chore: sync pr-check.yml from Template-Generic [skip ci]

Part 1: Introduce a single registerTool() wrapper that registers each tool
under its canonical mokogitea_* name and, when enabled, the legacy gitea_*
name as a deprecated alias pointing at the same handler. Legacy aliases are
on by default and can be disabled via MOKOGITEA_MCP_LEGACY_ALIASES (falsy).
All 111 server.tool(...) call sites now use registerTool(...). Server version
bumped to 1.5.0; README documents canonical vs deprecated naming.

Part 2: metadata brand fix -- standards_version description now says
"mokocli standards version" (was "mokoplatform"). Added a comment noting
display_name is server-derived (no settable param). No /manifest references
remain.

Closes #33

Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT

.mokogitea/ISSUE_TEMPLATE/config.yml

@@ -8,7 +8,7 @@ contact_links:
     url: https://mokoconsulting.tech/
     about: Get help or ask questions through our website
   - name: 📚 MokoStandards Documentation
-    url: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
+    url: https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki
     about: View our coding standards and best practices
   - name: 🔒 Report a Security Vulnerability
     url: https://git.mokoconsulting.tech/mokoconsulting-tech/.github-private/security/advisories/new

.mokogitea/ISSUE_TEMPLATE/feature_request.md

@@ -37,7 +37,7 @@ If you have ideas about how this could be implemented, share them here:
 Add any other context, mockups, or screenshots about the feature request here.
 
 ## Relevant Standards
-Does this relate to any standards in [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/MokoStandards)?
+Does this relate to any standards in [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki)?
 - [ ] Accessibility (WCAG 2.1 AA)
 - [ ] Localization (en_US/en_GB)
 - [ ] Security best practices

.mokogitea/ISSUE_TEMPLATE/mcp_connection_issue.md

@@ -18,7 +18,7 @@ assignees: ''
 - [ ] API response error (4xx / 5xx)
 
 ### MCP Server
-- **Server Name**: [e.g., mcp_mokowaas]
+- **Server Name**: [e.g., mcp_mokosuite]
 - **Server Version**: [e.g., 1.0.0]
 - **Node.js Version**: [e.g., 20.x]
 

.mokogitea/ISSUE_TEMPLATE/security.md

@@ -35,7 +35,7 @@ Use this template only for:
 <!-- Describe how this could be addressed -->
 
 ## Standards Reference
-Does this relate to security standards in [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/MokoStandards)?
+Does this relate to security standards in [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki)?
 - [ ] SPDX license identifiers
 - [ ] Secret management
 - [ ] Dependency security

.mokogitea/workflows/auto-bump.yml

@@ -1,66 +1,67 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: mokocli.Release
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /.mokogitea/workflows/auto-bump.yml
-# VERSION: 09.02.00
-# BRIEF: Auto patch-bump version on every push to dev (skips merge commits)
-
-name: "Universal: Auto Version Bump"
-
-on:
-  push:
-    branches:
-      - dev
-      - rc
-      - 'feature/**'
-      - 'patch/**'
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-
-permissions:
-  contents: write
-
-jobs:
-  bump:
-    name: Version Bump
-    runs-on: release
-    if: >-
-      !contains(github.event.head_commit.message, '[skip ci]') &&
-      !contains(github.event.head_commit.message, '[skip bump]') &&
-      !startsWith(github.event.head_commit.message, 'Merge pull request')
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          token: ${{ secrets.MOKOGITEA_TOKEN }}
-          fetch-depth: 1
-
-      - name: Setup mokocli tools
-        run: |
-          if ! command -v composer &> /dev/null; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
-          fi
-          if [ -d "/opt/mokocli/cli" ]; then
-            echo "MOKO_CLI=/opt/mokocli/cli" >> "$GITHUB_ENV"
-          else
-            git clone --depth 1 --branch main --quiet \
-              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/mokocli.git" \
-              /tmp/mokocli
-            cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
-            echo "MOKO_CLI=/tmp/mokocli/cli" >> "$GITHUB_ENV"
-          fi
-
-      - name: Bump version
-        run: |
-          php ${MOKO_CLI}/version_auto_bump.php \
-            --path . --branch "${GITHUB_REF_NAME}" \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: MokoGitea.Workflow
+# INGROUP: mokocli.Release
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogitea/workflows/auto-bump.yml
+# VERSION: 09.02.00
+# BRIEF: Auto patch-bump version on every push to dev (skips merge commits)
+
+name: "Universal: Auto Version Bump"
+
+on:
+  push:
+    branches:
+      - dev
+      - rc
+      - 'feature/**'
+      - 'patch/**'
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+
+permissions:
+  contents: write
+
+jobs:
+  bump:
+    name: Version Bump
+    runs-on: release
+    if: >-
+      !contains(github.event.head_commit.message, '[skip ci]') &&
+      !contains(github.event.head_commit.message, '[skip bump]') &&
+      !startsWith(github.event.head_commit.message, 'Merge pull request') &&
+      !startsWith(github.event.repository.name, 'Template-')
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+          fetch-depth: 1
+
+      - name: Setup mokocli tools
+        run: |
+          if ! command -v composer &> /dev/null; then
+            sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
+          fi
+          if [ -d "/opt/mokocli/cli" ]; then
+            echo "MOKO_CLI=/opt/mokocli/cli" >> "$GITHUB_ENV"
+          else
+            git clone --depth 1 --branch main --quiet \
+              "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/MokoConsulting/MokoCLI.git" \
+              /tmp/mokocli
+            cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
+            echo "MOKO_CLI=/tmp/mokocli/cli" >> "$GITHUB_ENV"
+          fi
+
+      - name: Bump version
+        run: |
+          php ${MOKO_CLI}/version_auto_bump.php \
+            --path . --branch "${GITHUB_REF_NAME}" \
+            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
+            --repo-url "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"

.mokogitea/workflows/auto-release.yml

@@ -3,11 +3,11 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: mokocli.Release
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/mokocli
-# PATH: /templates/workflows/universal/auto-release.yml.template
-# VERSION: 05.00.00
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogitea/workflows/auto-release.yml
+# VERSION: 05.01.00
 # BRIEF: Universal build & release � detects platform from manifest.xml
 #
 # +=======================================================================+
@@ -27,7 +27,7 @@ name: "Universal: Build & Release"
 
 on:
   pull_request:
-    types: [opened, closed]
+    types: [opened, synchronize, closed]
     branches:
       - main
     paths-ignore:
@@ -52,7 +52,7 @@ on:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
   GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
   GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
 
@@ -64,9 +64,14 @@ jobs:
   promote-rc:
     name: Promote to RC
     runs-on: release
+    # Skip on template repos (Template-*) — they scaffold other repos and do not release.
     if: >-
-      (github.event.action == 'opened' && github.event.pull_request.merged != true) ||
-      (github.event_name == 'workflow_dispatch' && inputs.action == 'promote-rc')
+      !startsWith(github.event.repository.name, 'Template-') &&
+      (
+        (github.event.action == 'opened' && github.event.pull_request.merged != true) ||
+        (github.event.action == 'synchronize' && github.event.pull_request.merged != true) ||
+        (github.event_name == 'workflow_dispatch' && inputs.action == 'promote-rc')
+      )
 
     steps:
       - name: Checkout repository
@@ -74,6 +79,7 @@ jobs:
         with:
           token: ${{ secrets.MOKOGITEA_TOKEN }}
           fetch-depth: 1
+          submodules: recursive
 
       - name: Setup mokocli tools
         env:
@@ -89,7 +95,7 @@ jobs:
               sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer > /dev/null 2>&1
             fi
             rm -rf /tmp/mokocli
-            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/mokocli.git
+            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoCLI.git
             git clone --depth 1 --branch main --quiet $CLONE_URL /tmp/mokocli
             cd /tmp/mokocli
             composer install --no-dev --no-interaction --quiet
@@ -98,18 +104,46 @@ jobs:
 
       - name: Rename branch to rc
         run: |
-          php ${MOKO_CLI}/branch_rename.php \
-            --from "${{ github.event.pull_request.head.ref || 'dev' }}" --to rc \
-            --token "${{ secrets.MOKOGITEA_TOKEN }}" \
-            --api-base "${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}" \
-            --pr "${{ github.event.pull_request.number }}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          AUTH="Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}"
+          FROM="${{ github.event.pull_request.head.ref || 'dev' }}"
+          PR="${{ github.event.pull_request.number }}"
+
+          # Resolve the source branch HEAD commit.
+          SRC_JSON=$(curl -sf -H "$AUTH" "${API_BASE}/branches/${FROM}") \
+            || { echo "::error::Source branch ${FROM} not found"; exit 1; }
+          SRC_SHA=$(printf '%s' "$SRC_JSON" | python3 -c "import sys, json; print(json.load(sys.stdin)['commit']['id'])" 2>/dev/null || true)
+          [ -n "$SRC_SHA" ] || { echo "::error::Could not resolve HEAD of ${FROM}"; exit 1; }
+
+          # Point rc at the source commit. If rc already exists (a protected branch that
+          # cannot be deleted), force-update its ref in place instead of delete+recreate:
+          # deleting a protected branch fails, which then makes the recreate return HTTP 409.
+          if curl -sf -o /dev/null -H "$AUTH" "${API_BASE}/branches/rc"; then
+            echo "rc exists - force-updating to ${FROM} (${SRC_SHA})"
+            curl -sf -X PATCH -H "$AUTH" -H "Content-Type: application/json" \
+              "${API_BASE}/git/refs/heads/rc" -d "{\"sha\":\"${SRC_SHA}\",\"force\":true}" \
+              || { echo "::error::Failed to force-update rc (CI token needs force-push on the protected rc branch)"; exit 1; }
+          else
+            echo "Creating rc from ${FROM}"
+            curl -sf -X POST -H "$AUTH" -H "Content-Type: application/json" \
+              "${API_BASE}/branches" -d "{\"new_branch_name\":\"rc\",\"old_branch_name\":\"${FROM}\"}" \
+              || { echo "::error::Failed to create rc from ${FROM}"; exit 1; }
+          fi
+
+          # Repoint the PR at rc, then delete the old source branch (non-fatal).
+          if [ -n "$PR" ]; then
+            curl -s -X PATCH -H "$AUTH" -H "Content-Type: application/json" \
+              "${API_BASE}/pulls/${PR}" -d '{"head":"rc"}' >/dev/null || true
+          fi
+          curl -s -X DELETE -H "$AUTH" "${API_BASE}/branches/${FROM}" >/dev/null || true
+          echo "Renamed ${FROM} -> rc"
 
