4 Commits

Include renames

Author	SHA1	Message	Date
jaredandClaude Sonnet 5	5e8af39563	Fix collation inconsistency on saved_filters/ticket_attachments (#41) ... README Dev Note #12 mandates utf8mb4_general_ci for new tables, but these two tables were created with utf8mb4_unicode_ci in the baseline schema — inconsistent with every other table, and a future join or comparison against a general_ci column would need explicit COLLATE casts or hit "Illegal mix of collations" errors. - Fixed 000_baseline.sql so a fresh install matches the convention directly. - Added 002_fix_collation_consistency.sql for existing deployments. MariaDB silently drops the inline CHECK (json_valid(...)) constraint on saved_filters.filter_criteria when that column is MODIFYed (found by actually running this against a local MariaDB instance), so the migration explicitly re-adds it after the collation conversion. Verified against a local MariaDB 10.11: baseline applies cleanly, migration is idempotent (safe to run twice), and the json_valid CHECK is still enforced afterward. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MGDKHiU5RJdo3dqQUDow3X	2026-09-08 11:43:53 -04:00
jared	1d03800ab2	Widen bulk_operations.status so partial bulk results can be recorded (#21) ... Found while verifying #21 against the live schema: the model writes 'completed_with_errors' (21 chars) when a bulk operation finishes with per-ticket failures, but bulk_operations.status was varchar(20), so the write failed with "Data too long for column 'status'". This was latent — bulk status changes previously forced every transition through, so failed was always 0. Now that they honour the Workflow Designer, a partially-skipped batch is a normal outcome and hits it. - migrations/001 widens the column to varchar(32) (idempotent). - The baseline is updated to match, for fresh installs. - The bookkeeping UPDATE is wrapped in a try/catch: it runs after the ticket changes are committed, so an instance deployed ahead of its migrations must not turn a completed operation into an error response. Verified against the live database with a disposable-ticket harness: comment-required rejection changes nothing, undefined transitions are refused per ticket with a reason, allowed transitions still work, mixed batches apply the valid half, and an already-Closed ticket is a no-op.	2026-08-07 22:40:48 -04:00
jaredandClaude Opus 4.8	5cf5aa9591	API keys: add read/read_write scopes + admin scope selector & pagination ... Foundation for extending the Bearer API beyond create-only: - api_keys gains a scope column (read | read_write); baseline schema updated and the column applied to the live DB. Existing keys default to read_write so the hwmon create key keeps working. - ApiKeyModel: createKey() takes a validated scope; validateKey() always surfaces scope (defaults read_write); getAllKeys() is paginated ({keys,total,page,perPage}, key_hash stripped). - ApiKeyAuth: expose getKeyContext() (scope/key_name/created_by/api_key_id) and requireScope() (403 on insufficient scope); existing return values unchanged. - create_ticket_api.php: require read_write scope (a read key can't create). - Admin /admin/api-keys: scope selector on the create form, a scope column, and pagination (revoked keys were stacking up). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-15 18:24:50 -04:00
jaredandClaude Opus 4.8	d6214a0339	Add schema baseline, fix cron/retention, restore cleanup, correct docs ... - migrations/000_baseline.sql: full schema baseline captured from prod (validated on a throwaway DB: 17 tables/17 FKs), so the schema is reproducible for fresh installs / disaster recovery - create_recurring_tickets cron: send the Matrix ticket-created notification and invalidate the stats cache like the other create paths - create_ticket_api.php + TicketController::create: invalidate the stats cache on create/escalate/reopen so dashboard counts aren't stale - scripts/cleanup_orphan_uploads.php: restored, made safe (24h mtime grace, 9-digit-dir only, skips avatars/symlinks, matches the unique filename column, --dry-run) - cron/cleanup_audit_log.php: enforce the configured audit-log retention (deleteOldLogs was implemented but never called) - README: correct CSRF-rotation, hwmon dedup (no 24h window), SLA (no P3), stats-cache callers, and the project structure/endpoint listing - .env.example: document TRUSTED_PROXIES fail-open risk and .env quoting Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-10 16:11:26 -04:00