From 8603f003f948a21c93f9028f59360eabd1845606 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Tue, 30 Dec 2025 20:18:53 -0500
Subject: [PATCH 01/25] agents

---
 .../agents/code-quality.agent.md              | 39 +++++++++++
 .../agents/mysql-mariadb.agent.md             | 65 +++++++++++++++++++
 .../agents/php-devloper.agent.md              | 41 ++++++++++++
 .gitignore                                    |  1 -
 4 files changed, 145 insertions(+), 1 deletion(-)
 create mode 100644 .github/ISSUE_TEMPLATE/agents/code-quality.agent.md
 create mode 100644 .github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md
 create mode 100644 .github/ISSUE_TEMPLATE/agents/php-devloper.agent.md

diff --git a/.github/ISSUE_TEMPLATE/agents/code-quality.agent.md b/.github/ISSUE_TEMPLATE/agents/code-quality.agent.md
new file mode 100644
index 0000000..0c93293
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/agents/code-quality.agent.md
@@ -0,0 +1,39 @@
+---
+description: "This Custom agent acts as a quality assurance specialist, focusing on code quality, best practices, and maintainability."
+name: "Code Quality Specialist"
+tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+model: "Claude Sonnet 4.5"
+---
+
+# Code Quality Specialist
+You are a Code Quality Specialist agent. Your role is to ensure that the codebase adheres to high standards of quality, best practices, and maintainability. You have access to various tools to help you perform your tasks effectively .
+
+The technology stack you will work with is a lamp stack (Linux, Apache, MySQL, PHP) along with JavaScript for frontend development.
+
+
+## Capabilities
+- **Code Review:** Analyze code for adherence to coding standards, best practices, and design patterns.
+- **Refactoring:** Suggest and implement code refactoring to improve readability, maintainability, and performance.
+- **Testing:** Ensure that code is well-tested, with appropriate unit tests, integration tests, and end-to-end tests.
+- **Documentation:** Verify that code is well-documented, with clear comments and comprehensive documentation.
+- **Performance Optimization:** Identify and address performance bottlenecks in the codebase.
+- **Security Best Practices:** Ensure that code follows security best practices to prevent vulnerabilities.
+- **Continuous Integration/Continuous Deployment (CI/CD):** Review and improve CI/CD pipelines to ensure smooth and reliable deployments.
+- **Code Metrics:** Utilize code metrics to assess code quality and identify areas for improvement.
+
+## Tools
+You have access to the following tools to assist you in your tasks:
+- **search/codebase:** Search through the codebase for relevant information or code snippets.
+- **edit/editFiles:** Edit code files to implement improvements or fixes.
+- **githubRepo:** Interact with the GitHub repository to manage issues, pull requests, and code reviews.
+- **extensions:** Utilize extensions that can enhance your capabilities in code quality assurance.
+- **web:** Access the web for additional resources, documentation, or best practices.
+
+
+## Instructions
+When assisting with tasks, follow these guidelines:
+1. **Understand the Request:** Clearly understand the user's request or issue before proceeding.
+2. **Gather Information:** Use the available tools to gather necessary information about the codebase, coding standards, and existing issues.
+3. **Provide Solutions:** Offer clear and actionable solutions or recommendations based on best practices and your expertise.
+4. **Communicate Clearly:** Ensure that your explanations are clear and easy to understand, especially for users who may not be code quality experts.
+5. **Follow Up:** If necessary, follow up on previous tasks to ensure that code quality issues have been resolved or improvements have been successfully implemented.
diff --git a/.github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md b/.github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md
new file mode 100644
index 0000000..4ab939b
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md
@@ -0,0 +1,65 @@
+---
+description: "This custom agent assits with enhancements, troubleshooting, and management of MySQL and MariaDB databases."
+name: "MySQL/ MariaDB Database Administrator"
+tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+model: "Claude Sonnet 4.5"
+---
+
+# MySQL/ MariaDB Database Administrator
+
+You are a MySQL and MariaDB Database Administrator agent. Your role is to assist with enhancements, troubleshooting, and management of MySQL and MariaDB databases. You have access to various tools to help you perform your tasks effectively.
+
+## Capabilities
+- **Database Management:** Assist with database creation, configuration, optimization, and maintenance tasks.
+- **Query Optimization:** Analyze and optimize SQL queries for better performance.
+- **Troubleshooting:** Diagnose and resolve database-related issues, including connection problems, performance bottlenecks, and data integrity concerns.
+- **Backup and Recovery:** Provide guidance on backup strategies and recovery procedures.
+- **Security:** Advise on best practices for securing MySQL and MariaDB databases.
+- **Version Upgrades:** Assist with planning and executing database version upgrades.
+- **Monitoring:** Recommend tools and techniques for monitoring database performance and health.
+- **Scripting:** Help with writing and optimizing scripts for database automation tasks.
+
+## Tools
+You have access to the following tools to assist you in your tasks:
+- **search/codebase:** Search through the codebase for relevant information or code snippets.
+- **edit/editFiles:** Edit configuration files, scripts, or code as needed.
+- **githubRepo:** Interact with the GitHub repository to manage issues, pull requests, and code reviews.
+- **extensions:** Utilize extensions that can enhance your capabilities in managing databases.
+- **web:** Access the web for additional resources, documentation, or troubleshooting guides.
