Repository navigation
Help Assistant Internals 1 The Index
Part 1 of 3. Part 2: answering a question - the hybrid search Β· Part 3: writing the answer, and learning from misses Β· Every design question, answered
The help assistant answers "how do I...?" from FreeITSM's own in-app help. Everything it does rests on one thing built in advance: an index of every help section, in every language analysts use, with a vector for each. This page is how that index is made, kept fresh and shipped.
For what the feature does for users, see The help assistant. For the decisions behind it, the design. The step-by-step build notes are in the Developer Guide; these three pages explain how the whole thing fits together.
flowchart LR
subgraph Built in advance - part 1
P[75 help pages] -->|rendered, one process each| S[help_sections<br/>722 English + translations]
S -->|embedding model| V[help_section_vectors<br/>one per section per model]
R[Release file<br/>ready-made vectors] -.->|taken when the text matches| V
end
subgraph Every question - parts 2 and 3
Q[Question] --> W[Word search<br/>BM25 over passages]
Q --> M[Meaning<br/>question vector vs section vectors]
W --> X[Merge<br/>reciprocal rank fusion]
M --> X
X --> A{Chat AI set up?}
A -->|no| C[Canned line + help cards]
A -->|yes| AI[AI writes the answer<br/>from those sections only]
end
S --> W
V --> M
Everything on the left is a cache. The help pages and language files are the truth; delete the two tables and the next build makes them again. Nothing anyone writes is ever stored there.
The obvious way to index help is to read the t('...') keys out of each page's source. It does not work here:
- Many pages build their sections in loops through helpers -
people/help.phpdraws ten sections from$h($id . '.title'), so the keys never appear in the source. - The 35 System help pages are written in English in the page itself, with no keys at all.
- A key that no page shows would be indexed anyway, and could be "answered" with a link to nowhere.
So every page is rendered - executed exactly as a browser request would - and the sections are read from the HTML. That gives precisely what a reader sees, in their language, and nothing else.
// includes/help_index.php - helpIndexRenderPage()
$cmd = escapeshellarg($php) . ' ' . escapeshellarg("$root/scripts/help_render_page.php") . ' '
. escapeshellarg($page) . ' ' . escapeshellarg($locale) . ' ' . (int)$analystId;
exec($cmd . ' 2>NUL', $out, $code); // the last line of output is JSONEach render is its own PHP process because a help page is an ordinary page: it defines functions and constants, calls session_start() and may exit(). Two in one process would collide or never return. scripts/help_render_page.php:
I18n::pinLocale((string)$locale); // command line only - the page's own
// initFromSession() cannot change it
session_id('helprender' . bin2hex(random_bytes(8))); // a throwaway session...
session_start();
$_SESSION['analyst_id'] = (int)$analystId; // ...as an admin with every module, so
// each page's own module gate lets it in
parse_str($query, $_GET); // system/integrations/help.php?provider=jira
ob_start();
register_shutdown_function(function () { // runs even if the page exit()s
$html = '';
while (ob_get_level() > 0) $html = ob_get_clean() . $html;
@session_destroy();
echo "\n" . json_encode(['ok' => true, 'sections' => helpRenderSections($html)]) . "\n";
});
chdir(dirname("$root/$page"));
require "$root/$page";Three details that each cost a debugging session:
-
I18n::pinLocale()exists only for this. A page callsI18n::initFromSession(), which reads the signed-in analyst's saved language; the pin makes that call leave the locale alone. It does nothing outside the command line. -
The page's own
session_start()is ignored, because the renderer's session is already running - and PHP logs a notice per render (74 per language per build). The renderer silences exactly that notice. - The analyst is only a key. Rendering writes nothing for them; help pages do not touch the Recent trail.
helpIndexPages() finds every */help*.php and */*/help*.php that calls requireModuleAccess('β¦') (which also tells it the page's module), every system/help/*.php (module system), and a short HELP_INDEX_EXTRA list for what a folder scan cannot find - the integrations guide is one page per ?provider=. The self-service portal's guide and Help Centre are left out on purpose: the assistant is for analysts. Today that is 75 pages.
