chore: promote changelog [Unreleased] → [02.67.00]

chore(release): build 02.67.00 [skip ci]
Release: dev -> main (#303 ) — pre-update backup hardening + config lang fix
2026-07-17 00:33:27 +00:00 · 2026-07-17 00:33:16 +00:00 · 2026-07-17 00:32:56 +00:00 · 2026-07-17 00:26:33 +00:00 · 2026-07-17 00:26:14 +00:00 · 2026-07-16 19:24:56 -05:00
91 changed files with 1431 additions and 460 deletions
@@ -49,7 +49,7 @@
 *.eot binary

 # Export ignore (not included in archives)
-.mokogitea/ export-ignore
+.mokogit/ export-ignore
 .editorconfig export-ignore
 .gitattributes export-ignore
 .gitignore export-ignore
@@ -57,10 +57,10 @@ Joomla **package** with four sub-extensions:

 - **Never commit** `.claude/`, `.mcp.json`, `TODO.md`, `*.min.css`/`*.min.js`
 - **Attribution**: `Authored-by: Moko Consulting`
- **Workflow directory**: `.mokogitea/` (not `.gitea/` or `.github/`)
+- **Workflow directory**: `.mokogit/` (not `.gitea/` or `.github/`)
 - **Minification**: handled at build time (CI)
- **Wiki**: documentation lives in the MokoGitea wiki, not `docs/` files
- **Standards**: [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki)
+- **Wiki**: documentation lives in the MokoGIT wiki, not `docs/` files
+- **Standards**: [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogit/wiki)

 ## Coding Standards

@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Release
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/auto-bump.yml
+# PATH: /.mokogit/workflows/auto-bump.yml
 # VERSION: 09.02.00
 # BRIEF: Auto patch-bump version on every push to dev (skips merge commits)

@@ -22,7 +22,7 @@ on:

 env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}

 permissions:
  contents: write
@@ -40,7 +40,7 @@ jobs:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          token: ${{ secrets.MOKOGIT_TOKEN }}
          fetch-depth: 1

      - name: Setup MokoCLI tools
@@ -52,7 +52,7 @@ jobs:
            echo "MOKO_CLI=/opt/mokocli/cli" >> "$GITHUB_ENV"
          else
            git clone --depth 1 --branch main --quiet \
-              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/mokocli.git" \
+              "https://x-access-token:${{ secrets.MOKOGIT_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/mokocli.git" \
              /tmp/mokocli
            cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
            echo "MOKO_CLI=/tmp/mokocli/cli" >> "$GITHUB_ENV"
@@ -62,5 +62,5 @@ jobs:
        run: |
          php ${MOKO_CLI}/version_auto_bump.php \
            --path . --branch "${GITHUB_REF_NAME}" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+            --token "${{ secrets.MOKOGIT_TOKEN }}" \
+            --repo-url "https://x-access-token:${{ secrets.MOKOGIT_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
@@ -3,18 +3,18 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Release
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/universal/auto-release.yml.template
 # VERSION: 05.01.00
-# BRIEF: Universal build & release � detects platform from MokoGitea repo metadata (API)
+# BRIEF: Universal build & release � detects platform from MokoGIT repo metadata (API)
 #
 # +=======================================================================+
 # |              UNIVERSAL BUILD & RELEASE PIPELINE                        |
 # +=======================================================================+
 # |                                                                        |
-# |  Reads MokoGitea repo metadata (joomla|dolibarr|generic) to branch logic. |
+# |  Reads MokoGIT repo metadata (joomla|dolibarr|generic) to branch logic. |
 # |                                                                        |
 # |  Platform-specific:                                                    |
 # |    joomla:   XML manifest, type-prefixed packages                      |
@@ -31,7 +31,7 @@ on:
    branches:
      - main
    paths-ignore:
-      - '.mokogitea/workflows/**'
+      - '.mokogit/workflows/**'
      - '*.md'
      - 'wiki/**'
      - '.editorconfig'
@@ -52,9 +52,9 @@ on:

 env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}

 permissions:
  contents: write
@@ -77,13 +77,13 @@ jobs:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          token: ${{ secrets.MOKOGIT_TOKEN }}
          fetch-depth: 1
          submodules: recursive

      - name: Setup MokoCLI tools
        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
        run: |
          if [ -f /opt/mokocli/cli/version_bump.php ] && [ -f /opt/mokocli/vendor/autoload.php ]; then
@@ -106,28 +106,28 @@ jobs:
        run: |
          php ${MOKO_CLI}/branch_rename.php \
            --from "${{ github.event.pull_request.head.ref || 'dev' }}" --to rc \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --api-base "${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}" \
+            --token "${{ secrets.MOKOGIT_TOKEN }}" \
+            --api-base "${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}" \
            --pr "${{ github.event.pull_request.number }}"

      - name: Checkout rc and configure git
        run: |
          git fetch origin rc
          git checkout rc
-          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "mokogitea-actions[bot]"
-          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+          git config --local user.email "mokogit-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogit-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGIT_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"

      - name: Publish RC release
        run: |
          php ${MOKO_CLI}/release_publish.php \
            --path . --stability rc --bump minor --branch rc \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}"
+            --token "${{ secrets.MOKOGIT_TOKEN }}"

      - name: Update RC release notes from CHANGELOG.md
        run: |
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"

          # Extract [Unreleased] section from changelog
          NOTES=""
@@ -180,15 +180,15 @@ jobs:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          token: ${{ secrets.MOKOGIT_TOKEN }}
          fetch-depth: 0
          submodules: recursive

      - name: Configure git for bot pushes
        run: |
-          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "mokogitea-actions[bot]"
-          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+          git config --local user.email "mokogit-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogit-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGIT_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"

      - name: Check for merge conflict markers
        run: |
@@ -205,7 +205,7 @@ jobs:

      - name: Setup MokoCLI tools
        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_MIRROR_TOKEN }}"}}'
        run: |
@@ -252,7 +252,7 @@ jobs:
          fi
          php ${MOKO_CLI}/release_publish.php \
            --path . --stability stable ${BUMP_FLAG} --branch main \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}"
+            --token "${{ secrets.MOKOGIT_TOKEN }}"

      - name: "Read published version"
        id: version
@@ -279,8 +279,8 @@ jobs:
          !startsWith(steps.platform.outputs.platform, 'joomla')
        run: |
          VERSION="${{ steps.version.outputs.version }}"
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"
          SEMVER_TAG="v${VERSION}"

          echo "Creating semver tag: ${SEMVER_TAG}"
@@ -304,8 +304,8 @@ jobs:

      - name: Update release notes and promote changelog
        run: |
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"

          # Get the stable release info (version and ID)
          RELEASE_JSON=$(curl -sf -H "Authorization: token ${TOKEN}" \
@@ -373,10 +373,10 @@ jobs:
          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
          RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
          GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
          php ${MOKO_CLI}/release_mirror.php \
            --version "$VERSION" --tag "$RELEASE_TAG" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
+            --token "${{ secrets.MOKOGIT_TOKEN }}" --api-base "$API_BASE" \
            --gh-token "${{ secrets.GH_MIRROR_TOKEN }}" --gh-repo "$GH_REPO" \
            --branch main 2>&1 || true
          echo "GitHub mirror updated" >> $GITHUB_STEP_SUMMARY
@@ -402,8 +402,8 @@ jobs:
        if: steps.version.outputs.skip != 'true'
        continue-on-error: true
        run: |
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"

          # Delete rc branch (ephemeral — created by promote-rc)
          curl -sf -X DELETE -H "Authorization: token ${TOKEN}" \
@@ -418,8 +418,8 @@ jobs:
        if: steps.version.outputs.skip != 'true'
        continue-on-error: true
        run: |
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"
          VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
          BRANCH_NAME="version/${VERSION}"
          MAIN_SHA=$(git rev-parse HEAD)
@@ -439,9 +439,9 @@ jobs:
        if: steps.version.outputs.skip != 'true'
        continue-on-error: true
        run: |
-          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
          php ${MOKO_CLI}/version_reset_dev.php \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "${API_BASE}" \
+            --token "${{ secrets.MOKOGIT_TOKEN }}" --api-base "${API_BASE}" \
            --branch dev --path . 2>&1 || true

      # -- Summary --------------------------------------------------------------
@@ -465,5 +465,5 @@ jobs:
            echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
            echo "| Branch | \`${{ steps.version.outputs.branch }}\` |" >> $GITHUB_STEP_SUMMARY
            echo "| Tag | \`${{ steps.version.outputs.tag }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Release | [View](${MOKOGITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
+            echo "| Release | [View](${MOKOGIT_URL}/${GIT_ORG}/${GIT_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
          fi
@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Universal
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/branch-cleanup.yml
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogit/workflows/branch-cleanup.yml
 # VERSION: 01.00.00
 # BRIEF: Delete feature branches after PR merge

@@ -30,14 +30,25 @@ jobs:

    steps:
      - name: Delete source branch
+        # SECURITY: the PR head ref is attacker-controllable. Pass it (and the
+        # repo/token) through env so the Actions engine cannot splice it into the
+        # shell source, and validate it to a safe charset before use.
+        env:
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
+          REPO: ${{ github.repository }}
+          API_BASE: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          BRANCH: ${{ github.event.pull_request.head.ref }}
        run: |
-          BRANCH="${{ github.event.pull_request.head.ref }}"
-          API="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}/api/v1/repos/${{ github.repository }}/branches"
+          set -euo pipefail
+          if ! printf '%s' "${BRANCH}" | grep -Eq '^[A-Za-z0-9._/-]+$'; then
+            echo "::error::unsafe branch name; refusing to proceed"; exit 1
+          fi
+          API="${API_BASE}/api/v1/repos/${REPO}/branches"
          # URL-encode the branch name's slashes (no PHP dependency on the runner)
          ENCODED=$(printf '%s' "${BRANCH}" | sed 's|/|%2F|g')

          STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X DELETE \
-            -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \
+            -H "Authorization: token ${MOKOGIT_TOKEN}" \
            "${API}/${ENCODED}" 2>/dev/null || true)

          if [ "$STATUS" = "204" ]; then
@@ -1,7 +1,7 @@
 # Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
 # SPDX-License-Identifier: GPL-3.0-or-later
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Release
 # BRIEF: Reset dev to main after each release (cascade). Moved out of auto-release Step 11.
 #
@@ -43,14 +43,14 @@ jobs:
    steps:
      - name: Force dev to main
        env:
-          TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          SERVER: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
          REPO: ${{ github.repository }}
        run: |
          set -euo pipefail
          git init -q sync && cd sync
-          git config user.email "mokogitea-actions[bot]@mokoconsulting.tech"
-          git config user.name  "mokogitea-actions[bot]"
+          git config user.email "mokogit-actions[bot]@mokoconsulting.tech"
+          git config user.name  "mokogit-actions[bot]"
          git remote add origin "https://x-access-token:${TOKEN}@${SERVER#https://}/${REPO}.git"
          git fetch -q --depth=1 origin main

@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.CI
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
-# PATH: /.mokogitea/workflows/ci-generic.yml
+# PATH: /.mokogit/workflows/ci-generic.yml
 # VERSION: 01.00.00
 # BRIEF: CI pipeline — lint, validate, and test for generic projects (PHP + Node.js)

@@ -3,12 +3,12 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Universal
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/ci-issue-reporter.yml
+# PATH: /.mokogit/workflows/ci-issue-reporter.yml
 # VERSION: 01.00.00
-# BRIEF: Reusable workflow — creates/updates a MokoGitea issue when a CI gate fails.
+# BRIEF: Reusable workflow — creates/updates a MokoGIT issue when a CI gate fails.
 #        Clones MokoCLI and runs cli/ci_issue_reporter.sh.

 name: "Universal: CI Issue Reporter"
@@ -35,7 +35,7 @@ on:
        type: string
        default: ""
    secrets:
-      MOKOGITEA_TOKEN:
+      MOKOGIT_TOKEN:
        required: true

 env:
@@ -49,16 +49,16 @@ jobs:
    steps:
      - name: Clone MokoCLI
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
-          MOKOGITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
-          git clone --depth 1 --filter=blob:none --sparse "${MOKOGITEA_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
+          MOKOGIT_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
+          git clone --depth 1 --filter=blob:none --sparse "${MOKOGIT_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
          cd /tmp/mokocli && git sparse-checkout set cli/ci_issue_reporter.sh

      - name: Report CI failure
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
-          MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
+          MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
        run: |
          chmod +x /tmp/mokocli/cli/ci_issue_reporter.sh
          /tmp/mokocli/cli/ci_issue_reporter.sh \
@@ -5,7 +5,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow.Template
+# DEFGROUP: MokoGIT.Workflow.Template
 # INGROUP: MokoCLI.CI
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/joomla/ci-joomla.yml.template
@@ -49,8 +49,8 @@ jobs:

      - name: Setup MokoCLI tools
        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
-          MOKO_CLONE_HOST: ${{ secrets.MOKOGITEA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGIT_TOKEN || github.token }}
+          MOKO_CLONE_HOST: ${{ secrets.MOKOGIT_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
        run: |
          if [ -d "/opt/mokocli" ] || [ -d "/tmp/mokocli" ]; then
            echo "MokoCLI already available on runner — skipping clone"
@@ -62,7 +62,7 @@ jobs:

      - name: Install dependencies
        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGITEA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGIT_TOKEN || github.token }}"}}'
        run: |
          if [ -f "composer.json" ]; then
            composer install \
@@ -186,7 +186,7 @@ jobs:
          else
            EXT_TYPE=$(grep -oP '<extension[^>]*\btype="\K[^"]+' "$MANIFEST" | head -1)

-            # 1. Check <updateservers> exists and uses MokoGitea update server
+            # 1. Check <updateservers> exists and uses MokoGIT update server
            if ! grep -q '<updateservers>' "$MANIFEST" 2>/dev/null; then
              echo "::warning file=${MANIFEST}::Missing \`<updateservers>\` tag — extension will not receive OTA updates"
              echo "- **Missing** \`<updateservers>\` — extension will not receive OTA updates" >> $GITHUB_STEP_SUMMARY
@@ -198,12 +198,12 @@ jobs:
                echo "- **Empty** \`<updateservers>\` — no server URL defined" >> $GITHUB_STEP_SUMMARY
                WARNINGS=$((WARNINGS + 1))
              elif ! echo "$SERVER_URL" | grep -q 'git\.mokoconsulting\.tech'; then
-                echo "::warning file=${MANIFEST}::Update server does not use MokoGitea engine: ${SERVER_URL}"
-                echo "- **Non-MokoGitea update server:** \`${SERVER_URL}\`" >> $GITHUB_STEP_SUMMARY
+                echo "::warning file=${MANIFEST}::Update server does not use MokoGIT engine: ${SERVER_URL}"
+                echo "- **Non-MokoGIT update server:** \`${SERVER_URL}\`" >> $GITHUB_STEP_SUMMARY
                echo "  Expected: \`https://git.mokoconsulting.tech/{org}/{repo}/updates.xml\`" >> $GITHUB_STEP_SUMMARY
                WARNINGS=$((WARNINGS + 1))
              else
-                echo "- \`<updateservers>\`: MokoGitea engine ✓" >> $GITHUB_STEP_SUMMARY
+                echo "- \`<updateservers>\`: MokoGIT engine ✓" >> $GITHUB_STEP_SUMMARY
              fi
            fi

@@ -2067,7 +2067,7 @@ jobs:

      - name: Install dependencies
        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGITEA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGIT_TOKEN || github.token }}"}}'
        run: |
          if [ -f "composer.json" ]; then
            composer install \
@@ -2118,7 +2118,7 @@ jobs:

      - name: Install dependencies
        env:
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGITEA_TOKEN || github.token }}"}}'
+          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GH_TOKEN || secrets.MOKOGIT_TOKEN || github.token }}"}}'
        run: |
          if [ -f "composer.json" ]; then
            composer install --no-interaction --prefer-dist --optimize-autoloader
@@ -2185,13 +2185,13 @@ jobs:
    steps:
      - name: Trigger pre-release build
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          REPO: ${{ github.repository }}
          BRANCH: ${{ github.head_ref }}
        run: |
          curl -s -X POST \
-            "${GITEA_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches" \
-            -H "Authorization: token ${MOKOGITEA_TOKEN}" \
+            "${GIT_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches" \
+            -H "Authorization: token ${MOKOGIT_TOKEN}" \
            -H "Content-Type: application/json" \
            -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
          echo "### Pre-Release" >> $GITHUB_STEP_SUMMARY
@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Maintenance
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/cleanup.yml
+# PATH: /.mokogit/workflows/cleanup.yml
 # VERSION: 01.00.00
 # BRIEF: Scheduled cleanup — delete merged branches and old workflow runs

@@ -21,7 +21,7 @@ permissions:
  contents: write

 env:
-  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}

 jobs:
  cleanup:
@@ -33,17 +33,17 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          token: ${{ secrets.MOKOGIT_TOKEN }}

      - name: Delete merged branches
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
          echo "=== Merged Branch Cleanup ==="
-          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGIT_URL}/api/v1/repos/${{ github.repository }}"

          # List branches via API
-          BRANCHES=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
+          BRANCHES=$(curl -sS -H "Authorization: token ${MOKOGIT_TOKEN}" \
            "${API}/branches?limit=50" | jq -r '.[].name')

          DELETED=0
@@ -56,7 +56,7 @@ jobs:
            # Check if branch is merged into main
            if git merge-base --is-ancestor "origin/${BRANCH}" origin/main 2>/dev/null; then
              echo "  Deleting merged branch: ${BRANCH}"
-              curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
+              curl -sS -X DELETE -H "Authorization: token ${MOKOGIT_TOKEN}" \
                "${API}/branches/${BRANCH}" 2>/dev/null || true
              DELETED=$((DELETED + 1))
            fi
@@ -66,20 +66,20 @@ jobs:

      - name: Clean old workflow runs
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
          echo "=== Workflow Run Cleanup ==="
-          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGIT_URL}/api/v1/repos/${{ github.repository }}"
          CUTOFF=$(date -d "30 days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -v-30d +%Y-%m-%dT%H:%M:%SZ)

          # Get old completed runs
-          RUNS=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
+          RUNS=$(curl -sS -H "Authorization: token ${MOKOGIT_TOKEN}" \
            "${API}/actions/runs?status=completed&limit=50" | \
            jq -r ".workflow_runs[] | select(.created_at < \"${CUTOFF}\") | .id" 2>/dev/null)

          DELETED=0
          for RUN_ID in $RUNS; do
-            curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
+            curl -sS -X DELETE -H "Authorization: token ${MOKOGIT_TOKEN}" \
              "${API}/actions/runs/${RUN_ID}" 2>/dev/null || true
            DELETED=$((DELETED + 1))
          done
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Security
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/gitleaks.yml.template
@@ -34,7 +34,7 @@ permissions:

 env:
  NTFY_URL: ${{ vars.NTFY_URL || 'https://ntfy.mokoconsulting.tech' }}
-  NTFY_TOPIC: ${{ vars.NTFY_TOPIC || 'gitea-security' }}
+  NTFY_TOPIC: ${{ vars.NTFY_TOPIC || 'git-security' }}

 jobs:
  gitleaks:
@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
-# INGROUP: mokocli.Automation
-# VERSION: 02.64.00
+# DEFGROUP: MokoGIT.Workflow
+# INGROUP: MokoCLI.Automation
+# VERSION: 02.67.00
 # BRIEF: Auto-create feature branch when an issue is opened

 name: "Universal: Issue Branch"
@@ -19,7 +19,7 @@ permissions:
  issues: write

 env:
-  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}

 jobs:
  create-branch:
@@ -27,14 +27,22 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Create branch and comment
+        # SECURITY: never interpolate github.event.* into a run: script — the
+        # Actions engine splices the raw value into the shell source (command
+        # injection via a crafted issue title). Pass everything through env so
+        # the values arrive as ordinary shell variables that are not re-parsed.
+        env:
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
+          REPO: ${{ github.repository }}
+          ISSUE_NUM: ${{ github.event.issue.number }}
+          ISSUE_TITLE: ${{ github.event.issue.title }}
        run: |
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
-          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
-          ISSUE_NUM="${{ github.event.issue.number }}"
-          ISSUE_TITLE="${{ github.event.issue.title }}"
+          TOKEN="${MOKOGIT_TOKEN}"
+          API="${MOKOGIT_URL}/api/v1/repos/${REPO}"