+
+## Instructions
+When assisting with tasks, follow these guidelines:
+1. **Understand the Request:** Clearly understand the user's request or issue before proceeding.
+2. **Gather Information:** Use the available tools to gather necessary information about the database environment, configurations, and any existing issues.
+3. **Provide Solutions:** Offer clear and actionable solutions or recommendations based on best practices and your expertise.
+4. **Communicate Clearly:** Ensure that your explanations are clear and easy to understand, especially for users who may not be database experts.
+5. **Follow Up:** If necessary, follow up on previous tasks to ensure that issues have been resolved or enhancements have been successfully implemented.
+
+
+## Sample design patternsHere are some common design patterns and best practices for MySQL and MariaDB database management:
+- **Normalization:** Ensure that database schemas are normalized to reduce redundancy and improve data integrity.
+- **Indexing:** Use appropriate indexing strategies to enhance query performance.
+- **Connection Pooling:** Implement connection pooling to manage database connections efficiently and improve application performance
+
+
+
+## Built in Cacti DB functions  are included from the cacti project. Here are some of the commonly used functions:
+## you can find the included file in the cacti project here:
+- [Cacti DB Functions](https://github.com/Cacti/cacti/blob/1.2.x/lib/database.php)
+- `db_fetch_row($result)`: Fetches a single row from the result set as an associative array.
+- `db_fetch_assoc($result)`: Fetches a single row from the result set as an associative array.
+- `db_query($query)`: Executes a SQL query and returns the result set.
+- `db_insert($table, $data)`: Inserts a new record into the specified table.
+- `db_update($table, $data, $where)`: Updates records in the specified table based on the given conditions.
+- `db_delete($table, $where)`: Deletes records from the specified table based on the given conditions.
+- `db_escape_string($string)`: Escapes special characters in a string for use in a SQL query.
+- `db_num_rows($result)`: Returns the number of rows in the result set.
+- `db_last_insert_id()`: Retrieves the ID of the last inserted record.
+
+
+##web documentation
+For additional information and best practices, refer to the official MySQL and MariaDB documentation:
+- [MySQL Documentation](https://dev.mysql.com/doc/)
+- [MariaDB Documentation](https://mariadb.com/kb/en/documentation/)
+
+Use your capabilities and tools effectively to assist users with their MySQL and MariaDB database needs.
\ No newline at end of file
diff --git a/.github/ISSUE_TEMPLATE/agents/php-devloper.agent.md b/.github/ISSUE_TEMPLATE/agents/php-devloper.agent.md
new file mode 100644
index 0000000..1992350
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/agents/php-devloper.agent.md
@@ -0,0 +1,41 @@
+---
+description: "This custom agent acts as a PHP developer, assisting with PHP code development, debugging, and optimization."
+name: "PHP Developer"
+tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+model: "Claude Sonnet 4.5"
+---
+
+# PHP Developer
+You are a PHP Developer agent. Your role is to assist with PHP code development, debugging, and optimization. You have access to various tools to help you perform your tasks effectively.
+You are to focus on PHP PSR-12 coding standards and best practices supporting modern PHP versions (PHP 8.1 and above).
+Your other roles include:
+- **Code Review:** Analyze PHP code for adherence to coding standards, best practices, and design patterns.
+- **Debugging:** Identify and resolve bugs or issues in PHP code.
+- **Performance Optimization:** Suggest and implement optimizations to improve the performance of PHP applications.
+- **Testing:** Ensure that PHP code is well-tested, with appropriate unit tests and integration tests.
+- **Documentation:** Verify that PHP code is well-documented, with clear comments and comprehensive documentation.
+- **Security Best Practices:** Ensure that PHP code follows security best practices to prevent vulnerabilities.
+
+## Tools
+You have access to the following tools to assist you in your tasks:
+- **search/codebase:** Search through the codebase for relevant information or code snippets.
+- **edit/editFiles:** Edit PHP code files to implement improvements or fixes.
+- **githubRepo:** Interact with the GitHub repository to manage issues, pull requests, and code reviews.
+- **extensions:** Utilize extensions that can enhance your capabilities in PHP development.
+- **web:** Access the web for additional resources, documentation, or best practices.
+
+
+
+## The project in this repo calls on functions from the cacti project. You can find the cacti documentation and main github repo here:
+- [Cacti GitHub Repository](https://github.com/Cacti/cacti/tree/1.2.x)
+- [Cacti Documentation](https://www.github.com/Cacti/documentation)
+
+
+
+## Instructions
+When assisting with tasks, follow these guidelines:
+1. **Understand the Request:** Clearly understand the user's request or issue before proceeding.
+2. **Gather Information:** Use the available tools to gather necessary information about the PHP codebase, coding standards, and existing issues.
+3. **Provide Solutions:** Offer clear and actionable solutions or recommendations based on best practices and your expertise.
+4. **Communicate Clearly:** Ensure that your explanations are clear and easy to understand, especially for users who may not be PHP experts.
+5. **Follow Up:** If necessary, follow up on previous tasks to ensure that PHP code issues have been resolved or improvements have been successfully implemented.
diff --git a/.gitignore b/.gitignore
index ec5e85f..efca3d2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,7 +19,6 @@
 # | http://www.cacti.net/                                                   |
 # +-------------------------------------------------------------------------+
 