       - name: Checkout rc and configure git
         run: |
           git fetch origin rc
           git checkout rc
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
+          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogitea-actions[bot]"
           git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
 
       - name: Publish RC release
@@ -120,7 +154,7 @@ jobs:
 
       - name: Update RC release notes from CHANGELOG.md
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Extract [Unreleased] section from changelog
@@ -162,9 +196,13 @@ jobs:
   release:
     name: Build & Release Pipeline
     runs-on: release
+    # Skip on template repos (Template-*) — they scaffold other repos and do not release.
     if: >-
-      github.event.pull_request.merged == true ||
-      (github.event_name == 'workflow_dispatch' && inputs.action != 'promote-rc')
+      !startsWith(github.event.repository.name, 'Template-') &&
+      (
+        github.event.pull_request.merged == true ||
+        (github.event_name == 'workflow_dispatch' && inputs.action != 'promote-rc')
+      )
 
     steps:
       - name: Checkout repository
@@ -172,11 +210,12 @@ jobs:
         with:
           token: ${{ secrets.MOKOGITEA_TOKEN }}
           fetch-depth: 0
+          submodules: recursive
 
       - name: Configure git for bot pushes
         run: |
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
+          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogitea-actions[bot]"
           git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
 
       - name: Check for merge conflict markers
@@ -207,7 +246,7 @@ jobs:
               sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer > /dev/null 2>&1
             fi
             rm -rf /tmp/mokocli
-            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/mokocli.git
+            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoCLI.git
             git clone --depth 1 --branch main --quiet $CLONE_URL /tmp/mokocli
             cd /tmp/mokocli
             composer install --no-dev --no-interaction --quiet
@@ -268,7 +307,7 @@ jobs:
           !startsWith(steps.platform.outputs.platform, 'joomla')
         run: |
           VERSION="${{ steps.version.outputs.version }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
           SEMVER_TAG="v${VERSION}"
 
@@ -293,7 +332,7 @@ jobs:
 
       - name: Update release notes and promote changelog
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Get the stable release info (version and ID)
@@ -343,7 +382,7 @@ jobs:
           content = open('CHANGELOG.md').read()
           old = '## [Unreleased]'
           new = f'## [Unreleased]\n\n## [{version}] --- {date}'
-          content = content.replace(old, new, 1)
+          content = content if ('## [' + version + ']') in content else content.replace(old, new, 1)
           open('CHANGELOG.md', 'w').write(content)
           " "$VERSION" "$DATE"
             git add CHANGELOG.md
@@ -362,7 +401,7 @@ jobs:
           VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
           RELEASE_TAG="${{ steps.version.outputs.release_tag }}"
           GH_REPO="${{ vars.GH_MIRROR_REPO || github.repository }}"
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           php ${MOKO_CLI}/release_mirror.php \
             --version "$VERSION" --tag "$RELEASE_TAG" \
             --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
@@ -387,11 +426,11 @@ jobs:
             && echo "main branch pushed to GitHub mirror" \
             || echo "WARNING: GitHub mirror push failed"
 
-      - name: "Step 11: Delete rc branch and recreate dev from main"
+      - name: "Step 11: Delete rc branch (dev reset moved to cascade-dev.yml)"
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
 
           # Delete rc branch (ephemeral — created by promote-rc)
@@ -399,23 +438,15 @@ jobs:
             "${API_BASE}/branches/rc" 2>/dev/null \
             && echo "Deleted rc branch" || echo "rc branch not found"
 
-          # Delete dev branch
-          curl -sf -X DELETE -H "Authorization: token ${TOKEN}" \
-            "${API_BASE}/branches/dev" 2>/dev/null && echo "Deleted dev branch"
-
-          # Recreate dev from main (now includes version bump + changelog promotion)
-          curl -sf -X POST -H "Authorization: token ${TOKEN}" \
-            -H "Content-Type: application/json" \
-            "${API_BASE}/branches" \
-            -d '{"new_branch_name":"dev","old_branch_name":"main"}' 2>/dev/null && echo "Recreated dev from main"
-
-          echo "Pre-release branches cleaned, dev reset from main" >> $GITHUB_STEP_SUMMARY
+          # dev is reset from main by the dedicated "Cascade Main -> Dev" workflow
+          # (cascade-dev.yml), which runs after this release completes.
+          echo "rc cleaned; dev reset handled by cascade-dev.yml" >> $GITHUB_STEP_SUMMARY
 
       - name: "Step 12: Create version branch from main"
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
           VERSION="${{ steps.bump.outputs.version || steps.version.outputs.version }}"
           BRANCH_NAME="version/${VERSION}"
@@ -436,7 +467,7 @@ jobs:
         if: steps.version.outputs.skip != 'true'
         continue-on-error: true
         run: |
-          API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
+          API_BASE="${MOKOGITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
           php ${MOKO_CLI}/version_reset_dev.php \
             --token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "${API_BASE}" \
             --branch dev --path . 2>&1 || true
@@ -462,5 +493,5 @@ jobs:
             echo "| Version | \`${VERSION}\` |" >> $GITHUB_STEP_SUMMARY
             echo "| Branch | \`${{ steps.version.outputs.branch }}\` |" >> $GITHUB_STEP_SUMMARY
             echo "| Tag | \`${{ steps.version.outputs.tag }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Release | [View](${GITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
+            echo "| Release | [View](${MOKOGITEA_URL}/${GITEA_ORG}/${GITEA_REPO}/releases/tag/${{ steps.version.outputs.tag }}) |" >> $GITHUB_STEP_SUMMARY
           fi

.mokogitea/workflows/branch-cleanup.yml

@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: MokoStandards.Universal
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
 # PATH: /.mokogitea/workflows/branch-cleanup.yml
 # VERSION: 01.00.00
 # BRIEF: Delete feature branches after PR merge
@@ -33,7 +33,8 @@ jobs:
         run: |
           BRANCH="${{ github.event.pull_request.head.ref }}"
           API="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}/api/v1/repos/${{ github.repository }}/branches"
-          ENCODED=$(php -r "echo rawurlencode('${BRANCH}');")
+          # URL-encode the branch name's slashes (no PHP dependency on the runner)
+          ENCODED=$(printf '%s' "${BRANCH}" | sed 's|/|%2F|g')
 
           STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X DELETE \
             -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \

.mokogitea/workflows/cascade-dev.yml

@@ -1,10 +1,106 @@
-# DISABLED — auto-release Step 11 recreates dev from main after every release.
-# Cascade-dev is redundant and causes version conflicts when both main and dev
-# have different version numbers in templateDetails.xml / manifest.xml.
-name: "Cascade Main → Dev (DISABLED)"
-on: workflow_dispatch
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: MokoGitea.Workflow
+# INGROUP: MokoStandards.Cascade
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogitea/workflows/cascade-dev.yml
+# VERSION: 02.00.00
+# BRIEF: Cascade main -> dev via PR; auto-merge only if conflict-free, else notify
+
+name: "Cascade Main -> Dev"
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+env:
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  # ntfy destination is configured via repo or org variables (org vars are inherited).
+  NTFY_URL: ${{ vars.NTFY_URL || 'https://ntfy.mokoconsulting.tech' }}
+  NTFY_TOPIC: ${{ vars.CASCADE_NTFY_TOPIC || vars.NTFY_TOPIC || 'gitea-releases' }}
+
 jobs:
-  noop:
+  cascade:
+    name: Cascade main -> dev
     runs-on: ubuntu-latest
     steps:
-      - run: echo "Cascade disabled — auto-release handles dev recreation"
+      - name: Open main -> dev PR (auto-merge if clean, else notify)
+        env:
+          TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          REPO: ${{ github.repository }}
+        run: |
+          set -uo pipefail
+          API="${MOKOGITEA_URL}/api/v1/repos/${REPO}"
+          AUTH="Authorization: token ${TOKEN}"
+          jqnum() { python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('$1',''))" 2>/dev/null; }
+
+          # 0. dev must exist
+          if ! curl -sf -H "$AUTH" "${API}/branches/dev" >/dev/null 2>&1; then
+            echo "No dev branch - nothing to cascade."; exit 0
+          fi
+
+          # 1. is main ahead of dev?
+          AHEAD=$(curl -sf -H "$AUTH" "${API}/compare/dev...main" \
+            | python3 -c "import sys,json; print(json.load(sys.stdin).get('total_commits',0))" 2>/dev/null || echo 0)
+          if [ "${AHEAD:-0}" -eq 0 ]; then
+            echo "dev already up to date with main."; exit 0
+          fi
+          echo "main is ${AHEAD} commit(s) ahead of dev."
+
+          # 2. reuse an open main->dev PR, else create one
+          PR=$(curl -sf -H "$AUTH" "${API}/pulls?state=open&base=dev" \
+            | python3 -c "import sys,json; d=json.load(sys.stdin); print(next((str(p['number']) for p in d if p.get('head',{}).get('ref')=='main'), ''))" 2>/dev/null || echo "")
+          if [ -z "$PR" ]; then
+            RESP=$(curl -s -H "$AUTH" -H "Content-Type: application/json" -X POST "${API}/pulls" \
+              -d '{"head":"main","base":"dev","title":"chore(sync): cascade main -> dev","body":"Automated cascade of main into dev. Auto-merges only if conflict-free; otherwise left open for manual resolution."}')
+            PR=$(printf '%s' "$RESP" | jqnum number)
+            if [ -z "$PR" ]; then
+              echo "::warning::Could not open cascade PR: $RESP"; exit 0
+            fi
+            echo "Opened cascade PR #${PR}"
+          else
+            echo "Reusing open cascade PR #${PR}"
+          fi
+
+          # 3. wait for MokoGitea to compute mergeability (conflict detection)
+          MERGEABLE=""
+          for _ in 1 2 3 4 5 6; do
+            MERGEABLE=$(curl -sf -H "$AUTH" "${API}/pulls/${PR}" | jqnum mergeable)
+            case "$MERGEABLE" in True|False) break ;; esac
+            sleep 3
+          done
+          echo "mergeable=${MERGEABLE}"
+
+          notify() {
+            curl -sS \
+              -H "Title: ${REPO}: dev cascade needs manual merge" \
+              -H "Tags: warning,twisted_rightwards_arrows" \
+              -H "Priority: high" \
+              -H "Click: ${MOKOGITEA_URL}/${REPO}/pulls/${PR}" \
+              -d "main -> dev cascade PR #${PR} $1 It was NOT auto-merged; resolve it manually." \
+              "${NTFY_URL}/${NTFY_TOPIC}" || true
+          }
+
+          # 4. auto-merge only if conflict-free; otherwise notify
+          if [ "$MERGEABLE" = "True" ]; then
+            CODE=$(curl -s -o /tmp/merge.json -w "%{http_code}" -H "$AUTH" -H "Content-Type: application/json" \
+              -X POST "${API}/pulls/${PR}/merge" -d '{"Do":"merge","merge_when_checks_succeed":true}')
+            if [ "$CODE" -ge 200 ] && [ "$CODE" -lt 300 ]; then
+              echo "Cascade PR #${PR} merged (or scheduled to merge when checks pass)."
+            else
+              echo "::warning::Auto-merge returned HTTP ${CODE}: $(cat /tmp/merge.json)"
+              notify "could not be auto-merged (HTTP ${CODE})."
+            fi
+          else
+            echo "::warning::Cascade PR #${PR} has conflicts (mergeable=${MERGEABLE}); sending notification."
+            notify "has conflicts and cannot be merged automatically."
+          fi