-          # Build slug from title: lowercase, replace non-alnum with dash, trim
-          SLUG=$(echo "${ISSUE_TITLE}" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9]/-/g' | sed 's/--*/-/g' | sed 's/^-//;s/-$//' | cut -c1-40)
+          # Build slug from title: lowercase, replace non-alnum with dash, trim.
+          # printf (not echo) so a title beginning with "-" is not read as flags.
+          SLUG=$(printf '%s' "${ISSUE_TITLE}" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9]/-/g' | sed 's/--*/-/g' | sed 's/^-//;s/-$//' | cut -c1-40)
          BRANCH="feature/${ISSUE_NUM}-${SLUG}"

          # Check dev branch exists
@@ -58,7 +66,7 @@ jobs:
            echo "Created branch: ${BRANCH}"

            # Comment on issue with branch link
-            REPO_URL="${MOKOGITEA_URL}/${{ github.repository }}"
+            REPO_URL="${MOKOGIT_URL}/${REPO}"
            BODY="Branch created: [\`${BRANCH}\`](${REPO_URL}/src/branch/${BRANCH})\n\n\`\`\`bash\ngit fetch origin\ngit checkout ${BRANCH}\n\`\`\`"

            curl -sf -X POST \
@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Notifications
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/notify.yml
+# PATH: /.mokogit/workflows/notify.yml
 # VERSION: 01.00.00
 # BRIEF: Push notifications via ntfy on release success or workflow failure

@@ -26,7 +26,7 @@ permissions:

 env:
  NTFY_URL: ${{ vars.NTFY_URL || 'https://ntfy.mokoconsulting.tech' }}
-  NTFY_TOPIC: ${{ vars.NTFY_TOPIC || 'gitea-releases' }}
+  NTFY_TOPIC: ${{ vars.NTFY_TOPIC || 'git-releases' }}

 jobs:
  notify:
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.CI
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/universal/pr-check.yml.template
@@ -149,7 +149,7 @@ jobs:
      - name: Detect platform
        id: platform
        run: |
-          # Platform comes from the MokoGitea metadata API (public GET); manifest.xml is no longer used.
+          # Platform comes from the MokoGIT metadata API (public GET); manifest.xml is no longer used.
          API="${GITHUB_SERVER_URL:-https://git.mokoconsulting.tech}/api/v1/repos/${GITHUB_REPOSITORY}/metadata"
          PLATFORM="$(curl -sf "$API" 2>/dev/null | python3 -c "import sys, json; print(json.load(sys.stdin).get('platform') or '')" 2>/dev/null || true)"
          [ -z "$PLATFORM" ] && PLATFORM="generic"
@@ -285,10 +285,10 @@ jobs:
              for ELEMENT in name version description; do
                grep -q "<${ELEMENT}>" "$MANIFEST" || { echo "::error::Missing <${ELEMENT}> in manifest"; exit 1; }
              done
-              # Block legacy raw/branch update server URLs on MokoGitea
-              RAW_URLS=$(grep -n 'raw/branch' "$MANIFEST" | grep -i 'mokoconsulting\|mokogitea\|git\.mokoconsulting\.tech' || true)
+              # Block legacy raw/branch update server URLs on MokoGIT
+              RAW_URLS=$(grep -n 'raw/branch' "$MANIFEST" | grep -i 'mokoconsulting\|mokogit\|git\.mokoconsulting\.tech' || true)
              if [ -n "$RAW_URLS" ]; then
-                echo "::error::Manifest contains legacy raw/branch update server URL on MokoGitea. Use the MokoGitea Pages URL instead (e.g. /{REPO}/updates.xml not /{REPO}/raw/branch/main/updates.xml)"
+                echo "::error::Manifest contains legacy raw/branch update server URL on MokoGIT. Use the MokoGIT Pages URL instead (e.g. /{REPO}/updates.xml not /{REPO}/raw/branch/main/updates.xml)"
                echo "$RAW_URLS"
                exit 1
              fi
@@ -502,12 +502,12 @@ jobs:
    steps:
      - name: Trigger RC pre-release
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          REPO: ${{ github.repository }}
          BRANCH: ${{ github.head_ref }}
-          MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
        run: |
-          curl -s -X POST             "${MOKOGITEA_URL}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches"             -H "Authorization: token ${MOKOGITEA_TOKEN}"             -H "Content-Type: application/json"             -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
+          curl -s -X POST             "${MOKOGIT_URL}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches"             -H "Authorization: token ${MOKOGIT_TOKEN}"             -H "Content-Type: application/json"             -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
          echo "### Pre-Release" >> $GITHUB_STEP_SUMMARY
          echo "Triggered RC build on branch \`${BRANCH}\`" >> $GITHUB_STEP_SUMMARY

@@ -518,7 +518,7 @@ jobs:
    if: >-
      always() &&
      needs.validate.result == 'failure'
-    uses: ./.mokogitea/workflows/ci-issue-reporter.yml
+    uses: ./.mokogit/workflows/ci-issue-reporter.yml
    with:
      gate: "PR Validation"
      workflow: "PR Check"
@@ -3,12 +3,12 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Validation
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/joomla/pr-metadata-check.yml.template
 # VERSION: 01.00.00
-# BRIEF: Validate MokoGitea metadata matches Joomla extension manifest on PRs
+# BRIEF: Validate MokoGIT metadata matches Joomla extension manifest on PRs

 name: "Joomla: Metadata Validation"

@@ -20,9 +20,9 @@ permissions:
  contents: read

 env:
-  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}

 jobs:
  validate-metadata:
@@ -37,7 +37,7 @@ jobs:

      - name: Setup MokoCLI tools
        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
        run: |
          if [ -f /opt/mokocli/cli/joomla_metadata_validate.php ] && [ -f /opt/mokocli/vendor/autoload.php ]; then
@@ -57,14 +57,14 @@ jobs:

      - name: Validate metadata against Joomla manifest
        env:
-          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
          php ${MOKO_CLI}/joomla_metadata_validate.php \
            --path . \
-            --token "${MOKOGITEA_TOKEN}" \
-            --org "${GITEA_ORG}" \
-            --repo "${GITEA_REPO}" \
-            --api-base "${MOKOGITEA_URL}/api/v1" \
+            --token "${MOKOGIT_TOKEN}" \
+            --org "${GIT_ORG}" \
+            --repo "${GIT_REPO}" \
+            --api-base "${MOKOGIT_URL}/api/v1" \
            --ci

          if [ $? -ne 0 ]; then
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Release
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/universal/pre-release.yml.template
@@ -40,9 +40,9 @@ permissions:
  contents: write

 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  GIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}

 jobs:
  build:
@@ -61,7 +61,7 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          token: ${{ secrets.MOKOGIT_TOKEN }}
          ref: ${{ github.ref_name }}
          submodules: recursive

@@ -71,7 +71,7 @@ jobs:

      - name: Setup MokoCLI tools
        env:
-          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKO_CLONE_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
        run: |
          # Use pre-installed /opt/mokocli if available (updated by cron every 6h)
@@ -156,9 +156,9 @@ jobs:
          fi

          # Commit version bump
-          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "mokogitea-actions[bot]"
-          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+          git config --local user.email "mokogit-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogit-actions[bot]"
+          git remote set-url origin "https://x-access-token:${{ secrets.MOKOGIT_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
          git add -A
          git diff --cached --quiet || {
            git commit -m "chore(version): pre-release bump to ${VERSION} [skip ci]"
@@ -168,12 +168,12 @@ jobs:
          # Auto-detect element via manifest_element.php
          php ${MOKO_CLI}/manifest_element.php \
            --path . --version "$VERSION" --stability "$STABILITY" \
-            --repo "${GITEA_REPO}" --github-output
+            --repo "${GIT_REPO}" --github-output

          # Read back element outputs
          EXT_ELEMENT=$(grep '^ext_element=' "$GITHUB_OUTPUT" | tail -1 | cut -d= -f2)
          ZIP_NAME=$(grep '^zip_name=' "$GITHUB_OUTPUT" | tail -1 | cut -d= -f2)
-          [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(echo "${GITEA_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
+          [ -z "$EXT_ELEMENT" ] && EXT_ELEMENT=$(echo "${GIT_REPO}" | tr '[:upper:]' '[:lower:]' | tr -d ' -')
          [ -z "$ZIP_NAME" ] && ZIP_NAME="${EXT_ELEMENT}-${VERSION}.zip"

          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
@@ -191,18 +191,18 @@ jobs:
        run: |
          TAG="${{ steps.meta.outputs.tag }}"
          VERSION="${{ steps.meta.outputs.version }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${GIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
          php ${MOKO_CLI}/release_create.php \
            --path . --version "$VERSION" --tag "$TAG" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
-            --repo "${GITEA_REPO}" --branch "${{ github.ref_name }}" --prerelease
+            --token "${{ secrets.MOKOGIT_TOKEN }}" --api-base "$API_BASE" \
+            --repo "${GIT_REPO}" --branch "${{ github.ref_name }}" --prerelease

      - name: Update release notes from CHANGELOG.md
        if: steps.eligibility.outputs.proceed == 'true'
        run: |
          TAG="${{ steps.meta.outputs.tag }}"
          VERSION="${{ steps.meta.outputs.version }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${GIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"

          # Extract [Unreleased] section from changelog (everything between [Unreleased] and next ## heading)
          if [ -f "CHANGELOG.md" ]; then
@@ -213,7 +213,7 @@ jobs:
          fi

          # Update release body via API
-          RELEASE_ID=$(curl -sf -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \
+          RELEASE_ID=$(curl -sf -H "Authorization: token ${{ secrets.MOKOGIT_TOKEN }}" \
            "${API_BASE}/releases/tags/${TAG}" | python3 -c "import json,sys; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)

          if [ -n "$RELEASE_ID" ]; then
@@ -225,7 +225,7 @@ jobs:
              '${API_BASE}/releases/${RELEASE_ID}',
              data=payload, method='PATCH',
              headers={
-                  'Authorization': 'token ${{ secrets.MOKOGITEA_TOKEN }}',
+                  'Authorization': 'token ${{ secrets.MOKOGIT_TOKEN }}',
                  'Content-Type': 'application/json'
              })
          urllib.request.urlopen(req)
@@ -239,21 +239,21 @@ jobs:
        run: |
          VERSION="${{ steps.meta.outputs.version }}"
          TAG="${{ steps.meta.outputs.tag }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${GIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
          php ${MOKO_CLI}/release_package.php \
            --path . --version "$VERSION" --tag "$TAG" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
-            --repo "${GITEA_REPO}" --output /tmp || true
+            --token "${{ secrets.MOKOGIT_TOKEN }}" --api-base "$API_BASE" \
+            --repo "${GIT_REPO}" --output /tmp || true

-      # updates.xml is generated dynamically by MokoGitea license server
+      # updates.xml is generated dynamically by MokoGIT license server
      # No need to build, commit, or sync updates.xml from workflows

      - name: "Delete lesser pre-release channels (cascade)"
        if: steps.eligibility.outputs.proceed == 'true'
        continue-on-error: true
        run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API_BASE="${GIT_URL}/api/v1/repos/${GIT_ORG}/${GIT_REPO}"
+          TOKEN="${{ secrets.MOKOGIT_TOKEN }}"

          php ${MOKO_CLI}/release_cascade.php \
            --stability "${{ steps.meta.outputs.stability }}" \
@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Universal
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/rc-revert.yml
+# PATH: /.mokogit/workflows/rc-revert.yml
 # VERSION: 09.23.00
 # BRIEF: Rename rc/ branch back to dev/ when PR is closed without merge

@@ -32,8 +32,8 @@ jobs:
        env:
          BRANCH: ${{ github.event.pull_request.head.ref }}
          REPO: ${{ github.repository }}
-          GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-          TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          GIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
          set -euo pipefail
          # BRANCH is attacker-controlled (PR head ref). Strict allowlist before ANY use.
@@ -42,7 +42,7 @@ jobs:
          fi
          SUFFIX="${BRANCH#rc/}"
          DEV_BRANCH="dev/${SUFFIX}"
-          API="${GITEA_URL}/api/v1/repos/${REPO}/branches"
+          API="${GIT_URL}/api/v1/repos/${REPO}/branches"

          # Create dev/ branch from rc/ branch
          STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X POST \
@@ -6,7 +6,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow
+# DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Validation
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
 # PATH: /templates/workflows/joomla/repo_health.yml.template
@@ -45,7 +45,7 @@ env:
  SCRIPTS_ALLOWED_DIRS: scripts,scripts/fix,scripts/lib,scripts/release,scripts/run,scripts/validate

  # Repo health policy
-  REPO_REQUIRED_ARTIFACTS: README.md,LICENSE,CHANGELOG.md,CONTRIBUTING.md,CODE_OF_CONDUCT.md,.mokogitea/workflows/
+  REPO_REQUIRED_ARTIFACTS: README.md,LICENSE,CHANGELOG.md,CONTRIBUTING.md,CODE_OF_CONDUCT.md,.mokogit/workflows/
  REPO_OPTIONAL_FILES: SECURITY.md,GOVERNANCE.md,.editorconfig,.gitattributes,.gitignore,README.md,docs/
  REPO_DISALLOWED_DIRS:
  REPO_DISALLOWED_FILES: TODO.md,todo.md
@@ -56,7 +56,7 @@ env:
  # File / directory variables
  DOCS_INDEX: docs/docs-index.md
  SCRIPT_DIR: scripts
-  WORKFLOWS_DIR: .mokogitea/workflows
+  WORKFLOWS_DIR: .mokogit/workflows
  SHELLCHECK_PATTERN: '*.sh'
  SPDX_FILE_GLOBS: '*.sh,*.php,*.js,*.ts,*.css,*.xml,*.yml,*.yaml'
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
@@ -77,7 +77,7 @@ jobs:
      - name: Check actor permission (admin only)
        id: perm
        env:
-          TOKEN: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
+          TOKEN: ${{ secrets.MOKOGIT_TOKEN || github.token }}
          REPO: ${{ github.repository }}
          ACTOR: ${{ github.actor }}
        run: |
@@ -88,14 +88,14 @@ jobs:

          # Hardcoded authorized users — always allowed
          case "$ACTOR" in
-            jmiller|mokogitea-actions[bot])
+            jmiller|mokogit-actions[bot])
              ALLOWED=true
              PERMISSION=admin
              METHOD="hardcoded allowlist"
              ;;
            *)
              # Detect platform and check permissions via API
-              API_BASE="${GITHUB_API_URL:-${GITEA_API_URL:-https://api.github.com}}"
+              API_BASE="${GITHUB_API_URL:-${GIT_API_URL:-https://api.github.com}}"
              RESP=$(curl -sf -H "Authorization: token ${TOKEN}" \
                "${API_BASE}/repos/${REPO}/collaborators/${ACTOR}/permission" 2>/dev/null || echo '{}')
              PERMISSION=$(echo "$RESP" | grep -oP '"permission"\s*:\s*"\K[^"]+' || echo "unknown")
@@ -605,7 +605,7 @@ jobs:
            printf '%s\n' '| Domain | Status | Notes |'
            printf '%s\n' '|---|---|---|'
            printf '%s\n' '| Access control | OK | Admin-only execution gate |'
-            printf '%s\n' '| Release policy | N/A | Releases handled by MokoGitea |'
+            printf '%s\n' '| Release policy | N/A | Releases handled by MokoGIT |'
            printf '%s\n' '| Scripts governance | OK | Directory policy and advisory reporting |'
            printf '%s\n' '| Repo required artifacts | OK | Required, optional, disallowed enforcement |'
            printf '%s\n' '| Repo content heuristics | OK | Brand, license, changelog structure |'
@@ -677,7 +677,7 @@ jobs:
    if: >-
      always() &&
      needs.scripts_governance.result == 'failure'
-    uses: ./.mokogitea/workflows/ci-issue-reporter.yml
+    uses: ./.mokogit/workflows/ci-issue-reporter.yml
    with:
      gate: "Scripts Governance"
      workflow: "Repo Health"
@@ -691,7 +691,7 @@ jobs:
    if: >-
      always() &&
      needs.repo_health.result == 'failure'
-    uses: ./.mokogitea/workflows/ci-issue-reporter.yml
+    uses: ./.mokogit/workflows/ci-issue-reporter.yml
    with:
      gate: "Repository Health"
      workflow: "Repo Health"
@@ -4,7 +4,7 @@
 # DEFGROUP: GitHub.Workflow
 # INGROUP: MokoCLI.Compliance
 # REPO: https://github.com/mokoconsulting-tech/mokocli
-# PATH: /.mokogitea/workflows/standards-compliance.yml
+# PATH: /.mokogit/workflows/standards-compliance.yml
 # VERSION: 04.06.00
 # BRIEF: MokoCLI compliance validation workflow
 # NOTE: Validates repository structure, documentation, and coding standards
@@ -299,7 +299,7 @@ jobs:
          echo "|-----------|--------|-------|------|-------|" >> $GITHUB_STEP_SUMMARY

          # Check required directories
-          for dir in .mokogitea; do
+          for dir in .mokogit; do
            if [ -d "$dir" ]; then
              FILE_COUNT=$(find "$dir" -type f 2>/dev/null | wc -l)
              DIR_SIZE=$(du -sh "$dir" 2>/dev/null | cut -f1)
@@ -320,7 +320,7 @@ jobs:
            echo "### 🔴 Critical Issues: $MISSING" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
            echo "**Remediation Steps:**" >> $GITHUB_STEP_SUMMARY
-            [ ! -d ".mokogitea" ] && echo "- Create .mokogitea directory: \`mkdir -p .mokogitea/workflows\`" >> $GITHUB_STEP_SUMMARY
+            [ ! -d ".mokogit" ] && echo "- Create .mokogit directory: \`mkdir -p .mokogit/workflows\`" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
            echo "📚 Reference: [MokoCLI Repository Structure](https://github.com/mokoconsulting-tech/mokocli/tree/main/docs/policy/core-structure.md)" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
@@ -563,17 +563,17 @@ jobs:
          set -x
          echo "### GitHub Actions Workflows" >> $GITHUB_STEP_SUMMARY

-          WORKFLOWS_DIR=".mokogitea/workflows"
+          WORKFLOWS_DIR=".mokogit/workflows"

          if [ ! -d "$WORKFLOWS_DIR" ]; then
            echo "❌ No workflows directory found" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
            echo "### ❌ Validation Failed: Workflows Directory Missing" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "**Error:** .mokogitea/workflows directory is required for CI/CD automation" >> $GITHUB_STEP_SUMMARY
-            echo "**Action Required:** Create .mokogitea/workflows directory and add GitHub Actions workflows" >> $GITHUB_STEP_SUMMARY
+            echo "**Error:** .mokogit/workflows directory is required for CI/CD automation" >> $GITHUB_STEP_SUMMARY
+            echo "**Action Required:** Create .mokogit/workflows directory and add GitHub Actions workflows" >> $GITHUB_STEP_SUMMARY
            echo ""
-            echo "❌ ERROR: .mokogitea/workflows directory not found"
+            echo "❌ ERROR: .mokogit/workflows directory not found"
            exit 1
          fi

