DivisionDesk Core

# DivisionDesk Core Changelog

## 3.6.1 — 2026-08-14

### Fixed
- Module database migrations now execute before `Install.php` or `Update.php`.
- Fresh module installs no longer run both the install hook and the update hook.
- Module updates receive both `from_version` and target `version` lifecycle context.
- Store-time Addon registration now uses the same scoped Registry context as normal module boot.
- Fixes installation of modules that seed tables created by migrations, including Communications.

## 3.6.0 — 2026-08-14

### Added
- Renamed the SSH bootstrap installer to **`DivisionDesk-install`**.
- Added single-file **`divisiondesk-install.php`** browser installer for installations without SSH.
- Browser installer uses local filesystem installation first, with FTP, FTPS, SFTP and manual ZIP fallbacks.
- FTP/FTPS/SFTP credentials are request-only and are never persisted.
- CLI and browser installers consume the same formal DivisionDesk Core release-manifest contract.
- Installer bootstrap self-cleanup/self-disable integration with successful Website Setup.
- Core installer/verification service plus `bin/core-verify.php` groundwork for future guided repair of missing/changed Core files.
- Formal release manifest installer metadata: current version, package URL, SHA-256, exact package size, minimum PHP and installer API compatibility.
- Persistent background Job Queue with priorities, delayed execution, retry/backoff, failed jobs, idempotency keys, worker heartbeat and retention cleanup.
- Job-handler registry so modules can submit background work without implementing their own cron system.
- Encrypted Secret Vault using AES-256-GCM with a site-local key stored outside the public web root.
- Shared transport interface/registry for Email, SMS, Push and future communication providers.
- Shared authenticated-webhook/HMAC helper and webhook activity log.
- Core Event Bus for module-to-module notification triggers.
- Administration Job Queue diagnostics, manual worker execution and failed-job retry.

### Changed
- Installation documentation now uses `DivisionDesk-install`; legacy `scv-install` naming is no longer presented to users.
- Core updater accepts the formal `package_url` / `sha256` / `package_size` release manifest while retaining compatibility aliases.
- Scheduler now processes the shared Job Queue and cleans old completed jobs.
- Administration flyout sizing/spacing refined to reduce oversized module menus.

### Security
- Provider credentials can now be stored encrypted rather than in ordinary site settings.

## 3.5.4 — 2026-08-14

### Added
- Persistent **Remember Me** authentication for administrators using revocable, hashed device tokens.
- Automatic restoration of remembered administrator and member sessions on all DivisionDesk web requests.
- Administration **Email Delivery** settings with SMTP, PHP `mail()`, and Development/Log transports.
- SMTP test-mail tool and mail-attempt log.
- Administration navigation subgroups/flyouts so module tools can be grouped under their parent module.
- Module registration context so installed modules automatically receive a navigation subgroup when they register Organization tools.
- Changelog page in Administration.
- Formal `CHANGELOG.md` package convention in the Module SDK.

### Changed
- DivisionDesk production platform/server default is now `https://divisiondesk.com/`.
- Public `Member Login` navigation changes to **Logout** while a member or administrator is authenticated.
- Administration navigation shows the current administrator account and Logout links.
- Page Builder widget blocks now display the actual widget name, selected layout, and key configuration settings.
- Widget inspector now uses registered widget metadata to generate layout and setting controls.
- `Powered by DivisionDesk` now links to `https://divisiondesk.com/`.
- Email delivery status distinguishes SMTP acceptance, PHP-mail queue acceptance, development logging, and failures.

### Fixed
- Page Builder now preserves the widget identifier when a widget is dragged into a page. Previously a newly inserted widget could be saved without its widget key and later render as `Widget unavailable:`.
- Core package/server URL fallbacks no longer reference temporary project domains.

## 3.5.3 — 2026-08-14

### Fixed
- Administration registry Core items no longer disappear when an installed module registers its Administration destinations before Core boot.
- Help Center Core topics no longer disappear when module help topics register first.

## 3.5.2 — 2026-08-14

### Fixed
- Hardened Administration registry handling of short/malformed navigation definitions that could cause `Undefined array key` errors.

## 3.5.0–3.5.1 — 2026-08-14

### Added
- Capability-driven Administration.
- Grouped Administration navigation.
- Help Center and Administration search.
- Automatic update scheduler/background-job foundation.
- Module lifecycle and migration framework.
- Audit log, notices, system health, and developer tools.
- Standardized DivisionDesk footer.

## 3.4.0 — 2026-08-14

### Added
- Universal Variable Registry and Site Profile.
- Role/data resolver architecture.
- Standalone and module Widget registries.
- Site Template 2.0 support.
- Page Layout and Site Template export foundations.