#186) ... 0fb82306bb

Replace hardcoded CATALOG constant with catalog.xml that points to each
extension's updates.xml. The model fetches update servers at runtime to
resolve latest version and download URL. Adds update_available status
with Update button in the extensions view.

Closes #186

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.12-dev, update updates.xml ... 68ffffe2af

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: preserve download keys across Joomla extension updates (#187) ... d792b7ff0c

Joomla's installer can wipe extra_query (dlid) from #__update_sites
when rebuilding or reinstalling. The core plugin now backs up all
download keys and auto-restores any that get cleared. Runs on every
admin page load with a single lightweight query.

Closes #187

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.13-dev, update updates.xml ... 882a4bfb5c

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: firewall language strings and subform path after core cleanup ... 3cfe653b18

- Add forms/trusted_ip_entry.xml to firewall plugin (was deleted from core)
- Update formsource paths to point to firewall's own forms directory
- Add missing Security Headers fieldset language strings
- Use hardcoded English labels in subform to avoid cross-plugin translation issues

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.14-dev, update updates.xml ... d79d5393be

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: rename core plugin label, add temp cleaner to cache module ... 9fed55d5c0

- Dashboard: rename "Core — Branding & Identity" to "Core" with updated description
- Cache module: add temp directory cleaner button (trash icon) alongside cache cleaner
- DashboardModel: add clearTemp() method that removes tmp contents preserving .htaccess
- DisplayController: add clearTemp task handler

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: bump version to 02.34.15-dev, update updates.xml ... 8d4a5b7a04

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: sync .mokogitea/workflows/pre-release.yml from moko-platform [skip ci] 17ef84e867

fix: cache module uses split button layout "Clear: Cache | Temp" ... 1fe19fe5f1

Single header item with two clickable halves instead of two separate
status bar entries.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge branch 'dev' of https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS into dev 68ab5bdd44

chore: rename src/ to source/ per moko-platform standards (#188) ... e3c15979b8

Rename top-level src/ directory to source/ and update all references
in .gitignore, CLAUDE.md, manifest.xml, docs, and PATH comments.
Internal namespace path="src" attributes within extension packages
are unchanged (they refer to the package-internal src/ folder).

Closes #188

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge pull request 'chore: rename src/ to source/ per moko-platform standards (#188)' (#189) from chore/rename-src-to-source into dev e7cdc41648

chore: bump version to 02.34.16-dev, update updates.xml ... 5e33f94cce

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: show component and module version tiles on dashboard ... 398fefe2fd

Add getMokoExtensions() to DashboardModel to fetch installed MokoWaaS
component and modules with versions. Renders version badges below the
info bar for com_mokowaas, mod_mokowaas_cpanel, mod_mokowaas_menu,
mod_mokowaas_cache, and mod_mokowaas_categories.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: implement block_frontend_superuser in firewall plugin ... d07eb89f66

The config field existed but had no backing implementation. Super admin
users are now redirected to the admin panel when accessing the frontend
if the toggle is enabled.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: Joomla 5/6 event compatibility in DevTools and Monitor plugins ... d353b1ee36

Both plugins used Joomla 6-only event->getArgument() pattern without
fallback for Joomla 5 individual args. Added dual-compat pattern
matching DemoReset plugin: check for event object, fallback to
func_get_arg for Joomla 5.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

refactor: remove dead placeholder resolver from install script ... 19590cef8c

Override values are now hardcoded in the .ini files. Removed
getPlaceholders(), getPluginParams(), and resolvePlaceholders() methods
that were doing no-op string replacements.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: relocate service classes to their owning plugins ... d94909eb91

DemoResetService, ContentSyncService, and ContentSyncReceiver were
deleted from the core plugin but still referenced by the demo task
plugin and API controllers. Moved service classes into their owning
packages with updated namespaces:

- DemoResetService → plg_task_mokowaasdemo/src/Service/
- ContentSyncService → plg_task_mokowaassync/src/Service/
- ContentSyncReceiver → plg_task_mokowaassync/src/Service/

Updated all require_once paths and FQCN references in API controllers
and DemoReset task plugin.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: update .mokogitea/CLAUDE.md to reflect current architecture ... b24c563cc9

Remove outdated branding/identity description, fix source directory
paths, update extension list to include all 17 sub-extensions,
document updates.xml is now in-repo, add Joomla 5/6 event compat note.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: move CLAUDE.md to .mokogitea/ directory ... a5b94284cb

Relocate CLAUDE.md from repo root to .mokogitea/ per project convention.
Content updated with focused, repo-specific architecture and rules.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: monitor plugin sends heartbeat to MokoWaaSBase REST API ... f176f424b5