@@ -612,7 +612,7 @@ jobs:
          echo "### Workflow YAML Syntax" >> $GITHUB_STEP_SUMMARY

          INVALID=0
-          for workflow in $(find .mokogitea/workflows -maxdepth 1 -type f \( -name "*.yml" -o -name "*.yaml" \) 2>/dev/null); do
+          for workflow in $(find .mokogit/workflows -maxdepth 1 -type f \( -name "*.yml" -o -name "*.yaml" \) 2>/dev/null); do
            if [ -f "$workflow" ]; then
              if python3 -c "import yaml, sys; yaml.safe_load(open(sys.argv[1]))" "$workflow" 2>/dev/null; then
                echo "✅ $(basename $workflow)" >> $GITHUB_STEP_SUMMARY
@@ -629,7 +629,7 @@ jobs:
            echo "" >> $GITHUB_STEP_SUMMARY
            echo "**Error:** $INVALID workflow file(s) have invalid YAML syntax" >> $GITHUB_STEP_SUMMARY
            echo "**Action Required:** Fix YAML syntax errors in the marked workflow files" >> $GITHUB_STEP_SUMMARY
-            echo "**Tool:** Run \`python3 -c \"import yaml; yaml.safe_load(open('.mokogitea/workflows/FILE.yml'))\"\` locally" >> $GITHUB_STEP_SUMMARY
+            echo "**Tool:** Run \`python3 -c \"import yaml; yaml.safe_load(open('.mokogit/workflows/FILE.yml'))\"\` locally" >> $GITHUB_STEP_SUMMARY
            echo ""
            echo "❌ ERROR: $INVALID workflow file(s) with invalid YAML syntax"
            exit 1
@@ -641,7 +641,7 @@ jobs:
          echo "✅ SUCCESS: All workflow files passed YAML validation"

      - name: Validate CodeQL Configuration
-        if: hashFiles('.mokogitea/workflows/codeql-analysis.yml') != ''
+        if: hashFiles('.mokogit/workflows/codeql-analysis.yml') != ''
        run: |
          set -e
          echo "" >> $GITHUB_STEP_SUMMARY
@@ -649,7 +649,7 @@ jobs:
          echo "" >> $GITHUB_STEP_SUMMARY

          # Inline validation (rewritten from Python to bash for PHP-only architecture)
-          CODEQL_FILE=".mokogitea/workflows/codeql-analysis.yml"
+          CODEQL_FILE=".mokogit/workflows/codeql-analysis.yml"

          if [ ! -f "$CODEQL_FILE" ]; then
            echo "⚠️ CodeQL workflow file not found" >> $GITHUB_STEP_SUMMARY
@@ -1186,7 +1186,7 @@ jobs:
          fi

          # Run yamllint and count line-length warnings
-          YAML_OUTPUT=$(yamllint .mokogitea/workflows/*.yml 2>&1 | grep "line too long" || true)
+          YAML_OUTPUT=$(yamllint .mokogit/workflows/*.yml 2>&1 | grep "line too long" || true)
          if [ -n "$YAML_OUTPUT" ]; then
            YAML_VIOLATIONS=$(echo "$YAML_OUTPUT" | wc -l)
            echo "⚠️ Found $YAML_VIOLATIONS lines exceeding 180 characters in YAML files" >> $GITHUB_STEP_SUMMARY
@@ -2130,17 +2130,17 @@ jobs:
          WARNINGS=0
          ERRORS=0

-          # 1. Check .mokogitea/config.tf location (not root override files)
+          # 1. Check .mokogit/config.tf location (not root override files)
          echo "### Override Configuration Check" >> $GITHUB_STEP_SUMMARY
          LEGACY_OVERRIDES=$(find . -maxdepth 1 -name "*override*.tf" -o -name "MokoCLI.override.tf" 2>/dev/null | wc -l || echo 0)
          if [ "$LEGACY_OVERRIDES" -gt 0 ]; then
            echo "⚠️ Found legacy override files in root directory" >> $GITHUB_STEP_SUMMARY
-            echo "**Expected Location**: .mokogitea/config.tf" >> $GITHUB_STEP_SUMMARY
+            echo "**Expected Location**: .mokogit/config.tf" >> $GITHUB_STEP_SUMMARY
            echo "**Legacy files found**: $LEGACY_OVERRIDES" >> $GITHUB_STEP_SUMMARY
            WARNINGS=$((WARNINGS + 1))
          else
-            if [ -f ".mokogitea/config.tf" ]; then
-              echo "✅ Override configuration in correct location (.mokogitea/config.tf)" >> $GITHUB_STEP_SUMMARY
+            if [ -f ".mokogit/config.tf" ]; then
+              echo "✅ Override configuration in correct location (.mokogit/config.tf)" >> $GITHUB_STEP_SUMMARY
            else
              echo "ℹ️ No override configuration found" >> $GITHUB_STEP_SUMMARY
            fi
@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: MokoGitea.Workflow.Template
+# DEFGROUP: MokoGIT.Workflow.Template
 # INGROUP: MokoCLI.CI
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Joomla
-# PATH: /.mokogitea/workflows/version-set.yml
+# PATH: /.mokogit/workflows/version-set.yml
 # VERSION: 01.00.00
 # BRIEF: Set or reset the extension version across all version-bearing files

@@ -48,7 +48,7 @@ jobs:
      - name: Checkout
        uses: actions/checkout@v4
        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
+          token: ${{ secrets.MOKOGIT_TOKEN || github.token }}
          ref: ${{ inputs.branch || github.ref }}
          fetch-depth: 1

@@ -1,14 +1,34 @@
 # Changelog
 ## [Unreleased]

-## [02.64.00] --- 2026-07-14
+## [02.67.00] --- 2026-07-17
+
+## [02.67.00] --- 2026-07-17
+
+### Fixed
+- Pre-update / pre-uninstall skip flag is now **time-bounded**. It records the moment it was armed and is honoured only within a short TTL (5 min), always consumed one-shot. Previously a bare boolean: if a user ran the full-screen pre-update backup then abandoned the flow (closed the tab before the update re-fired), the flag lingered for the whole session and could silently suppress a later, unrelated pre-action backup — i.e. a real update running with **no** backup. Now a stale flag is ignored and the server backs up as normal.
+- Pre-update / pre-uninstall backup can no longer run **twice**. The one-shot "skip the synchronous server-side backup" flag is now armed **server-side** the moment the full-screen backup completes (in `AjaxController::step`, keyed by the `msb_action` it is fronting), instead of relying solely on the best-effort client `ajax.preupdateAck` POST (whose failure was silently swallowed in a `catch()`). If that ack ever fails to land, the re-fired extension update/uninstall no longer triggers a second backup behind the "update is running" overlay. The flag is armed **only** on genuine completion (`done`, no error), so a failed or cancelled backup still lets the server back up before the action — the failure mode stays "one extra backup", never "no backup".
+- Component **Options** page showed the raw `COM_MOKOSUITEBACKUP_CONFIGURATION` constant instead of a translated title. Joomla's `com_config` derives the Options-page title (and the component name) from the extension *element* (`com_mokosuitebackup`), but the language files defined those keys only under the legacy `COM_MOKOJOOMBACKUP_` stem. Added the element-derived `COM_MOKOSUITEBACKUP` and `COM_MOKOSUITEBACKUP_CONFIGURATION` keys to all four language files (en-GB/en-US, `.ini` and `.sys.ini`), matching the already-migrated `COM_MOKOSUITEBACKUP_ACTION_*` ACL keys. The 400+ explicitly-referenced `COM_MOKOJOOMBACKUP_*` keys are unaffected and left as-is. (#234)
+
+## [02.66.00] --- 2026-07-16
+
+## [02.65.00] --- 2026-07-16
+
+## [02.65.00] --- 2026-07-16
+
+### Added
+- Backup- and restore-progress modals (backups view) now have the same controls as the full-screen runbackup screen: an "automatically return to the list when finished" checkbox, a Cancel button (double-confirmed) while running, and terminal action buttons. Backup: View backup record / Back to backups on success, Retry / Back on failure. Restore matches, with a stronger cancel warning (a restore cannot be rolled back mid-flight) and no record link.
+
+### Fixed
+- ntfy default server URL now points to `ntfy.mokoconsulting.tech` (was the public `ntfy.sh`) in the profile form default/hint, `NotificationSender` fallbacks, the `ntfy_server` column default, and the field description. (#166)
+- Non-stepped restore (`RestoreEngine`) now surfaces database-import failures instead of always reporting a clean success: it checks `DatabaseImporter::hasErrors()`, logs the failed statements, and returns a `warning` with a "database may be incomplete" message. `DatabaseImporter`'s statement splitter is also now quote-aware (a `;`/newline inside a value no longer splits a statement) with comments only skipped between statements. (#188)
+- Restore Cancel no longer orphans server-side state. The stepped-restore modal's Cancel button now calls a new `ajax.restoreCancel` action that deletes the restore staging directory and session/state files, and `SteppedSession::cleanupOldSessions()` gained a backstop that reaps orphaned `mokosuitebackup-restore-*` staging dirs (for restores abandoned by closing the browser). Previously a cancelled/abandoned restore left the extracted staging dir behind indefinitely.
+- Stepped restore no longer reports a partial database import as a clean "Restore complete". `SteppedRestoreEngine::stepDatabase()` now counts failed statements and surfaces the total (the completion message warns and the modal keeps the result on-screen instead of auto-returning). The statement splitter is also quote-aware — a `;` or newline inside a string value no longer splits a statement mid-value — and comment lines are only skipped between statements. (Sibling of #188 for the stepped/standalone paths; see #291.)
+- Database view "One Problem" on MokoSuiteBackup: reconciled the `#__mokosuitebackup_profiles` schema-checker output with the update-file history. Corrected the stale `TINYINT` definition in `01.01.01.sql` to the final `VARCHAR(20)` type, fixed the `MODIFY COLUMN` parser trip-up in `01.39.00.sql`, and rewrote the retired `sftp_*` `ADD COLUMN` statements in `01.35.00.sql`/`01.36.00.sql` as bare `ADD` so Joomla's checker no longer demands columns that `02.52.25` and the postflight purge deliberately remove. Joomla's schema checker now reports no problems.
+
+### Changed
+- Component now shows the "Type - Name" pretty name `Component - MokoSuiteBackup` in the Extensions manager, consistent with the other sub-extensions. Achieved safely with an `<element>com_mokosuitebackup</element>` tag in the manifest (Joomla reads `<element>` before `<name>` for the extension element), so the element stays `com_mokosuitebackup` and no duplicate/orphaned component is created.
+- Backup/restore progress modals in the backups view now use the same full-screen black, big-text, animated Atum-coloured progress-bar theme as the `runbackup` screen, so all backup progress surfaces match. New `media/css/backup-progress.css` scopes the black to the modal (the list page is unaffected until a modal opens).
+- Standalone MokoRestore wizard (generated `restore.php`) re-branded to the full-black MokoSuite theme — black background, big header, dark panels/forms, and MokoSuite accent colours — so the restore experience matches the rest of the system instead of the old light blue "Joomla-styled" look.

 ## [02.64.00] --- 2026-07-14
-
-## [02.63.00] --- 2026-07-13
-
-## [02.62.00] --- 2026-07-13
-
-## [02.61.00] --- 2026-07-13
-
-## [02.60.00] --- 2026-07-12
@@ -4,7 +4,7 @@ Thank you for your interest in contributing to MokoSuiteBackup.

 ## Getting Started

-1. Fork the repository on MokoGitea
+1. Fork the repository on MokoGIT
 2. Create a feature branch from `dev` (`feature/your-feature`)
 3. Make your changes following the coding standards below
 4. Submit a pull request targeting `dev`
@@ -23,7 +23,7 @@ DEFGROUP: Template-Joomla
 INGROUP: Template-Joomla.Documentation
 REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Joomla
 PATH: /SECURITY.md
-VERSION: 02.64.00
+VERSION: 02.67.00
 BRIEF: Security vulnerability reporting and handling policy
 -->

@@ -162,6 +162,17 @@
 			<option value="1">JYES</option>
 			<option value="0">JNO</option>
 		</field>
+		<field
+			name="lock_admin_during_backup"
+			type="radio"
+			label="COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN"
+			description="COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN_DESC"
+			default="1"
+			class="btn-group"
+		>
+			<option value="1">JYES</option>
+			<option value="0">JNO</option>
+		</field>
 	</fieldset>

 	<fieldset name="cleanup" label="COM_MOKOJOOMBACKUP_CONFIG_CLEANUP">
@@ -292,8 +292,8 @@
 			label="COM_MOKOJOOMBACKUP_FIELD_NTFY_SERVER"
 			description="COM_MOKOJOOMBACKUP_FIELD_NTFY_SERVER_DESC"
 			maxlength="512"
-			default="https://ntfy.sh"
-			hint="https://ntfy.sh"
+			default="https://ntfy.mokoconsulting.tech"
+			hint="https://ntfy.mokoconsulting.tech"
 		/>
 		<field
 			name="ntfy_token"
@@ -7,6 +7,13 @@
 COM_MOKOJOOMBACKUP="MokoSuiteBackup"
 COM_MOKOJOOMBACKUP_SHORT="Backup"
 COM_MOKOJOOMBACKUP_CONFIGURATION="MokoSuiteBackup Options"
+; Framework-derived keys: Joomla builds the component name and the Options-page
+; title from the element (com_mokosuitebackup), NOT from the legacy
+; COM_MOKOJOOMBACKUP_ stem, so they must exist under the new stem too (mirrors
+; the COM_MOKOSUITEBACKUP_ACTION_* ACL keys). Without these the Options screen
+; shows the raw COM_MOKOSUITEBACKUP_CONFIGURATION constant. See #234.
+COM_MOKOSUITEBACKUP="MokoSuiteBackup"
+COM_MOKOSUITEBACKUP_CONFIGURATION="MokoSuiteBackup Options"
 COM_MOKOJOOMBACKUP_DESCRIPTION="Full-site backup and restore for Joomla"

 ; Submenu
@@ -259,7 +266,7 @@ COM_MOKOJOOMBACKUP_FIELD_NTFY_SPACER_DESC="<strong>Push Notifications (ntfy)</st
 COM_MOKOJOOMBACKUP_FIELD_NTFY_TOPIC="ntfy Topic"
 COM_MOKOJOOMBACKUP_FIELD_NTFY_TOPIC_DESC="The ntfy topic to publish notifications to. Leave blank to disable push notifications."
 COM_MOKOJOOMBACKUP_FIELD_NTFY_SERVER="ntfy Server"
-COM_MOKOJOOMBACKUP_FIELD_NTFY_SERVER_DESC="URL of the ntfy server. Default is the public ntfy.sh service. Use your own server URL for self-hosted instances."
+COM_MOKOJOOMBACKUP_FIELD_NTFY_SERVER_DESC="URL of the ntfy server. Default is the Moko Consulting ntfy server (ntfy.mokoconsulting.tech). Use your own server URL for self-hosted instances, or https://ntfy.sh for the public service."
 COM_MOKOJOOMBACKUP_FIELD_NTFY_TOKEN="Access Token"
 COM_MOKOJOOMBACKUP_FIELD_NTFY_TOKEN_DESC="Optional access token for private ntfy topics. Leave blank for public topics."

@@ -335,6 +342,8 @@ COM_MOKOJOOMBACKUP_CONFIG_PREUPDATE_AUTO_INTERCEPT="Auto-run on Update click"
 COM_MOKOJOOMBACKUP_CONFIG_PREUPDATE_AUTO_INTERCEPT_DESC="When enabled, clicking the Update button on the Joomla Update or Extensions update page first pops the backup progress modal, runs the pre-update backup, then automatically continues the update. When disabled, a notice with a manual 'Back up now' button is shown instead."
 COM_MOKOJOOMBACKUP_CONFIG_BACKUP_BEFORE_UNINSTALL="Backup Before Extension Uninstall"
 COM_MOKOJOOMBACKUP_CONFIG_BACKUP_BEFORE_UNINSTALL_DESC="Automatically run a full backup before any extension is uninstalled. Uses the default profile. Throttled to once per 10 minutes."
+COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN="Lock admin during backup"
+COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN_DESC="While a backup is actively running, show a \"backup in progress\" screen on all other admin pages until it finishes, so nothing changes mid-backup. The backup screen itself and the login page stay accessible. Auto-releases if a backup stops responding."

 ; Full-screen backup progress view (runbackup)
 COM_MOKOJOOMBACKUP_RUNBACKUP_TITLE="Backing Up"
@@ -7,6 +7,9 @@
 COM_MOKOJOOMBACKUP="MokoSuiteBackup"
 COM_MOKOJOOMBACKUP_SHORT="Backup"
 COM_MOKOJOOMBACKUP_DESCRIPTION="Full-site backup and restore for Joomla — database, files, and configuration."
+; Element-derived aliases (see the .ini file for the rationale). #234
+COM_MOKOSUITEBACKUP="MokoSuiteBackup"
+COM_MOKOSUITEBACKUP_CONFIGURATION="MokoSuiteBackup Options"
 COM_MOKOJOOMBACKUP_SUBMENU_DASHBOARD="Dashboard"
 COM_MOKOJOOMBACKUP_SUBMENU_BACKUPS="Backup Records"
 COM_MOKOJOOMBACKUP_SUBMENU_PROFILES="Backup Profiles"
@@ -7,6 +7,13 @@
 COM_MOKOJOOMBACKUP="MokoSuiteBackup"
 COM_MOKOJOOMBACKUP_SHORT="Backup"
 COM_MOKOJOOMBACKUP_DESCRIPTION="Full-site backup and restore for Joomla"
+; Framework-derived keys: Joomla builds the component name and the Options-page
+; title from the element (com_mokosuitebackup), NOT from the legacy
+; COM_MOKOJOOMBACKUP_ stem, so they must exist under the new stem too (mirrors
+; the COM_MOKOSUITEBACKUP_ACTION_* ACL keys). Without these the Options screen
+; shows the raw COM_MOKOSUITEBACKUP_CONFIGURATION constant. See #234.
+COM_MOKOSUITEBACKUP="MokoSuiteBackup"
+COM_MOKOSUITEBACKUP_CONFIGURATION="MokoSuiteBackup Options"
 COM_MOKOJOOMBACKUP_SUBMENU_DASHBOARD="Dashboard"
 COM_MOKOJOOMBACKUP_SUBMENU_BACKUPS="Backup Records"
 COM_MOKOJOOMBACKUP_SUBMENU_PROFILES="Backup Profiles"
@@ -57,6 +64,8 @@ COM_MOKOJOOMBACKUP_CONFIG_PREUPDATE_AUTO_INTERCEPT="Auto-run on Update click"
 COM_MOKOJOOMBACKUP_CONFIG_PREUPDATE_AUTO_INTERCEPT_DESC="When enabled, clicking the Update button on the Joomla Update or Extensions update page first pops the backup progress modal, runs the pre-update backup, then automatically continues the update. When disabled, a notice with a manual 'Back up now' button is shown instead."
 COM_MOKOJOOMBACKUP_CONFIG_BACKUP_BEFORE_UNINSTALL="Backup Before Extension Uninstall"
 COM_MOKOJOOMBACKUP_CONFIG_BACKUP_BEFORE_UNINSTALL_DESC="Automatically run a full backup before any extension is uninstalled. Uses the default profile. Throttled to once per 10 minutes."
+COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN="Lock admin during backup"
+COM_MOKOJOOMBACKUP_CONFIG_LOCK_ADMIN_DESC="While a backup is actively running, show a \"backup in progress\" screen on all other admin pages until it finishes, so nothing changes mid-backup. The backup screen itself and the login page stay accessible. Auto-releases if a backup stops responding."

