v1.2.0 — Categories, API, hardening, polish #62

Merged

jmiller merged 59 commits from dev into main 2026-06-28 20:06:07 +00:00

Conversation 0 Commits 59 Files Changed 62

+2568 -273

jmiller commented 2026-06-28 18:49:29 +00:00

Owner

Copy Link

Copy Source

Summary

• Multi-category — categories with parent/child hierarchy, color, custom marker icons, many-to-many junction table (#1, #2)
• REST API — JSON:API endpoints via Web Services plugin (#29)
• ACL — access.xml with standard Joomla permission actions (#30)
• SQL versioned migrations — sql/updates/mysql/ for safe upgrades (#31)
• Shop integration — LocationBridgeHelper + LocationSavedEvent for cross-extension data access (#48)
• Detail page map — Leaflet map on single location view (#57)
• Marker clustering — Leaflet.markercluster with toggleable module param (#61)
• CSP nonce support — all inline scripts via $wa->addInlineScript() (#34)
• GROUP BY fix — EXISTS subquery for ONLY_FULL_GROUP_BY compat (#59)
• Dead catid removal — column dropped, junction table is source of truth (#58)
• Junction cleanup — orphan rows purged on delete (#60)
• License key — download key preserved across upgrades, warning when missing
• XSS fix — DOM-based textContent in detail map popup
• SQL compat — removed IF EXISTS syntax for MySQL 5.7 compatibility
• Pretty display names — all extensions show branded names in Joomla admin (e.g. "MokoSuite Store Locator" instead of com_mokosuitestorelocator)

Stats

63 files changed, +2481 / -212

Test plan

• 16/16 functional tests pass on suite.dev
• Fresh install verified (5 extensions, 3 DB tables, API HTTP 200)
• Upgrade install from 1.1.0 (verify catid migration runs cleanly)
• Verify license key warning appears on fresh install without dlid
• Verify marker clustering toggle in map module settings
• Verify pretty names show in Extensions > Manage after upgrade

## Summary - **Multi-category** — categories with parent/child hierarchy, color, custom marker icons, many-to-many junction table (#1, #2) - **REST API** — JSON:API endpoints via Web Services plugin (#29) - **ACL** — `access.xml` with standard Joomla permission actions (#30) - **SQL versioned migrations** — `sql/updates/mysql/` for safe upgrades (#31) - **Shop integration** — `LocationBridgeHelper` + `LocationSavedEvent` for cross-extension data access (#48) - **Detail page map** — Leaflet map on single location view (#57) - **Marker clustering** — Leaflet.markercluster with toggleable module param (#61) - **CSP nonce support** — all inline scripts via `$wa->addInlineScript()` (#34) - **GROUP BY fix** — EXISTS subquery for ONLY_FULL_GROUP_BY compat (#59) - **Dead catid removal** — column dropped, junction table is source of truth (#58) - **Junction cleanup** — orphan rows purged on delete (#60) - **License key** — download key preserved across upgrades, warning when missing - **XSS fix** — DOM-based textContent in detail map popup - **SQL compat** — removed `IF EXISTS` syntax for MySQL 5.7 compatibility - **Pretty display names** — all extensions show branded names in Joomla admin (e.g. "MokoSuite Store Locator" instead of `com_mokosuitestorelocator`) ## Stats 63 files changed, +2481 / -212 ## Test plan - [x] 16/16 functional tests pass on suite.dev - [x] Fresh install verified (5 extensions, 3 DB tables, API HTTP 200) - [ ] Upgrade install from 1.1.0 (verify catid migration runs cleanly) - [ ] Verify license key warning appears on fresh install without dlid - [ ] Verify marker clustering toggle in map module settings - [ ] Verify pretty names show in Extensions > Manage after upgrade

jmiller added 46 commits 2026-06-28 18:49:29 +00:00

chore: sync workflows from Template-Joomla (metadata first-class fields) ... 753c6336be

Pull latest workflow versions from MokoConsulting/Template-Joomla.
These use the updated mokocli tools with manifest metadata as
first-class fields instead of README FILE INFORMATION blocks.

