38 Commits

Author	SHA1	Message	Date
Jonathan Miller	0a374ac8d5	feat: fuzzy detection of all MokoSuite/MokoJoom ecosystem packages ... - DashboardModel.getMokoExtensions() now fuzzy-matches mokosuite*, mokosuiteclient*, mokosuitehq*, mokosuitecrm*, mokojoom* across packages, components, modules, plugins, and libraries - Each extension tagged with product family for grouping - Heartbeat payload includes moko_packages map (element → version) so HQ can see all installed MokoSuite products per site - Menu module already catches com_moko% (no change needed)	2026-06-23 14:26:52 -05:00
Jonathan Miller	3c4fe24056	feat: enforce ACLs in dashboard WAF sections and sidebar menu ... - Dashboard: WAF chart and Recent WAF Blocks gated behind mokosuiteclient.security.waflog ACL - Menu: all items ACL-gated, added Snippets/Templates/Replacements/ Conditions entries, removed ticket items, super admins bypass all	2026-06-23 14:24:36 -05:00
Jonathan Miller	8cc8cadda2	chore: remove all ticket/helpdesk code — migrated to MokoSuiteCRM ... - Controller: removed 20+ ticket methods (createTicket, addReply, updateStatus, saveCategory, saveCanned, uploadAttachment, etc.) - Controller: updated VIEW_ACL map — removed tickets/canned/categories, added snippets/templates/replacements/conditions - Controller: WAF log ACL changed from core.admin to security.waflog - Deleted: TicketsModel, AttachmentService, AutomationEngine, NotificationService, TicketsController (API) - Deleted: all Ticket/Tickets/Ticketsettings/Canned views and templates (admin and site) - Removed importAts method	2026-06-23 14:22:34 -05:00
Jonathan Miller	50beb170e4	chore: update access.xml, config.xml, language for all new features ... access.xml: removed stale ticket ACLs, added waflog, impersonate, snippets, templates, replacements, conditions actions config.xml: removed helpdesk/IMAP sections (migrated to CRM), added content tools, impersonation settings, updated branding to MokoSuite language: added all new ACL keys, removed ticket references	2026-06-23 13:28:27 -05:00
Jonathan Miller	60a541fec1	feat: Articles Field, Content Templater — complete Regular Labs suite ... - Articles Field (#162): custom ListField type for article selection in any Joomla form, shows "Title [Category]" options - Content Templater (#165): {template alias="x"} tags load pre-defined article templates from DB, returns introtext+fulltext from JSON - content_templates table added to install.mysql.sql - All Regular Labs replacements now implemented: #160 conditions + AMM, #161 articles anywhere, #162 articles field, #164 conditional content, #165 content templater, #167 email protector, #175 rereplacer, #176 snippets, #177 sourcerer, #180 users anywhere, #181 cache cleaner	2026-06-23 13:01:32 -05:00
Jonathan Miller	377076e60f	style(dashboard): show toggle switch for all configured plugins ... Toggle switch shown for any plugin with extension_id (installed). Protected plugins still show badge only. Unconfigured plugins show no switch or configure button. Removes configure_only logic.	2026-06-23 12:53:20 -05:00
Jonathan Miller	65ffa835d9	feat: email protector + snippets engine ... - Email Protector (#167): base64 obfuscation with JS decloaking, protects mailto links and plain emails, inject script before </body> - Snippets (#176): {snippet alias="x" var="val"} tags with DB table, variable substitution, nested snippet support (max depth 5) - Both controlled by params (off by default) - Snippets table added to install.mysql.sql	2026-06-23 12:46:03 -05:00