 ; Full-screen backup progress view (runbackup)
 COM_MOKOJOOMBACKUP_RUNBACKUP_TITLE="Backing Up"
@@ -6,6 +6,9 @@

 COM_MOKOJOOMBACKUP="MokoSuiteBackup"
 COM_MOKOJOOMBACKUP_SHORT="Backup"
+; Element-derived aliases (see the .ini file for the rationale). #234
+COM_MOKOSUITEBACKUP="MokoSuiteBackup"
+COM_MOKOSUITEBACKUP_CONFIGURATION="MokoSuiteBackup Options"
 COM_MOKOJOOMBACKUP_DESCRIPTION="Full-site backup and restore for Joomla — database, files, and configuration."
 COM_MOKOJOOMBACKUP_SUBMENU_DASHBOARD="Dashboard"
 COM_MOKOJOOMBACKUP_SUBMENU_BACKUPS="Backup Records"
@@ -0,0 +1,173 @@
+/*
+ * @package     MokoSuiteBackup
+ * @subpackage  com_mokosuitebackup
+ * @copyright   Copyright (C) 2026 Moko Consulting. All rights reserved.
+ * @license     GNU General Public License version 3 or later; see LICENSE
+ *
+ * Full-screen backup/restore progress modals (backups view). Gives the stepped
+ * backup and restore modals the same full-black, big-text, Atum-coloured
+ * progress-bar treatment as the runbackup screen (media/css/runbackup.css), so
+ * all backup progress surfaces share one look. The black is scoped to the modal
+ * (via .msb-progress-modal) rather than html/body, so the list page behind it is
+ * unaffected until the modal opens.
+ */
+
+/* Accent colours pulled from the Atum admin template's own custom properties,
+   with Bootstrap and then a literal as progressive fallbacks — identical to the
+   runbackup screen so the two match whatever theme the site runs. */
+.msb-progress-modal {
+	--msb-accent: var(--template-link-color, var(--bs-link-color, #2a69b8));
+	--msb-accent2: var(--template-special-color, var(--msb-accent));
+	--msb-success: var(--template-success-color, var(--bs-success, #2f7d32));
+	--msb-danger: var(--template-danger-color, var(--bs-danger, #c52128));
+	--msb-track: var(--template-bg-light, var(--bs-gray-200, #edf0f5));
+}
+
+/* Full-screen black takeover, mirroring the runbackup page. */
+.msb-progress-modal .modal-dialog {
+	max-width: 100%;
+	width: 100%;
+	min-height: 100%;
+	margin: 0;
+}
+
+.msb-progress-modal .modal-content {
+	min-height: 100vh;
+	border: 0;
+	border-radius: 0;
+	background-color: #000;
+	color: #fff;
+	display: flex;
+	flex-direction: column;
+	justify-content: center;
+	align-items: center;
+	padding: 1.5rem;
+}
+
+.msb-progress-modal .modal-header {
+	border: 0;
+	padding: 0 0 1.5rem;
+	justify-content: center;
+	text-align: center;
+}
+
+/* Big heading, like the runbackup title. */
+.msb-progress-modal .modal-title {
+	color: #fff;
+	font-size: clamp(1.75rem, 4vw, 2.75rem);
+	font-weight: 700;
+	letter-spacing: .01em;
+}
+
+.msb-progress-modal .modal-body {
+	width: 100%;
+	max-width: 680px;
+	padding: 0;
+	text-align: center;
+}
+
+.msb-progress-modal .msb-pm-status {
+	color: #fff;
+	font-size: 1.25rem;
+	margin: 1rem 0 .25rem;
+}
+
+.msb-progress-modal .msb-pm-phase {
+	color: rgba(255, 255, 255, .6);
+	font-size: .95rem;
+	margin: 0;
+}
+
+/* Auto-continue opt-out, matching the runbackup screen's checkbox. */
+.msb-progress-modal .msb-pm-autocontinue {
+	margin-top: 1.5rem;
+	color: rgba(255, 255, 255, .85);
+	font-size: 1rem;
+}
+
+.msb-progress-modal .msb-pm-autocontinue label {
+	display: inline-flex;
+	align-items: center;
+	gap: .5rem;
+	cursor: pointer;
+}
+
+.msb-progress-modal .msb-pm-autocontinue input {
+	width: 1.1rem;
+	height: 1.1rem;
+}
+
+/* Terminal-state action buttons and the running-state cancel button. */
+.msb-progress-modal .msb-pm-actions,
+.msb-progress-modal .msb-pm-cancel {
+	margin-top: 1.5rem;
+	display: flex;
+	gap: .75rem;
+	justify-content: center;
+	flex-wrap: wrap;
+}
+
+.msb-progress-modal .msb-pm-actions .btn,
+.msb-progress-modal .msb-pm-cancel .btn {
+	min-width: 10rem;
+}
+
+.msb-progress-modal .msb-pm-warn {
+	color: #ffd23f;
+	font-weight: 600;
+	font-size: 1rem;
+	margin-bottom: 1.25rem;
+}
+
+/* Progress bar — mirrors runbackup.css .msb-rb-progress/.msb-rb-bar. */
+.msb-progress-modal .msb-rb-progress {
+	height: 2.75rem;
+	background: var(--msb-track);
+	border-radius: .35rem;
+	overflow: hidden;
+}
+
+.msb-progress-modal .msb-rb-bar {
+	position: relative;
+	height: 100%;
+	width: 0;
+	display: flex;
+	align-items: center;
+	justify-content: center;
+	color: #fff;
+	font-weight: 600;
+	font-size: 1rem;
+	white-space: nowrap;
+	background-color: var(--msb-accent);
+	background-image: linear-gradient(90deg, var(--msb-accent), var(--msb-accent2));
+	transition: width .35s ease;
+}
+
+.msb-progress-modal .msb-rb-bar.is-animated::after {
+	content: "";
+	position: absolute;
+	inset: 0;
+	background-image: linear-gradient(45deg, rgba(255, 255, 255, .18) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, .18) 50%, rgba(255, 255, 255, .18) 75%, transparent 75%, transparent);
+	background-size: 1rem 1rem;
+	animation: msb-pm-stripes 1s linear infinite;
+}
+
+.msb-progress-modal .msb-rb-bar.is-success {
+	background-image: none;
+	background-color: var(--msb-success);
+}
+
+.msb-progress-modal .msb-rb-bar.is-danger {
+	background-image: none;
+	background-color: var(--msb-danger);
+}
+
+@keyframes msb-pm-stripes {
+	from {
+		background-position: 1rem 0;
+	}
+
+	to {
+		background-position: 0 0;
+	}
+}
@@ -14,6 +14,11 @@
 			"name": "com_mokosuitebackup.runbackup",
 			"type": "style",
 			"uri": "com_mokosuitebackup/css/runbackup.css"
+		},
+		{
+			"name": "com_mokosuitebackup.backup-progress",
+			"type": "style",
+			"uri": "com_mokosuitebackup/css/backup-progress.css"
 		}
 	]
 }
@@ -7,17 +7,18 @@
 -->
 <extension type="component" method="upgrade">
 	<!--
-		IMPORTANT: a component's <name> drives the Joomla-derived extension
-		element (com_ + sanitized name), so it MUST stay element-safe:
-		"MokoSuiteBackup" -> com_mokosuitebackup. Do NOT apply the "Type - Name"
-		display convention here — "Component - MokoSuiteBackup" derives
-		com_component-mokosuitebackup, which registers a duplicate component and
-		orphans the real one. Packages are exempt because they set the element
-		via <packagename>; plugins/modules are exempt because <name> is only a
-		display label there.
+		The <element> tag PINS this extension's element to com_mokosuitebackup.
+		Joomla's InstallerAdapter::getElement() reads <element> BEFORE falling
+		back to <name> (libraries/src/Installer/InstallerAdapter.php), so the
+		display <name> can safely use the "Type - Name" convention without the
+		element being derived as com_component-mokosuitebackup (which would
+		register a duplicate component and orphan the real one). Without the
+		<element> tag, "Component - MokoSuiteBackup" would break the install.
+		NB: the manifest filename must stay mokosuitebackup.xml (short element).
 	-->
-	<name>MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<element>com_mokosuitebackup</element>
+	<name>Component - MokoSuiteBackup</name>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -26,7 +26,7 @@ CREATE TABLE IF NOT EXISTS `#__mokosuitebackup_profiles` (
 	`retention_days`       INT(11) NOT NULL DEFAULT 0 COMMENT 'Delete backups older than N days; 0 = unlimited',
 	`retention_count`      INT(11) NOT NULL DEFAULT 0 COMMENT 'Keep newest N backups; 0 = unlimited',
 	`ntfy_topic`           VARCHAR(255) NOT NULL DEFAULT '' COMMENT 'ntfy topic name',
-	`ntfy_server`          VARCHAR(512) NOT NULL DEFAULT 'https://ntfy.sh' COMMENT 'ntfy server URL',
+	`ntfy_server`          VARCHAR(512) NOT NULL DEFAULT 'https://ntfy.mokoconsulting.tech' COMMENT 'ntfy server URL',
 	`ntfy_token`           VARCHAR(255) NOT NULL DEFAULT '' COMMENT 'ntfy access token (optional)',
 	`published`         TINYINT(1) NOT NULL DEFAULT 1,
 	`created`           DATETIME NOT NULL DEFAULT '0000-00-00 00:00:00',
@@ -1 +1,5 @@
-ALTER TABLE `#__mokosuitebackup_profiles` CHANGE `include_kickstart` `include_mokorestore` TINYINT(1) NOT NULL DEFAULT 0 COMMENT 'Include MokoRestore standalone restore script in archive';
+-- Renames include_kickstart -> include_mokorestore. Declared VARCHAR(20) here to
+-- match the final column type (widened from TINYINT in 01.39.00). Joomla's schema
+-- checker does no cross-file supersession, so an earlier TINYINT definition would
+-- be flagged forever against the now-VARCHAR column.
+ALTER TABLE `#__mokosuitebackup_profiles` CHANGE `include_kickstart` `include_mokorestore` VARCHAR(20) NOT NULL DEFAULT '0' COMMENT 'Include MokoRestore standalone restore script in archive';
@@ -1,10 +1,16 @@
 -- MokoSuiteBackup 01.35.00 — SFTP support with key file storage
-
+--
+-- These columns are legacy: 01.41.00 migrates them into #__mokosuitebackup_remotes
+-- and 02.52.25 + the postflight dropLegacyRemoteColumns() purge them, so they do not
+-- exist at rest. Written as bare `ADD` (not `ADD COLUMN`) on purpose: MySQL treats
+-- the two identically, but Joomla's schema checker only builds an ADD-COLUMN check
+-- for the `ADD COLUMN` form. Bare `ADD` is skipped by the checker, so it no longer
+-- reports these retired columns as "missing" while the upgrade still adds them.
 ALTER TABLE `#__mokosuitebackup_profiles`
-    ADD COLUMN `sftp_host` VARCHAR(255) NOT NULL DEFAULT '' AFTER `ftp_ssl`,
-    ADD COLUMN `sftp_port` INT(5) UNSIGNED NOT NULL DEFAULT 22 AFTER `sftp_host`,
-    ADD COLUMN `sftp_username` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_port`,
-    ADD COLUMN `sftp_password` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_username`,
-    ADD COLUMN `sftp_key_data` MEDIUMTEXT AFTER `sftp_password`,
-    ADD COLUMN `sftp_passphrase` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_key_data`,
-    ADD COLUMN `sftp_path` VARCHAR(512) NOT NULL DEFAULT '/backups' AFTER `sftp_passphrase`;
+    ADD `sftp_host` VARCHAR(255) NOT NULL DEFAULT '' AFTER `ftp_ssl`,
+    ADD `sftp_port` INT(5) UNSIGNED NOT NULL DEFAULT 22 AFTER `sftp_host`,
+    ADD `sftp_username` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_port`,
+    ADD `sftp_password` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_username`,
+    ADD `sftp_key_data` MEDIUMTEXT AFTER `sftp_password`,
+    ADD `sftp_passphrase` VARCHAR(255) NOT NULL DEFAULT '' AFTER `sftp_key_data`,
+    ADD `sftp_path` VARCHAR(512) NOT NULL DEFAULT '/backups' AFTER `sftp_passphrase`;
@@ -1,4 +1,6 @@
 -- MokoSuiteBackup 01.36.00 — SFTP auth type column
-
+--
+-- Legacy column (see 01.35.00). Bare `ADD` so Joomla's schema checker skips it —
+-- the column is purged by 02.52.25 + postflight and must not exist at rest.
 ALTER TABLE `#__mokosuitebackup_profiles`
-    ADD COLUMN `sftp_auth_type` VARCHAR(20) NOT NULL DEFAULT 'key' AFTER `sftp_username`;
+    ADD `sftp_auth_type` VARCHAR(20) NOT NULL DEFAULT 'key' AFTER `sftp_username`;
@@ -1,5 +1,8 @@
 -- MokoSuiteBackup 01.39.00 — Change include_mokorestore from TINYINT to VARCHAR
 -- Needed to support 'standalone' value alongside 0/1

+-- NB: MySQL syntax is `MODIFY <col>`, not `MODIFY COLUMN <col>`. Joomla's schema
+-- checker parses `MODIFY COLUMN x` as column-name="COLUMN", type="x", producing a
+-- bogus "wrong type for column 'COLUMN'" problem. Keep it as bare MODIFY.
 ALTER TABLE `#__mokosuitebackup_profiles`
-    MODIFY COLUMN `include_mokorestore` VARCHAR(20) NOT NULL DEFAULT '0';
+    MODIFY `include_mokorestore` VARCHAR(20) NOT NULL DEFAULT '0';
@@ -0,0 +1 @@
+/* 02.64.01 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.02 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.03 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.04 — no schema changes */
@@ -0,0 +1,6 @@
+-- MokoSuiteBackup 02.64.05 — Schema-checker reconciliation for #__mokosuitebackup_profiles
+-- Ensures include_mokorestore is VARCHAR(20) on any install (idempotent; no-op if
+-- already VARCHAR). Paired with retro-fixes to 01.01.01/01.39.00 and the legacy
+-- sftp_* columns restored to install.mysql.sql so the Database view reports no problems.
+ALTER TABLE `#__mokosuitebackup_profiles`
+    MODIFY `include_mokorestore` VARCHAR(20) NOT NULL DEFAULT '0';
@@ -0,0 +1 @@
+/* 02.64.06 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.09 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.10 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.11 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.12 — no schema changes */
@@ -0,0 +1 @@
+/* 02.64.13 — no schema changes */
@@ -0,0 +1 @@
+/* 02.65.00 — no schema changes */
@@ -0,0 +1 @@
+/* 02.65.01 — no schema changes */
@@ -0,0 +1 @@
+/* 02.65.02 — no schema changes */
@@ -0,0 +1 @@
+/* 02.65.03 — no schema changes */
@@ -0,0 +1 @@
+/* 02.65.04 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.00 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.01 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.02 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.03 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.04 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.05 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.06 — no schema changes */
@@ -0,0 +1 @@
+/* 02.66.07 — no schema changes */
@@ -0,0 +1 @@
+/* 02.67.00 — no schema changes */
@@ -81,6 +81,19 @@ class AjaxController extends BaseController
 		$engine = new SteppedBackupEngine();
 		$result = $engine->runStep($sessionId);

+		/* Server-authoritative pre-action skip. When a backup that was launched as a
+		   pre-update / pre-uninstall front COMPLETES here, arm the one-shot skip flag
+		   on the SERVER — rather than relying solely on the client-side
+		   ajax.preupdateAck POST, which is best-effort and swallows its own failure
+		   in a catch(). This guarantees the imminent re-fired update/uninstall does
+		   not trigger a SECOND synchronous backup even if that ack never lands.
+		   Armed ONLY on genuine completion (done, no error), so a failed or cancelled
+		   backup never arms it — preserving "no successful pre-action backup ⇒ the
+		   server still backs up before the action". */
+		if (!empty($result['done']) && empty($result['error'])) {
+			$this->armPreactionSkip($this->input->getCmd('action', ''));
+		}
+
 		$this->sendJson($result);
 	}

@@ -116,16 +129,35 @@ class AjaxController extends BaseController
 		   action so an update ack never suppresses a later, unrelated uninstall.
 		   For a core Joomla update (no action) neither flag is set — a core
 		   update doesn't fire onExtensionBefore(Update|Uninstall). */
-		$action  = $this->app->getInput()->getCmd('action', '');
+		$this->armPreactionSkip($this->app->getInput()->getCmd('action', ''));
+
+		$this->sendJson(['error' => false, 'message' => 'Pre-action backup acknowledged']);
+	}
+
+	/**
+	 * Arm the one-shot session skip flag for a specific pre-action, so the
+	 * imminent re-fired extension update/uninstall skips its synchronous
+	 * server-side backup exactly once (runPreActionBackup consumes it). Keyed by
+	 * action so an update never suppresses a later, unrelated uninstall. A blank
+	 * or unknown action (core Joomla update, manual "Backup Now") arms nothing.
+	 *
+	 * Called from two places: ajax.step on genuine completion (authoritative) and
+	 * ajax.preupdateAck (best-effort client ack) — either one arming the flag is
+	 * enough, and re-arming it is harmless.
+	 *
+	 * Stores the unix time it was armed (not a bare bool) so the plugin can honour
+	 * the skip only within a short TTL and never let a stale flag from an abandoned
+	 * backup suppress a genuine, unrelated pre-action backup later in the session.
+	 */
+	private function armPreactionSkip(string $action): void
+	{
 		$session = Factory::getSession();

 		if ($action === 'update') {
-			$session->set('mokosuitebackup.skip_preaction_backup_before_update', true);
+			$session->set('mokosuitebackup.skip_preaction_backup_before_update', time());
 		} elseif ($action === 'uninstall') {
-			$session->set('mokosuitebackup.skip_preaction_backup_before_uninstall', true);
+			$session->set('mokosuitebackup.skip_preaction_backup_before_uninstall', time());
 		}
-
-		$this->sendJson(['error' => false, 'message' => 'Pre-action backup acknowledged']);
 	}

 	/**
@@ -509,6 +541,39 @@ class AjaxController extends BaseController
 		$this->sendJson($result);
 	}

+	/**
+	 * Cancel an in-progress stepped restore and clean up its staging directory
+	 * and session/state files (prevents orphaned artefacts on a client cancel).
+	 * POST: task=ajax.restoreCancel&session_id=mb_...
+	 */
+	public function restoreCancel(): void
+	{
+		if (!Session::checkToken('get') && !Session::checkToken('post')) {
+			$this->sendJson(['error' => true, 'message' => 'Invalid token'], 403);
+
+			return;
+		}
+
+		if (!$this->app->getIdentity()->authorise('mokosuitebackup.backup.restore', 'com_mokosuitebackup')) {
+			$this->sendJson(['error' => true, 'message' => 'Access denied'], 403);
+
+			return;
+		}
+
+		$sessionId = $this->input->getString('session_id', '');
+
+		if (empty($sessionId)) {
+			$this->sendJson(['error' => true, 'message' => 'Missing session_id']);
+
+			return;
+		}
+
+		$engine = new SteppedRestoreEngine();
+		$result = $engine->cancel($sessionId);
+
+		$this->sendJson($result);
+	}
+
 	/**
 	 * Browse archive contents without extracting.
 	 * POST: task=ajax.browseArchive&id=123
@@ -61,34 +61,37 @@ class DatabaseImporter
 			while (($line = fgets($handle)) !== false) {
 				$trimmed = trim($line);