-.git*
 
 locales/po/*.mo
 config.php

From 75c5cd951afa40b60998a0965b4ea8246eeab2f0 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Tue, 30 Dec 2025 20:39:56 -0500
Subject: [PATCH 02/25] Update copilot-instructions.md

---
 .github/ISSUE_TEMPLATE/copilot-instructions.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/ISSUE_TEMPLATE/copilot-instructions.md b/.github/ISSUE_TEMPLATE/copilot-instructions.md
index ced1322..d89f764 100644
--- a/.github/ISSUE_TEMPLATE/copilot-instructions.md
+++ b/.github/ISSUE_TEMPLATE/copilot-instructions.md
@@ -11,6 +11,7 @@ This is the **Syslog Plugin** for Cacti, a PHP-based network monitoring and grap
   - **Critical:** ALWAYS use the `syslog_db_*` wrapper functions (defined in `database.php`) for all database operations. NEVER use standard Cacti `db_*` functions directly for syslog tables, as they will fail if a dedicated database is configured.
 - **Integration:** The plugin integrates with Cacti via hooks defined in `setup.php`.
 - **Poller Integration:** Background processes (`syslog_process.php`, `syslog_removal.php`) are triggered by Cacti's poller or run independently.
+- **Syslog Reception:** Syslog messages are directly inserted into `syslog_incoming` table syslog_process.php then processes them.
 
 ## Critical Developer Workflows
 
@@ -55,3 +56,8 @@ This is the **Syslog Plugin** for Cacti, a PHP-based network monitoring and grap
 - `config.php.dist`: Template for database configuration.
 - `functions.php`: Core logic and utility functions.
 - `syslog.php`: Main UI entry point.
+
+
+**Documentation & Resources**
+- [Cacti main repo](https://github.com/Cacti/cacti/tree/1.2.x)
+- [cacti documentation](https://www.github.com/Cacti/documentation)
\ No newline at end of file

From 9a98241d7850790cdd5f8e586a96af46d8278c4b Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Thu, 1 Jan 2026 19:06:46 -0500
Subject: [PATCH 03/25] correct filename spelling

---
 .../agents/{php-devloper.agent.md => php-developer.agent.md}      | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename .github/ISSUE_TEMPLATE/agents/{php-devloper.agent.md => php-developer.agent.md} (100%)

diff --git a/.github/ISSUE_TEMPLATE/agents/php-devloper.agent.md b/.github/ISSUE_TEMPLATE/agents/php-developer.agent.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/agents/php-devloper.agent.md
rename to .github/ISSUE_TEMPLATE/agents/php-developer.agent.md

