Commit Graph

819 Commits

Author SHA1 Message Date
Jonathan Miller ea66ad4b4a security: hide MokoWaaS from plugin list for non-master users
Injects JS on com_plugins that removes the MokoWaaS row from the
plugin table. Combined with the edit/save block, non-master users
cannot see, edit, or save the plugin settings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-22 05:53:14 -05:00
Jonathan Miller 48cb040505 security: restrict plugin settings to master user + rename Gitea to MokoGitea
- Non-master users blocked from editing MokoWaaS plugin config
- isOurPlugin() helper checks extension_id against our plugin
- Blocks both edit view and save task for non-master users
- Renamed bare 'Gitea' references to 'MokoGitea' in docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-22 05:51:20 -05:00
gitea-actions[bot] aec849c9ae chore: update development channel 02.01.38 [skip ci] 2026-05-22 09:57:19 +00:00
gitea-actions[bot] d3281066dc chore(version): bump to 02.01.38 [skip ci] 2026-05-22 09:57:18 +00:00
Jonathan Miller b17b36e02e security: make plugin hard to disable + block uninstall
- enforceLocked() runs every page load — re-enables, re-locks, re-protects
  if someone tampers with the database flags
- preflight() blocks uninstall attempts with error message
- Logs tampering attempts to mokowaas log category

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-22 04:56:48 -05:00
gitea-actions[bot] 5020b58da1 chore: update development channel 02.01.37 [skip ci] 2026-05-22 09:41:24 +00:00
gitea-actions[bot] c97432495b chore(version): bump to 02.01.37 [skip ci] 2026-05-22 09:41:23 +00:00
Jonathan Miller b22842f302 refactor: replace Grafana API with heartbeat receiver provisioning
Remove all Grafana API code (630 lines), obfuscated tokens, SA tokens,
ensureGrafanaPlugin, provisionGrafanaDatasource, buildDashboardModel.

Replace with simple HTTP POST to heartbeat receiver on bench server.
Receiver writes Grafana provisioning YAML and restarts Grafana container.
No API tokens or RBAC permissions needed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-22 04:40:51 -05:00
gitea-actions[bot] 42d530bfbf chore: update development channel 02.01.36 [skip ci] 2026-05-22 04:02:26 +00:00
gitea-actions[bot] 307dc37d47 chore(version): bump to 02.01.36 [skip ci] 2026-05-22 04:02:25 +00:00
Jonathan Miller 2e4fdcb07e fix: new Grafana SA token with datasource:create + visible heartbeat errors
- New service account token with correct RBAC permissions
- script.php postflight now shows success/failure messages to admin
- Logs all heartbeat attempts with HTTP code and cURL errors

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-21 23:01:33 -05:00
Jonathan Miller 0ec18b9868 Merge remote-tracking branch 'origin/dev'
Universal: Cascade Main → Dev / Cascade main → branches (push) Successful in 3s
2026-05-21 22:52:14 -05:00
Jonathan Miller e3f4890e5d docs: update CHANGELOG for production release 02.01.35 [skip ci]
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-21 22:51:13 -05:00
jmiller 6e81585177 chore: sync updates.xml 02.01.35 from dev [skip ci] 2026-05-22 03:49:22 +00:00
gitea-actions[bot] ff69e1d7fd chore: update development channel 02.01.35 [skip ci] 2026-05-22 03:49:21 +00:00
gitea-actions[bot] eefe9d134a chore(version): bump to 02.01.35 [skip ci] 2026-05-22 03:49:20 +00:00
Jonathan Miller bfb159d0f0 fix: add SSL bypass and error logging to Grafana provisioning
- Add CURLOPT_SSL_VERIFYPEER=false for shared hosting environments
- Add CURLOPT_FOLLOWLOCATION to handle redirects
- Log all Grafana heartbeat attempts with HTTP code and cURL errors
- Helps debug provisioning failures on DreamHost and similar hosts