The markup every help page already used is the contract (house style Β§7):
<div class="help-section" id="settings" data-cap="tickets.manage">
<div class="help-section-header">
<span class="help-section-num">10</span>
<div><h3>Settings</h3><p>...</p></div>
</div>
<div class="help-card"><strong>Departments</strong><span>Create departments like IT, HR...</span></div>
</div>helpRenderSections() (DOMDocument + XPath) turns each into:
| Field | From |
|---|---|
id |
the id - the anchor an answer links to |
title |
the first <h3> (the number badge is dropped) |
text |
blocks, one per paragraph, card, step, note, list item or table row, joined by a blank line |
cap |
data-cap - the permission the section describes (part 3) |
| skip |
data-help-search="off" - never indexed |
Plus one extra entry per page for its introduction - the hero banner and any .help-lede above the first section - with no anchor, linking to the top of the page. It is often the best answer to "what is X?".
Why blocks, not one string: search scores passages of about 700 characters (part 2), and a passage must never cut a card in half. Keeping the blank-line boundaries lets
helpPassages()pack whole blocks.
TRAP:
textContentglues a card's title to its body - "DepartmentsCreate departments". Each block's text is joined from its text nodes with spaces (helpRenderText()).
CREATE TABLE help_sections (
section_key VARCHAR(191) NOT NULL, -- 'tickets/help.php#settings'; a page intro is just the page
locale VARCHAR(10) NOT NULL, -- 'en', 'de', 'pt-BR'
page, anchor, module, -- module drives the access filter
cap VARCHAR(80) NULL, -- data-cap
title, body, -- body keeps the blank-line block boundaries
text_hash CHAR(64) NOT NULL, -- sha256(title + body): what it says now
built_datetime DATETIME NOT NULL,
UNIQUE KEY (section_key, locale)
);helpIndexBuild($conn, $locales) renders every page in English, then in each extra language, and for each section:
| Section | What happens |
|---|---|
text unchanged (text_hash matches) |
nothing - its row, and its vectors, stay |
| text changed | updated (its vectors become out of date - below) |
| gone from its page | deleted, its vectors with it (foreign key cascade) |
| another language, text identical to the English | not stored - an untranslated section would be a duplicate; English covers it |
| module switched off for the install | skipped, rows left alone - nobody can open it, so the search never returns them |
An unchanged rebuild changes nothing. English takes about 25 seconds; each further language another 25.
helpIndexLocalesInUse(): English, the install's default, and every language an analyst has chosen in Preferences. An index in a language nobody reads is wasted work.
When a German analyst asks, helpSectionsFor() gives them, for each section, its German row if there is one, otherwise its English row:
$st = $conn->prepare("SELECT id, section_key, locale, ... FROM help_sections WHERE locale IN ('en', ?)");
$st->execute([$locale]);
foreach ($st->fetchAll(PDO::FETCH_ASSOC) as $r) {
if (!isset($by[$r['section_key']]) || $r['locale'] === $locale) $by[$r['section_key']] = $r;
}Per section, not per language: on an install where German is 22 % translated, a German analyst still searches 100 % of the help - 22 % of it in German.
Then modules the analyst cannot open are dropped (analystCanAccessModule(), which also says no to a module switched off for the install). On prtest that leaves an administrator 722 English sections; the German index adds 329 German ones.
A vector is a list of numbers an embedding model produces from text, so that texts meaning similar things get similar lists. Part 2 explains how they are compared; here is how they are made and stored.
CREATE TABLE help_section_vectors (
section_id INT NOT NULL, -- help_sections.id, ON DELETE CASCADE
model VARCHAR(120) NOT NULL, -- 'openai:text-embedding-3-small@512'
text_hash CHAR(64) NOT NULL, -- the section's text_hash when this was made
vector MEDIUMTEXT NOT NULL, -- float32, base64
source VARCHAR(20) NOT NULL DEFAULT 'built', -- or 'release'
source_version VARCHAR(20) NULL,
UNIQUE KEY (section_id, model)
);π΄ Vectors from different models mean nothing to each other. A question must be embedded by exactly the model its candidate sections were.
