2216 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jonathan Miller	0dcd27cece	fix: update heartbeat URL from waas.dev to suite.dev.mokoconsulting.tech ... Domain was renamed — heartbeat was silently failing because the old hostname no longer resolves.	2026-06-20 15:03:49 -05:00
Jonathan Miller	1d7ea1a2cc	Merge remote-tracking branch 'origin/main' into rc	2026-06-20 12:24:59 -05:00
jmiller	bd5bd8476c	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:51 +00:00
jmiller	61b4963e2d	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:50 +00:00
jmiller	21168193e1	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:50 +00:00
jmiller	cfc2778d95	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:49 +00:00
jmiller	8365093fc3	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:48 +00:00
jmiller	8a2b59865f	fix: rename moko-platform to mokocli + changelog promotion in workflows	2026-06-20 17:15:48 +00:00
Jonathan Miller	7e6699479f	fix(install): enable and protect backup bridge plugin on install ... Add mokosuiteclient_backup to enablePlugin() and protectExtensions() lists so the backup bridge plugin is enabled on install/update and cannot be accidentally disabled by admins.	2026-06-20 12:15:14 -05:00
Jonathan Miller	bc60161e16	Merge remote-tracking branch 'origin/dev' into rc ... # Conflicts: # source/packages/plg_task_mokosuiteclientdemo/mokosuiteclientdemo.xml # source/packages/plg_task_mokosuiteclientsync/mokosuiteclientsync.xml	2026-06-20 11:59:38 -05:00
Jonathan Miller	fb52d3ed53	fix(heartbeat): add diagnostic logging to all bail-out points ... Log reason when sendHeartbeat() exits early: missing params, empty health token, or unconfigured base URL. Helps diagnose why heartbeat doesn't reach MokoSuiteClientHQ after install/update.	2026-06-20 11:54:24 -05:00
Jonathan Miller	f8c70f2bef	fix(install): migrate monitor params before retiring the plugin ... Move migrateMonitorParams() before removeRetiredExtensions() so the monitor plugin's params (base_url, signing_key) are copied to the core plugin before the monitor row is deleted from #__extensions.	2026-06-20 11:50:53 -05:00
Jonathan Miller	f1d483aa38	fix(heartbeat): add error logging, fix params persistence race ... - Add Log::add() to empty catch blocks in sendHeartbeat(), checkHeartbeat(), and fetchLocalHealth() so failures are diagnosable - Add curl_error() check and non-2xx logging to script.php sendHeartbeat() - Replace $extension->store() with targeted DB update in checkHeartbeat() to avoid overwriting params modified by migrateMonitorParams()	2026-06-20 11:40:17 -05:00
gitea-actions[bot]	99f0901fd2	chore(release): build 02.41.00-rc [skip ci]	2026-06-20 16:38:27 +00:00
Jonathan Miller	6dcacfb6cc	Merge remote-tracking branch 'origin/main' into rc ... # Conflicts: # .mokogitea/manifest.xml # src/packages/com_mokowaas/mokowaas.xml # src/packages/plg_system_mokowaas/Extension/MokoWaaS.php # src/packages/plg_system_mokowaas/Field/AllowedIpsField.php # src/packages/plg_system_mokowaas/Field/CurrentIpField.php # src/packages/plg_system_mokowaas/Field/DemoTaskInfoField.php # src/packages/plg_system_mokowaas/Field/NextResetField.php # src/packages/plg_system_mokowaas/Field/SnapshotTablesField.php # src/packages/plg_system_mokowaas/mokowaas.xml	2026-06-20 10:59:08 -05:00
Jonathan Miller	72134bba28	fix(install): enable ticket/offline plugins, consolidate monitor into core ... - enablePlugin() handles empty element columns with fallback match by name - Retire monitor plugin: migrate config (base_url, signing_key) to core - Runtime heartbeat moved from monitor plugin to core plugin - DisplayController heartbeat reads from core plugin params - ensureAdminModule() direct DB update for existing modules (fixes checked_out blocking, cpanel access level 6→3, menu ordering -1) - Add missing ticket automation language strings (IMAP, autoclose) - Remove monitor from cpanel plugin grid	2026-06-20 10:33:01 -05:00