Jonathan Miller	1fe7c77fbf	feat(conditional-content): {show}/{hide} tag processing with conditions engine ... - processConditionalTags() handles {show}, {hide}, {else} blocks - Supports condition="alias_or_id" for saved condition sets - Supports inline rules: access_level, user_group, menu_item, home_page, date, day, url - Multiple inline rules per tag use AND logic - Nested tag support (processes innermost first, up to 10 iterations) - Runs in onContentPrepare (articles) and onAfterRender (final HTML) - ConditionsHelper: added passByAlias(), resolveAlias(), evaluateInlineRule() - Implements #164	2026-06-23 12:37:31 -05:00
Jonathan Miller	ae6719049d	feat(conditions): add conditions engine DB schema and evaluation API ... - Four tables: conditions, conditions_groups, conditions_rules, conditions_map - ConditionsHelper with pass(), load(), shouldDisplay(), getConditionsForItem() - 7 rule types: menu_item, home_page, user_group, access_level, date, day, url - Hierarchical evaluation: condition → groups (AND/OR) → rules (AND/OR) - Runtime cache for repeated evaluations within same request - Foundation for Advanced Module Manager (#160) and Conditional Content (#164)	2026-06-23 12:32:00 -05:00
Jonathan Miller	8fa87ef1d7	style: label all info bar badges with title + version in both views ... MokoSuite 02.47.xx | Joomla 6.1.1 | PHP 8.4.20 | mysql	2026-06-23 11:41:02 -05:00
Jonathan Miller	c79a76c9d7	style: unify dashboard and cpanel info bar to same inline badge layout ... Both now use identical structure: shield icon, site name, version badge, PIN badge, Joomla/PHP/DB badges, debug/offline flags, IP with globe. Dashboard button restored on cpanel toggle row.	2026-06-23 11:28:27 -05:00
Jonathan Miller	d8712c1247	style: add shield icon to dashboard info bar and cpanel module header	2026-06-23 11:24:35 -05:00
Jonathan Miller	0456f467c7	feat(dashboard): add heartbeat send button next to Support PIN ... Upload icon button beside the PIN badge triggers sendHeartbeat AJAX call to HQ, which includes the health token (HQ derives the PIN).	2026-06-23 11:15:34 -05:00
Jonathan Miller	fe74ea89a5	style(dashboard): remove ext version bar, 3-column plugin cards ... - Removed extension version bar (versions already shown on each card) - Plugin cards now 3 per row (col-lg-4) except core category (full width)	2026-06-23 11:11:33 -05:00
Jonathan Miller	6f7549fa7a	fix: address PR review findings — security, performance, cleanup ... - togglePlugin: restrict scope to mokosuiteclient plugins only (was any plugin) - DevTools: replace full-table hits reset on every request with config toggle - CurrentIpField: prefer REMOTE_ADDR over spoofable X-Forwarded-For - SQL: explicit (int) cast on $days interpolation in chart queries - Heartbeat: enable SSL peer verification (was disabled) - script.php: remove orphaned docblock	2026-06-23 10:50:37 -05:00
Jonathan Miller	dcaaf007cf	fix(dashboard): translate COM_ACTIONLOGS_DISABLED stored in ip_address column ... Joomla stores the literal string 'COM_ACTIONLOGS_DISABLED' in the action_logs ip_address column when IP logging is turned off. Show 'IP logging off' instead of the raw language key.	2026-06-23 10:47:06 -05:00
Jonathan Miller	9118eb1fb5	fix(lang): add COM_ACTIONLOGS_DISABLED fallback translation ... Defines the Joomla core key in our own language file so it renders properly even when the core language file is missing or corrupt.	2026-06-23 09:07:05 -05:00
Jonathan Miller	4c4d98cc9f	fix(dashboard): require action logs, enable on install, show alert if disabled ... - Install script enables actionlog/joomla and system/actionlogs plugins - Dashboard shows alert banner with enable link when action logs disabled - Reverted conditional hiding of UI (action logs is a hard requirement)	2026-06-23 08:19:27 -05:00