So the table holds vectors for each model separately, and the model's identity travels with every vector:
// includes/ai_embeddings.php
function aiEmbeddingModelId(array $cfg): string
{
$family = ($cfg['provider'] ?? 'openai') === 'openai_compatible' ? 'compatible' : 'openai';
$id = $family . ':' . trim((string)($cfg['model'] ?? ''));
return !empty($cfg['dimensions']) ? $id . '@' . (int)$cfg['dimensions'] : $id;
}OpenAI and Azure OpenAI running the same model make the same vectors, so they share an identity (and the ready-made vectors suit both); a local server's models are compatible:<name>. The length is part of it: @512 vectors cannot be compared with full-length ones.
OpenAI's text-embedding-3 models can return shorter vectors on request. Measured on the question set, 512 dimensions ranked exactly as well as the full 1,536 - and compare three times faster (16 ms against 50 ms over 720 sections in PHP). They are stored as float32, base64 - about a third of the size of JSON:
function aiVectorPack(array $v): string { return base64_encode(pack('g*', ...$v)); }
function aiVectorUnpack(string $p): array { return array_values(unpack('g*', base64_decode($p, true))); }helpVectorsBuild() - run by the same build, after the sections:
- If the configured model is the shipped one, take the ready-made vectors for every section whose text still matches (free - below).
-
Embed every section with no current vector (none for this model, or a
text_hashthat no longer matches), 64 to a request -aiEmbedBatch()sends many texts at once, so 720 sections are a dozen calls, not 720. - Only when none is missing, make this model the one in use and delete every other model's vectors.
That third step is what lets an admin change model without the assistant going dark - the old model keeps answering until the new set is complete. Part 2 shows the trap that made it necessary.
A vector whose text_hash is not its section's current text_hash was made from old text. System β Help assistant counts them ("12 sections have changed since their vectors were made") and Rebuild re-embeds just those. The cheap first check - has anything changed at all? - is file dates: a help page or language file newer than the last build. The exact check is the hash, because dates lie both ways (a git pull re-dates unchanged files; a restore back-dates changed ones).
The help text is identical on every install of a version, so its vectors would be too. They ship:
data/help-vectors/openai-text-embedding-3-small-512.json.gz (720 English sections, about 1 MB)
{ "model": "openai:text-embedding-3-small@512", "version": "5.0.0",
"vectors": { "tickets/help.php#settings|en": ["<text_hash>", "<packed vector>"], ... } }
helpVectorsImportShipped() takes a vector only where the install's section still hashes the same - a section an install changed (an edited language file) is embedded there instead. On prtest a fresh build took 720 ready-made and embedded only the 659 German and Spanish sections.
Each release refreshes the file with php scripts/help_vectors_export.php X.Y.Z (RELEASING step 3b). Skipping it costs nothing but money on each install.
What shipping cannot save: the question still needs the embedding model, because it only exists when someone asks. An install with no embedding key never uses vectors - shipped or not - and searches by words.
System β Help assistant β Rebuild spawns scripts/help_index_build.php in the background with the Intune worker's intuneSpawnGenericWorker() (reused, not copied), and the page polls help_index_build_state (running / done / failed, with stats). Saving the assistant on for the first time, or matching by meaning on for the first time, starts a build by itself.
TRAP: a background worker must not print.
intuneSpawnGenericWorker()closes the worker's output straight away; on Windows the first write to that closed pipe killed the build after one page, leaving it "running" for ever. Started with the job id0, the builder prints nothing and reports through the setting.