.mokogitea/workflows/ci-generic.yml

@@ -3,16 +3,22 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: MokoStandards.CI
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
-# PATH: /.gitea/workflows/ci-generic.yml
+# PATH: /.mokogitea/workflows/ci-generic.yml
 # VERSION: 01.00.00
 # BRIEF: CI pipeline — lint, validate, and test for generic projects (PHP + Node.js)
 
 name: "Generic: Project CI"
 
 on:
+  pull_request:
+    branches:
+      - main
+      - dev
+      - dev/**
+      - rc/**
   workflow_dispatch:
 
 permissions:
@@ -26,6 +32,8 @@ jobs:
   lint:
     name: Lint & Validate
     runs-on: ubuntu-latest
+    # Skip on template repos (Template-*) — they hold placeholder scaffolding, not buildable source.
+    if: ${{ !startsWith(github.event.repository.name, 'Template-') }}
 
     steps:
       - name: Checkout
@@ -123,7 +131,11 @@ jobs:
   test:
     name: Tests
     runs-on: ubuntu-latest
-    needs: lint
+    # Independent job (no `needs: lint`): the Gitea Actions scheduler does not
+    # offer the dependent 2nd job of a needs-chain to runners, so it stalls in
+    # "waiting" and is reaped by ABANDONED_JOB_TIMEOUT. Guard template repos
+    # directly (same condition lint uses) instead of gating on lint's result.
+    if: ${{ !startsWith(github.event.repository.name, 'Template-') }}
 
     steps:
       - name: Checkout

.mokogitea/workflows/ci-issue-reporter.yml

@@ -0,0 +1,68 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: MokoGitea.Workflow
+# INGROUP: mokocli.Universal
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogitea/workflows/ci-issue-reporter.yml
+# VERSION: 01.00.00
+# BRIEF: Reusable workflow — creates/updates a MokoGitea issue when a CI gate fails.
+#        Clones MokoCLI and runs cli/ci_issue_reporter.sh.
+
+name: "Universal: CI Issue Reporter"
+
+on:
+  workflow_call:
+    inputs:
+      gate:
+        description: "CI gate name (e.g. PR Validation, Repository Health)"
+        required: true
+        type: string
+      details:
+        description: "Human-readable failure description"
+        required: true
+        type: string
+      severity:
+        description: "error or warning"
+        required: false
+        type: string
+        default: "error"
+      workflow:
+        description: "Workflow name for the issue title"
+        required: false
+        type: string
+        default: ""
+    secrets:
+      MOKOGITEA_TOKEN:
+        required: true
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  report:
+    name: "Report: ${{ inputs.gate }}"
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Clone MokoCLI
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+        run: |
+          MOKOGITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
+          git clone --depth 1 --filter=blob:none --sparse "${MOKOGITEA_URL}/MokoConsulting/MokoCLI.git" /tmp/mokocli
+          cd /tmp/mokocli && git sparse-checkout set cli/ci_issue_reporter.sh
+
+      - name: Report CI failure
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
+          MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+        run: |
+          chmod +x /tmp/mokocli/cli/ci_issue_reporter.sh
+          /tmp/mokocli/cli/ci_issue_reporter.sh \
+            --gate "${{ inputs.gate }}" \
+            --details "${{ inputs.details }}" \
+            --severity "${{ inputs.severity }}" \
+            --workflow "${{ inputs.workflow }}"

.mokogitea/workflows/cleanup.yml

@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: MokoStandards.Maintenance
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
-# PATH: /.gitea/workflows/cleanup.yml
+# PATH: /.mokogitea/workflows/cleanup.yml
 # VERSION: 01.00.00
 # BRIEF: Scheduled cleanup — delete merged branches and old workflow runs
 
@@ -21,7 +21,7 @@ permissions:
   contents: write
 
 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
 
 jobs:
   cleanup:
@@ -33,30 +33,30 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GA_TOKEN }}
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
 
       - name: Delete merged branches
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Merged Branch Cleanup ==="
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
 
           # List branches via API
-          BRANCHES=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          BRANCHES=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
             "${API}/branches?limit=50" | jq -r '.[].name')
 
           DELETED=0
           for BRANCH in $BRANCHES; do
             # Skip protected branches
             case "$BRANCH" in
-              main|master|develop|release/*|hotfix/*) continue ;;
+              main|master|dev|develop|rc|beta|alpha|release|release/*|production|stable|staging|hotfix/*|version/*) continue ;;
             esac
 
             # Check if branch is merged into main
             if git merge-base --is-ancestor "origin/${BRANCH}" origin/main 2>/dev/null; then
               echo "  Deleting merged branch: ${BRANCH}"
-              curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+              curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
                 "${API}/branches/${BRANCH}" 2>/dev/null || true
               DELETED=$((DELETED + 1))
             fi
@@ -66,20 +66,20 @@ jobs:
 
       - name: Clean old workflow runs
         env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN }}
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
           echo "=== Workflow Run Cleanup ==="
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
           CUTOFF=$(date -d "30 days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -v-30d +%Y-%m-%dT%H:%M:%SZ)
 
           # Get old completed runs
-          RUNS=$(curl -sS -H "Authorization: token ${GA_TOKEN}" \
+          RUNS=$(curl -sS -H "Authorization: token ${MOKOGITEA_TOKEN}" \
             "${API}/actions/runs?status=completed&limit=50" | \
             jq -r ".workflow_runs[] | select(.created_at < \"${CUTOFF}\") | .id" 2>/dev/null)
 
           DELETED=0
           for RUN_ID in $RUNS; do
-            curl -sS -X DELETE -H "Authorization: token ${GA_TOKEN}" \
+            curl -sS -X DELETE -H "Authorization: token ${MOKOGITEA_TOKEN}" \
               "${API}/actions/runs/${RUN_ID}" 2>/dev/null || true
             DELETED=$((DELETED + 1))
           done

.mokogitea/workflows/deploy-manual.yml

@@ -1,126 +0,0 @@
-# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
-#
-# SPDX-License-Identifier: GPL-3.0-or-later
-#
-# FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
-# INGROUP: MokoStandards.Deploy
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards-API
-# PATH: /templates/workflows/joomla/deploy-manual.yml.template
-# VERSION: 04.07.00
-# BRIEF: Manual SFTP deploy to dev server for Joomla repos
-
-name: "Universal: Deploy to Dev (Manual)"
-
-on:
-  workflow_dispatch:
-    inputs:
-      clear_remote:
-        description: 'Delete all remote files before uploading'
-        required: false
-        default: 'false'
-        type: boolean
-
-env:
-  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    name: SFTP Deploy to Dev
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Setup PHP
-        run: |
-          php -v && composer --version
-
-      - name: Setup MokoStandards tools
-        env:
-          GA_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_TOKEN: ${{ secrets.GA_TOKEN || secrets.GA_TOKEN || github.token }}
-          MOKO_CLONE_HOST: ${{ secrets.GA_TOKEN && 'git.mokoconsulting.tech/MokoConsulting' || 'github.com/mokoconsulting-tech' }}
-          COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.GA_TOKEN || github.token }}"}}'
-        run: |
-          git clone --depth 1 --branch main --quiet \
-            "https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoStandards-API.git" \
-            /tmp/mokostandards-api 2>/dev/null || true
-          if [ -d "/tmp/mokostandards-api" ] && [ -f "/tmp/mokostandards-api/composer.json" ]; then
-            cd /tmp/mokostandards-api && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
-          fi
-
-      - name: Check FTP configuration
-        id: check
-        env:
-          HOST: ${{ vars.DEV_FTP_HOST }}
-          PATH_VAR: ${{ vars.DEV_FTP_PATH }}
-          PORT: ${{ vars.DEV_FTP_PORT }}
-        run: |
-          if [ -z "$HOST" ] || [ -z "$PATH_VAR" ]; then
-            echo "DEV_FTP_HOST or DEV_FTP_PATH not configured -- cannot deploy"
-            echo "skip=true" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-          echo "skip=false" >> "$GITHUB_OUTPUT"
-          echo "host=$HOST" >> "$GITHUB_OUTPUT"
-
-          REMOTE="${PATH_VAR%/}"
-          echo "remote=$REMOTE" >> "$GITHUB_OUTPUT"
-
-          [ -z "$PORT" ] && PORT="22"
-          echo "port=$PORT" >> "$GITHUB_OUTPUT"
-
-      - name: Deploy via SFTP
-        if: steps.check.outputs.skip != 'true'
-        env:
-          SFTP_KEY: ${{ secrets.DEV_FTP_KEY }}
-          SFTP_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
-          SFTP_USER: ${{ vars.DEV_FTP_USERNAME }}
-        run: |
-          SOURCE_DIR="src"
-          [ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
-          [ ! -d "$SOURCE_DIR" ] && { echo "No src/ or htdocs/ -- nothing to deploy"; exit 0; }
-
-          printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
-            "${{ steps.check.outputs.host }}" "${{ steps.check.outputs.port }}" "$SFTP_USER" "${{ steps.check.outputs.remote }}" \
-            > /tmp/sftp-config.json
-
-          if [ -n "$SFTP_KEY" ]; then
-            echo "$SFTP_KEY" > /tmp/deploy_key
-            chmod 600 /tmp/deploy_key
-            printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
-          else
-            printf ',"password":"%s"}' "$SFTP_PASS" >> /tmp/sftp-config.json
-          fi
-
-          DEPLOY_ARGS=(--path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json)
-          [ "${{ inputs.clear_remote }}" = "true" ] && DEPLOY_ARGS+=(--clear-remote)
-
-          PLATFORM=$(php /tmp/mokostandards-api/cli/platform_detect.php --path . 2>/dev/null || true)
-          if [ "$PLATFORM" = "waas-component" ] && [ -f "/tmp/mokostandards-api/deploy/deploy-joomla.php" ]; then
-            php /tmp/mokostandards-api/deploy/deploy-joomla.php "${DEPLOY_ARGS[@]}"
-          else
-            php /tmp/mokostandards-api/deploy/deploy-sftp.php "${DEPLOY_ARGS[@]}"
-          fi
-
-          rm -f /tmp/deploy_key /tmp/sftp-config.json
-
-      - name: Summary
-        if: always()
-        run: |
-          if [ "${{ steps.check.outputs.skip }}" = "true" ]; then
-            echo "### Deploy Skipped -- FTP not configured" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "### Manual Dev Deploy Complete" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
-            echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
-            echo "| Host | \`${{ steps.check.outputs.host }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Remote | \`${{ steps.check.outputs.remote }}\` |" >> $GITHUB_STEP_SUMMARY
-            echo "| Clear | ${{ inputs.clear_remote }} |" >> $GITHUB_STEP_SUMMARY
-          fi