From 838c8b9c9a7f5c936bab0cb1e42d8df4b0106265 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 10:42:54 -0500
Subject: [PATCH 04/25] Move agents folder to proper place

---
 .github/{ISSUE_TEMPLATE => }/agents/code-quality.agent.md  | 0
 .github/{ISSUE_TEMPLATE => }/agents/mysql-mariadb.agent.md | 0
 .github/{ISSUE_TEMPLATE => }/agents/php-developer.agent.md | 0
 3 files changed, 0 insertions(+), 0 deletions(-)
 rename .github/{ISSUE_TEMPLATE => }/agents/code-quality.agent.md (100%)
 rename .github/{ISSUE_TEMPLATE => }/agents/mysql-mariadb.agent.md (100%)
 rename .github/{ISSUE_TEMPLATE => }/agents/php-developer.agent.md (100%)

diff --git a/.github/ISSUE_TEMPLATE/agents/code-quality.agent.md b/.github/agents/code-quality.agent.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/agents/code-quality.agent.md
rename to .github/agents/code-quality.agent.md
diff --git a/.github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md b/.github/agents/mysql-mariadb.agent.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/agents/mysql-mariadb.agent.md
rename to .github/agents/mysql-mariadb.agent.md
diff --git a/.github/ISSUE_TEMPLATE/agents/php-developer.agent.md b/.github/agents/php-developer.agent.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/agents/php-developer.agent.md
rename to .github/agents/php-developer.agent.md

From 811d5bba21a380ec313041c477969e15d32f8d50 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:37:08 -0500
Subject: [PATCH 05/25] add gha

---
 .github/workflows/codeql.yml     | 69 ++++++++++++++++++++++++++
 .github/workflows/php-syntax.yml | 84 ++++++++++++++++++++++++++++++++
 2 files changed, 153 insertions(+)
 create mode 100644 .github/workflows/codeql.yml
 create mode 100644 .github/workflows/php-syntax.yml

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..338e9d7
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,69 @@
+# +-------------------------------------------------------------------------+
+# | Copyright (C) 2004-2025 The Cacti Group                                 |
+# |                                                                         |
+# | This program is free software; you can redistribute it and/or           |
+# | modify it under the terms of the GNU General Public License             |
+# | as published by the Free Software Foundation; either version 2          |
+# | of the License, or (at your option) any later version.                  |
+# |                                                                         |
+# | This program is distributed in the hope that it will be useful,         |
+# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
+# | GNU General Public License for more details.                            |
+# +-------------------------------------------------------------------------+
+# | Cacti: The Complete RRDtool-based Graphing Solution                     |
+# +-------------------------------------------------------------------------+
+# | This code is designed, written, and maintained by the Cacti Group. See  |
+# | about.php and/or the AUTHORS file for specific developer information.   |
+# +-------------------------------------------------------------------------+
+# | http://www.cacti.net/                                                   |
+# +-------------------------------------------------------------------------+
+
+name: "CodeQL Security Analysis"
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+  schedule:
+    # Run CodeQL analysis weekly on Mondays at 00:00 UTC
+    - cron: '0 0 * * 1'
+
+jobs:
+  analyze:
+    name: CodeQL Analysis
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript', 'php']
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        # You can customize queries by uncommenting and modifying:
+        # queries: security-extended,security-and-quality
+
+    # Autobuild attempts to build any compiled languages
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v3
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/php-syntax.yml b/.github/workflows/php-syntax.yml
new file mode 100644
index 0000000..a7110ce
--- /dev/null
+++ b/.github/workflows/php-syntax.yml
@@ -0,0 +1,84 @@
+# +-------------------------------------------------------------------------+
+# | Copyright (C) 2004-2025 The Cacti Group                                 |
+# |                                                                         |
+# | This program is free software; you can redistribute it and/or           |
+# | modify it under the terms of the GNU General Public License             |
+# | as published by the Free Software Foundation; either version 2          |
+# | of the License, or (at your option) any later version.                  |
+# |                                                                         |
+# | This program is distributed in the hope that it will be useful,         |
+# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
+# | GNU General Public License for more details.                            |
+# +-------------------------------------------------------------------------+
+# | Cacti: The Complete RRDtool-based Graphing Solution                     |
+# +-------------------------------------------------------------------------+
+# | This code is designed, written, and maintained by the Cacti Group. See  |
+# | about.php and/or the AUTHORS file for specific developer information.   |
+# +-------------------------------------------------------------------------+
+# | http://www.cacti.net/                                                   |
+# +-------------------------------------------------------------------------+
+
+name: PHP Syntax Check
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  php-syntax:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
+        os: [ubuntu-latest]
+    
+    name: PHP ${{ matrix.php }} Syntax Check on ${{ matrix.os }}
+    
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    
+    - name: Install PHP ${{ matrix.php }}
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php }}
+        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
+        ini-values: "post_max_size=256M, max_execution_time=60, date.timezone=America/New_York"
+    
+    - name: Check PHP version
+      run: php -v
+    
+    - name: Create config file from dist
+      run: |
+        if [ -f config.php.dist ]; then
+          cp config.php.dist config.php
+        elif [ -f config_local.php.dist ]; then
+          cp config_local.php.dist config_local.php
+        fi
+    
+    - name: Check PHP syntax for all PHP files
+      run: |
+        echo "Checking PHP syntax..."
+        if find . -name '*.php' -exec php -l {} 2>&1 \; | grep -iv 'no syntax errors detected'; then
+          echo "Syntax errors found!"
+          exit 1
+        else
+          echo "No syntax errors detected."
+          exit 0
+        fi
+    
+    - name: Run PHP lint recursively
+      run: |
+        echo "Running comprehensive PHP lint check..."
+        find . -type f -name "*.php" | while read file; do
+          php -l "$file" || exit 1
+        done
+        echo "All PHP files passed syntax check!"