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-21 22:48:49 -05:00
jmiller fc47aee5ba chore: sync updates.xml 02.01.34 from dev [skip ci] 2026-05-22 03:43:18 +00:00
gitea-actions[bot] 6b95c0aef9 chore: update development channel 02.01.34 [skip ci] 2026-05-22 03:43:18 +00:00
gitea-actions[bot] 047e296ee3 chore(version): bump to 02.01.34 [skip ci] 2026-05-22 03:43:17 +00:00
Jonathan Miller 47faa1b289 fix: update Grafana API token (Admin SA) [skip ci]
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-21 22:42:49 -05:00
jmiller 48372e2f4f chore: sync updates.xml 02.01.33 from dev [skip ci] 2026-05-22 03:36:20 +00:00
gitea-actions[bot] 155a8b92b0 chore: update development channel 02.01.33 [skip ci] 2026-05-22 03:36:19 +00:00
gitea-actions[bot] ba0029e286 chore(version): bump to 02.01.33 [skip ci] 2026-05-22 03:36:18 +00:00
jmiller b46506cdb7 fix: updates.xml download URL tag dev -> development [skip ci] 2026-05-22 03:34:46 +00:00
jmiller ebbac5760c fix: updates.xml download URL tag dev -> development [skip ci] 2026-05-22 03:34:46 +00:00
jmiller aa72835288 fix(ci): pre-release php-curl + continue-on-error + CLI updates.xml [skip ci] 2026-05-22 03:31:14 +00:00
jmiller 479a6c03f8 chore: sync updates.xml 02.01.32 from dev [skip ci] 2026-05-22 03:29:13 +00:00
gitea-actions[bot] 55219d758c chore: update development channel 02.01.32 [skip ci] 2026-05-22 03:29:12 +00:00
gitea-actions[bot] 27db3762ad chore(version): bump to 02.01.32 [skip ci] 2026-05-22 03:29:11 +00:00
jmiller a2f34db524 fix(ci): add php-curl [skip ci] 2026-05-22 03:28:41 +00:00
gitea-actions[bot] 37aa2bd854 chore: update development channel 02.01.31 [skip ci] 2026-05-22 03:25:43 +00:00
gitea-actions[bot] ccbd1dc2d5 chore(version): bump to 02.01.31 [skip ci] 2026-05-22 03:25:42 +00:00
jmiller 59f0d1c166 fix(ci): pre-release continue-on-error + CLI updates.xml [skip ci] 2026-05-22 03:25:15 +00:00
jmiller 72cf207f76 chore: sync updates.xml 02.01.30 [skip ci] 2026-05-22 03:20:57 +00:00
gitea-actions[bot] 8a66abc711 chore: update development channel 02.01.30 [skip ci] 2026-05-22 03:19:38 +00:00
gitea-actions[bot] c2f5ca7754 chore(version): bump to 02.01.30 [skip ci] 2026-05-22 03:19:37 +00:00
jmiller 1a6dfee74e fix(ci): zip_name/zip_path for upload [skip ci] 2026-05-22 03:19:12 +00:00
gitea-actions[bot] 25f8baf58b chore(version): bump to 02.01.29 [skip ci] 2026-05-22 03:14:30 +00:00
jmiller 8c60927bbf fix(ci): clean pre-release.yml [skip ci] 2026-05-22 03:14:01 +00:00
jmiller f80bf700ca fix(ci): clean pre-release.yml control chars [skip ci] 2026-05-22 03:10:40 +00:00
jmiller 717d81d80e fix(ci): sync auto-release.yml to dev [skip ci] 2026-05-22 02:59:00 +00:00
jmiller be4a0888c0 fix(ci): sync pre-release.yml to dev [skip ci] 2026-05-22 02:59:00 +00:00
gitea-actions[bot] 37a96bafa9 chore: update development channel 02.01.28 [skip ci] 2026-05-22 02:56:55 +00:00
gitea-actions[bot] 9ccd27e809 chore(version): bump 02.01.27 → 02.01.28 [skip ci] 2026-05-22 02:56:54 +00:00
jmiller 1a9815d96e refactor(ci): sync auto-release.yml — CLI-based workflow [skip ci] 2026-05-22 02:56:16 +00:00
jmiller 326277010d refactor(ci): pre-release uses CLI tools [skip ci] 2026-05-22 02:49:41 +00:00
jmiller 3f78570267 fix(ci): sync pre-release.yml — CLI-based updates.xml sync [skip ci] 2026-05-22 02:40:09 +00:00
jmiller ea2ed31cb4 fix(ci): sync pre-release.yml — updates.xml API sync (#34) [skip ci] 2026-05-22 02:35:55 +00:00
jmiller 57c259f951 chore: sync updates.xml from dev (02.01.27 development) [skip ci] 2026-05-22 02:31:27 +00:00