.mokogitea/workflows/gitleaks.yml

@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: MokoStandards.Security
-# REPO: https://git.mokoconsulting.tech/mokoconsulting-tech/MokoStandards-API
-# PATH: /templates/workflows/gitleaks.yml.template
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards-API
+# PATH: /.mokogitea/workflows/gitleaks.yml
 # VERSION: 01.00.00
 # BRIEF: Secret scanning — detect leaked credentials, API keys, and tokens
 #

.mokogitea/workflows/issue-branch.yml

@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: mokocli.Automation
 # VERSION: 01.00.00
 # BRIEF: Auto-create feature branch when an issue is opened
@@ -19,7 +19,7 @@ permissions:
   issues: write
 
 env:
-  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
 
 jobs:
   create-branch:
@@ -28,8 +28,8 @@ jobs:
     steps:
       - name: Create branch and comment
         run: |
-          TOKEN="${{ secrets.GA_TOKEN }}"
-          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API="${MOKOGITEA_URL}/api/v1/repos/${{ github.repository }}"
           ISSUE_NUM="${{ github.event.issue.number }}"
           ISSUE_TITLE="${{ github.event.issue.title }}"
 
@@ -58,7 +58,7 @@ jobs:
             echo "Created branch: ${BRANCH}"
 
             # Comment on issue with branch link
-            REPO_URL="${GITEA_URL}/${{ github.repository }}"
+            REPO_URL="${MOKOGITEA_URL}/${{ github.repository }}"
             BODY="Branch created: [\`${BRANCH}\`](${REPO_URL}/src/branch/${BRANCH})\n\n\`\`\`bash\ngit fetch origin\ngit checkout ${BRANCH}\n\`\`\`"
 
             curl -sf -X POST \

.mokogitea/workflows/notify.yml

@@ -3,10 +3,10 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: MokoStandards.Notifications
 # REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
-# PATH: /.gitea/workflows/notify.yml
+# PATH: /.mokogitea/workflows/notify.yml
 # VERSION: 01.00.00
 # BRIEF: Push notifications via ntfy on release success or workflow failure
 
@@ -15,9 +15,9 @@ name: "Universal: Notifications"
 on:
   workflow_run:
     workflows:
-      - "Joomla Build & Release"
-      - "Joomla Extension CI"
-      - "Deploy"
+      - "Universal: Build & Release"
+      - "Joomla: Extension CI"
+      - "Generic: Project CI"
     types:
       - completed
 

.mokogitea/workflows/pre-release.yml

@@ -3,11 +3,11 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: mokocli.Release
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
-# PATH: /templates/workflows/universal/pre-release.yml.template
-# VERSION: 05.01.00
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
+# PATH: /.mokogitea/workflows/pre-release.yml
+# VERSION: 05.02.00
 # BRIEF: Auto pre-release on push to dev/alpha/beta/rc branches
 
 name: "Universal: Pre-Release"
@@ -48,9 +48,13 @@ jobs:
   build:
     name: "Build Pre-Release (${{ inputs.stability || github.ref_name }})"
     runs-on: release
+    # Skip on template repos (Template-*) — they scaffold other repos and do not release.
     if: >-
-      github.event_name == 'workflow_dispatch' ||
-      github.event_name == 'push'
+      !startsWith(github.event.repository.name, 'Template-') &&
+      (
+        github.event_name == 'workflow_dispatch' ||
+        github.event_name == 'push'
+      )
 
     steps:
       - name: Checkout
@@ -59,6 +63,11 @@ jobs:
           fetch-depth: 0
           token: ${{ secrets.MOKOGITEA_TOKEN }}
           ref: ${{ github.ref_name }}
+          submodules: recursive
+
+      - name: Update submodules to main
+        run: |
+          git submodule foreach --quiet 'git checkout main && git pull --quiet origin main' 2>/dev/null || true
 
       - name: Setup mokocli tools
         env:
@@ -75,7 +84,7 @@ jobs:
               sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer > /dev/null 2>&1
             fi
             rm -rf /tmp/mokocli
-            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/mokocli.git
+            CLONE_URL=https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/MokoCLI.git
             git clone --depth 1 --branch main --quiet $CLONE_URL /tmp/mokocli
             cd /tmp/mokocli && composer install --no-dev --no-interaction --quiet
             echo MOKO_CLI=/tmp/mokocli/cli >> $GITHUB_ENV
@@ -147,8 +156,8 @@ jobs:
           fi
 
           # Commit version bump
-          git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
-          git config --local user.name "gitea-actions[bot]"
+          git config --local user.email "mokogitea-actions[bot]@mokoconsulting.tech"
+          git config --local user.name "mokogitea-actions[bot]"
           git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
           git add -A
           git diff --cached --quiet || {

.mokogitea/workflows/rc-revert.yml

@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: mokocli.Universal
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
 # PATH: /.mokogitea/workflows/rc-revert.yml
 # VERSION: 09.23.00
 # BRIEF: Rename rc/ branch back to dev/ when PR is closed without merge
@@ -25,16 +25,25 @@ jobs:
     runs-on: ubuntu-latest
     if: >-
       github.event.pull_request.merged == false &&
-      startsWith(github.event.pull_request.head.ref, 'rc/')
+      startsWith(github.event.pull_request.head.ref, 'rc/') &&
+      !startsWith(github.event.repository.name, 'Template-')
 
     steps:
       - name: Rename branch
+        env:
+          BRANCH: ${{ github.event.pull_request.head.ref }}
+          REPO: ${{ github.repository }}
+          GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
-          BRANCH="${{ github.event.pull_request.head.ref }}"
+          set -euo pipefail
+          # BRANCH is attacker-controlled (PR head ref). Strict allowlist before ANY use.
+          if ! printf '%s' "$BRANCH" | grep -Eq '^rc/[A-Za-z0-9._/-]+$'; then
+            echo "::error::Refusing unsafe branch name: $BRANCH"; exit 1
+          fi
           SUFFIX="${BRANCH#rc/}"
           DEV_BRANCH="dev/${SUFFIX}"
-          API="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}/api/v1/repos/${{ github.repository }}/branches"
-          TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
+          API="${GITEA_URL}/api/v1/repos/${REPO}/branches"
 
           # Create dev/ branch from rc/ branch
           STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X POST \
@@ -42,25 +51,22 @@ jobs:
             -H "Content-Type: application/json" \
             -d "{\"new_branch_name\": \"${DEV_BRANCH}\", \"old_branch_name\": \"${BRANCH}\"}" \
             "${API}" 2>/dev/null || true)
-
           if [ "$STATUS" = "201" ]; then
-            echo "Created branch: ${DEV_BRANCH}" >> $GITHUB_STEP_SUMMARY
+            echo "Created branch: ${DEV_BRANCH}" >> "$GITHUB_STEP_SUMMARY"
           else
-            echo "::error::Failed to create ${DEV_BRANCH} from ${BRANCH} (HTTP ${STATUS})"
-            exit 1
+            echo "::error::Failed to create ${DEV_BRANCH} from ${BRANCH} (HTTP ${STATUS})"; exit 1
           fi
 
-          # Delete rc/ branch
-          ENCODED=$(php -r "echo rawurlencode('${BRANCH}');")
+          # Read BRANCH from the environment inside PHP (getenv, no string interpolation -> no PHP injection)
+          ENCODED=$(php -r 'echo rawurlencode(getenv("BRANCH"));')
           STATUS=$(curl -sf -o /dev/null -w "%{http_code}" -X DELETE \
             -H "Authorization: token ${TOKEN}" \
             "${API}/${ENCODED}" 2>/dev/null || true)
-
           if [ "$STATUS" = "204" ]; then
-            echo "Deleted branch: ${BRANCH}" >> $GITHUB_STEP_SUMMARY
+            echo "Deleted branch: ${BRANCH}" >> "$GITHUB_STEP_SUMMARY"
           else
             echo "::warning::Failed to delete ${BRANCH} (HTTP ${STATUS})"
           fi
 
-          echo "### RC Reverted" >> $GITHUB_STEP_SUMMARY
-          echo "${BRANCH} → ${DEV_BRANCH}" >> $GITHUB_STEP_SUMMARY
+          echo "### RC Reverted" >> "$GITHUB_STEP_SUMMARY"
+          echo "${BRANCH} → ${DEV_BRANCH}" >> "$GITHUB_STEP_SUMMARY"