-				// Skip empty lines
-				if ($trimmed === '') {
-					continue;
-				}
-
-				// Skip single-line comments
-				if (str_starts_with($trimmed, '--') || str_starts_with($trimmed, '#')) {
-					continue;
-				}
-
-				// Handle multi-line comments
-				if (str_starts_with($trimmed, '/*')) {
-					$inMultiLineComment = true;
-				}
-
-				if ($inMultiLineComment) {
-					if (str_contains($trimmed, '*/')) {
-						$inMultiLineComment = false;
+				// Comment/blank skipping applies only BETWEEN statements — never
+				// inside an accumulating statement, where a line may be part of a
+				// multi-line string value that happens to start with --, # or /*.
+				if ($currentStatement === '') {
+					if ($trimmed === '') {
+						continue;
 					}

-					continue;
+					if (str_starts_with($trimmed, '--') || str_starts_with($trimmed, '#')) {
+						continue;
+					}
+
+					if (str_starts_with($trimmed, '/*')) {
+						$inMultiLineComment = true;
+					}
+
+					if ($inMultiLineComment) {
+						if (str_contains($trimmed, '*/')) {
+							$inMultiLineComment = false;
+						}
+
+						continue;
+					}
 				}

 				// Accumulate the statement
 				$currentStatement .= $line;

-				// Check if statement is complete (ends with semicolon)
-				if (str_ends_with($trimmed, ';')) {
+				// A statement ends at a ';' that is NOT inside a quoted string
+				// literal, so a ';' or newline in a value does not split it early.
+				if ($this->isCompleteStatement($currentStatement)) {
 					$statement = trim($currentStatement);
 					$currentStatement = '';

@@ -136,6 +139,52 @@ class DatabaseImporter
 		return $statementsExecuted;
 	}

+	/**
+	 * Whether an accumulated SQL string is a complete statement: it ends with
+	 * ';' that is NOT inside a quoted string literal. Tracks single/double/
+	 * backtick quoting (with backslash escapes; MySQL '' doubling falls out of
+	 * the toggle naturally) so a ';' or newline inside a value does not
+	 * terminate the statement early.
+	 */
+	private function isCompleteStatement(string $sql): bool
+	{
+		$len        = \strlen($sql);
+		$inSingle   = false;
+		$inDouble   = false;
+		$inBacktick = false;
+
+		for ($i = 0; $i < $len; $i++) {
+			$ch = $sql[$i];
+
+			if ($inSingle) {
+				if ($ch === '\\') { $i++; continue; }
+				if ($ch === "'")  { $inSingle = false; }
+				continue;
+			}
+
+			if ($inDouble) {
+				if ($ch === '\\') { $i++; continue; }
+				if ($ch === '"')  { $inDouble = false; }
+				continue;
+			}
+
+			if ($inBacktick) {
+				if ($ch === '`') { $inBacktick = false; }
+				continue;
+			}
+
+			if ($ch === "'") { $inSingle = true; }
+			elseif ($ch === '"') { $inDouble = true; }
+			elseif ($ch === '`') { $inBacktick = true; }
+		}
+
+		if ($inSingle || $inDouble || $inBacktick) {
+			return false;
+		}
+
+		return str_ends_with(rtrim($sql), ';');
+	}
+
 	/**
 	 * Non-fatal errors from the last import(), if any. A non-empty result
 	 * means the restore completed with problems and should be treated as a
@@ -232,13 +232,13 @@ REPL,

            if (backups.length === 0) {
                var alert = document.createElement('div');
-                alert.style.cssText = 'padding:12px;background:#fef2f2;border:1px solid #fecaca;border-radius:6px;color:#dc2626;';
+                alert.style.cssText = 'padding:12px;background:rgba(224,49,49,0.12);border:1px solid rgba(224,49,49,0.4);border-radius:6px;color:#ff8787;';
                alert.textContent = 'No ZIP files found in this directory. Upload a backup archive first.';
                list.appendChild(alert);
            } else if (backups.length === 1) {
                hiddenInput.value = backups[0].name;
                var found = document.createElement('div');
-                found.style.cssText = 'padding:12px;background:#dcfce7;border:1px solid #bbf7d0;border-radius:6px;color:#16a34a;';
+                found.style.cssText = 'padding:12px;background:rgba(47,158,68,0.15);border:1px solid rgba(47,158,68,0.35);border-radius:6px;color:#69db7c;';
                var strong = document.createElement('strong');
                strong.textContent = backups[0].name;
                found.appendChild(document.createTextNode('Found: '));
@@ -247,13 +247,13 @@ REPL,
                list.appendChild(found);
            } else {
                var hint = document.createElement('div');
-                hint.style.cssText = 'padding:8px 12px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;color:#1d4ed8;margin-bottom:8px;font-size:0.9em;';
+                hint.style.cssText = 'padding:8px 12px;background:rgba(42,105,184,0.12);border:1px solid rgba(42,105,184,0.35);border-radius:6px;color:#a5d8ff;margin-bottom:8px;font-size:0.9em;';
                hint.textContent = 'Multiple backup archives found \u2014 select which one to restore:';
                list.appendChild(hint);
                backups.forEach(function(b, i) {
                    var label = document.createElement('label');
-                    label.style.cssText = 'display:flex;align-items:center;padding:10px 12px;margin:4px 0;border:1px solid #e2e8f0;border-radius:6px;cursor:pointer;transition:background 0.15s;';
-                    label.onmouseover = function() { this.style.background = '#f8fafc'; };
+                    label.style.cssText = 'display:flex;align-items:center;padding:10px 12px;margin:4px 0;border:1px solid #2a2f37;border-radius:6px;cursor:pointer;transition:background 0.15s;';
+                    label.onmouseover = function() { this.style.background = '#1e2229'; };
                    label.onmouseout = function() { this.style.background = ''; };
                    var radio = document.createElement('input');
                    radio.type = 'radio';
@@ -268,7 +268,7 @@ REPL,
                    nameStrong.textContent = b.name;
                    info.appendChild(nameStrong);
                    var meta = document.createElement('div');
-                    meta.style.cssText = 'font-size:0.85em;color:#64748b;margin-top:2px;';
+                    meta.style.cssText = 'font-size:0.85em;color:#9aa4b2;margin-top:2px;';
                    meta.textContent = (b.size / 1048576).toFixed(1) + ' MB \u2014 ' + b.date;
                    info.appendChild(meta);
                    label.appendChild(info);
@@ -1507,92 +1507,107 @@ PHP_BACKEND;
 <title>MokoRestore — Site Installer</title>
 <style>
 *{box-sizing:border-box;margin:0;padding:0}
-body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;background:#f0f4f8;color:#333;line-height:1.6}
-.mr-header{background:linear-gradient(135deg,#1a3c5e 0%,#2d6a9f 100%);color:#fff;padding:1.5rem 2rem;text-align:center}
-.mr-header h1{font-size:1.6rem;font-weight:700;margin-bottom:0.2rem}
-.mr-header p{font-size:0.9rem;opacity:0.85}
+/* Full-black MokoSuite theme, matching the runbackup / backup-progress screens. */
+:root{
+	--mr-bg:#000;
+	--mr-panel:#15181d;
+	--mr-input:#1e2229;
+	--mr-border:#2a2f37;
+	--mr-text:#f1f3f5;
+	--mr-muted:#9aa4b2;
+	--mr-accent:#2a69b8;
+	--mr-accent2:#3b82f6;
+	--mr-success:#2f9e44;
+	--mr-danger:#e03131;
+	--mr-warn:#f0b429;
+}
+body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;background:var(--mr-bg);color:var(--mr-text);line-height:1.6}
+.mr-header{background:#000;color:#fff;padding:2.25rem 2rem;text-align:center;border-bottom:1px solid var(--mr-border)}
+.mr-header h1{font-size:2.5rem;font-weight:700;letter-spacing:.01em;margin-bottom:0.25rem}
+.mr-header p{font-size:1rem;color:var(--mr-muted)}
 .mr-container{max-width:800px;margin:1.5rem auto;padding:0 1rem}

 /* Step progress bar */
 .mr-steps{display:flex;justify-content:center;margin-bottom:1.5rem;gap:0;flex-wrap:wrap}
-.mr-step{display:flex;align-items:center;gap:0.5rem;padding:0.5rem 1rem;font-size:0.8rem;color:#94a3b8;cursor:default;position:relative}
-.mr-step .mr-num{width:28px;height:28px;border-radius:50%;border:2px solid #cbd5e1;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.75rem;background:#fff;flex-shrink:0}
-.mr-step.active{color:#1e40af;font-weight:600}
-.mr-step.active .mr-num{border-color:#2563eb;background:#2563eb;color:#fff}
-.mr-step.done{color:#16a34a}
-.mr-step.done .mr-num{border-color:#16a34a;background:#16a34a;color:#fff}
-.mr-step::after{content:'';width:24px;height:2px;background:#cbd5e1;margin-left:0.5rem}
+.mr-step{display:flex;align-items:center;gap:0.5rem;padding:0.5rem 1rem;font-size:0.8rem;color:var(--mr-muted);cursor:default;position:relative}
+.mr-step .mr-num{width:28px;height:28px;border-radius:50%;border:2px solid var(--mr-border);display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.75rem;background:var(--mr-input);color:var(--mr-muted);flex-shrink:0}
+.mr-step.active{color:#fff;font-weight:600}
+.mr-step.active .mr-num{border-color:var(--mr-accent);background:var(--mr-accent);color:#fff}
+.mr-step.done{color:var(--mr-success)}
+.mr-step.done .mr-num{border-color:var(--mr-success);background:var(--mr-success);color:#fff}
+.mr-step::after{content:'';width:24px;height:2px;background:var(--mr-border);margin-left:0.5rem}
 .mr-step:last-child::after{display:none}
-.mr-step.done::after{background:#16a34a}
+.mr-step.done::after{background:var(--mr-success)}

 /* Panels */
-.mr-panel{display:none;background:#fff;border-radius:12px;box-shadow:0 1px 3px rgba(0,0,0,0.1);padding:2rem;margin-bottom:1rem}
+.mr-panel{display:none;background:var(--mr-panel);border:1px solid var(--mr-border);border-radius:12px;box-shadow:0 1px 3px rgba(0,0,0,0.5);padding:2rem;margin-bottom:1rem}
 .mr-panel.visible{display:block}
-.mr-panel h2{font-size:1.2rem;color:#1e293b;margin-bottom:0.25rem}
-.mr-panel .mr-desc{color:#64748b;font-size:0.9rem;margin-bottom:1.5rem}
+.mr-panel h2{font-size:1.4rem;color:#fff;margin-bottom:0.25rem}
+.mr-panel .mr-desc{color:var(--mr-muted);font-size:0.9rem;margin-bottom:1.5rem}

 /* Form elements */
 .mr-field{margin-bottom:1rem}
-.mr-field label{display:block;font-weight:600;font-size:0.85rem;color:#475569;margin-bottom:0.3rem}
-.mr-field input,.mr-field select{width:100%;padding:0.6rem 0.75rem;border:1px solid #d1d5db;border-radius:6px;font-size:0.9rem;color:#1e293b;background:#fff;transition:border-color 0.2s}
-.mr-field input:focus,.mr-field select:focus{outline:none;border-color:#2563eb;box-shadow:0 0 0 3px rgba(37,99,235,0.1)}
-.mr-field .mr-hint{font-size:0.8rem;color:#94a3b8;margin-top:0.2rem}
+.mr-field label{display:block;font-weight:600;font-size:0.85rem;color:#cfd6df;margin-bottom:0.3rem}
+.mr-field input,.mr-field select{width:100%;padding:0.6rem 0.75rem;border:1px solid var(--mr-border);border-radius:6px;font-size:0.9rem;color:var(--mr-text);background:var(--mr-input);transition:border-color 0.2s}
+.mr-field input::placeholder{color:#69707c}
+.mr-field input:focus,.mr-field select:focus{outline:none;border-color:var(--mr-accent);box-shadow:0 0 0 3px rgba(42,105,184,0.25)}
+.mr-field .mr-hint{font-size:0.8rem;color:var(--mr-muted);margin-top:0.2rem}
 .mr-row{display:flex;gap:1rem}
 .mr-row .mr-field{flex:1}

 /* Buttons */
 .mr-btn{display:inline-flex;align-items:center;gap:0.4rem;padding:0.65rem 1.5rem;border:none;border-radius:6px;font-size:0.9rem;font-weight:600;cursor:pointer;transition:all 0.2s}
 .mr-btn:disabled{opacity:0.5;cursor:not-allowed}
-.mr-btn-primary{background:#2563eb;color:#fff}
-.mr-btn-primary:hover:not(:disabled){background:#1d4ed8}
-.mr-btn-success{background:#16a34a;color:#fff}
-.mr-btn-success:hover:not(:disabled){background:#15803d}
-.mr-btn-danger{background:#dc2626;color:#fff}
-.mr-btn-danger:hover:not(:disabled){background:#b91c1c}
-.mr-btn-outline{background:transparent;color:#2563eb;border:1px solid #2563eb}
-.mr-btn-outline:hover:not(:disabled){background:#eff6ff}
-.mr-actions{display:flex;justify-content:space-between;align-items:center;margin-top:1.5rem;padding-top:1rem;border-top:1px solid #e2e8f0}
+.mr-btn-primary{background:var(--mr-accent);color:#fff}
+.mr-btn-primary:hover:not(:disabled){filter:brightness(1.15)}
+.mr-btn-success{background:var(--mr-success);color:#fff}
+.mr-btn-success:hover:not(:disabled){filter:brightness(1.15)}
+.mr-btn-danger{background:var(--mr-danger);color:#fff}
+.mr-btn-danger:hover:not(:disabled){filter:brightness(1.15)}
+.mr-btn-outline{background:transparent;color:#74c0fc;border:1px solid var(--mr-accent)}
+.mr-btn-outline:hover:not(:disabled){background:rgba(42,105,184,0.15)}
+.mr-actions{display:flex;justify-content:space-between;align-items:center;margin-top:1.5rem;padding-top:1rem;border-top:1px solid var(--mr-border)}

 /* Check list */
 .mr-checks{list-style:none;margin:0;padding:0}
-.mr-checks li{display:flex;align-items:center;gap:0.75rem;padding:0.5rem 0;border-bottom:1px solid #f1f5f9;font-size:0.9rem}
+.mr-checks li{display:flex;align-items:center;gap:0.75rem;padding:0.5rem 0;border-bottom:1px solid var(--mr-border);font-size:0.9rem}
 .mr-checks li:last-child{border-bottom:none}
 .mr-check-icon{width:24px;height:24px;border-radius:50%;display:flex;align-items:center;justify-content:center;font-size:0.75rem;font-weight:700;flex-shrink:0}
-.mr-check-ok{background:#dcfce7;color:#16a34a}
-.mr-check-warn{background:#fef9c3;color:#a16207}
-.mr-check-fail{background:#fef2f2;color:#dc2626}
-.mr-check-info{background:#e0f2fe;color:#0284c7}
-.mr-check-label{flex:1;font-weight:500}
-.mr-check-value{color:#64748b;font-size:0.85rem}
-.mr-check-hint{font-size:0.8rem;color:#94a3b8}
+.mr-check-ok{background:rgba(47,158,68,0.18);color:#69db7c}
+.mr-check-warn{background:rgba(240,180,41,0.18);color:#ffd43b}
+.mr-check-fail{background:rgba(224,49,49,0.18);color:#ff8787}
+.mr-check-info{background:rgba(42,105,184,0.18);color:#74c0fc}
+.mr-check-label{flex:1;font-weight:500;color:var(--mr-text)}
+.mr-check-value{color:var(--mr-muted);font-size:0.85rem}
+.mr-check-hint{font-size:0.8rem;color:var(--mr-muted)}

 /* Alert */
 .mr-alert{padding:0.75rem 1rem;border-radius:6px;font-size:0.9rem;margin-bottom:1rem;display:flex;align-items:flex-start;gap:0.5rem}
-.mr-alert-warn{background:#fef3c7;color:#92400e;border:1px solid #fde68a}
-.mr-alert-danger{background:#fef2f2;color:#991b1b;border:1px solid #fecaca}
-.mr-alert-success{background:#f0fdf4;color:#166534;border:1px solid #bbf7d0}
-.mr-alert-info{background:#eff6ff;color:#1e40af;border:1px solid #bfdbfe}
+.mr-alert-warn{background:rgba(240,180,41,0.12);color:#ffe08a;border:1px solid rgba(240,180,41,0.35)}
+.mr-alert-danger{background:rgba(224,49,49,0.12);color:#ffc9c9;border:1px solid rgba(224,49,49,0.4)}
+.mr-alert-success{background:rgba(47,158,68,0.12);color:#b2f2bb;border:1px solid rgba(47,158,68,0.35)}
+.mr-alert-info{background:rgba(42,105,184,0.12);color:#a5d8ff;border:1px solid rgba(42,105,184,0.35)}

 /* Progress */
-.mr-progress{background:#e2e8f0;border-radius:8px;overflow:hidden;height:8px;margin:1rem 0}
-.mr-progress-bar{height:100%;background:linear-gradient(90deg,#2563eb,#3b82f6);transition:width 0.4s;border-radius:8px}
-.mr-status{font-size:0.85rem;color:#64748b;min-height:1.2rem}
+.mr-progress{background:var(--mr-input);border-radius:8px;overflow:hidden;height:8px;margin:1rem 0}
+.mr-progress-bar{height:100%;background:linear-gradient(90deg,var(--mr-accent),var(--mr-accent2));transition:width 0.4s;border-radius:8px}
+.mr-status{font-size:0.85rem;color:var(--mr-muted);min-height:1.2rem}

 /* Provisioning checkboxes */
 .mr-provision-list{list-style:none;padding:0;margin:0}
-.mr-provision-list li{display:flex;align-items:center;gap:0.75rem;padding:0.6rem 0.5rem;border-bottom:1px solid #f1f5f9;font-size:0.9rem;cursor:pointer;border-radius:4px}
-.mr-provision-list li:hover{background:#f8fafc}
+.mr-provision-list li{display:flex;align-items:center;gap:0.75rem;padding:0.6rem 0.5rem;border-bottom:1px solid var(--mr-border);font-size:0.9rem;cursor:pointer;border-radius:4px}
+.mr-provision-list li:hover{background:var(--mr-input)}
 .mr-provision-list li:last-child{border-bottom:none}
-.mr-provision-list input[type=checkbox]{width:18px;height:18px;accent-color:#2563eb}
-.mr-provision-desc{font-size:0.8rem;color:#94a3b8;margin-left:auto}
+.mr-provision-list input[type=checkbox]{width:18px;height:18px;accent-color:var(--mr-accent)}
+.mr-provision-desc{font-size:0.8rem;color:var(--mr-muted);margin-left:auto}

 /* Log */
-.mr-log{background:#1e293b;color:#94a3b8;border-radius:8px;padding:1rem;font-family:'SF Mono',SFMono-Regular,Consolas,monospace;font-size:0.8rem;max-height:200px;overflow-y:auto;white-space:pre-wrap;word-break:break-word;margin-top:1rem;display:none}
+.mr-log{background:#0d0f12;color:var(--mr-muted);border:1px solid var(--mr-border);border-radius:8px;padding:1rem;font-family:'SF Mono',SFMono-Regular,Consolas,monospace;font-size:0.8rem;max-height:200px;overflow-y:auto;white-space:pre-wrap;word-break:break-word;margin-top:1rem;display:none}
 .mr-log.visible{display:block}