Jonathan Miller	cfc70ac712	fix(dashboard): handle disabled action logs gracefully ... - Check ComponentHelper::isEnabled('com_actionlogs') before rendering login chart, View Logs button, and recent logins table - Show helpful warning when action logs disabled instead of raw COM_ACTIONLOGS_DISABLED language key	2026-06-23 08:19:27 -05:00
Jonathan Miller	29bf75051f	style(dashboard): use Bootstrap grid columns for extension version bar ... Dynamically calculates col-N from extension count (12/count) so items spread evenly across the full width as horizontal cells, not stacked. Removed custom flex CSS in favour of Bootstrap row/g-0.	2026-06-23 08:05:02 -05:00
Jonathan Miller	0aeaea208f	feat(dashboard): show frontend/backend app badges on recent logins, full-width ext bar ... - Recent logins table now parses action log message JSON to display Admin/Site badge indicating where each login occurred - Login query uses exact match on LOGGED_IN key (excludes logout events) - Login limit increased from 5 to 10 - Info bar reverted from stacked column to horizontal row layout - Extension version bar uses flex: 1 1 0 for full-width auto-sized cells - Updated CHANGELOG	2026-06-23 07:47:43 -05:00
Jonathan Miller	328acb462b	style(dashboard): full-width info bar with stacked labels and auto-sizing ... - Items distribute evenly across full width via justify-content: space-between - Labels stack above values (flex-direction: column) for cleaner layout - Smaller label text (0.7rem), consistent badge sizing - Debug/Offline badges wrapped in info-items for consistent spacing - MokoSuiteClient → MokoSuite in version label	2026-06-22 19:38:55 -05:00
Jonathan Miller	97670dbd54	style: display MokoSuite instead of MokoSuiteClient everywhere	2026-06-21 19:20:45 -05:00
Jonathan Miller	b2d1e4ba23	chore: remove helpdesk/ticket system (migrating to MokoSuiteCRM #67) ... - Removed ticket views, models, controllers (ticket, tickets, ticketsettings) - Removed plg_task_mokosuiteclient_tickets plugin and source - Removed from package manifest, enablePlugin, protectExtensions - Removed Helpdesk entry from sidebar menu - Ticket tables kept in SQL for migration compatibility - See MokoSuiteClient#233, MokoSuiteCRM#67	2026-06-21 15:50:29 -05:00
Jonathan Miller	62e5cf6fb5	chore: remove retired monitor plugin source files	2026-06-20 23:26:56 -05:00
Jonathan Miller	520422db8c	fix(menu): MokoSuiteClient displays as MokoSuite in menu	2026-06-20 22:02:48 -05:00
Jonathan Miller	8c21553137	fix(menu): MokoSuiteClient→MokoClient, strip MokoSuite from others ... - HQ and Client keep "Moko" prefix: MokoHQ, MokoClient - All other extensions drop MokoSuite entirely: Backup, OpenGraph, etc. - Component menu title changed to MokoClient	2026-06-20 21:56:20 -05:00
Jonathan Miller	64a8504794	feat(support-pin): daily-rotating PIN via HMAC(token, date) ... PIN is derived from HMAC-SHA256(health_api_token, YYYY-MM-DD) so both client and HQ compute the same value independently. Rotates at UTC midnight. Shown on cpanel module header and component dashboard.	2026-06-20 20:38:51 -05:00
Jonathan Miller	6bb1b43195	feat: MokoGitea LicenseValidator — core DRM enforcement, cache table, task scheduler	2026-06-20 20:30:57 -05:00
Jonathan Miller	0e03837ec9	fix(heartbeat): align signature headers with HQ expectations ... Rename X-MokoSuiteClient-Signature/Timestamp to X-MokoSuite-Signature/ Timestamp to match what HeartbeatController reads as HTTP_X_MOKOSUITE_*.	2026-06-20 17:53:54 -05:00
Jonathan Miller	7510c9f018	fix(heartbeat): correct API route from mokosuiteclienthq to mokosuitehq ... The HQ component is com_mokosuitehq, not com_mokosuiteclienthq. The heartbeat endpoint was returning 404 because the route prefix was wrong.	2026-06-20 15:52:01 -05:00