.mokogitea/workflows/sync-on-merge.yml

@@ -0,0 +1,32 @@
+name: Sync Workflows to Repos
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '.mokogitea/workflows/**'
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.event.repository.name, 'Template-') }}
+    steps:
+      - name: Checkout mokocli
+        uses: actions/checkout@v4
+        with:
+          repository: MokoConsulting/MokoCLI
+          token: ${{ secrets.MOKOGITEA_TOKEN }}
+
+      - name: Setup PHP
+        uses: https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/raw/branch/main/actions/setup-php@v1
+        with:
+          php-version: '8.1'
+
+      - name: Install dependencies
+        run: composer install --no-dev --no-interaction
+
+      - name: Sync workflows to generic repos
+        run: php automation/bulk_sync.php --platform generic --org MokoConsulting --workflows-only --auto-merge --token "${{ secrets.MOKOGITEA_TOKEN }}"
+        env:
+          MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}

.mokogitea/workflows/version-set.yml

@@ -0,0 +1,131 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: MokoGitea.Workflow.Template
+# INGROUP: MokoStandards.CI
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Joomla
+# PATH: /.mokogitea/workflows/version-set.yml
+# VERSION: 01.00.00
+# BRIEF: Set or reset the extension version across all version-bearing files
+
+name: "Joomla: Set Version"
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Version number (e.g. 01.00.00)"
+        required: true
+        type: string
+      branch:
+        description: "Branch to update (default: current)"
+        required: false
+        type: string
+
+permissions:
+  contents: write
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  set-version:
+    name: Set Version to ${{ inputs.version }}
+    runs-on: ubuntu-latest
+    if: ${{ !startsWith(github.event.repository.name, 'Template-') }}
+
+    steps:
+      - name: Validate version format
+        run: |
+          VERSION="${{ inputs.version }}"
+          if ! echo "$VERSION" | grep -qP '^\d{2}\.\d{2}\.\d{2}$'; then
+            echo "::error::Invalid version format '${VERSION}' — expected XX.YY.ZZ (e.g. 01.00.00)"
+            exit 1
+          fi
+          echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.MOKOGITEA_TOKEN || github.token }}
+          ref: ${{ inputs.branch || github.ref }}
+          fetch-depth: 1
+
+      - name: Update manifest version
+        run: |
+          MANIFEST=""
+          for XML_FILE in $(find . -maxdepth 3 -name "*.xml" -not -path "./.git/*" -not -path "./vendor/*"); do
+            if grep -q "<extension" "$XML_FILE" 2>/dev/null; then
+              MANIFEST="$XML_FILE"
+              break
+            fi
+          done
+
+          if [ -z "$MANIFEST" ]; then
+            echo "::warning::No Joomla extension manifest found — skipping manifest update"
+          else
+            OLD_VER=$(grep -oP '<version>\K[^<]+' "$MANIFEST" | head -1)
+            sed -i "s|<version>${OLD_VER}</version>|<version>${VERSION}</version>|" "$MANIFEST"
+            echo "Manifest: ${OLD_VER} → ${VERSION} (${MANIFEST})"
+          fi
+
+      - name: Update README.md version
+        run: |
+          if [ -f "README.md" ]; then
+            if grep -qP '^\s*VERSION:\s*\d' README.md; then
+              sed -i -E "s/(VERSION:\s*)[0-9]{2}\.[0-9]{2}\.[0-9]{2}/\1${VERSION}/" README.md
+              echo "README.md version updated to ${VERSION}"
+            else
+              echo "::warning::No VERSION line found in README.md — skipping"
+            fi
+          fi
+
+      - name: Update CHANGELOG.md
+        run: |
+          if [ -f "CHANGELOG.md" ]; then
+            DATE=$(date +%Y-%m-%d)
+            # Check if this version already has an entry
+            if grep -q "^\#\# \[${VERSION}\]" CHANGELOG.md; then
+              echo "CHANGELOG.md already has entry for ${VERSION} — skipping"
+            else
+              # Insert new version entry after [Unreleased] or at the top after header
+              if grep -q '^\#\# \[Unreleased\]' CHANGELOG.md; then
+                sed -i "/^\#\# \[Unreleased\]/a\\\\n## [${VERSION}] --- ${DATE}" CHANGELOG.md
+              else
+                sed -i "/^\# Changelog/a\\\\n## [Unreleased]\n\n## [${VERSION}] --- ${DATE}" CHANGELOG.md
+              fi
+              echo "CHANGELOG.md: added entry for ${VERSION}"
+            fi
+          else
+            echo "::warning::No CHANGELOG.md found — skipping"
+          fi
+
+      - name: Update FILE INFORMATION blocks
+        run: |
+          # Update VERSION in file header blocks (# VERSION: XX.YY.ZZ)
+          find . -maxdepth 1 -type f \( -name "*.yml" -o -name "*.yaml" -o -name "*.php" -o -name "*.md" \) \
+            -not -path "./.git/*" -not -path "./vendor/*" -print0 2>/dev/null | \
+          while IFS= read -r -d '' FILE; do
+            if head -20 "$FILE" | grep -qP '^\s*#?\s*VERSION:\s*\d{2}\.\d{2}\.\d{2}'; then
+              sed -i -E "s/(#?\s*VERSION:\s*)[0-9]{2}\.[0-9]{2}\.[0-9]{2}/\1${VERSION}/" "$FILE"
+              echo "Updated FILE INFORMATION VERSION in ${FILE}"
+            fi
+          done
+
+      - name: Commit and push
+        run: |
+          git config user.name "Moko Consulting [bot]"
+          git config user.email "hello@mokoconsulting.tech"
+          git add -A
+          if git diff --cached --quiet; then
+            echo "No version changes detected — nothing to commit"
+          else
+            git commit -m "chore: set version to ${VERSION} [skip bump]
+
+Authored-by: Moko Consulting"
+            git push
+            echo "### Version Set" >> $GITHUB_STEP_SUMMARY
+            echo "Version updated to \`${VERSION}\` on branch \`${GITHUB_REF_NAME}\`" >> $GITHUB_STEP_SUMMARY
+          fi

.mokogitea/workflows/workflow-sync-trigger.yml

@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 #
 # FILE INFORMATION
-# DEFGROUP: Gitea.Workflow
+# DEFGROUP: MokoGitea.Workflow
 # INGROUP: mokocli.Universal
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
 # PATH: /.mokogitea/workflows/workflow-sync-trigger.yml
 # VERSION: 01.01.00
 # BRIEF: Trigger workflow sync to live repos when a PR is merged to main
@@ -13,6 +13,7 @@
 name: "Universal: Workflow Sync Trigger"
 
 on:
+  workflow_dispatch:
   pull_request:
     types: [closed]
     branches:
@@ -26,8 +27,10 @@ jobs:
     name: Sync workflows to live repos
     runs-on: ubuntu-latest
     if: >-
-      github.event.pull_request.merged == true &&
-      !contains(github.event.pull_request.title, '[skip sync]')
+      startsWith(github.event.repository.name, 'Template-') &&
+      (github.event_name == 'workflow_dispatch' ||
+      (github.event.pull_request.merged == true &&
+      !contains(github.event.pull_request.title, '[skip sync]')))
 
     steps:
       - name: Determine platform from repo name
@@ -49,8 +52,14 @@ jobs:
         env:
           MOKOGITEA_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
         run: |
-          GITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
-          git clone --depth 1 "${GITEA_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
+          MOKOGITEA_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
+          git clone --depth 1 "${MOKOGITEA_URL}/MokoConsulting/MokoCLI.git" /tmp/mokocli
+
+      - name: Install PHP
+        run: |
+          if ! command -v php &> /dev/null; then
+            apt-get update -qq && apt-get install -y -qq php-cli php-json php-curl > /dev/null 2>&1
+          fi
 
       - name: Install dependencies
         run: |

CHANGELOG.md

@@ -13,6 +13,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- **Tool rename (Gitea -> MokoGitea brand normalization):** all tools now register
+  under canonical `mokogitea_*` names via a single `registerTool()` wrapper. The
+  legacy `gitea_*` names remain as **deprecated aliases** (dual-registered) so
+  existing agent configs/skills keep working during the transition window. Aliases
+  are enabled by default and can be disabled by setting `MOKOGITEA_MCP_LEGACY_ALIASES`
+  to a falsy value (`0`/`false`/`off`/`no`); disabling halves the exposed tool count.
+- `gitea_metadata_update`: `standards_version` description corrected from
+  `mokoplatform standards version` to `mokocli standards version` (brand fix).
+
+### Notes
+- `display_name` is intentionally NOT a settable metadata param -- the fork's
+  `RepoMetadata` model has no `display_name` column; it is derived server-side
+  (`DerivedDisplayName()` from `extension_type` + `name`). A comment documenting
+  this was added to `gitea_metadata_update`.
+
 ### Added
 - `gitea_org_issue_statuses_list` -- list issue status definitions for an org
 - `gitea_org_issue_priorities_list` -- list issue priority definitions for an org
@@ -31,7 +47,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `branch-cleanup.yml`: auto-delete merged feature branches after PR merge
 
 ### Changed
-- **Renamed** package from `@mokoconsulting/gitea-api-mcp` to `@mokoconsulting/mokogitea-api-mcp` to distinguish Moko's forked Gitea MCP from upstream
+- **Renamed** package from `@mokoconsulting/gitea-api-mcp` to `@mokoconsulting/mokogitea-api-mcp` to distinguish Moko's forked MokoGitea MCP from upstream
 - **Renamed** McpServer name and bin entry to `mokogitea-api-mcp`
 
 ## [0.0.1] - 2026-05-07
@@ -51,7 +67,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `gitea_repo_fork` -- Fork a repository
 - `gitea_repo_search` -- Search repositories
 - `gitea_org_repos` -- List repositories in an organization
-- `gitea_list_connections` -- List configured Gitea connections
+- `gitea_list_connections` -- List configured MokoGitea connections
 
 #### File Contents (5 tools)
 - `gitea_file_get` -- Get file contents from a repository
@@ -133,12 +149,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `gitea_notifications_read` -- Mark all notifications as read
 
 #### Generic (2 tools)
-- `gitea_api_request` -- Make a raw API request to any Gitea v1 endpoint
-- `gitea_list_connections` -- List configured Gitea connections
+- `gitea_api_request` -- Make a raw API request to any MokoGitea v1 endpoint
+- `gitea_list_connections` -- List configured MokoGitea connections
 
 ### Infrastructure
 - Multi-connection config support via `~/.gitea-api-mcp.json`
-- Token-based authentication (Gitea native `Authorization: token` header)
+- Token-based authentication (MokoGitea native `Authorization: token` header)
 - Built on `node:https` / `node:http` (zero HTTP dependencies)
 - MCP SDK v1.12.x with stdio transport
 

CLAUDE.md

@@ -4,7 +4,7 @@ This file provides guidance to Claude Code when working with this repository.
 