 /* Footer */
-.mr-footer{text-align:center;padding:1.5rem;color:#94a3b8;font-size:0.8rem}
-.mr-footer a{color:#2563eb;text-decoration:none}
+.mr-footer{text-align:center;padding:1.5rem;color:var(--mr-muted);font-size:0.8rem}
+.mr-footer a{color:#74c0fc;text-decoration:none}

 /* Spinner */
 .mr-spinner{display:inline-block;width:16px;height:16px;border:2px solid rgba(255,255,255,0.3);border-radius:50%;border-top-color:#fff;animation:spin 0.6s linear infinite}
@@ -1629,11 +1644,11 @@ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica N
    <div class="mr-panel <?php echo $securityVerified ? '' : 'visible'; ?>" id="panel0">
        <h2>Security Verification</h2>
        <p class="mr-desc">To prevent unauthorized access, enter the security code from the file <code>mokorestore-security.php</code> in your site root.</p>
-        <div style="border:1px solid #e2e8f0;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#f8fafc">
-            <div style="font-weight:600;font-size:0.9rem;color:#334155;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
+        <div style="border:1px solid #2a2f37;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#1e2229">
+            <div style="font-weight:600;font-size:0.9rem;color:#cfd6df;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
                <span style="font-size:1.1rem">&#128274;</span> How to find the code
            </div>
-            <ol style="margin:0;padding-left:1.25rem;color:#475569;font-size:0.9rem;line-height:1.6">
+            <ol style="margin:0;padding-left:1.25rem;color:#9aa4b2;font-size:0.9rem;line-height:1.6">
                <li>Connect to your server via FTP, SSH, or file manager</li>
                <li>Open <code>mokorestore-security.php</code> in the site root directory</li>
                <li>Copy the 8-character code and enter it below</li>
@@ -1666,7 +1681,7 @@ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica N
        <h2>Extract Backup</h2>
        <p class="mr-desc">Extract site-backup.zip into the current directory.</p>
        <div class="mr-field">
-            <label>Archive Password <span style="font-weight:normal;color:#94a3b8">(leave blank if not encrypted)</span></label>
+            <label>Archive Password <span style="font-weight:normal;color:#9aa4b2">(leave blank if not encrypted)</span></label>
            <input type="password" id="archivePassword" placeholder="Optional decryption password">
        </div>
        <div class="mr-progress"><div class="mr-progress-bar" id="extractProgress" style="width:0%"></div></div>
@@ -1694,8 +1709,8 @@ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica N
            <strong>Merge</strong> = keep existing table, INSERT IGNORE new rows.
            <strong>Data Only</strong> = keep schema, INSERT data as-is (assumes matching structure).
        </div>
-        <div id="tableResolutionList" style="max-height:400px;overflow-y:auto;border:1px solid #e2e8f0;border-radius:8px;margin-top:1rem">
-            <div style="padding:1rem;color:#94a3b8;text-align:center">Scanning tables...</div>
+        <div id="tableResolutionList" style="max-height:400px;overflow-y:auto;border:1px solid #2a2f37;border-radius:8px;margin-top:1rem">
+            <div style="padding:1rem;color:#9aa4b2;text-align:center">Scanning tables...</div>
        </div>
        <input type="hidden" id="tableResolutions" value="{}">
        <div class="mr-status" id="tableScanStatus"></div>
@@ -1735,21 +1750,21 @@ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica N
        <h2>Site Configuration</h2>
        <p class="mr-desc">Configure your site settings. Credentials were removed from the backup for security &mdash; enter the correct values for this server.</p>

-        <div style="border:1px solid #e2e8f0;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#f8fafc">
-            <div style="font-weight:600;font-size:0.9rem;color:#334155;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
+        <div style="border:1px solid #2a2f37;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#1e2229">
+            <div style="font-weight:600;font-size:0.9rem;color:#cfd6df;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
                <span style="font-size:1.1rem">&#127760;</span> General
            </div>
            <div class="mr-field"><label>Site Name</label><input type="text" id="siteName" value="Joomla Site"></div>
            <div class="mr-field">
-                <label>Live Site URL <span style="font-weight:normal;color:#94a3b8">(optional)</span></label>
+                <label>Live Site URL <span style="font-weight:normal;color:#9aa4b2">(optional)</span></label>
                <input type="text" id="liveSite" placeholder="https://example.com">
                <div class="mr-hint">Leave blank to auto-detect. Set this if using a reverse proxy or custom domain.</div>
            </div>
        </div>

-        <div style="border:1px solid #e2e8f0;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#f8fafc">
-            <div style="font-weight:600;font-size:0.9rem;color:#334155;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
-                <span style="font-size:1.1rem">&#9993;</span> Mail / SMTP <span style="font-weight:normal;font-size:0.8rem;color:#94a3b8">&mdash; leave blank if using PHP mail()</span>
+        <div style="border:1px solid #2a2f37;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#1e2229">
+            <div style="font-weight:600;font-size:0.9rem;color:#cfd6df;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
+                <span style="font-size:1.1rem">&#9993;</span> Mail / SMTP <span style="font-weight:normal;font-size:0.8rem;color:#9aa4b2">&mdash; leave blank if using PHP mail()</span>
            </div>
            <div class="mr-field"><label>SMTP Host</label><input type="text" id="smtpHost" placeholder="smtp.example.com"></div>
            <div class="mr-row">
@@ -1758,8 +1773,8 @@ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica N
            </div>
        </div>

-        <div style="border:1px solid #e2e8f0;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#f8fafc">
-            <div style="font-weight:600;font-size:0.9rem;color:#334155;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
+        <div style="border:1px solid #2a2f37;border-radius:8px;padding:1.25rem;margin-bottom:1.25rem;background:#1e2229">
+            <div style="font-weight:600;font-size:0.9rem;color:#cfd6df;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem">
                <span style="font-size:1.1rem">&#128736;</span> Server
            </div>
            <div class="mr-field" style="display:flex;align-items:center;gap:0.5rem">
@@ -2031,7 +2046,7 @@ async function runPreflight() {
            li.appendChild(val);
            if (c.warn && c.hint) {
                var hint = document.createElement('div');
-                hint.style.cssText = 'font-size:0.85em;color:#a16207;margin-top:4px;padding:4px 8px;background:#fef9c3;border-radius:4px;';
+                hint.style.cssText = 'font-size:0.85em;color:#ffd43b;margin-top:4px;padding:4px 8px;background:rgba(240,180,41,0.12);border-radius:4px;';
                hint.textContent = c.hint;
                li.appendChild(hint);
            }
@@ -2113,7 +2128,7 @@ async function scanTables() {
    const r = await post('scanTables');

    if (!r.success || !r.tables || r.tables.length === 0) {
-        container.innerHTML = '<div style="padding:1rem;color:#94a3b8;text-align:center">No tables found in database.sql (or file not present). You can skip this step.</div>';
+        container.innerHTML = '<div style="padding:1rem;color:#9aa4b2;text-align:center">No tables found in database.sql (or file not present). You can skip this step.</div>';
        setStatus('tableScanStatus', r.tables ? 'No tables found' : (r.message || 'Scan failed'), r.success ? '' : 'error');
        log(r.message || 'No tables found');
        return;
@@ -2134,16 +2149,16 @@ function renderTableList() {

    tableList.forEach(function(name) {
        var row = document.createElement('div');
-        row.style.cssText = 'display:flex;align-items:center;justify-content:space-between;padding:0.5rem 0.75rem;border-bottom:1px solid #f1f5f9;font-size:0.85rem;';
+        row.style.cssText = 'display:flex;align-items:center;justify-content:space-between;padding:0.5rem 0.75rem;border-bottom:1px solid #2a2f37;font-size:0.85rem;';

        var label = document.createElement('span');
-        label.style.cssText = 'font-family:monospace;color:#334155;word-break:break-all;flex:1;margin-right:0.75rem;';
+        label.style.cssText = 'font-family:monospace;color:#cfd6df;word-break:break-all;flex:1;margin-right:0.75rem;';
        label.textContent = name;

        var sel = document.createElement('select');
        sel.dataset.table = name;
        sel.className = 'table-mode-select';
-        sel.style.cssText = 'padding:0.3rem 0.5rem;border:1px solid #d1d5db;border-radius:4px;font-size:0.8rem;min-width:120px;background:#fff;';
+        sel.style.cssText = 'padding:0.3rem 0.5rem;border:1px solid #2a2f37;border-radius:4px;font-size:0.8rem;min-width:120px;background:var(--mr-input);';

        var modes = [
            ['replace', 'Replace'],
@@ -153,7 +153,7 @@ class NotificationSender
 	private static function sendNtfy(object $profile, object $record, bool $success): bool
 	{
 		$topic  = trim($profile->ntfy_topic ?? '');
-		$server = trim($profile->ntfy_server ?? 'https://ntfy.sh');
+		$server = trim($profile->ntfy_server ?? 'https://ntfy.mokoconsulting.tech');
 		$token  = trim($profile->ntfy_token ?? '');

 		if ($topic === '') {
@@ -428,7 +428,7 @@ class NotificationSender
 	private static function sendRestoreNtfy(object $profile, string $type, array $details): bool
 	{
 		$topic  = trim($profile->ntfy_topic ?? '');
-		$server = trim($profile->ntfy_server ?? 'https://ntfy.sh');
+		$server = trim($profile->ntfy_server ?? 'https://ntfy.mokoconsulting.tech');
 		$token  = trim($profile->ntfy_token ?? '');

 		if ($topic === '') {
@@ -122,6 +122,8 @@ class RestoreEngine
 			}

 			// Step 4: Import database
+			$dbErrorCount = 0;
+
 			if ($restoreDb) {
 				$sqlFile = $this->stagingDir . '/database.sql';

@@ -130,6 +132,16 @@ class RestoreEngine
 					$importer    = new DatabaseImporter();
 					$tableCount  = $importer->import($sqlFile);
 					$this->log('Database imported: ' . $tableCount . ' statements executed');
+
+					if ($importer->hasErrors()) {
+						$dbErrors     = $importer->getErrors();
+						$dbErrorCount = count($dbErrors);
+						$this->log('WARNING: ' . $dbErrorCount . ' database statement(s) FAILED during import — the database may be incomplete:');
+
+						foreach (array_slice($dbErrors, 0, 5) as $err) {
+							$this->log('  - ' . substr($err, 0, 200));
+						}
+					}
 				} else {
 					$this->log('No database.sql found in archive — skipping database restore');
 				}
@@ -172,7 +184,10 @@ class RestoreEngine

 			return [
 				'success' => true,
-				'message' => 'Restore complete from: ' . basename($archivePath),
+				'warning' => $dbErrorCount > 0,
+				'message' => $dbErrorCount > 0
+					? 'Restore finished, but ' . $dbErrorCount . ' database statement(s) failed — the database may be incomplete. Check the log.'
+					: 'Restore complete from: ' . basename($archivePath),
 				'log'     => implode("\n", $this->log),
 			];
 		} catch (\Throwable $e) {
@@ -185,15 +185,25 @@ class SteppedRestoreEngine
 					break;

 				case 'complete':
+					$sqlErrors = (int) ($restoreState['sql_errors'] ?? 0);
+
 					$this->destroyRestoreState($sessionId);
 					$session->destroy();

+					$completeMsg = 'Restore complete: ' . $session->archiveName;
+
+					if ($sqlErrors > 0) {
+						$completeMsg .= ' — WARNING: ' . $sqlErrors
+							. ' database statement(s) failed during import; the restored database may be incomplete. Check the site log.';
+					}
+
 					return [
 						'session_id' => $sessionId,
 						'phase'      => 'complete',
 						'progress'   => 100,
-						'message'    => 'Restore complete: ' . $session->archiveName,
+						'message'    => $completeMsg,
 						'done'       => true,
+						'sql_errors' => $sqlErrors,
 					];
 			}

@@ -230,6 +240,39 @@ class SteppedRestoreEngine
 		}
 	}

+	/**
+	 * Cancel an in-progress restore: delete the staging directory and the
+	 * session/state files so a client-side cancel does not leave orphaned
+	 * artefacts (staging dir + *.restore.json) behind. Best-effort — a missing
+	 * or already-finished session is treated as success.
+	 *
+	 * @param   string  $sessionId  The stepped-restore session id
+	 *
+	 * @return  array   ['error' => bool, 'message' => string]
+	 */
+	public function cancel(string $sessionId): array
+	{
+		$restoreState = $this->loadRestoreState($sessionId);
+
+		if ($restoreState !== null) {
+			$stagingDir = $restoreState['staging_dir'] ?? '';
+
+			if (!empty($stagingDir) && is_dir($stagingDir)) {
+				$this->recursiveDelete($stagingDir);
+			}
+		}
+
+		$this->destroyRestoreState($sessionId);
+
+		$session = SteppedSession::load($sessionId);
+
+		if ($session) {
+			$session->destroy();
+		}
+
+		return ['error' => false, 'message' => 'Restore cancelled'];
+	}
+
 	/**
 	 * Extract phase: extract archive to staging directory.
 	 */
@@ -480,34 +523,37 @@ class SteppedRestoreEngine
 		while (($line = fgets($handle)) !== false) {
 			$trimmed = trim($line);

-			// Skip empty lines
-			if ($trimmed === '') {
-				continue;
-			}
-
-			// Skip single-line comments
-			if (str_starts_with($trimmed, '--') || str_starts_with($trimmed, '#')) {
-				continue;
-			}
-
-			// Handle multi-line comments
-			if (str_starts_with($trimmed, '/*')) {
-				$inMultiLineComment = true;
-			}
-
-			if ($inMultiLineComment) {
-				if (str_contains($trimmed, '*/')) {
-					$inMultiLineComment = false;
+			// Comment/blank skipping applies only BETWEEN statements — never inside
+			// an accumulating statement, where a line may be part of a multi-line
+			// string value that happens to start with --, # or /*.
+			if ($currentStatement === '') {
+				if ($trimmed === '') {
+					continue;
 				}

-				continue;
+				if (str_starts_with($trimmed, '--') || str_starts_with($trimmed, '#')) {
+					continue;
+				}
+
+				if (str_starts_with($trimmed, '/*')) {
+					$inMultiLineComment = true;
+				}
+
+				if ($inMultiLineComment) {
+					if (str_contains($trimmed, '*/')) {
+						$inMultiLineComment = false;
+					}
+
+					continue;
+				}
 			}

 			// Accumulate the statement
 			$currentStatement .= $line;

-			// Check if statement is complete (ends with semicolon)
-			if (str_ends_with($trimmed, ';')) {
+			// A statement ends at a ';' that is NOT inside a quoted string literal,
+			// so a ';' or newline embedded in a value does not split it prematurely.
+			if ($this->isCompleteStatement($currentStatement)) {
 				$statement = trim($currentStatement);
 				$currentStatement = '';

@@ -522,7 +568,7 @@ class SteppedRestoreEngine
 					$db->setQuery($statement);
 					$db->execute();
 				} catch (\Exception $e) {
-					error_log('MokoSuiteBackup SQL import warning: ' . $e->getMessage());
+					$this->recordSqlError($state, $e->getMessage());
 				}

 				$statementsExecuted++;
@@ -553,7 +599,7 @@ class SteppedRestoreEngine
 				$db->execute();
 				$state['sql_executed']++;
 			} catch (\Exception $e) {
-				error_log('MokoSuiteBackup SQL import warning (final): ' . $e->getMessage());
+				$this->recordSqlError($state, $e->getMessage());
 			}
 		}

@@ -562,8 +608,78 @@ class SteppedRestoreEngine
 		$state['sql_done'] = true;
 		$session->currentStep++;
 		$session->phase = 'config';
-		$session->statusMessage = 'Database import complete: ' . $state['sql_executed'] . ' statements';
-		$session->log('Database import complete: ' . $state['sql_executed'] . ' statements executed');
+
+		$sqlErrors = (int) ($state['sql_errors'] ?? 0);
+		$doneMsg   = 'Database import complete: ' . $state['sql_executed'] . ' statements'
+			. ($sqlErrors > 0 ? ' (' . $sqlErrors . ' statement(s) FAILED — see log)' : '');
+		$session->statusMessage = $doneMsg;
+		$session->log($doneMsg);
+	}
+
+	/**
+	 * Determine whether an accumulated SQL string is a complete statement: it
+	 * ends with ';' that is NOT inside a quoted string literal. Tracks single,
+	 * double and backtick quoting (with backslash escapes; MySQL '' doubling
+	 * falls out of the toggle naturally) so a ';' or newline inside a value does
+	 * not terminate the statement early.
+	 */
+	private function isCompleteStatement(string $sql): bool
+	{
+		$len       = \strlen($sql);
+		$inSingle  = false;
+		$inDouble  = false;
+		$inBacktick = false;
+
+		for ($i = 0; $i < $len; $i++) {
+			$ch = $sql[$i];
+
+			if ($inSingle) {
+				if ($ch === '\\') { $i++; continue; }
+				if ($ch === "'")  { $inSingle = false; }
+				continue;
+			}
+
+			if ($inDouble) {
+				if ($ch === '\\') { $i++; continue; }
+				if ($ch === '"')  { $inDouble = false; }
+				continue;
+			}
+
+			if ($inBacktick) {
+				if ($ch === '`') { $inBacktick = false; }
+				continue;
+			}
+
+			if ($ch === "'") { $inSingle = true; }
+			elseif ($ch === '"') { $inDouble = true; }
+			elseif ($ch === '`') { $inBacktick = true; }
+		}
+
+		// If we ended inside a string literal, the statement is not finished yet.
+		if ($inSingle || $inDouble || $inBacktick) {
+			return false;
+		}
+
+		return str_ends_with(rtrim($sql), ';');
+	}
+
+	/**
+	 * Record a failed SQL statement in the restore state (count + first few
+	 * messages) so a partial import is surfaced instead of silently passing.
+	 */
+	private function recordSqlError(array &$state, string $message): void
+	{
+		$state['sql_errors'] = (int) ($state['sql_errors'] ?? 0) + 1;
+
+		if (!isset($state['sql_error_list']) || !\is_array($state['sql_error_list'])) {
+			$state['sql_error_list'] = [];
+		}
+
+		if (\count($state['sql_error_list']) < 5) {
+			$state['sql_error_list'][] = substr($message, 0, 200);
+		}
+
+		error_log('MokoSuiteBackup SQL import error: ' . $message);
 	}

 	/**
@@ -171,6 +171,11 @@ class SteppedSession

 	/**
 	 * Clean up old session files (older than 24 hours).
+	 *
+	 * Reaps backup + restore session state (mb_*.json covers both the
+	 * `<id>.json` and `<id>.restore.json` files) and, as a backstop for
+	 * restores abandoned without a cancel (e.g. the browser was just closed),
+	 * any orphaned restore staging directories left in the tmp folder.
 	 */
 	public static function cleanupOldSessions(): void
 	{
@@ -182,10 +187,42 @@ class SteppedSession

 		$cutoff = time() - 86400;