Replace ad-hoc Grafana receiver with MokoWaaSBase API integration.
The heartbeat now posts to /api/index.php/v1/mokowaasbase/heartbeat
with token, domain, site_name, versions. Configurable base URL
(defaults to mokoconsulting.tech). Removed hardcoded HEARTBEAT_URL
and HEARTBEAT_KEY constants.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: show support verification PIN below heartbeat token ... 76254db28c

Derives MOKO-XXXX-XXXX from health token for phone-based identity
verification during support calls. Displayed below the token field
in the core plugin config.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: remote login endpoint for MokoWaaSBase auto-login ... 509470b20b

- RemoteLoginController: POST /api/v1/mokowaas/remote-login validates
  health token, generates a one-time login token (60s TTL), returns
  a URL that auto-authenticates the master user
- Core plugin: handleOneTimeLogin() in onAfterInitialise checks for
  mokowaas_otl query param, validates and consumes the token, logs in
  the master user, logs the event, redirects to admin dashboard
- Webservices plugin: register remote-login route

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: heartbeat sends full health payload and client info ... db2ed26e65

Monitor plugin now includes live health data (16 checks) and client
info (company name, email from Joomla config) in the heartbeat payload.
Health data is fetched via local HTTP call to /?mokowaas=health to
reuse existing auth and check logic without internal coupling.

MokoWaaSBase can use client_info for auto-contact creation and the
health payload for dashboard visualization without separate polling.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: provision reset API for new client setup from Base ... a51f04c841

ProvisionController: POST /api/v1/mokowaas/provision-reset
- Resets article hits to zero
- Deletes content version history
- Regenerates heartbeat token (optional, for breach response)
- Revokes all user API tokens with email notification (optional)
- Sets setup-required flag for new client info collection

Core plugin: checkSetupRequired() shows persistent admin banner
until plugin settings are saved. Clears flag on save.

Route registered in webservices plugin.

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: remove deprecated updates.xml ... b4f916addb

MokoGitea generates update feeds dynamically from releases.
Static updates.xml is no longer needed.

chore: remove updates.xml references from CLAUDE.md ... 55ec926fdc

updates.xml is deprecated — MokoGitea generates feeds dynamically.

jmiller closed this pull request 2026-06-06 16:47:18 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

automation

Automated processes or scripts

breaking-change

Breaking API or functionality change

bug

build

Build system changes

ci-cd

CI/CD pipeline changes

config

Configuration file changes

css

CSS/styling changes

dependencies

Dependency updates

deploy-failure

Automated deploy failure tracking

docker

Docker configuration changes

documentation

Documentation changes

dolibarr

Dolibarr module or extension

duplicate

enhancement

generic

Generic project or library

good first issue

Good for newcomers

health-check

Repository health check results

health: excellent

Health score 90-100

health: fair

Health score 50-69

health: good

Health score 70-89

health: poor

Health score below 50

help wanted

Extra attention needed

html

HTML template changes

invalid

javascript

JavaScript code changes

joomla

Joomla extension or component

major-release

Major version release (breaking changes)

minor-release

Minor version release (XX.YY.00)

mokostandards

MokoStandards compliance

needs-review

Awaiting code review

needs-testing

Requires manual or automated testing

patch-release

Patch version release (XX.YY.ZZ)

php

PHP code changes

priority: critical

priority: high

priority: low

priority: medium

push-failure

File push failure requiring attention

python

Python code changes

question

regression

Regression from a previous working state

release-candidate

Release candidate build

security

Security-related changes

size/l

Large change (101-300 lines)

size/m

Medium change (31-100 lines)

size/s

Small change (11-30 lines)

size/xl

Extra large change (301-1000 lines)

size/xs

Extra small change (1-10 lines)

size/xxl

Extremely large change (1000+ lines)

standards-drift

Repository drifted from MokoStandards

standards-update

MokoStandards sync update

standards-violation

Standards compliance failure

status: blocked

status: in-progress

status: needs-review

status: on-hold

Temporarily on hold

status: pending

Pending action or decision

status: wontfix

This will not be worked on

sync-failure

Bulk sync failure requiring attention

sync-report

Bulk sync run report

template-validation-failure

Template workflow validation failure

test-failure

Automated test failure

tests

Test suite changes

type: bug

Something isn't working

type: chore

Maintenance tasks

type: enhancement

Enhancement to existing feature

type: feature

New feature or request

type: refactor

Code refactoring

type: release

Release preparation or tracking

type: test

Test suite additions or changes

type: version

Version-related change

typescript

TypeScript code changes

version

Version bump or release

version-branch

Version branch related

version-drift

Version mismatch detected

work-in-progress

Work in progress, not ready for merge

No labels

Priority -

Type -

Status —

Priority —

Type —

Milestone

No items

No Milestone

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuite#195