 ## Project Overview
 
-**gitea-api-mcp** -- MCP server for Gitea REST API v1 operations — 61 tools for repos, issues, PRs, releases, branches, actions, orgs, wiki, webhooks, and more
+**gitea-api-mcp** -- MCP server for MokoGitea REST API v1 operations — 61 tools for repos, issues, PRs, releases, branches, actions, orgs, wiki, webhooks, and more
 
 | Field | Value |
 |---|---|
@@ -13,7 +13,7 @@ This file provides guidance to Claude Code when working with this repository.
 | **Default branch** | main |
 | **License** | GPL-3.0-or-later |
 | **Wiki** | [gitea-api-mcp Wiki](https://git.mokoconsulting.tech/MokoConsulting/gitea-api-mcp/wiki) |
-| **Standards** | [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/moko-platform/wiki/Home) |
+| **Standards** | [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki) |
 
 ## Common Commands
 
@@ -39,5 +39,5 @@ This is an MCP (Model Context Protocol) server. Key files:
 - **Attribution**: use `Authored-by: Moko Consulting` in commits
 - **Branch strategy**: develop on `dev`, merge to `main` for release
 - **Minification**: handled at build time (CI) and runtime (MokoMinifyHelper for Joomla templates)
-- **Wiki**: documentation lives in the Gitea wiki, not in `docs/` files
-- **Standards**: this repo follows [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/moko-platform/wiki/Home)
+- **Wiki**: documentation lives in the MokoGitea wiki, not in `docs/` files
+- **Standards**: this repo follows [MokoStandards](https://git.mokoconsulting.tech/MokoConsulting/.mokogitea/wiki)

CONTRIBUTING.md

@@ -34,7 +34,7 @@ feature/* ──PR──> dev ──draft PR──> (renamed to rc) ──merge
 7. **Merging to main** triggers the stable release pipeline:
    - Minor version bump (e.g., `02.09.xx` → `02.10.00`)
    - Stability suffix stripped (clean version)
-   - Gitea release created with ZIP/tar.gz packages
+   - MokoGitea release created with ZIP/tar.gz packages
    - `updates.xml` updated (Joomla extensions)
    - `dev` branch recreated from `main`
 

README.md

@@ -11,7 +11,7 @@ REPO: https://git.mokoconsulting.tech/MokoConsulting/gitea-api-mcp
 [![Node](https://img.shields.io/badge/node-%3E%3D20.0.0-green.svg)](https://nodejs.org)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.x-blue.svg)](https://www.typescriptlang.org)
 
-> MCP server for Gitea REST API v1 operations -- 111 tools for complete Gitea instance management from Claude Code and other MCP clients.
+> MCP server for MokoGitea REST API v1 operations -- 111 tools (canonical `mokogitea_*` names, plus deprecated `gitea_*` aliases) for complete MokoGitea instance management from Claude Code and other MCP clients.
 
 ## Table of Contents
 
@@ -26,15 +26,15 @@ REPO: https://git.mokoconsulting.tech/MokoConsulting/gitea-api-mcp
 
 ## Background
 
-`gitea-api-mcp` is a Model Context Protocol (MCP) server that exposes 111 tools for interacting with the Gitea REST API v1. It supports multiple named connections, allowing you to manage several Gitea instances from a single server. Authentication uses Gitea's native `Authorization: token` header format.
+`mokogitea-api-mcp` is a Model Context Protocol (MCP) server that exposes 111 tools for interacting with the MokoGitea REST API v1. Tools use canonical `mokogitea_*` names, with legacy `gitea_*` names retained as deprecated aliases (see [Tools](#tools)). It supports multiple named connections, allowing you to manage several MokoGitea instances from a single server. Authentication uses MokoGitea's native `Authorization: token` header format.
 
 ## Install
 
 ### Prerequisites
 
 - Node.js >= 20.0.0
-- A Gitea instance with API access
-- A Gitea access token (Settings > Applications > Generate Token)
+- A MokoGitea instance with API access
+- A MokoGitea access token (Settings > Applications > Generate Token)
 
 ### Build from Source
 
@@ -66,8 +66,8 @@ Create `~/.gitea-api-mcp.json`:
 
 | Field | Type | Required | Description |
 |-------|------|----------|-------------|
-| `baseUrl` | string | Yes | Base URL of your Gitea instance |
-| `token` | string | Yes | Gitea API access token |
+| `baseUrl` | string | Yes | Base URL of your MokoGitea instance |
+| `token` | string | Yes | MokoGitea API access token |
 | `insecure` | boolean | No | Skip TLS verification (self-signed certs) |
 
 Override the config path with the `GITEA_API_MCP_CONFIG` environment variable.
@@ -112,13 +112,32 @@ Add to your Claude Code MCP config (`~/.claude/claude_desktop_config.json` or pr
 When using multiple connections, pass the `connection` parameter to any tool:
 
 ```
-Use gitea_repo_get with connection "github-mirror" to get owner/repo details.
+Use mokogitea_repo_get with connection "github-mirror" to get owner/repo details.
 ```
 
 If `connection` is omitted, the `defaultConnection` is used.
 
 ## Tools
 
+### Tool naming: `mokogitea_*` (canonical) vs `gitea_*` (deprecated aliases)
+
+As part of the Gitea → MokoGitea brand normalization, the **canonical** name for
+every tool is `mokogitea_*` (e.g. `mokogitea_repo_get`, `mokogitea_pull_merge`,
+`mokogitea_metadata_update`). For a transition window the legacy `gitea_*` names
+are still registered as **deprecated aliases** that call the same handlers, so
+existing agent configs and skills keep working — but new integrations should use
+the `mokogitea_*` names.
+
+The tables below list each tool by its legacy `gitea_*` name for continuity; the
+canonical name is the same string with the `gitea_` prefix replaced by
+`mokogitea_`.
+
+Legacy aliases are **enabled by default**. To expose only the canonical
+`mokogitea_*` names (halving the tool count), set the environment variable
+`MOKOGITEA_MCP_LEGACY_ALIASES` to a falsy value (`0`, `false`, `off`, or `no`).
+While enabled, both names are registered, so the exposed tool count is roughly
+double the 111 logical tools during the deprecation window.
+
 ### User / Auth (3 tools)
 
 | Tool | Description |
@@ -138,7 +157,7 @@ If `connection` is omitted, the `defaultConnection` is used.
 | `gitea_repo_fork` | Fork a repository |
 | `gitea_repo_search` | Search repositories |
 | `gitea_org_repos` | List repositories in an organization |
-| `gitea_list_connections` | List configured Gitea connections |
+| `gitea_list_connections` | List configured MokoGitea connections |
 
 ### File Contents (5 tools)
 
@@ -273,8 +292,8 @@ If `connection` is omitted, the `defaultConnection` is used.
 
 | Tool | Description |
 |------|-------------|
-| `gitea_api_request` | Make a raw API request to any Gitea v1 endpoint |
-| `gitea_list_connections` | List configured Gitea connections |
+| `gitea_api_request` | Make a raw API request to any MokoGitea v1 endpoint |
+| `gitea_list_connections` | List configured MokoGitea connections |
 
 ## Contributing
 

SECURITY.md

@@ -22,7 +22,7 @@ We will acknowledge receipt within 48 hours and provide an initial assessment wi
 
 ### Configuration File
 
-The config file `~/.gitea-api-mcp.json` stores Gitea API tokens in plaintext. Follow these practices to protect your tokens:
+The config file `~/.gitea-api-mcp.json` stores MokoGitea API tokens in plaintext. Follow these practices to protect your tokens:
 
 #### File Permissions
 
@@ -43,7 +43,7 @@ On Windows, ensure the file is only readable by your user account through the fi
 
 #### Token Scope
 
-When generating Gitea access tokens, follow the principle of least privilege:
+When generating MokoGitea access tokens, follow the principle of least privilege:
 
 - Only grant the scopes (permissions) your workflow requires
 - Use separate tokens for separate purposes or environments
@@ -52,7 +52,7 @@ When generating Gitea access tokens, follow the principle of least privilege:
 
 #### Token Generation
 
-1. Navigate to your Gitea instance Settings > Applications
+1. Navigate to your MokoGitea instance Settings > Applications
 2. Under "Manage Access Tokens," enter a token name
 3. Select only the required scopes
 4. Click "Generate Token"

package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@mokoconsulting/mcp-mokogitea-api",
-	"version": "1.4.2",
+	"version": "1.5.0",
 	"description": "MCP server for Gitea REST API v1 operations",
 	"type": "module",
 	"main": "dist/index.js",

src/index.ts

@@ -14,7 +14,8 @@
  * BRIEF: MCP server entry point — registers all Gitea API tools
  */
 
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer, type ToolCallback } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ZodRawShapeCompat } from '@modelcontextprotocol/sdk/server/zod-compat.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
 import { loadConfig, getConnection } from './config.js';
@@ -61,26 +62,57 @@ const OwnerRepo = {
 
 const server = new McpServer({
 	name: 'mokogitea-api-mcp',
-	version: '1.4.2',
+	version: '1.5.0',
 });
 
