jared 01f2dac2d6 Fix session_start guards, add missing API routes, rewrite README ...

- Added session_status() === PHP_SESSION_NONE guard to six API files
  (custom_fields, revoke_api_key, manage_templates, generate_api_key,
  get_template, manage_recurring) that called bare session_start() after
  RateLimitMiddleware had already started the session
- Registered /api/notifications.php and /api/user_avatar.php in index.php
  router (were missing, served only by direct file access)
- Complete README rewrite: remove all Discord references (Matrix/hookshot
  is the only external notification method), add hwmonDaemon API docs,
  document all TDS v1.2 features (kanban, charts, SLA, command palette,
  notification bell, watcher avatars, @mention, etc.), fix keyboard
  shortcuts table, add Matrix/LDAP env vars to setup section

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-05 17:52:07 -04:00

..

add_comment.php

feat: ticket watchers, fulltext search, single-query pagination, watcher notifications

2026-03-29 22:00:32 -04:00

assign_ticket.php

Invalidate stats cache after any ticket-modifying API call

2026-04-05 12:39:24 -04:00

audit_log.php

Fix CSS variables, missing utility classes, API hardening, and audit log UX

2026-03-28 13:22:12 -04:00

bootstrap.php

Apply web_template gap analysis improvements (P1-P3)

2026-03-29 17:02:40 -04:00

bulk_operation.php

Fix manage_workflows bind_param by-reference errors and duplicate session_start

2026-04-05 17:27:02 -04:00

check_duplicates.php

Fix visibility enforcement and register missing API routes

2026-03-20 21:39:02 -04:00

clone_ticket.php

Invalidate stats cache after any ticket-modifying API call

2026-04-05 12:39:24 -04:00

custom_fields.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

delete_attachment.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

delete_comment.php

Security/correctness: visibility filtering, Content-Type headers, group validation

2026-03-29 18:23:16 -04:00

download_attachment.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

export_tickets.php

Wire optimistic locking, visibility audit log, full ticket export

2026-03-29 21:19:01 -04:00

generate_api_key.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

get_comments.php

feat: comment pagination, Matrix integration, Synapse mention resolution

2026-03-29 21:34:16 -04:00

get_template.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

get_users.php

Audit fixes: security, dead code removal, API consolidation, JS dedup

2026-02-11 14:50:06 -05:00

health.php

Add performance, security, and reliability improvements

2026-01-30 14:39:13 -05:00

manage_recurring.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

manage_templates.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

manage_workflows.php

Fix manage_workflows bind_param by-reference errors and duplicate session_start

2026-04-05 17:27:02 -04:00

notifications.php

Fix notifications 500 (audit_id column), smart resolution time units

2026-04-05 11:32:02 -04:00

revoke_api_key.php

Fix session_start guards, add missing API routes, rewrite README

2026-04-05 17:52:07 -04:00

saved_filters.php

fix: CSRF token staleness causing intermittent 403 on POST actions

2026-03-30 19:01:18 -04:00

ticket_dependencies.php

Security: add authorization checks to ticket_dependencies API

2026-03-29 18:26:01 -04:00

update_comment.php

Security/correctness: visibility filtering, Content-Type headers, group validation

2026-03-29 18:23:16 -04:00

update_ticket.php

Invalidate stats cache after any ticket-modifying API call

2026-04-05 12:39:24 -04:00

upload_attachment.php

Fix file upload security, bind_param mismatch, and cookie flags

2026-03-29 18:14:18 -04:00

user_avatar.php

fix: ldap_get_entries returns raw binary, remove incorrect base64 decode

2026-03-28 20:53:49 -04:00

user_preferences.php

Add timezone and notif_last_seen to user_preferences valid keys whitelist

2026-04-05 11:01:38 -04:00

watch_ticket.php

fix: watcher avatars, dependency TDS styling, asset versions, nav dropdown light theme

2026-04-04 12:02:30 -04:00