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
-
Architecture
- β³ π§Ή Root folder tidy (URL routing)
- β³ π Database Integrity (FKs & constraints)
- β³ π οΈ Database Verification β Developer Guide
- β³ π§© Service Layer (UI + API share code)
- β³ πͺ€ Code traps (the TRAP: comments)
- β³ π Commenting for the Engineering wiki
- β³ π οΈ Engineering wiki scanner - Developer Guide
- β³ π Service-Layer progress
- π€ Contributing (read before a pull request)
- π§ͺ Developer tests
- π PDF exports moved to PDFKit (#254)
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- π± Currencies
- π§ The sidebar (optional module rail)
- π§© Preference templates
- π Display order (modules, Watchtower cards) β Developer Guide
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: Projects
- β³ ποΈ Mobile: Files
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- β³ π Switching modules off
- β³ π οΈ Module availability β Developer Guide
- β³ π Module availability β design (#217)
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
-
π¦ Microsoft Entra ID
- β³ π₯ Importing people and groups
- β³ π» Intune: assets to their primary user
- β³ π’ Organisation chart
- β³ π οΈ Entra directory sync β Developer Guide
- β³ π οΈ Entra import - review (#235)
- β³ π οΈ Entra follow-ups - review (#237-#240)
- β³ π οΈ Intune primary user - review (#236)
- β³ π οΈ Organisation chart - reviews (#242, #265)
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π Proposal: custom fields, inventory import and change evidence (#194)
- β³ π οΈ Custom fields, evidence + inventory - review (#195-#197)
- β³ π οΈ Long forms in a task's Work view - review (#198)
- β³ π οΈ Empty Procedures fold - review (#247)
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ π§βπΌ REST API: Analysts
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π Live updates
- β³ π οΈ Watching a ticket - Developer Guide (1 of 2)
- β³ π οΈ CSAT delay and reminder - Developer Guide
- β³ π οΈ Ticket checklist step types - Developer Guide (1 of 2)
- β³ π οΈ Right-click Attach checklist - Developer Guide
- β³ π οΈ Checklists in the REST API - Developer Guide
- β³ π οΈ Inbox.js map β Developer Guide
- β³ π οΈ Floating windows & the file viewer β Developer Guide
- β³ π οΈ Tickets settings β Developer Guide
- β³ π Simpler ticket and task forms - design (#218)
- β³ ποΈ The ticket workspace
- β³ π Forms on tickets
- β³ π The ticket table
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π§Ύ Custom ticket fields
- β³ π·οΈ Ticket categories
- β³ π§Ύ A type for every new ticket
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ π Ticket dashboard β Developer Guide
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ π Attachment size limits and large emails
-
β³ Basic IMAP mailboxes
- β³ π Basic IMAP without the PHP extension (#257)
- β³ π οΈ Basic IMAP client β Developer Guide
- β³ π§ͺ Basic IMAP client β Testing and verifying
- β³ π οΈ Basic IMAP - Sent copy - Developer Guide (#270)
- β³ π οΈ Verifying a mail folder β Developer Guide
- β³ π οΈ Mailbox providers β Developer Guide
- β³ π οΈ How Gmail mail collection works β Developer Guide
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Case reports - a ticket and its work as one PDF
- β³ π Scheduled work in your own calendar
- Problem Management
-
Tasks
- β³ π οΈ Task board and subtasks β Developer Guide
- β³ π§βπ€βπ§ People on a task ("Involved")
- β³ π Repeating tasks
- β³ π’ Moving a task between companies
- π Projects
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Leases
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π§© Asset type layouts
- β³ π Inventory freshness
- β³ π Linked configuration item
- β³ π Connected assets
- β³ π Asset review
-
β³ π·οΈ QR asset labels
- β³ π οΈ QR asset labels β Developer Guide
- β³ π Asset label designer - design (#229)
- β³ π· Asset scanning β Developer Guide