+// ── Tool registration wrapper (Gitea → MokoGitea brand normalization) ────
+//
+// Canonical tool names are `mokogitea_*`. For a transition window the old
+// `gitea_*` names are ALSO registered as deprecated aliases so existing agent
+// configs / skills keep working. Legacy aliases can be disabled by setting the
+// MOKOGITEA_MCP_LEGACY_ALIASES env var to a falsy value (0/false/off/no);
+// they are enabled by default. Disabling them halves the exposed tool count.
+const LEGACY_ALIASES: boolean = (() => {
+	const v = process.env.MOKOGITEA_MCP_LEGACY_ALIASES;
+	if (v === undefined) return true;
+	return !/^(0|false|off|no)$/i.test(v.trim());
+})();
+
+// registerTool(name, description, schema, handler) — mirrors the typed
+// server.tool(name, description, paramsSchema, cb) overload so call sites keep
+// full zod-schema → handler-arg inference. Registers the canonical `mokogitea_*`
+// name and, when aliases are enabled, the legacy `gitea_*` name pointing at the
+// same handler.
+function registerTool<Args extends ZodRawShapeCompat>(
+	name: string,
+	description: string,
+	paramsSchema: Args,
+	cb: ToolCallback<Args>,
+): void {
+	const canonical = name.startsWith('gitea_') ? 'mokogitea_' + name.slice('gitea_'.length) : name;
+	server.tool(canonical, description, paramsSchema, cb);
+	if (LEGACY_ALIASES && canonical !== name) {
+		server.tool(name, description, paramsSchema, cb);
+	}
+}
+
 // ── User / Auth ─────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_me',
 	'Get the authenticated user info',
 	{ ...ConnectionParam },
 	async ({ connection }) => formatResponse(await clientFor(connection).get('/user')),
 );
 
-server.tool(
+registerTool(
 	'gitea_user_orgs',
 	'List organizations the authenticated user belongs to',
 	{ ...PaginationParams, ...ConnectionParam },
 	async ({ page, limit, connection }) => formatResponse(await clientFor(connection).get('/user/orgs', pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_user_repos',
 	'List repositories owned by the authenticated user',
 	{ ...PaginationParams, ...ConnectionParam },
@@ -89,14 +121,14 @@ server.tool(
 
 // ── Repository CRUD ─────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_repo_get',
 	'Get repository details',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_create',
 	'Create a new repository',
 	{
@@ -122,14 +154,14 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_delete',
 	'Delete a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).delete(`/repos/${owner}/${repo}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_edit',
 	'Edit repository settings',
 	{
@@ -156,7 +188,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_fork',
 	'Fork a repository',
 	{
@@ -173,7 +205,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_generate',
 	'Create a new repository from a template repository',
 	{
@@ -205,7 +237,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_search',
 	'Search repositories',
 	{
@@ -225,7 +257,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_org_repos',
 	'List repositories in an organization',
 	{
@@ -238,7 +270,7 @@ server.tool(
 
 // ── File Contents ───────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_file_get',
 	'Get file contents from a repository',
 	{
@@ -254,7 +286,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_dir_get',
 	'Get directory contents (file listing) from a repository',
 	{
@@ -271,7 +303,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_file_create_or_update',
 	'Create or update a file in a repository',
 	{
@@ -294,7 +326,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_file_delete',
 	'Delete a file from a repository',
 	{
@@ -313,7 +345,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_tree_get',
 	'Get the git tree for a repository (recursive file listing)',
 	{
@@ -331,21 +363,21 @@ server.tool(
 
 // ── Branches ────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_branches_list',
 	'List branches in a repository',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/branches`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_branch_get',
 	'Get a specific branch',
 	{ ...OwnerRepo, branch: z.string().describe('Branch name'), ...ConnectionParam },
 	async ({ owner, repo, branch, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/branches/${branch}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_branch_create',
 	'Create a new branch',
 	{
@@ -361,7 +393,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_branch_delete',
 	'Delete a branch',
 	{ ...OwnerRepo, branch: z.string().describe('Branch name'), ...ConnectionParam },
@@ -370,7 +402,7 @@ server.tool(
 
 // ── Commits ─────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_commits_list',
 	'List commits in a repository',
 	{
@@ -388,7 +420,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_commit_get',
 	'Get a specific commit',
 	{ ...OwnerRepo, sha: z.string().describe('Commit SHA'), ...ConnectionParam },
@@ -397,7 +429,7 @@ server.tool(
 
 // ── Issues ──────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_issues_list',
 	'List issues in a repository',
 	{
@@ -421,14 +453,14 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_get',
 	'Get a single issue by number',
 	{ ...OwnerRepo, number: z.number().describe('Issue number'), ...ConnectionParam },
 	async ({ owner, repo, number, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/issues/${number}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_create',
 	'Create a new issue',
 	{
@@ -456,7 +488,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_update',
 	'Update an issue (supports title, body, state, assignees, milestone, and org-level metadata)',
 	{
@@ -486,7 +518,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_set_status',
 	'Set or clear the status on an issue (convenience wrapper around issue update)',
 	{
@@ -500,7 +532,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_set_priority',
 	'Set or clear the priority on an issue (convenience wrapper around issue update)',
 	{
@@ -514,14 +546,14 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_comments_list',
 	'List comments on an issue',
 	{ ...OwnerRepo, number: z.number().describe('Issue number'), ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, number, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/issues/${number}/comments`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_comment_create',
 	'Add a comment to an issue',
 	{
@@ -535,7 +567,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_issue_search',
 	'Search issues across all repositories',
 	{
@@ -557,14 +589,14 @@ server.tool(
 
 // ── Labels ──────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_labels_list',
 	'List all labels in a repository (includes id, name, color, description — use to discover available type/priority/status labels)',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/labels`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_label_create',
 	'Create a label',
 	{
@@ -583,7 +615,7 @@ server.tool(
 
 // ── Milestones ──────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_milestones_list',
 	'List milestones in a repository',
 	{
@@ -599,7 +631,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_milestone_create',
 	'Create a milestone',
 	{
@@ -619,7 +651,7 @@ server.tool(
 
 // ── Pull Requests ───────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_pulls_list',
 	'List pull requests',
 	{
@@ -641,14 +673,14 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_pull_get',
 	'Get a single pull request',
 	{ ...OwnerRepo, number: z.number().describe('PR number'), ...ConnectionParam },
 	async ({ owner, repo, number, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/pulls/${number}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_pull_create',
 	'Create a pull request',
 	{
@@ -672,7 +704,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_pull_merge',
 	'Merge a pull request',
 	{
@@ -693,14 +725,14 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_pull_files',
 	'List files changed in a pull request',
 	{ ...OwnerRepo, number: z.number().describe('PR number'), ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, number, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/pulls/${number}/files`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_pull_review_create',
 	'Create a pull request review',
 	{
@@ -719,28 +751,28 @@ server.tool(
 
 // ── Releases ────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_releases_list',
 	'List releases',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/releases`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_release_get',
 	'Get a single release by ID',
 	{ ...OwnerRepo, id: z.number().describe('Release ID'), ...ConnectionParam },
 	async ({ owner, repo, id, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/releases/${id}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_release_latest',
 	'Get the latest release',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/releases/latest`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_release_create',
 	'Create a new release',
 	{
@@ -764,7 +796,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_release_delete',
 	'Delete a release',
 	{ ...OwnerRepo, id: z.number().describe('Release ID'), ...ConnectionParam },
@@ -773,14 +805,14 @@ server.tool(
 
 // ── Tags ────────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_tags_list',
 	'List tags',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/tags`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_tag_create',
 	'Create a tag',
 	{
@@ -798,7 +830,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_tag_delete',
 	'Delete a tag',
 	{ ...OwnerRepo, tag: z.string().describe('Tag name'), ...ConnectionParam },
@@ -807,21 +839,21 @@ server.tool(
 
 // ── Actions (CI/CD) ─────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_actions_runs_list',
 	'List workflow runs for a repository',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/actions/runs`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_actions_run_get',
 	'Get a specific workflow run',
 	{ ...OwnerRepo, run_id: z.number().describe('Run ID'), ...ConnectionParam },
 	async ({ owner, repo, run_id, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/actions/runs/${run_id}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_actions_dispatch',
 	'Trigger a workflow dispatch (e.g. pre-release, deploy)',
 	{
@@ -838,7 +870,7 @@ server.tool(
 		)),
 );
 
-server.tool(
+registerTool(
 	'gitea_actions_jobs_list',
 	'List jobs for a workflow run',
 	{ ...OwnerRepo, run_id: z.number().describe('Run ID'), ...ConnectionParam },
@@ -846,7 +878,7 @@ server.tool(
 		formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/actions/runs/${run_id}/jobs`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_actions_job_logs',
 	'Get log output for a workflow job',
 	{ ...OwnerRepo, job_id: z.number().describe('Job ID'), ...ConnectionParam },
@@ -860,7 +892,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_release_asset_upload',
 	'Upload a file as a release asset (provide base64-encoded content)',
 	{
@@ -891,7 +923,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_release_asset_delete',
 	'Delete a release asset',
 	{
@@ -904,7 +936,7 @@ server.tool(
 		formatResponse(await clientFor(connection).delete(`/repos/${owner}/${repo}/releases/${release_id}/assets/${asset_id}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_bulk_file_push',
 	'Push the same file content to multiple repos (uses Contents API)',
 	{
@@ -957,21 +989,21 @@ server.tool(
 
 // ── Organizations ───────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_org_get',
 	'Get organization details',
 	{ org: z.string().describe('Organization name'), ...ConnectionParam },
 	async ({ org, connection }) => formatResponse(await clientFor(connection).get(`/orgs/${org}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_org_teams_list',
 	'List teams in an organization',
 	{ org: z.string().describe('Organization name'), ...PaginationParams, ...ConnectionParam },
 	async ({ org, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/orgs/${org}/teams`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_org_members_list',
 	'List members of an organization',
 	{ org: z.string().describe('Organization name'), ...PaginationParams, ...ConnectionParam },
@@ -980,21 +1012,21 @@ server.tool(
 
 // ── Organization Issue Metadata ──────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_org_issue_statuses_list',
 	'List issue status definitions for an organization (id, name, color, closes_issue — use to discover valid status_id values)',
 	{ org: z.string().describe('Organization name'), ...ConnectionParam },
 	async ({ org, connection }) => formatResponse(await clientFor(connection).get(`/orgs/${org}/issue-statuses`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_org_issue_priorities_list',
 	'List issue priority definitions for an organization (id, name, color, is_default — use to discover valid priority_id values)',
 	{ org: z.string().describe('Organization name'), ...ConnectionParam },
 	async ({ org, connection }) => formatResponse(await clientFor(connection).get(`/orgs/${org}/issue-priorities`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_org_issue_types_list',
 	'List issue type definitions for an organization (id, name, color, is_default — use to discover valid type_id values)',
 	{ org: z.string().describe('Organization name'), ...ConnectionParam },
@@ -1003,14 +1035,14 @@ server.tool(
 