Jonathan Miller	72134bba28	fix(install): enable ticket/offline plugins, consolidate monitor into core ... - enablePlugin() handles empty element columns with fallback match by name - Retire monitor plugin: migrate config (base_url, signing_key) to core - Runtime heartbeat moved from monitor plugin to core plugin - DisplayController heartbeat reads from core plugin params - ensureAdminModule() direct DB update for existing modules (fixes checked_out blocking, cpanel access level 6→3, menu ordering -1) - Add missing ticket automation language strings (IMAP, autoclose) - Remove monitor from cpanel plugin grid	2026-06-20 10:33:01 -05:00
Jonathan Miller	bf30c3db5b	fix(api): type-safe update, filtered pagination, status sync, int cast assign ... - API update() now uses getInt/getString instead of raw input - API update() syncs status/status_id and priority/priority_id - API update() returns 404 if ticket not found - Pagination total count now uses filtered query (was unfiltered) - AutomationEngine assign action casts value to int	2026-06-18 19:09:42 -05:00
Jonathan Miller	134b9b3693	fix(security+reliability): address PR review — ACL guards, error logging, path traversal ... Security: - Add return after all jsonForbidden() calls (13 methods) to prevent ACL bypass if $app->close() fails to terminate - Add throw after requireAuth() in REST API controller (same pattern) - Add path traversal guard to AttachmentService::getAbsolutePath() using realpath + prefix check Error handling: - Log install notification email failures instead of empty catch - Log DB errors in getUserEmail(), getNotificationConfig(), getComponentConfig() instead of silent fallbacks - Log PHP upload error codes in AttachmentService - Check Folder::create() return value before upload loop - Fix searchKb() missing return on short query + log DB errors - Fix ntfy push to capture curl_error() on connection failure - Upgrade AutomationEngine inner catch to LOG_ERROR with rule ID	2026-06-18 19:05:57 -05:00
Jonathan Miller	2e00512741	fix: rename all language keys MOKOSUITE→MOKOSUITECLIENT, auto-enable monitor plugin ... - XML manifests used old PLG_SYSTEM_MOKOSUITE_ / MOD_MOKOSUITE_ / COM_MOKOSUITE_ prefixes that didn't match the INI files (PLG_SYSTEM_MOKOSUITECLIENT_ etc.), causing untranslated labels in admin UI - Also fixed PLG_TASK_MOKOSUITEDEMO/SYNC and DBIP language keys - Added mokosuiteclient_monitor to auto-enable list in package install script so heartbeat registration works on fresh install	2026-06-18 12:47:50 -05:00
Jonathan Miller	8fd50ea580	fix(security+data): address PR review — XSS, header injection, ACL, status sync ... 1. Remove SVG from allowed upload extensions (stored XSS vector) 2. Sanitize Content-Disposition filename (header injection prevention) 3. Add ACL check to rateTicket() (missing authorization) 4. Use server-side MIME detection instead of client-supplied type 5. Sync status_id/priority_id in AutomationEngine and API controller to keep ENUM and lookup-table columns consistent 6. Align auto-bump.yml to use mokoplatform (no hyphen) matching pre-release.yml convention	2026-06-18 09:49:27 -05:00
Jonathan Miller	27f50468a8	Merge main into dev — apply MokoSuite→MokoSuiteClient rename to dev features ... Merges the full element rename from main into dev, resolving conflicts across 53 files. Migrates new dev-only extensions (com_mokosuite ticketsettings, plg_system_mokosuite_dbip) to MokoSuiteClient naming.	2026-06-16 13:09:14 -05:00
Jonathan Miller	4b9a675d0f	Rename MokoSuite → MokoSuiteClient (full element rename) ... All Joomla element names, PHP classes, language files, folder structure, and manifest references renamed from mokosuite to mokosuiteclient. This repo is now the client-facing tracker for the MokoSuite platform.	2026-06-15 05:19:13 -05:00