-		foreach (glob($dir . '/mb_*.json') as $file) {
+		foreach (glob($dir . '/mb_*.json') ?: [] as $file) {
 			if (filemtime($file) < $cutoff) {
 				@unlink($file);
 			}
 		}
+
+		// Orphaned restore staging directories (mokosuitebackup-restore-<tag>-<id>).
+		foreach (glob(JPATH_ROOT . '/tmp/mokosuitebackup-restore-*', GLOB_ONLYDIR) ?: [] as $stagingDir) {
+			if (@filemtime($stagingDir) < $cutoff) {
+				self::recursiveDelete($stagingDir);
+			}
+		}
+	}
+
+	/**
+	 * Recursively delete a directory (used to reap orphaned restore staging dirs).
+	 */
+	private static function recursiveDelete(string $dir): void
+	{
+		if ($dir === '' || !is_dir($dir)) {
+			return;
+		}
+
+		$items = new \RecursiveIteratorIterator(
+			new \RecursiveDirectoryIterator($dir, \FilesystemIterator::SKIP_DOTS),
+			\RecursiveIteratorIterator::CHILD_FIRST
+		);
+
+		foreach ($items as $item) {
+			if ($item->isDir()) {
+				@rmdir($item->getPathname());
+			} else {
+				@unlink($item->getPathname());
+			}
+		}
+
+		@rmdir($dir);
 	}
 }
@@ -16,13 +16,21 @@ use Joomla\CMS\Language\Text;
 use Joomla\CMS\Layout\LayoutHelper;
 use Joomla\CMS\Router\Route;
 use Joomla\CMS\Session\Session;
+use Joomla\CMS\Uri\Uri;

 HTMLHelper::_('behavior.multiselect');
+
+// Full-black progress theme for the backup/restore modals (matches view=runbackup).
+// Loaded directly rather than via useStyle(), which does not emit a link for this
+// component (same pattern as the runbackup screen).
+$this->getDocument()->addStyleSheet(Uri::root(true) . '/media/com_mokosuitebackup/css/backup-progress.css');
 $user = Factory::getApplication()->getIdentity();
 $canDownload = $user->authorise('mokosuitebackup.backup.download', 'com_mokosuitebackup');

 $ajaxToken = Session::getFormToken();
 $ajaxUrl   = Route::_('index.php?option=com_mokosuitebackup&format=json', false);
+// Template for the "View backup record" button on the progress modal (__MSBID__ swapped in JS).
+$recordUrlTpl = Route::_('index.php?option=com_mokosuitebackup&view=backup&id=__MSBID__', false);

 $listOrder = $this->escape($this->state->get('list.ordering'));
 $listDirn  = $this->escape($this->state->get('list.direction'));
@@ -135,22 +143,42 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 </form>

 <!-- Stepped Backup Modal (for shared hosting) -->
-<div class="modal fade" id="mokosuitebackup-modal" tabindex="-1" aria-hidden="true" data-bs-backdrop="static" data-bs-keyboard="false">
+<div class="modal fade msb-progress-modal" id="mokosuitebackup-modal" tabindex="-1" aria-hidden="true" data-bs-backdrop="static" data-bs-keyboard="false">
 	<div class="modal-dialog">
 		<div class="modal-content">
 			<div class="modal-header">
-				<h5 class="modal-title" id="mb-modal-title">Backup in Progress</h5>
+				<h2 class="modal-title" id="mb-modal-title">
+					<span class="icon-archive" aria-hidden="true" id="mb-modal-icon"></span>
+					<span id="mb-modal-titletext">Backup in Progress</span>
+				</h2>
 			</div>
 			<div class="modal-body">
-				<div class="alert alert-warning py-1 px-2 mb-2" style="font-size:0.85rem;">
+				<p class="msb-pm-warn">
 					<span class="icon-warning-circle" aria-hidden="true"></span>
-					<strong>Do not navigate away or close this window</strong> while the backup is running.
+					Do not navigate away or close this window while the backup is running.
+				</p>
+				<div class="msb-rb-progress" role="progressbar" aria-valuemin="0" aria-valuemax="100" aria-valuenow="0">
+					<div id="mb-progress-bar" class="msb-rb-bar is-animated" style="width:0%;">0%</div>
 				</div>
-				<div class="progress mb-2" style="height:24px;">
-					<div id="mb-progress-bar" class="progress-bar" role="progressbar" style="width:0%;">0%</div>
+				<p id="mb-status" class="msb-pm-status">Initializing...</p>
+				<p id="mb-phase" class="msb-pm-phase">Phase: init</p>
+
+				<div class="msb-pm-autocontinue" id="mb-autocontinue-wrap">
+					<label>
+						<input type="checkbox" id="mb-autocontinue" checked>
+						Automatically return to the backups list when the backup finishes
+					</label>
+				</div>
+
+				<div class="msb-pm-actions d-none" id="mb-actions">
+					<button type="button" id="mb-retry" class="btn btn-primary d-none">Retry backup</button>
+					<a href="#" id="mb-record" class="btn btn-primary d-none" target="_blank" rel="noopener">View backup record</a>
+					<button type="button" id="mb-done" class="btn btn-secondary d-none">Back to backups</button>
+				</div>
+
+				<div class="msb-pm-cancel" id="mb-cancel-wrap">
+					<button type="button" id="mb-cancel" class="btn btn-outline-danger">Cancel backup</button>
 				</div>
-				<p id="mb-status" class="text-muted mb-1" style="font-size:0.9rem;">Initializing...</p>
-				<p id="mb-phase" class="text-muted mb-0" style="font-size:0.8rem;">Phase: init</p>
 			</div>
 		</div>
 	</div>
@@ -183,12 +211,29 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 		bootstrap.Modal.getInstance(document.getElementById('mokosuitebackup-modal'))?.hide();
 	}

+	// Shared bar-state styling for both the backup and restore progress bars,
+	// matching the runbackup screen: animated stripes while running, solid green
+	// on completion, solid red on failure.
+	function setBarState(bar, phase, progress) {
+		if (phase === 'failed') {
+			bar.classList.remove('is-animated', 'is-success');
+			bar.classList.add('is-danger');
+		} else if (progress >= 100 || phase === 'complete') {
+			bar.classList.remove('is-animated', 'is-danger');
+			bar.classList.add('is-success');
+		}
+		if (bar.parentElement) {
+			bar.parentElement.setAttribute('aria-valuenow', progress);
+		}
+	}
+
 	function updateProgress(progress, message, phase) {
 		const bar = document.getElementById('mb-progress-bar');
 		bar.style.width = progress + '%';
 		bar.textContent = progress + '%';
 		document.getElementById('mb-status').textContent = message;
 		document.getElementById('mb-phase').textContent = 'Phase: ' + phase;
+		setBarState(bar, phase, progress);
 	}

 	async function postAjax(params) {
@@ -205,64 +250,139 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 		return res.json();
 	}

+	// --- Progress-modal controls (auto-continue, cancel, terminal buttons) ---
+	var RECORD_URL  = <?php echo json_encode($recordUrlTpl); ?>;
+	var mbRecordId  = 0;
+	var mbCancelled = false;
+
+	function mbEl(id) { return document.getElementById(id); }
+	function mbShow(n) { if (n) { n.classList.remove('d-none'); } }
+	function mbHide(n) { if (n) { n.classList.add('d-none'); } }
+
+	// Update the modal title's icon + text without innerHTML (values are static).
+	function setBackupTitle(iconClass, text) {
+		var ic = mbEl('mb-modal-icon');
+		if (ic) { ic.className = iconClass; }
+		var tx = mbEl('mb-modal-titletext');
+		if (tx) { tx.textContent = text; }
+	}
+
+	// Reset to the "running" control state (cancel + auto-continue visible, no actions).
+	function mbRunningControls() {
+		mbHide(mbEl('mb-actions'));
+		mbHide(mbEl('mb-retry'));
+		mbHide(mbEl('mb-record'));
+		mbHide(mbEl('mb-done'));
+		mbShow(mbEl('mb-cancel-wrap'));
+		mbShow(mbEl('mb-autocontinue-wrap'));
+		if (mbEl('mb-cancel')) { mbEl('mb-cancel').disabled = false; }
+	}
+
+	// Switch out of the "running" control state (hide cancel + auto-continue).
+	function mbTerminalControls() {
+		backupRunning = false;
+		mbHide(mbEl('mb-cancel-wrap'));
+		mbHide(mbEl('mb-autocontinue-wrap'));
+	}
+
+	function leaveToList() { hideModal(); location.reload(); }
+
+	document.addEventListener('DOMContentLoaded', function() {
+		var doneBtn = mbEl('mb-done');
+		if (doneBtn) { doneBtn.addEventListener('click', leaveToList); }
+
+		// Cancel: double confirmation, then stop the loop and cancel the record.
+		var cancelBtn = mbEl('mb-cancel');
+		if (cancelBtn) {
+			cancelBtn.addEventListener('click', function() {
+				if (!backupRunning || mbCancelled) { return; }
+				if (!confirm('Cancel the backup that is in progress?')) { return; }
+				if (!confirm('Are you sure? The backup will be stopped.')) { return; }
+				mbCancelled = true;
+				backupRunning = false;
+				cancelBtn.disabled = true;
+				document.getElementById('mb-status').textContent = 'Cancelling…';
+				if (mbRecordId > 0) {
+					postAjax({ task: 'ajax.cancelBackup', id: mbRecordId }).then(leaveToList, leaveToList);
+				} else {
+					leaveToList();
+				}
+			});
+		}
+	});
+
+	function backupComplete() {
+		updateProgress(100, 'Backup complete.', 'complete');
+		setBackupTitle('icon-check', 'Backup Complete');
+		mbTerminalControls();
+		// Auto-continue: return to the list automatically unless the user opted out.
+		if (mbEl('mb-autocontinue') && mbEl('mb-autocontinue').checked) {
+			setTimeout(leaveToList, 1500);
+			return;
+		}
+		mbShow(mbEl('mb-actions'));
+		mbShow(mbEl('mb-done'));
+		if (mbRecordId > 0 && RECORD_URL) {
+			var rec = mbEl('mb-record');
+			rec.setAttribute('href', RECORD_URL.replace('__MSBID__', String(mbRecordId)));
+			mbShow(rec);
+		}
+	}
+
+	function backupFailed(message) {
+		updateProgress(0, 'ERROR: ' + (message || 'Backup failed'), 'failed');
+		setBackupTitle('icon-cancel', 'Backup Failed');
+		mbTerminalControls();
+		mbShow(mbEl('mb-actions'));
+		mbShow(mbEl('mb-done'));
+		var retry = mbEl('mb-retry');
+		mbShow(retry);
+		retry.onclick = function() { startSteppedBackup(); };
+	}
+
 	async function startSteppedBackup() {
 		const profileSelect = document.getElementById('mb-profile-select');
 		const profileId = profileSelect ? profileSelect.value : '1';

+		mbRecordId  = 0;
+		mbCancelled = false;
+		mbRunningControls();
+		setBackupTitle('icon-archive', 'Backup in Progress');
 		showModal();
 		updateProgress(0, 'Initializing backup...', 'init');

 		try {
-			// Init
-			const initResult = await postAjax({
-				task: 'ajax.init',
-				profile_id: profileId
-			});
+			const initResult = await postAjax({ task: 'ajax.init', profile_id: profileId });

-			if (initResult.error) {
-				updateProgress(0, 'ERROR: ' + initResult.message, 'failed');
-				setTimeout(hideModal, 5000);
-				return;
-			}
+			if (initResult.error) { backupFailed(initResult.message); return; }

 			// Show preflight warnings if any
 			if (initResult.warnings && initResult.warnings.length > 0) {
 				var warningEl = document.getElementById('mb-phase');
 				warningEl.textContent = 'Warnings: ' + initResult.warnings.join('; ');
-				warningEl.style.color = '#856404';
+				warningEl.style.color = '#ffd23f';
 			}

 			const sessionId = initResult.session_id;
+			if (initResult.record_id) { mbRecordId = initResult.record_id; }
 			updateProgress(initResult.progress, initResult.message, initResult.phase);

-			// Run steps until done
+			// Run steps until done (or cancelled)
 			let done = false;
-			while (!done) {
-				const stepResult = await postAjax({
-					task: 'ajax.step',
-					session_id: sessionId
-				});
-
-				if (stepResult.error) {
-					updateProgress(0, 'ERROR: ' + stepResult.message, 'failed');
-					setTimeout(hideModal, 5000);
-					return;
-				}
-
+			while (!done && !mbCancelled) {
+				const stepResult = await postAjax({ task: 'ajax.step', session_id: sessionId });
+				if (stepResult.error) { backupFailed(stepResult.message); return; }
+				if (stepResult.record_id) { mbRecordId = stepResult.record_id; }
 				updateProgress(stepResult.progress, stepResult.message, stepResult.phase);
 				done = stepResult.done || false;
 			}

-			// Complete
-			document.getElementById('mb-modal-title').textContent = 'Backup Complete';
-			setTimeout(function() {
-				hideModal();
-				location.reload();
-			}, 2000);
+			if (mbCancelled) { return; }
+			backupComplete();

 		} catch (err) {
-			updateProgress(0, 'ERROR: ' + err.message, 'failed');
-			setTimeout(hideModal, 5000);
+			if (mbCancelled) { return; }
+			backupFailed(err.message);
 		}
 	}

@@ -292,8 +412,10 @@ $listDirn  = $this->escape($this->state->get('list.direction'));

 	// Close restore modal handled by Bootstrap data-bs-dismiss

-	// AJAX stepped restore
-	var restoreRunning = false;
+	// --- AJAX stepped restore (controls mirror the backup-progress modal) ---
+	var restoreRunning   = false;
+	var restoreCancelled = false;
+	var restoreSessionId = '';

 	function showRestoreProgress() {
 		restoreRunning = true;
@@ -306,12 +428,38 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 		bootstrap.Modal.getInstance(document.getElementById('mb-restore-progress-modal'))?.hide();
 	}

+	// Update the restore title's icon + text without innerHTML (values are static).
+	function setRestoreTitle(iconClass, text) {
+		var ic = mbEl('mb-restore-icon');
+		if (ic) { ic.className = iconClass; }
+		var tx = mbEl('mb-restore-titletext');
+		if (tx) { tx.textContent = text; }
+	}
+
+	function restoreRunningControls() {
+		mbHide(mbEl('mb-restore-actions'));
+		mbHide(mbEl('mb-restore-retry'));
+		mbHide(mbEl('mb-restore-done'));
+		mbShow(mbEl('mb-restore-cancel-wrap'));
+		mbShow(mbEl('mb-restore-autocontinue-wrap'));
+		if (mbEl('mb-restore-cancel')) { mbEl('mb-restore-cancel').disabled = false; }
+	}
+
+	function restoreTerminalControls() {
+		restoreRunning = false;
+		mbHide(mbEl('mb-restore-cancel-wrap'));
+		mbHide(mbEl('mb-restore-autocontinue-wrap'));
+	}
+
+	function leaveRestoreToList() { hideRestoreProgress(); location.reload(); }
+
 	function updateRestoreProgress(progress, message, phase) {
 		var bar = document.getElementById('mb-restore-progress-bar');
 		bar.style.width = progress + '%';
 		bar.textContent = progress + '%';
 		document.getElementById('mb-restore-status').textContent = message;
 		document.getElementById('mb-restore-phase').textContent = 'Phase: ' + phase;
+		setBarState(bar, phase, progress);
 	}

 	window.addEventListener('beforeunload', function(e) {
@@ -321,15 +469,79 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 		}
 	});

-	async function startSteppedRestore(e) {
-		e.preventDefault();
+	document.addEventListener('DOMContentLoaded', function() {
+		var doneBtn = mbEl('mb-restore-done');
+		if (doneBtn) { doneBtn.addEventListener('click', leaveRestoreToList); }

+		// Cancel: double confirmation. A restore cannot be rolled back mid-flight,
+		// so the second prompt warns that the site may be left partially restored.
+		var cancelBtn = mbEl('mb-restore-cancel');
+		if (cancelBtn) {
+			cancelBtn.addEventListener('click', function() {
+				if (!restoreRunning || restoreCancelled) { return; }
+				if (!confirm('Cancel the restore that is in progress?')) { return; }
+				if (!confirm('Are you sure? Stopping mid-restore may leave the site partially restored.')) { return; }
+				restoreCancelled = true;
+				restoreRunning = false;
+				cancelBtn.disabled = true;
+				document.getElementById('mb-restore-status').textContent = 'Cancelling…';
+				// Tell the server to clean up the staging dir + session state, then leave.
+				if (restoreSessionId) {
+					postAjax({ task: 'ajax.restoreCancel', session_id: restoreSessionId }).then(leaveRestoreToList, leaveRestoreToList);
+				} else {
+					leaveRestoreToList();
+				}
+			});
+		}
+	});
+
+	function restoreComplete(result) {
+		var sqlErrors = (result && result.sql_errors) ? result.sql_errors : 0;
+
+		if (sqlErrors > 0) {
+			// Partial DB import — surface the warning and do NOT auto-return, so the
+			// admin actually sees that the restored database may be incomplete.
+			updateRestoreProgress(100, (result && result.message) || 'Restore finished, but some database statements failed.', 'complete');
+			setRestoreTitle('icon-warning', 'Restore Complete (with warnings)');
+			restoreTerminalControls();
+			mbShow(mbEl('mb-restore-actions'));
+			mbShow(mbEl('mb-restore-done'));
+			return;
+		}
+
+		updateRestoreProgress(100, 'Restore complete.', 'complete');
+		setRestoreTitle('icon-check', 'Restore Complete');
+		restoreTerminalControls();
+		if (mbEl('mb-restore-autocontinue') && mbEl('mb-restore-autocontinue').checked) {
+			setTimeout(leaveRestoreToList, 1500);
+			return;
+		}
+		mbShow(mbEl('mb-restore-actions'));
+		mbShow(mbEl('mb-restore-done'));
+	}
+
+	function restoreFailed(message) {
+		updateRestoreProgress(0, 'ERROR: ' + (message || 'Restore failed'), 'failed');
+		setRestoreTitle('icon-cancel', 'Restore Failed');
+		restoreTerminalControls();
+		mbShow(mbEl('mb-restore-actions'));
+		mbShow(mbEl('mb-restore-done'));
+		var retry = mbEl('mb-restore-retry');
+		mbShow(retry);
+		retry.onclick = function() { runSteppedRestore(); };
+	}
+
+	async function runSteppedRestore() {
 		var recordId       = document.getElementById('mb-restore-record-id').value;
 		var restoreFiles   = document.getElementById('mb-restore-files').checked ? 1 : 0;
 		var restoreDb      = document.getElementById('mb-restore-db').checked ? 1 : 0;
 		var preserveConfig = document.getElementById('mb-restore-config').checked ? 1 : 0;
 		var password       = document.getElementById('mb-restore-password').value;

+		restoreCancelled = false;
+		restoreSessionId = '';
+		restoreRunningControls();
+		setRestoreTitle('icon-refresh', 'Restore in Progress');
 		showRestoreProgress();
 		updateRestoreProgress(0, 'Initializing restore...', 'init');

@@ -343,47 +555,36 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 				encryption_password: password
 			});

-			if (initResult.error) {
-				updateRestoreProgress(0, 'ERROR: ' + initResult.message, 'failed');
-				document.getElementById('mb-restore-title').textContent = 'Restore Failed';
-				setTimeout(hideRestoreProgress, 5000);
-				return;
-			}
+			if (initResult.error) { restoreFailed(initResult.message); return; }

 			var sessionId = initResult.session_id;
+			restoreSessionId = sessionId;
 			updateRestoreProgress(initResult.progress, initResult.message, initResult.phase);

 			var done = false;
-			while (!done) {
-				var stepResult = await postAjax({
-					task: 'ajax.restoreStep',
-					session_id: sessionId
-				});
-
-				if (stepResult.error) {
-					updateRestoreProgress(0, 'ERROR: ' + stepResult.message, 'failed');
-					document.getElementById('mb-restore-title').textContent = 'Restore Failed';
-					setTimeout(hideRestoreProgress, 5000);
-					return;
-				}
-
+			var lastResult = null;
+			while (!done && !restoreCancelled) {
+				var stepResult = await postAjax({ task: 'ajax.restoreStep', session_id: sessionId });
+				if (stepResult.error) { restoreFailed(stepResult.message); return; }
 				updateRestoreProgress(stepResult.progress, stepResult.message, stepResult.phase);
+				lastResult = stepResult;
 				done = stepResult.done || false;
 			}