 // ── Users ───────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_user_get',
 	'Get a user profile',
 	{ username: z.string().describe('Username'), ...ConnectionParam },
 	async ({ username, connection }) => formatResponse(await clientFor(connection).get(`/users/${username}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_users_search',
 	'Search users',
 	{
@@ -1023,14 +1055,14 @@ server.tool(
 
 // ── Webhooks ────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_webhooks_list',
 	'List webhooks for a repository',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/hooks`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_webhook_create',
 	'Create a webhook',
 	{
@@ -1054,21 +1086,21 @@ server.tool(
 
 // ── Wiki ────────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_wiki_pages_list',
 	'List wiki pages',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/wiki/pages`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_page_get',
 	'Get a wiki page',
 	{ ...OwnerRepo, page_name: z.string().describe('Page name/slug'), ...ConnectionParam },
 	async ({ owner, repo, page_name, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/wiki/page/${page_name}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_page_create',
 	'Create a new wiki page',
 	{
@@ -1088,7 +1120,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_page_edit',
 	'Edit an existing wiki page',
 	{
@@ -1109,7 +1141,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_page_delete',
 	'Delete a wiki page',
 	{
@@ -1121,7 +1153,7 @@ server.tool(
 		formatResponse(await clientFor(connection).delete(`/repos/${owner}/${repo}/wiki/page/${page_name}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_page_revisions',
 	'List revision history for a wiki page',
 	{ ...OwnerRepo, page_name: z.string().describe('Page name/slug'), ...PaginationParams, ...ConnectionParam },
@@ -1129,7 +1161,7 @@ server.tool(
 		formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/wiki/revisions/${page_name}`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_wiki_search',
 	'Search wiki page titles and content',
 	{ ...OwnerRepo, q: z.string().describe('Search query'), ...PaginationParams, ...ConnectionParam },
@@ -1139,7 +1171,7 @@ server.tool(
 
 // ── Notifications ───────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_notifications_list',
 	'List notifications for the authenticated user',
 	{
@@ -1154,7 +1186,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_notifications_read',
 	'Mark all notifications as read',
 	{ ...ConnectionParam },
@@ -1163,14 +1195,14 @@ server.tool(
 
 // ── Topics ──────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_repo_topics',
 	'Get topics (tags) for a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/topics`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_topics_set',
 	'Set topics for a repository (replaces all existing)',
 	{
@@ -1181,7 +1213,7 @@ server.tool(
 	async ({ owner, repo, topics, connection }) => formatResponse(await clientFor(connection).put(`/repos/${owner}/${repo}/topics`, { topics })),
 );
 
-server.tool(
+registerTool(
 	'gitea_topic_search',
 	'Search topics across all repositories',
 	{
@@ -1194,14 +1226,14 @@ server.tool(
 
 // ── Collaborators ───────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_collaborators_list',
 	'List collaborators on a repository',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/collaborators`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_collaborator_add',
 	'Add a collaborator to a repository',
 	{
@@ -1217,7 +1249,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_collaborator_remove',
 	'Remove a collaborator from a repository',
 	{
@@ -1230,14 +1262,14 @@ server.tool(
 
 // ── Deploy Keys ─────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_deploy_keys_list',
 	'List deploy keys for a repository',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/keys`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_deploy_key_create',
 	'Add a deploy key to a repository',
 	{
@@ -1256,7 +1288,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_deploy_key_delete',
 	'Remove a deploy key from a repository',
 	{
@@ -1269,14 +1301,14 @@ server.tool(
 
 // ── Branch Protection ───────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_branch_protections_list',
 	'List branch protection rules for a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/branch_protections`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_branch_protection_create',
 	'Create a branch protection rule',
 	{
@@ -1304,7 +1336,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_branch_protection_delete',
 	'Delete a branch protection rule',
 	{
@@ -1317,7 +1349,7 @@ server.tool(
 
 // ── Organization Labels ─────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_org_labels_list',
 	'List labels for an organization (shared across repos — includes id, name, color, description for type/priority/status discovery)',
 	{
@@ -1328,7 +1360,7 @@ server.tool(
 	async ({ org, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/orgs/${org}/labels`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_org_label_create',
 	'Create an organization-level label',
 	{
@@ -1347,14 +1379,14 @@ server.tool(
 
 // ── Repository Secrets (Actions) ────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_repo_actions_secrets_list',
 	'List Actions secrets for a repository (names only, values hidden)',
 	{ ...OwnerRepo, ...PaginationParams, ...ConnectionParam },
 	async ({ owner, repo, page, limit, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/actions/secrets`, pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_actions_secret_create',
 	'Create or update an Actions secret',
 	{
@@ -1366,7 +1398,7 @@ server.tool(
 	async ({ owner, repo, name, data, connection }) => formatResponse(await clientFor(connection).put(`/repos/${owner}/${repo}/actions/secrets/${name}`, { data })),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_actions_secret_delete',
 	'Delete an Actions secret',
 	{
@@ -1379,21 +1411,21 @@ server.tool(
 
 // ── Repo Transfer / Mirror ──────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_repo_mirror_sync',
 	'Trigger a push mirror sync for a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).post(`/repos/${owner}/${repo}/mirror-sync`, {})),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_mirrors_list',
 	'List push mirrors for a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/push_mirrors`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_mirror_create',
 	'Create a push mirror to GitHub (backup). Sets up automatic push mirroring from Gitea to a GitHub repo.',
 	{
@@ -1420,7 +1452,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_mirror_delete',
 	'Delete a push mirror from a repository',
 	{
@@ -1431,7 +1463,7 @@ server.tool(
 	async ({ owner, repo, mirror_name, connection }) => formatResponse(await clientFor(connection).delete(`/repos/${owner}/${repo}/push_mirrors/${mirror_name}`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_mirror_setup_github_backup',
 	'One-step GitHub backup mirror setup: creates the GitHub repo (if needed) and configures push mirror. Requires a GitHub token with repo+org scope.',
 	{
@@ -1502,7 +1534,7 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_mirror_setup_github_backup_full',
 	'Full GitHub backup: mirrors code repo + wiki repo to GitHub. Creates GitHub repo, sets up push mirrors for both code and wiki, triggers initial sync.',
 	{
@@ -1607,14 +1639,14 @@ server.tool(
 
 // ── Repo Statistics ─────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_repo_languages',
 	'Get language breakdown for a repository',
 	{ ...OwnerRepo, ...ConnectionParam },
 	async ({ owner, repo, connection }) => formatResponse(await clientFor(connection).get(`/repos/${owner}/${repo}/languages`)),
 );
 
-server.tool(
+registerTool(
 	'gitea_repo_contributors',
 	'List contributors with commit counts',
 	{ ...OwnerRepo, ...ConnectionParam },
@@ -1623,7 +1655,7 @@ server.tool(
 
 // ── Issue Labels (Bulk) ─────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_issue_labels_set',
 	'Set labels on an issue (replaces existing)',
 	{
@@ -1637,7 +1669,7 @@ server.tool(
 
 // ── Diff / Compare ──────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_compare',
 	'Compare two branches, tags, or commits (returns diff stats)',
 	{
@@ -1651,28 +1683,28 @@ server.tool(
 
 // ── Gitea Admin (Instance-Level) ────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_admin_orgs_list',
 	'List all organizations (admin only)',
 	{ ...PaginationParams, ...ConnectionParam },
 	async ({ page, limit, connection }) => formatResponse(await clientFor(connection).get('/admin/orgs', pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_admin_users_list',
 	'List all users (admin only)',
 	{ ...PaginationParams, ...ConnectionParam },
 	async ({ page, limit, connection }) => formatResponse(await clientFor(connection).get('/admin/users', pageQuery({ page, limit }))),
 );
 
-server.tool(
+registerTool(
 	'gitea_admin_cron_list',
 	'List cron tasks and their last run time (admin only)',
 	{ ...ConnectionParam },
 	async ({ connection }) => formatResponse(await clientFor(connection).get('/admin/cron')),
 );
 
-server.tool(
+registerTool(
 	'gitea_admin_cron_run',
 	'Trigger a cron task (admin only)',
 	{
@@ -1684,7 +1716,7 @@ server.tool(
 
 // ── Generic API Call ────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_api_request',
 	'Make a raw API request to any Gitea v1 endpoint',
 	{
@@ -1708,7 +1740,7 @@ server.tool(
 
 // ── Connections ──────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_list_connections',
 	'List configured Gitea connections',
 	{},
@@ -1723,7 +1755,7 @@ server.tool(
 
 // ── Metadata ────────────────────────────────────────────────────────────
 
-server.tool(
+registerTool(
 	'gitea_metadata_get',
 	'Get repo metadata (project identity, governance, distribution, build settings)',
 	{
@@ -1737,13 +1769,16 @@ server.tool(
 	},
 );
 
-server.tool(
+registerTool(
 	'gitea_metadata_update',
 	'Update repo metadata settings (partial update — only provided fields are changed)',
 	{
 		owner: z.string().describe('Repository owner'),
 		repo: z.string().describe('Repository name'),
 		// identity
+		// NOTE: display_name is intentionally NOT a settable param — the fork's
+		// RepoMetadata model has no display_name column; it is derived server-side
+		// (DerivedDisplayName() from extension_type + name), so sending it is a no-op.
 		name: z.string().optional().describe('Project name'),
 		org: z.string().optional().describe('Organization'),
 		description: z.string().optional().describe('Project description'),
@@ -1755,7 +1790,7 @@ server.tool(
 		license_name: z.string().optional().describe('Human-readable license name'),
 		// governance
 		platform: z.string().optional().describe('Platform (joomla, go, node, php, python, generic)'),
-		standards_version: z.string().optional().describe('mokoplatform standards version'),
+		standards_version: z.string().optional().describe('mokocli standards version'),
 		standards_source: z.string().optional().describe('URL to standards repo'),
 		// distribution
 		maintainer: z.string().optional().describe('Maintainer name'),