From e54920bda36edca5bdefd48a6558e249c2b1583b Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:39:54 -0500
Subject: [PATCH 06/25] Update codeql.yml

---
 .github/workflows/codeql.yml | 61 +++++++++++++++++++++++-------------
 1 file changed, 40 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 338e9d7..2bc6be4 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -19,7 +19,7 @@
 # | http://www.cacti.net/                                                   |
 # +-------------------------------------------------------------------------+
 
-name: "CodeQL Security Analysis"
+name: "PHPStan Static Analysis"
 
 on:
   push:
@@ -31,39 +31,58 @@ on:
       - main
       - develop
   schedule:
-    # Run CodeQL analysis weekly on Mondays at 00:00 UTC
+    # Run PHPStan analysis weekly on Mondays at 00:00 UTC
     - cron: '0 0 * * 1'
 
 jobs:
-  analyze:
-    name: CodeQL Analysis
+  phpstan:
+    name: PHPStan Analysis
     runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
 
     strategy:
       fail-fast: false
       matrix:
-        language: ['javascript', 'php']
+        php: ['8.0', '8.1', '8.2', '8.3']
 
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
 
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+    - name: Setup PHP ${{ matrix.php }}
+      uses: shivammathur/setup-php@v2
       with:
-        languages: ${{ matrix.language }}
-        # You can customize queries by uncommenting and modifying:
-        # queries: security-extended,security-and-quality
+        php-version: ${{ matrix.php }}
+        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
+        coverage: none
 
-    # Autobuild attempts to build any compiled languages
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+    - name: Install Composer dependencies
+      run: |
+        if [ -f composer.json ]; then
+          composer install --prefer-dist --no-progress --no-suggest
+        fi
 
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
-      with:
-        category: "/language:${{matrix.language}}"
+    - name: Create PHPStan config if not exists
+      run: |
+        if [ ! -f phpstan.neon ]; then
+          cat > phpstan.neon << 'EOF'
+        parameters:
+          level: 5
+          paths:
+            - .
+          excludePaths:
+            - vendor/
+            - locales/
+        EOF
+        fi
+
+    - name: Install PHPStan
+      run: composer require --dev phpstan/phpstan --with-all-dependencies || composer global require phpstan/phpstan
+
+    - name: Run PHPStan
+      run: |
+        if [ -f vendor/bin/phpstan ]; then
+          vendor/bin/phpstan analyse --no-progress --error-format=github || true
+        else
+          phpstan analyse --no-progress --error-format=github || true
+        fi
+      continue-on-error: true

From e921710e40c6a181d9b7c9b34ba36f7a3235c695 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:45:14 -0500
Subject: [PATCH 07/25] rename file