Updated: ci-joomla.yml, pre-release.yml, workflow-sync-trigger.yml
Added: version-set.yml
Removed: deploy-manual.yml, update-server.yml, composer-publish.yml
  (superseded by auto-release.yml pipeline)

Authored-by: Moko Consulting

chore: align version format to MokoStandards XX.YY.ZZ (01.00.00) ... 97fb560864

mokocli tools require two-digit zero-padded version groups (01.00.00)
per MokoStandards convention. Fixes auto-release pipeline failure.

Changed in: pkg manifest, component manifest, both module manifests,
and CHANGELOG.md.

Authored-by: Moko Consulting

chore(version): pre-release bump to 01.00.01-dev [skip ci] 6e20567240

feat: FocalPoint (Shack Locations) migration import ... cf495cd8ce

Add one-click import from installed FocalPoint/Shack Locations component:
- Reads #__focalpoint_locations table directly via Joomla DB layer
- Parses customfieldsdata JSON for email, website, hours, phone
- Maps FocalPoint schema to MokoSuiteStoreLocator fields
- Copies coordinates (DECIMAL 10,6 → 10,8), published state, ordering
- Combines description + fulldescription into single description field
- Import button on admin Import view with CSRF + ACL protection
- Graceful handling: checks table exists, reports per-row errors

Field mapping:
  FocalPoint.title → title
  FocalPoint.address → address (single field, no city/state split)
  FocalPoint.latitude/longitude → latitude/longitude
  FocalPoint.phone → phone
  FocalPoint.customfieldsdata.email → email
  FocalPoint.customfieldsdata.website → website
  FocalPoint.customfieldsdata.hours → hours
  FocalPoint.state → published

Authored-by: Moko Consulting

feat: v1.2 multi-category, REST API, ACL, security hardening (#1, #2, #29, #30, #31, #34, #48) ... 6426fee428

Multi-category support with parent/child hierarchy, junction table,
admin CRUD, and per-category custom marker icons on the Leaflet map.

REST API via Web Services plugin with JSON:API endpoints. ACL
permissions via access.xml. SQL update schema for safe upgrades.

Shop integration bridge (LocationBridgeHelper, LocationSavedEvent).
Security: CSV formula injection prevention, MIME validation, file size
limit, ORDER BY allowlist, map height CSS regex validation.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.02-dev [skip ci] 1c443be9ea

chore(version): pre-release bump to 01.00.03-dev [skip ci] f469aa7e64

chore(version): pre-release bump to 01.00.04-dev [skip ci] f0d8c7ecbf

fix: add module services/provider.php and fix manifest packaging ... 3efd423e74

Both modules were missing services/provider.php — the Joomla 5 DI
entry point that registers the ModuleDispatcherFactory. Without it,
Joomla falls back to a mod_*.php entry point file that doesn't exist,
causing "No module file specified" on install.

Also moves access.xml into admin/ and adds it to the component
manifest so it gets included in the package ZIP.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.05-dev [skip ci] 4258fd1d4f

chore(version): pre-release bump to 01.00.06-dev [skip ci] 569f907512

fix: move dlid before updateservers so Joomla registers download key ... 81854440de

The <dlid> element was placed after </updateservers>, causing Joomla's
installer to skip it when registering the update site. Moving it before
<updateservers> ensures the extra_query field is populated in the
#__update_sites table.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.07-dev [skip ci] 4e9e698d2c

chore(version): pre-release bump to 01.00.08-dev [skip ci] 7c51396d8d

fix: align dlid and updateservers with MokoSuiteClient pattern ... e16e15dc00

Move <dlid> to right after <description> (before <scriptfile>) and add
priority="1" to <server> element, matching the MokoSuiteClient manifest
structure so Joomla properly registers the download key field.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.09-dev [skip ci] 5ccc0246bb

chore(version): pre-release bump to 01.00.10-dev [skip ci] bb30e0cd20

fix: add module attribute to services folder and hardcode package description ... 36eb55758e

Joomla's ModuleAdapter requires the `module` attribute on a <files> child
to identify the module element. Without it, install fails with "No module
file specified" even when namespace and services/provider.php are present.
Pattern confirmed against MokoSuiteClient modules.