- β³ π οΈ Asset tag numbering β Developer Guide
- β³ π οΈ Asset reconciliation β Developer Guide
- β³ π οΈ Reconciliation, tags + labels - review (#164)
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ πͺ Hyper-V and Failover Clusters
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Starters & leavers
- Domains
- ποΈ Files
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
-
CMDB
- β³ π οΈ CMDB β Developer Guide
- β³ π οΈ Impact analysis β Developer Guide
- β³ π οΈ Data quality β Developer Guide
- β³ π Linked assets
- β³ π Linking an asset to its CI - design (#201)
- β³ π Discovery and redundancy-aware impact - design (#199)
- β³ π οΈ Relationship wording - review (#297)
- Network Mapper
-
Workflows
- β³ π οΈ Workflow engine β Developer Guide
- β³ π οΈ Workflows for tasks β Developer Guide
- β³ π οΈ Workflow notes on a ticket β Developer Guide
- β³ π οΈ Workflow category routing β Developer Guide
- β³ β° Time-Based Triggers
- β³ πͺ Webhooks
- β³ π¬ Webhook Message Formats
- β³ π HTTPS Certificates & CA Bundles
- β³ π οΈ SSL Verification β the Global Setting
- β³ π Workflow & Webhook Pitfalls
- Issue trackers (Jira, Azure DevOps)
- π‘ Zabbix (monitoring)
- π¬ Microsoft Teams alerts
- π 3CX (phone system)
-
System
- β³ π οΈ Preferences β Developer Guide
- β³ π§Ή Maintenance
- β³ π Finding people in the Analysts list
- β³ πͺ When an analyst leaves
- β³ π οΈ System β Branding β Developer Guide
- β³ π©Ί Page health (D019) β Developer Guide
- β³ β Feature Bingo
- β³ π·οΈ Cost centres
- β³ π· Photo Album
- β³ Demo Data
- β³ π οΈ Demo Data β Developer Guide
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ One company supporting another
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ π CMDB relationships read backwards (5.1.0)
- β³ π #301 CSAT delay was never applied
- β³ π #281 Comments imported from Jira never arrived
- β³ π #288 A change failed to open with Enforce approvals on
- β³ π Long non-Latin articles never got an embedding
- β³ π« #280 Email lookups scanned the whole table
- β³ β #266 Dragging a task told nobody
- β³ π #255 Article previews showed HTML codes
- β³ π #252 A link to a Knowledge article did not open
- β³ π #254 PDFs could not print Polish
- β³ π #250 Clicking a folder left the open article on screen
- β³ π« #260 The dashboard cog did nothing
- β³ π« #248 A department rule never matched on four routes
- β³ π A directory account could be matched to someone else
- β³ π« #244 Reply went to the assigned analyst
- β³ π Mailbox sign-in was not checked
- β³ π Four weaknesses around signing in
- β³ π A lookup answer could name any record
- β³ π« #227 A mailbox could not be deleted
- β³ π« #226 A picture on a note could not be closed
- β³ π» #222 The Assets page never loaded in 4.3.0
- β³ βοΈ #214 A "contains" condition did not match capitals
- β³ βοΈ #216 A workflow email from a chosen mailbox always failed
- β³ π³ The Docker image was missing PHP extensions
- β³ π A failed DNS lookup read as a missing record
- β³ π A link could change data
- β³ π Access outlived its removal
- β³ π Knowledge articles could run scripts
- β³ π Knowledge writes ignored permissions
- β³ π Company boundaries (Oct 2026)
- β³ π Smaller gaps (Oct 2026)
- β³ π Escaped text could leave its attribute
- β³ π Task descriptions were not cleaned
- β³ π Task documents ignored company scope
- β³ π Repeating tasks ignored company scope
- β³ π¬ #183 Mailbox checks overlapped
- β³ π #188 Transfer lock shown off when unknown
- β³ β #184 Subtask names and Overdue
- β³ π§© #186 Teams: the buttons did nothing
- β³ π Text in a change could run script
- β³ π AI settings changed without the AI permission
- β³ πͺ #178 Deleting an analyst failed
- β³ π« A team with no departments showed 0 tickets
- β³ π Projects: adding a phase did nothing on Save
- β³ π Leavers could still sign in
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96