6 Commits

Include renames

Author	SHA1	Message	Date
jaredandClaude Opus 4.8	9941fd2dfa	Address remaining review items: Synapse caching, cycle detection, cache/ratelimit/kanban ... - SynapseHelper: memoize username->Matrix-ID lookups per-request (incl. negative results) and add an overall time budget to resolveUsernames() plus a 2s connect timeout, so notifying N watchers with a slow/unreachable Synapse can't stall the request for N x 5s. (Chosen over async/queue per maintainer.) - DependencyModel: fix cycle detection treating 'blocks' and 'blocked_by' as the same edge direction. They are inverse relationships (single row each, no mirror row), so the traversal now walks a unified precedence graph (blocks: ticket-> depends_on; blocked_by: depends_on->ticket) and wouldCreateCycle normalizes the new edge's direction. Prevents both false-positive and missed cycles. - CacheHelper: anchor prefix-delete to exact key boundaries (bare prefix or prefix + '_' + md5) so delete('workflow') can't wipe a 'workflow_rules' cache. - RateLimitMiddleware: hold an exclusive flock across the per-IP counter's read-modify-write so concurrent requests can't both read N and write N+1 (undercounting past the limit). Fails open if the file can't be locked. - dashboard.js: kanban status update now uses lt.api.post (per no-raw-fetch convention) and reverts the card AND the optimistic column counts on failure (the old raw-fetch catch left the card moved without reverting). - BulkOperationsModel: document that bulk_status/bulk_close intentionally bypass workflow transition validation (admin override, by design). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-30 12:55:50 -04:00
jared	c90bdc8ac8	style: auto-fix 1340 phpcs PSR-12 violations via phpcbf; exclude MissingNamespace and SideEffects	2026-04-13 20:56:10 -04:00
jaredandClaude Opus 4.5	44f2c21f2d	Add query optimization and reliability improvements ... - Consolidate StatsModel queries from 12 to 3 using conditional aggregation - Add input validation to DashboardController (sort columns, dates, priorities) - Combine getCategories/getTypes into single query - Add transaction support to BulkOperationsModel with atomic mode option - Add depth limit (20) to dependency cycle detection to prevent DoS - Add caching to UserModel.getAllGroups() with 5-minute TTL - Improve ticket ID generation with 50 attempts, exponential backoff, and fallback Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-30 18:31:46 -05:00
jaredandClaude Opus 4.5	7462d7c509	fix: Add error handling to dependencies + cleanup migrations ... - Add detailed error handling in DependencyModel (throw exceptions on failure) - Add try-catch in ticket_dependencies.php to catch query errors - Remove all old migrations (001-014) that have already been run - Keep only new feature migrations (015-018) for reference Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 17:07:54 -05:00
jaredandClaude Opus 4.5	2ce4a14201	fix: Use LEFT JOIN in DependencyModel queries ... Makes queries more defensive - returns dependencies even if the linked ticket was deleted. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 17:02:50 -05:00
jaredandClaude Opus 4.5	be505b7312	Implement comprehensive improvement plan (Phases 1-6) ... Security (Phase 1-2): - Add SecurityHeadersMiddleware with CSP, X-Frame-Options, etc. - Add RateLimitMiddleware for API rate limiting - Add security event logging to AuditLogModel - Add ResponseHelper for standardized API responses - Update config.php with security constants Database (Phase 3): - Add migration 014 for additional indexes - Add migration 015 for ticket dependencies - Add migration 016 for ticket attachments - Add migration 017 for recurring tickets - Add migration 018 for custom fields Features (Phase 4-5): - Add ticket dependencies with DependencyModel and API - Add duplicate detection with check_duplicates API - Add file attachments with AttachmentModel and upload/download APIs - Add @mentions with autocomplete and highlighting - Add quick actions on dashboard rows Collaboration (Phase 5): - Add mention extraction in CommentModel - Add mention autocomplete dropdown in ticket.js - Add mention highlighting CSS styles Admin & Export (Phase 6): - Add StatsModel for dashboard widgets - Add dashboard stats cards (open, critical, unassigned, etc.) - Add CSV/JSON export via export_tickets API - Add rich text editor toolbar in markdown.js - Add RecurringTicketModel with cron job - Add CustomFieldModel for per-category fields - Add admin views: RecurringTickets, CustomFields, Workflow, Templates, AuditLog, UserActivity - Add admin APIs: manage_workflows, manage_templates, manage_recurring, custom_fields, get_users - Add admin routes in index.php Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-20 09:55:01 -05:00