Also hardcodes the package description since packages don't load language
files during install, causing the raw key to display.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.11-dev [skip ci] 8a9a3851e0

chore(version): pre-release bump to 01.00.12-dev [skip ci] d9460d3f07

chore(version): pre-release bump to 01.00.13-dev [skip ci] 5f8ab19abd

fix: add plugin attribute to webservices manifest files element ... b75677a6ec

Joomla's PluginAdapter requires plugin="xxx" on a <files> child to
determine filesystem deployment path and extension element. Without it,
plugin files are not deployed and the element field is empty in
#__extensions. Pattern confirmed from MokoSuiteClient.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.14-dev [skip ci] 6c83e5530f

chore(version): pre-release bump to 01.00.15-dev [skip ci] 72949fefa5

fix: rename plugin manifest to match element name ... 7835e77920

Joomla's autoloader namespace scanner expects plugin manifests to be
named {element}.xml (e.g. mokosuitestorelocator.xml), not the full
prefixed name (plg_webservices_mokosuitestorelocator.xml). Without the
correct filename, the PSR-4 namespace mapping is not registered in
autoload_psr4.php, causing "Class not found" errors.

Pattern confirmed from MokoSuiteClient's webservices plugin.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.16-dev [skip ci] 0be86aec5a

chore(version): pre-release bump to 01.00.17-dev [skip ci] 45661df50e

chore(version): pre-release bump to 01.00.18-dev [skip ci] 1d600184b1

chore: sync GOVERNANCE.md from Template-Joomla ... 99df65b66f

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.19-dev [skip ci] 1b177f267d

chore(version): pre-release bump to 01.00.20-dev [skip ci] 85a3566ae3

fix: resolve all open issues — detail map, clustering, CSP, GROUP BY, cleanup (#34 #57 #58 #59 #60 #61) ... 32b541597a

- Add Leaflet map to location detail page with marker and popup (#57)
- Implement Leaflet.markercluster with toggleable module parameter (#61)
- Convert inline <script> to $wa->addInlineScript() for CSP nonce support (#34)
- Replace category INNER JOIN with EXISTS subquery for ONLY_FULL_GROUP_BY compat (#59)
- Add delete() override to LocationTable and CategoryTable for junction cleanup (#60)
- Drop dead catid column and idx_catid index via SQL update 01.00.02 (#58)
- Update CHANGELOG and README

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.21-dev [skip ci] 80cefe1624

chore(version): pre-release bump to 01.00.22-dev [skip ci] 926b4c7576

fix: escape location title in detail map popup to prevent XSS ... 2897a1ceba

Use DOM-based textContent instead of raw string in Leaflet bindPopup()
to prevent HTML injection via location titles.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.23-dev [skip ci] dccdb88617

chore(version): pre-release bump to 01.00.24-dev [skip ci] 797101474a

chore(version): pre-release bump to 01.00.25-dev [skip ci] 41875e7878

fix: remove IF EXISTS syntax from SQL migration for MySQL 5.7 compat ... 8b42c016a8

Joomla's SQL update runner doesn't support DELIMITER or stored
procedures. DROP COLUMN IF EXISTS is MySQL 8.0.13+ only. Plain
DROP COLUMN is safe here because update files only run on upgrades
from versions that had the catid column.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.26-dev [skip ci] edc6bbf62c

chore(version): pre-release bump to 01.00.27-dev [skip ci] 3487072b8a

chore(version): pre-release bump to 01.00.28-dev [skip ci] 086c50e150

feat: add license key warning and download key preservation ... 58f3ac96d9

Save/restore the download key (dlid) across package upgrades so users
don't lose their license key. Show a warning with direct edit link
when no license key is configured.