---
 .github/workflows/{codeql.yml => phpstan.yml} | 53 +++++++++++++++++++
 1 file changed, 53 insertions(+)
 rename .github/workflows/{codeql.yml => phpstan.yml} (52%)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/phpstan.yml
similarity index 52%
rename from .github/workflows/codeql.yml
rename to .github/workflows/phpstan.yml
index 2bc6be4..d9f9280 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/phpstan.yml
@@ -72,9 +72,62 @@ jobs:
           excludePaths:
             - vendor/
             - locales/
+          ignoreErrors:
+            - '#Function db_[a-z_]+ not found\.#'
+            - '#Function cacti_[a-z_]+ not found\.#'
+            - '#has invalid return type the\.#'
+            - '#Class [a-zA-Z_\\]+ not found\.#'
+          bootstrapFiles:
+            - .github/workflows/phpstan-bootstrap.php
         EOF
         fi
 
+    - name: Create PHPStan bootstrap for Cacti functions
+      run: |
+        mkdir -p .github/workflows
+        cat > .github/workflows/phpstan-bootstrap.php << 'EOF'
+        <?php
+        // PHPStan bootstrap file for Cacti plugin functions
+        // These functions are provided by the main Cacti application
+        
+        if (!function_exists('db_connect_real')) {
+            function db_connect_real(string $host, string $user, string $pass, string $db, string $type, int $port = 0, int $ssl = false, int $ssl_ca = '', int $ssl_cert = '', int $ssl_key = '') {}
+        }
+        if (!function_exists('db_close')) {
+            function db_close(&$link = null): bool { return true; }
+        }
+        if (!function_exists('db_execute')) {
+            function db_execute(string $sql, bool $log = true, int $db_conn = 0): bool { return true; }
+        }
+        if (!function_exists('db_execute_prepared')) {
+            function db_execute_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): bool { return true; }
+        }
+        if (!function_exists('db_fetch_cell')) {
+            function db_fetch_cell(string $sql, string $col_name = '', bool $log = true, int $db_conn = 0) { return ''; }
+        }
+        if (!function_exists('db_fetch_cell_prepared')) {
+            function db_fetch_cell_prepared(string $sql, array $params = [], string $col_name = '', bool $log = true, int $db_conn = 0) { return ''; }
+        }
+        if (!function_exists('db_fetch_row')) {
+            function db_fetch_row(string $sql, bool $log = true, int $db_conn = 0): array { return []; }
+        }
+        if (!function_exists('db_fetch_row_prepared')) {
+            function db_fetch_row_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): array { return []; }
+        }
+        if (!function_exists('db_fetch_assoc')) {
+            function db_fetch_assoc(string $sql, bool $log = true, int $db_conn = 0): array { return []; }
+        }
+        if (!function_exists('db_fetch_assoc_prepared')) {
+            function db_fetch_assoc_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): array { return []; }
+        }
+        if (!function_exists('cacti_log')) {
+            function cacti_log(string $message, bool $output = false, string $environ = 'CMDPHP', int $level = 0): void {}
+        }
+        if (!function_exists('cacti_sizeof')) {
+            function cacti_sizeof($array): int { return is_array($array) ? count($array) : 0; }
+        }
+        EOF
+
     - name: Install PHPStan
       run: composer require --dev phpstan/phpstan --with-all-dependencies || composer global require phpstan/phpstan
 

From e54cf977b0f663439df7e317a5784ecb1c4d0a1b Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:45:17 -0500
Subject: [PATCH 08/25] Create php-lint.yml

---
 .github/workflows/php-lint.yml | 62 ++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 .github/workflows/php-lint.yml

diff --git a/.github/workflows/php-lint.yml b/.github/workflows/php-lint.yml
new file mode 100644
index 0000000..2c4241a
--- /dev/null
+++ b/.github/workflows/php-lint.yml
@@ -0,0 +1,62 @@
+# +-------------------------------------------------------------------------+
+# | Copyright (C) 2004-2025 The Cacti Group                                 |
+# |                                                                         |
+# | This program is free software; you can redistribute it and/or           |
+# | modify it under the terms of the GNU General Public License             |
+# | as published by the Free Software Foundation; either version 2          |
+# | of the License, or (at your option) any later version.                  |
+# |                                                                         |
+# | This program is distributed in the hope that it will be useful,         |
+# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
+# | GNU General Public License for more details.                            |
+# +-------------------------------------------------------------------------+
+# | Cacti: The Complete RRDtool-based Graphing Solution                     |
+# +-------------------------------------------------------------------------+
+# | This code is designed, written, and maintained by the Cacti Group. See  |
+# | about.php and/or the AUTHORS file for specific developer information.   |
+# +-------------------------------------------------------------------------+
+# | http://www.cacti.net/                                                   |
+# +-------------------------------------------------------------------------+
+
+name: PHP Lint
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  php-lint:
+    runs-on: ubuntu-latest
+    
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
+    
+    name: PHP ${{ matrix.php }} Lint
+    
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    
+    - name: Setup PHP ${{ matrix.php }}
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php }}
+        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
+        coverage: none
+    
+    - name: Install parallel-lint
+      run: composer global require php-parallel-lint/php-parallel-lint
+    
+    - name: Run parallel-lint
+      run: |
+        export PATH="$HOME/.composer/vendor/bin:$PATH"
+        parallel-lint --exclude vendor --exclude locales/LC_MESSAGES .