gitea-actions[bot]	29c58a9400	chore(release): build 02.35.00 [skip ci]	2026-06-19 07:15:04 +00:00
jmiller	cddfbe5256	Merge pull request 'fix: remove deprecated .mokogitea/manifest.xml' (#217) from fix into main	2026-06-19 07:08:57 +00:00
Jonathan Miller	d692db4a69	fix: remove deprecated .mokogitea/manifest.xml — metadata managed via API	2026-06-19 02:04:36 -05:00
jmiller	888f37c334	fix(ci): detect rebuild by branch name not version suffix [skip ci]	2026-06-19 01:51:59 +00:00
jmiller	87d62f00e3	fix(ci): detect rebuild by branch name not version suffix [skip ci]	2026-06-19 01:51:34 +00:00
Jonathan Miller	c1696bce41	fix(ci): detect rebuild by branch name not version suffix [skip ci]	2026-06-18 20:35:27 -05:00
gitea-actions[bot]	17d66fcf1e	chore(version): pre-release bump to 02.40.00-rc [skip ci]	2026-06-19 01:14:34 +00:00
jmiller	74361a4124	ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci]	2026-06-19 00:40:39 +00:00
jmiller	ab163dfe06	ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci]	2026-06-19 00:18:33 +00:00
jmiller	6592b5459c	ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci]	2026-06-19 00:18:01 +00:00
Jonathan Miller	30d9e1a108	ci: patch bump on same-branch rebuilds, minor only on elevation [skip ci] ... RC rebuilds on the rc branch now get patch bumps (02.37.00-rc → 02.37.01-rc) instead of minor bumps. Minor bumps only happen on branch elevations (dev→rc, rc→stable).	2026-06-18 19:13:32 -05:00
gitea-actions[bot]	fab6572777	chore(version): pre-release bump to 02.39.00-rc [skip ci]	2026-06-19 00:11:34 +00:00
Jonathan Miller	bf30c3db5b	fix(api): type-safe update, filtered pagination, status sync, int cast assign ... - API update() now uses getInt/getString instead of raw input - API update() syncs status/status_id and priority/priority_id - API update() returns 404 if ticket not found - Pagination total count now uses filtered query (was unfiltered) - AutomationEngine assign action casts value to int	2026-06-18 19:09:42 -05:00
Jonathan Miller	134b9b3693	fix(security+reliability): address PR review — ACL guards, error logging, path traversal ... Security: - Add return after all jsonForbidden() calls (13 methods) to prevent ACL bypass if $app->close() fails to terminate - Add throw after requireAuth() in REST API controller (same pattern) - Add path traversal guard to AttachmentService::getAbsolutePath() using realpath + prefix check Error handling: - Log install notification email failures instead of empty catch - Log DB errors in getUserEmail(), getNotificationConfig(), getComponentConfig() instead of silent fallbacks - Log PHP upload error codes in AttachmentService - Check Folder::create() return value before upload loop - Fix searchKb() missing return on short query + log DB errors - Fix ntfy push to capture curl_error() on connection failure - Upgrade AutomationEngine inner catch to LOG_ERROR with rule ID	2026-06-18 19:05:57 -05:00
gitea-actions[bot]	ccb76132a5	chore(version): pre-release bump to 02.38.00-rc [skip ci]	2026-06-18 20:52:35 +00:00
Jonathan Miller	c8a267eed0	chore: remove legacy src/ directory (pre-rename MokoWaaS code) [skip ci]	2026-06-18 15:50:39 -05:00
Jonathan Miller	6c1ab6607b	fix: rename installer class Pkg_Mokosuite → Pkg_Mokosuiteclient [skip ci]	2026-06-18 15:09:03 -05:00
Jonathan Miller	c2c2f40147	fix: set EXTENSION_NAME=mokosuiteclient in Makefile for updates.xml [skip ci]	2026-06-18 14:57:56 -05:00
jmiller	6b1352d82c	Merge pull request 'feat: backup bridge plugin to detect MokoSuiteBackup (#208)' (#209) from feature/208-backup-bridge into dev	2026-06-18 19:54:34 +00:00