-			document.getElementById('mb-restore-title').textContent = 'Restore Complete';
-			setTimeout(function() {
-				hideRestoreProgress();
-				location.reload();
-			}, 2000);
+			if (restoreCancelled) { return; }
+			restoreComplete(lastResult);

 		} catch (err) {
-			updateRestoreProgress(0, 'ERROR: ' + err.message, 'failed');
-			document.getElementById('mb-restore-title').textContent = 'Restore Failed';
-			setTimeout(hideRestoreProgress, 5000);
+			if (restoreCancelled) { return; }
+			restoreFailed(err.message);
 		}
 	}

+	function startSteppedRestore(e) {
+		e.preventDefault();
+		runSteppedRestore();
+	}
+
 	// Attach the AJAX restore handler to the restore form
 	document.addEventListener('DOMContentLoaded', function() {
 		var restoreForm = document.getElementById('mb-restore-form');
@@ -452,18 +653,41 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 </div>

 <!-- Restore Progress Modal -->
-<div class="modal fade" id="mb-restore-progress-modal" tabindex="-1" aria-hidden="true" data-bs-backdrop="static" data-bs-keyboard="false">
+<div class="modal fade msb-progress-modal" id="mb-restore-progress-modal" tabindex="-1" aria-hidden="true" data-bs-backdrop="static" data-bs-keyboard="false">
 	<div class="modal-dialog">
 		<div class="modal-content">
 			<div class="modal-header">
-				<h5 class="modal-title" id="mb-restore-title">Restore in Progress</h5>
+				<h2 class="modal-title" id="mb-restore-title">
+					<span class="icon-refresh" aria-hidden="true" id="mb-restore-icon"></span>
+					<span id="mb-restore-titletext">Restore in Progress</span>
+				</h2>
 			</div>
 			<div class="modal-body">
-				<div class="progress mb-2" style="height:24px;">
-					<div id="mb-restore-progress-bar" class="progress-bar bg-danger" role="progressbar" style="width:0%;">0%</div>
+				<p class="msb-pm-warn">
+					<span class="icon-warning-circle" aria-hidden="true"></span>
+					Do not navigate away or close this window while the restore is running.
+				</p>
+				<div class="msb-rb-progress" role="progressbar" aria-valuemin="0" aria-valuemax="100" aria-valuenow="0">
+					<div id="mb-restore-progress-bar" class="msb-rb-bar is-animated is-danger" style="width:0%;">0%</div>
+				</div>
+				<p id="mb-restore-status" class="msb-pm-status">Initializing...</p>
+				<p id="mb-restore-phase" class="msb-pm-phase">Phase: init</p>
+
+				<div class="msb-pm-autocontinue" id="mb-restore-autocontinue-wrap">
+					<label>
+						<input type="checkbox" id="mb-restore-autocontinue" checked>
+						Automatically return to the backups list when the restore finishes
+					</label>
+				</div>
+
+				<div class="msb-pm-actions d-none" id="mb-restore-actions">
+					<button type="button" id="mb-restore-retry" class="btn btn-primary d-none">Retry restore</button>
+					<button type="button" id="mb-restore-done" class="btn btn-secondary d-none">Back to backups</button>
+				</div>
+
+				<div class="msb-pm-cancel" id="mb-restore-cancel-wrap">
+					<button type="button" id="mb-restore-cancel" class="btn btn-outline-danger">Cancel restore</button>
 				</div>
-				<p id="mb-restore-status" class="text-muted mb-1" style="font-size:0.9rem;">Initializing...</p>
-				<p id="mb-restore-phase" class="text-muted mb-0" style="font-size:0.8rem;">Phase: init</p>
 			</div>
 		</div>
 	</div>
@@ -349,7 +349,11 @@ $this->getDocument()->addStyleSheet(Uri::root(true) . '/media/com_mokosuitebacku

 			var done = false;
 			while (!done && !cancelled) {
-				var step = await post({ task: 'ajax.step', session_id: init.session_id });
+				/* Pass the pre-action so the SERVER can arm the one-shot skip flag the
+				   moment this backup completes (see AjaxController::step) — the black
+				   "update is running" overlay then never fronts a second backup even
+				   if the completion ack POST below fails to land. */
+				var step = await post({ task: 'ajax.step', session_id: init.session_id, action: CFG.action || '' });

 				if (!step || step.error) {
 					throw new Error((step && step.message) || 'Backup step failed');
@@ -447,7 +447,7 @@ $listDirn  = $this->escape($this->state->get('list.direction'));
 			var label = document.createElement('label');
 			label.className = 'form-check-label';
 			label.setAttribute('for', 'mb-rtype-' + type);
-			label.textContent = typeLabels[TYPE] || type;
+			label.textContent = typeLabels[type] || type;

 			div.appendChild(input);
 			div.appendChild(label);
@@ -8,7 +8,7 @@
 -->
 <extension type="module" client="administrator" method="upgrade">
 	<name>Module - MokoSuiteBackup - cPanel</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-23</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="actionlog" method="upgrade">
 	<name>Action Log - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-04</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="console" method="upgrade">
 	<name>Console - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-04</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="content" method="upgrade">
 	<name>Content - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-04</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <extension type="plugin" group="quickicon" method="upgrade">
 	<name>Quick Icon - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -39,6 +39,34 @@ final class MokoSuiteBackupQuickicon extends CMSPlugin implements SubscriberInte
 			return;
 		}

+		// A dashboard quick-icon must NEVER be able to crash the whole admin page.
+		// Build the icon defensively; on any failure, contribute nothing and log.
+		try {
+			$icon = $this->buildStatusIcon();
+		} catch (\Throwable $e) {
+			error_log('MokoSuiteBackup quickicon widget failed: ' . $e->getMessage());
+
+			return;
+		}
+
+		// The module (mod_quickicon) expects each plugin to append a LIST of icons
+		// to the 'result' argument; it then iterates that list and array_merge()s a
+		// defaults array into each icon. Appending a bare icon dict instead of a
+		// [ list ] makes it iterate the dict's string values and crash in
+		// array_merge — so the wrapping [$icon] here is load-bearing.
+		$result   = $event->getArgument('result', []);
+		$result[] = [$icon];
+
+		$event->setArgument('result', $result);
+	}
+
+	/**
+	 * Build the single status quick-icon (backup freshness / failures).
+	 *
+	 * @return  array  A mod_quickicon icon definition.
+	 */
+	private function buildStatusIcon(): array
+	{
 		$db = Factory::getDbo();

 		// Get last completed backup
@@ -91,20 +119,15 @@ final class MokoSuiteBackupQuickicon extends CMSPlugin implements SubscriberInte
 			$subtitle  = $ago . ' | ' . ($stats->total ?? 0) . ' backups | ' . $sizeTotal . ' MB';
 		}

-		$result   = $event->getArgument('result', []);
-		$result[] = [
-			[
-				'link'    => 'index.php?option=com_mokosuitebackup&view=backups',
-				'image'   => $warning ? 'icon-warning' : 'icon-database',
-				'icon'    => $warning ? 'icon-warning' : 'icon-database',
-				'text'    => Text::_($text),
-				'linkadd' => $subtitle ? '<br><small>' . htmlspecialchars($subtitle) . '</small>' : '',
-				'id'      => 'plg_quickicon_mokosuitebackup',
-				'group'   => 'MOD_QUICKICON_MAINTENANCE',
-			],
+		return [
+			'link'    => 'index.php?option=com_mokosuitebackup&view=backups',
+			'image'   => $warning ? 'icon-warning' : 'icon-database',
+			'icon'    => $warning ? 'icon-warning' : 'icon-database',
+			'text'    => Text::_($text),
+			'linkadd' => $subtitle ? '<br><small>' . htmlspecialchars($subtitle) . '</small>' : '',
+			'id'      => 'plg_quickicon_mokosuitebackup',
+			'group'   => 'MOD_QUICKICON_MAINTENANCE',
 		];
-
-		$event->setArgument('result', $result);
 	}

 	private function timeAgo(string $datetime): string
@@ -15,3 +15,5 @@ PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_COMPLETE="Backup complete — safe to update."
 PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_FAILED="Backup failed"
 PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_STARTING="Starting backup…"
 PLG_SYSTEM_MOKOSUITEBACKUP_UPDATE_RUNNING="Backup complete. The update is now running — please wait and do not close this window…"
+PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_TITLE="Backup in progress"
+PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_MESSAGE="A MokoSuiteBackup is currently running in another window. The administrator area is locked until it finishes — this page will refresh automatically. Please do not make changes while the backup runs."
@@ -15,3 +15,5 @@ PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_COMPLETE="Backup complete — safe to update."
 PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_FAILED="Backup failed"
 PLG_SYSTEM_MOKOJOOMBACKUP_BACKUP_STARTING="Starting backup…"
 PLG_SYSTEM_MOKOSUITEBACKUP_UPDATE_RUNNING="Backup complete. The update is now running — please wait and do not close this window…"
+PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_TITLE="Backup in progress"
+PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_MESSAGE="A MokoSuiteBackup is currently running in another window. The administrator area is locked until it finishes — this page will refresh automatically. Please do not make changes while the backup runs."
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="system" method="upgrade">
 	<name>System - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -35,6 +35,17 @@ final class MokoSuiteBackup extends CMSPlugin implements SubscriberInterface
 	/** @var array<string,bool> Per-request cache of the one-shot "client already backed up" skip flag. */
 	private array $preactionSkip = [];

+	/**
+	 * Max age (seconds) of the client "already backed up" skip flag that this
+	 * plugin will honour. The flag stores the unix time it was armed (by the
+	 * full-screen backup's ajax.step completion / ajax.preupdateAck); the re-fired
+	 * update/uninstall follows within a second or two, so a small window is ample.
+	 * Bounding it means a backup that was run then ABANDONED (browser closed before
+	 * the update re-fired) cannot silently suppress a genuine, unrelated pre-action
+	 * backup minutes or hours later in the same session.
+	 */
+	private const PREACTION_SKIP_TTL = 300;
+
 	public static function getSubscribedEvents(): array
 	{
 		return [
@@ -133,6 +144,10 @@ final class MokoSuiteBackup extends CMSPlugin implements SubscriberInterface
 			return;
 		}

+		// While a backup is actively running, lock the admin UI so no other
+		// window/page can navigate or change anything mid-backup. May close().
+		$this->maybeLockAdminDuringBackup();
+
 		// Pre-update: send Joomla core-update installs through the full-screen
 		// backup page BEFORE the update runs (may not return from here).
 		$this->maybeRedirectForUpdate();
@@ -155,6 +170,97 @@ final class MokoSuiteBackup extends CMSPlugin implements SubscriberInterface
 		$this->cleanupOldSnapshots();
 	}

+	/**
+	 * Detect whether a stepped backup is actively running right now.
+	 *
+	 * The stepped-backup engine rewrites its session JSON file
+	 * (JPATH_ROOT/tmp/mokosuitebackup-sessions/mb_*.json) on every step and
+	 * deletes it on completion, so a file whose mtime is within the last ~45s
+	 * is a reliable, cross-session heartbeat. A crashed/abandoned backup goes
+	 * stale and stops locking on its own — the admin is never permanently locked.
+	 */
+	private function backupIsActive(): bool
+	{
+		$dir = JPATH_ROOT . '/tmp/mokosuitebackup-sessions';
+
+		if (!is_dir($dir)) {
+			return false;
+		}
+
+		$cutoff = time() - 45;
+
+		foreach (glob($dir . '/mb_*.json') ?: [] as $file) {
+			if (@filemtime($file) >= $cutoff) {
+				return true;
+			}
+		}
+
+		return false;
+	}
+
+	/**
+	 * While a backup is actively running, lock the admin UI: every admin page
+	 * load (except the full-screen backup screen and the login/logout page)
+	 * gets a "backup in progress" interstitial that auto-refreshes, so no other
+	 * window can navigate or change anything mid-backup. Gated by the
+	 * lock_admin_during_backup option; auto-released when the backup ends.
+	 */
+	private function maybeLockAdminDuringBackup(): void
+	{
+		if (!(int) ComponentHelper::getParams('com_mokosuitebackup')->get('lock_admin_during_backup', 1)) {
+			return;
+		}
+
+		$app    = $this->getApplication();
+		$input  = $app->getInput();
+		$option = $input->getCmd('option', '');
+		$view   = $input->getCmd('view', '');
+
+		// Never lock the full-screen backup screen (it IS the backup) nor login/logout.
+		if (($option === 'com_mokosuitebackup' && $view === 'runbackup') || $option === 'com_login') {
+			return;
+		}
+
+		if (!$this->backupIsActive()) {
+			return;
+		}
+
+		$this->renderBackupLockPage();
+		$app->close();
+	}
+
+	/**
+	 * Emit a self-contained "backup in progress" interstitial that refreshes
+	 * itself (meta refresh) until the backup finishes and the lock releases.
+	 */
+	private function renderBackupLockPage(): void
+	{
+		$app     = $this->getApplication();
+		$title   = Text::_('PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_TITLE');
+		$message = Text::_('PLG_SYSTEM_MOKOSUITEBACKUP_LOCK_MESSAGE');
+		$t       = htmlspecialchars($title, ENT_QUOTES, 'UTF-8');
+		$m       = htmlspecialchars($message, ENT_QUOTES, 'UTF-8');
+
+		$html = '<!doctype html><html lang="en"><head><meta charset="utf-8">'
+			. '<meta name="viewport" content="width=device-width, initial-scale=1">'
+			. '<meta http-equiv="refresh" content="8">'
+			. '<title>' . $t . '</title><style>'
+			. 'html,body{height:100%;margin:0}'
+			. 'body{background:#000;color:#fff;font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;'
+			. 'display:flex;align-items:center;justify-content:center;text-align:center}'
+			. '.w{max-width:34rem;padding:2rem}'
+			. '.s{width:3rem;height:3rem;margin:0 auto 1.5rem;border:.35rem solid rgba(255,255,255,.2);'
+			. 'border-top-color:#fff;border-radius:50%;animation:sp 1s linear infinite}'
+			. 'h1{font-size:1.5rem;margin:.5rem 0}p{opacity:.85;line-height:1.55}'
+			. '@keyframes sp{to{transform:rotate(360deg)}}'
+			. '</style></head><body><div class="w"><div class="s"></div>'
+			. '<h1>' . $t . '</h1><p>' . $m . '</p></div></body></html>';
+
+		$app->setHeader('Content-Type', 'text/html; charset=utf-8', true);
+		$app->sendHeaders();
+		echo $html;
+	}
+
 	/**
 	 * Inject the client-side interceptor on the Extensions → Update and
 	 * Extensions → Manage pages, so an EXTENSION update / uninstall also runs
@@ -553,12 +659,16 @@ JS;
 		$skipKey = 'mokosuitebackup.skip_preaction_' . $paramName;

 		if (!array_key_exists($paramName, $this->preactionSkip)) {
-			$this->preactionSkip[$paramName] = (bool) $session->get($skipKey, false);
-			$session->set($skipKey, false);
+			/* The flag stores the unix time it was armed. Consume it one-shot (reset
+			   to 0) and honour the skip ONLY if it was armed within the TTL — a
+			   stale flag from an abandoned backup must not suppress a real one. */
+			$armedAt = (int) $session->get($skipKey, 0);
+			$session->set($skipKey, 0);
+			$this->preactionSkip[$paramName] = ($armedAt > 0 && (time() - $armedAt) <= self::PREACTION_SKIP_TTL);
 		}

 		if ($this->preactionSkip[$paramName]) {
-			// Client already backed up; skip this whole re-fired (possibly batch) request.
+			// Client already backed up (recently); skip this re-fired (possibly batch) request.
 			$this->preactionRan[$paramName] = true;

 			return;
@@ -5,7 +5,7 @@
 * "MokoSuiteBackup: Run Backup Profile" task.
 -->
 <form>
-	<fieldset name="run_profile">
+	<fieldset name="run_profile" label="PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_PROFILE">
 		<field
 			name="profile_id"
 			type="sql"
@@ -5,7 +5,7 @@
 * "MokoSuiteBackup: Run Content Snapshot" task.
 -->
 <form>
-	<fieldset name="run_snapshot">
+	<fieldset name="run_snapshot" label="PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_SNAPSHOT">
 		<field name="content_types" type="checkboxes" label="Content Types" default="articles,categories,modules">
 			<option value="articles">Articles</option>
 			<option value="categories">Categories</option>
@@ -8,5 +8,7 @@ PLG_TASK_MOKOJOOMBACKUP_TASK_RUN_PROFILE_DESC="Run a MokoSuiteBackup backup usin

 ; Task form fields
 PLG_TASK_MOKOJOOMBACKUP_FIELD_PROFILE="Backup Profile"
+PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_PROFILE="Backup Profile"
+PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_SNAPSHOT="Content Snapshot"
 PLG_TASK_MOKOJOOMBACKUP_FIELD_PROFILE_DESC="Select which backup profile to run. Each profile defines backup type (full/database/files), exclusion filters, and storage settings."
 PLG_TASK_MOKOJOOMBACKUP_SELECT_PROFILE="- Select Profile -"
@@ -4,5 +4,7 @@ PLG_TASK_MOKOJOOMBACKUP_DESCRIPTION="Scheduled task plugin for MokoSuiteBackup.
 PLG_TASK_MOKOJOOMBACKUP_TASK_RUN_PROFILE_TITLE="MokoSuiteBackup: Run Backup Profile"
 PLG_TASK_MOKOJOOMBACKUP_TASK_RUN_PROFILE_DESC="Run a MokoSuiteBackup backup using the selected profile. Create multiple tasks with different profiles for different backup schedules."
 PLG_TASK_MOKOJOOMBACKUP_FIELD_PROFILE="Backup Profile"
+PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_PROFILE="Backup Profile"
+PLG_TASK_MOKOJOOMBACKUP_FIELDSET_RUN_SNAPSHOT="Content Snapshot"
 PLG_TASK_MOKOJOOMBACKUP_FIELD_PROFILE_DESC="Select which backup profile to run."
 PLG_TASK_MOKOJOOMBACKUP_SELECT_PROFILE="- Select Profile -"
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="task" method="upgrade">
 	<name>Task - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -7,7 +7,7 @@
 -->
 <extension type="plugin" group="webservices" method="upgrade">
 	<name>Web Services - MokoSuiteBackup</name>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -8,7 +8,7 @@
 <extension type="package" method="upgrade">
 	<name>Package - MokoSuiteBackup</name>
 	<packagename>mokosuitebackup</packagename>
-	<version>02.64.00</version>
+	<version>02.67.00</version>
 	<creationDate>2026-06-02</creationDate>
 	<author>Moko Consulting</author>
 	<authorEmail>hello@mokoconsulting.tech</authorEmail>
@@ -15,6 +15,12 @@ use Joomla\CMS\Language\Text;
 use Joomla\CMS\Log\Log;
 use Joomla\CMS\Router\Route;

+// Guard against Joomla including this package install script twice in a single
+// request (the package update flow can extract to two tmp dirs and include both
+// script.php files), which otherwise fatals with a compile-time "Cannot
+// redeclare class Pkg_MokoSuiteBackupInstallerScript". Declaring the class
+// conditionally makes the second include a runtime no-op instead of a fatal.
+if (!class_exists('Pkg_MokoSuiteBackupInstallerScript', false)) {
 class Pkg_MokoSuiteBackupInstallerScript
 {
 	/**
@@ -1091,3 +1097,4 @@ class Pkg_MokoSuiteBackupInstallerScript
 		} catch (\Exception $e) {}
 	}
 }
+} // end class_exists guard