Mirrors the pattern from MokoSuiteCross.

Authored-by: Moko Consulting

chore(version): auto-bump patch 01.00.29-dev [skip ci] 056b339dee

chore(version): pre-release bump to 01.00.30-dev [skip ci] 8c2bf7b02c

docs: update changelog with license key, XSS fix, SQL compat entries ... 03c9ca53a6

Authored-by: Moko Consulting

jmiller added 1 commit 2026-06-28 18:49:44 +00:00

chore(version): auto-bump patch 01.00.31-dev [skip ci] ecfb7c426d

jmiller added 1 commit 2026-06-28 18:49:55 +00:00

chore(version): pre-release bump to 01.00.32-dev [skip ci] b6900aec6e

jmiller added 1 commit 2026-06-28 18:54:48 +00:00

fix: make SQL migration 01.00.02 a no-op to prevent install abort ... 5ea2fd2b98

Joomla aborts the entire package install on any SQL error in update
files. DROP COLUMN fails when catid doesn't exist (fresh installs,
or systems where it was already removed). Since install.mysql.sql
already omits catid, no runtime migration is needed.

Authored-by: Moko Consulting

jmiller added 1 commit 2026-06-28 18:55:18 +00:00

chore(version): auto-bump patch 01.00.33-dev [skip ci] 1ece8a006f

jmiller added 1 commit 2026-06-28 18:55:36 +00:00

chore(version): pre-release bump to 01.00.34-dev [skip ci] f7bbddd98d

jmiller added 1 commit 2026-06-28 18:55:49 +00:00

chore(version): pre-release bump to 01.00.35-dev [skip ci] e8d67215b1

jmiller added 1 commit 2026-06-28 19:54:38 +00:00

feat: add pretty display names for all extensions in Joomla admin ... 8dfc1227cb

Authored-by: Moko Consulting

jmiller added 1 commit 2026-06-28 19:54:57 +00:00

chore(version): auto-bump patch 01.00.36-dev [skip ci] c8f7422996

jmiller added 1 commit 2026-06-28 19:55:11 +00:00

chore(version): pre-release bump to 01.00.37-dev [skip ci] 7f4451628d

jmiller added 2 commits 2026-06-28 20:04:20 +00:00

chore: resolve merge conflicts with main (workflow docs) ... 42501f0597

Authored-by: Moko Consulting

chore: merge remote dev, resolve sync conflicts ... 9b09d61473

Authored-by: Moko Consulting

jmiller added 1 commit 2026-06-28 20:04:41 +00:00

chore(version): auto-bump patch 01.00.38-dev [skip ci] 9ed2fb1963

jmiller added 1 commit 2026-06-28 20:04:58 +00:00

chore(version): pre-release bump to 01.00.39-dev [skip ci] 84d42f70a1

jmiller merged commit c7182f6cbb into main 2026-06-28 20:06:07 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

area/admin

Administrator interface

area/component

Core component (com_mokojoomstorelocator)

area/database

Database schema or queries

area/frontend

Site/frontend display

area/import-export

Data import/export features

area/module-map

Map module (mod_mokojoomstorelocator_map)

area/module-search

Search module (mod_mokojoomstorelocator_search)

priority/critical

Must have for v1.0

priority/high

Important for initial release

priority/low

Future enhancement

priority/medium

Nice to have for v1.0

type/bug

Something is broken

type/docs

Documentation

type/enhancement

Improvement to existing feature

type/feature

New feature or functionality

No labels

Priority -

Type -

Milestone

No items

No Milestone

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuiteStoreLocator#62