Jonathan Miller	446539844d	ci: retrigger after runner restart	2026-06-18 12:55:05 -05:00
gitea-actions[bot]	bd39fb487c	chore(version): pre-release bump to 02.37.00-rc [skip ci]	2026-06-18 17:54:58 +00:00
Jonathan Miller	2e00512741	fix: rename all language keys MOKOSUITE→MOKOSUITECLIENT, auto-enable monitor plugin ... - XML manifests used old PLG_SYSTEM_MOKOSUITE_ / MOD_MOKOSUITE_ / COM_MOKOSUITE_ prefixes that didn't match the INI files (PLG_SYSTEM_MOKOSUITECLIENT_ etc.), causing untranslated labels in admin UI - Also fixed PLG_TASK_MOKOSUITEDEMO/SYNC and DBIP language keys - Added mokosuiteclient_monitor to auto-enable list in package install script so heartbeat registration works on fresh install	2026-06-18 12:47:50 -05:00
Jonathan Miller	823d2e4f0e	ci: add changelog extraction to promote-rc job in auto-release [skip ci]	2026-06-18 12:15:32 -05:00
Jonathan Miller	9b347dd136	fix(backup): send error on failure, use staleDays for cutoff, consistent shape (#208) ... - Send explicit error status when backup data collection fails instead of omitting the key (so HQ can distinguish failure from not-installed) - Add status='ok' to not-installed return for consistent array shape - Use staleDays param instead of hardcoded 7-day cutoff in fallback query	2026-06-18 11:13:29 -05:00
gitea-actions[bot]	42d4f6e553	chore(version): pre-release bump to 02.36.00-rc [skip ci]	2026-06-18 15:45:07 +00:00
Jonathan Miller	b8dfd500e4	fix: swap demo/sync plugin manifests — contents were in wrong files	2026-06-18 10:44:46 -05:00
Jonathan Miller	bca879f0d3	feat(backup): use real MokoSuiteBackup schema and prefer BackupStatusHelper (#208) ... Update bridge to use correct column names (backupstart/backupend, status values: complete/fail/running/pending). Prefer the BackupStatusHelper API when available, with direct table query fallback for older MokoSuiteBackup versions.	2026-06-18 10:41:54 -05:00
Jonathan Miller	0d731eafd0	fix: swap demo/sync plugin manifests — contents were in wrong files ... The merge rename accidentally swapped the XML manifest contents between plg_task_mokosuiteclientdemo and plg_task_mokosuiteclientsync. The demo manifest contained the sync element/name/namespace and vice versa, causing JInstaller to look for mokosuiteclientsync.xml inside the demo plugin zip.	2026-06-18 10:37:22 -05:00
Jonathan Miller	559db324cb	feat(backup): scaffold backup bridge plugin (#208) ... Add plg_system_mokosuiteclient_backup — detects MokoSuiteBackup and collects backup status for heartbeat payloads to MokoSuiteHQ. Scaffolding includes manifest, service provider, extension class, and language files. Table column names are placeholders pending MokoSuiteBackup schema confirmation (MokoSuiteBackup#47).	2026-06-18 10:24:54 -05:00
Jonathan Miller	bd37187f0e	ci: add changelog extraction to promote-rc job in auto-release [skip ci]	2026-06-18 10:04:13 -05:00
gitea-actions[bot]	ca37dc9cbd	chore(release): build 02.35.00-rc [skip ci]	2026-06-18 15:00:02 +00:00
Jonathan Miller	8fd50ea580	fix(security+data): address PR review — XSS, header injection, ACL, status sync ... 1. Remove SVG from allowed upload extensions (stored XSS vector) 2. Sanitize Content-Disposition filename (header injection prevention) 3. Add ACL check to rateTicket() (missing authorization) 4. Use server-side MIME detection instead of client-supplied type 5. Sync status_id/priority_id in AutomationEngine and API controller to keep ENUM and lookup-table columns consistent 6. Align auto-bump.yml to use mokoplatform (no hyphen) matching pre-release.yml convention	2026-06-18 09:49:27 -05:00
gitea-actions[bot]	e090cd7092	chore(version): pre-release bump to 02.34.84-dev [skip ci]	2026-06-18 14:19:11 +00:00
Jonathan Miller	b6818719e2	ci: deploy full pre-release workflow from mokoplatform [skip ci]	2026-06-18 09:18:51 -05:00