From 6af126265950627871339568db10810f2ced7bed Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:47:10 -0500
Subject: [PATCH 09/25] Update phpstan.yml

---
 .github/workflows/phpstan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
index d9f9280..cbe4f6e 100644
--- a/.github/workflows/phpstan.yml
+++ b/.github/workflows/phpstan.yml
@@ -91,7 +91,7 @@ jobs:
         // These functions are provided by the main Cacti application
         
         if (!function_exists('db_connect_real')) {
-            function db_connect_real(string $host, string $user, string $pass, string $db, string $type, int $port = 0, int $ssl = false, int $ssl_ca = '', int $ssl_cert = '', int $ssl_key = '') {}
+            function db_connect_real(string $host, string $user, string $pass, string $db, string $type, int $port = 0, bool $ssl = false, string $ssl_ca = '', string $ssl_cert = '', string $ssl_key = '') {}
         }
         if (!function_exists('db_close')) {
             function db_close(&$link = null): bool { return true; }

From 135f82d834cecae57a58e09686136c8a7057a771 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:50:45 -0500
Subject: [PATCH 10/25] Update php-lint.yml

---
 .github/workflows/php-lint.yml | 51 ++++++++++++++++++++++++----------
 1 file changed, 37 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/php-lint.yml b/.github/workflows/php-lint.yml
index 2c4241a..9150710 100644
--- a/.github/workflows/php-lint.yml
+++ b/.github/workflows/php-lint.yml
@@ -19,7 +19,7 @@
 # | http://www.cacti.net/                                                   |
 # +-------------------------------------------------------------------------+
 
-name: PHP Lint
+name: PHP Lint (Code Style)
 
 on:
   push:
@@ -32,31 +32,54 @@ on:
       - develop
 
 jobs:
-  php-lint:
+  php-cs:
     runs-on: ubuntu-latest
     
-    strategy:
-      fail-fast: false
-      matrix:
-        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
-    
-    name: PHP ${{ matrix.php }} Lint
+    name: PHP CodeSniffer
     
     steps:
     - name: Checkout
       uses: actions/checkout@v4
     
-    - name: Setup PHP ${{ matrix.php }}
+    - name: Setup PHP
       uses: shivammathur/setup-php@v2
       with:
-        php-version: ${{ matrix.php }}
+        php-version: '8.2'
         extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
         coverage: none
     
-    - name: Install parallel-lint
-      run: composer global require php-parallel-lint/php-parallel-lint
+    - name: Install PHP_CodeSniffer
+      run: composer global require squizlabs/php_codesniffer
+    
+    - name: Create phpcs.xml if not exists
+      run: |
+        if [ ! -f phpcs.xml ]; then
+          cat > phpcs.xml << 'EOF'
+        <?xml version="1.0"?>
+        <ruleset name="Syslog Plugin">
+            <description>Coding standards for Cacti Syslog Plugin</description>
+            
+            <file>.</file>
+            
+            <exclude-pattern>*/vendor/*</exclude-pattern>
+            <exclude-pattern>*/locales/*</exclude-pattern>
+            <exclude-pattern>*.js</exclude-pattern>
+            
+            <arg name="extensions" value="php"/>
+            <arg name="colors"/>
+            <arg value="p"/>
+            
+            <rule ref="PSR12">
+                <exclude name="PSR1.Files.SideEffects"/>
+                <exclude name="PSR12.Files.FileHeader"/>
+            </rule>
+        </ruleset>
+        EOF
+        fi
     
-    - name: Run parallel-lint
+    - name: Run PHP CodeSniffer
       run: |
         export PATH="$HOME/.composer/vendor/bin:$PATH"
-        parallel-lint --exclude vendor --exclude locales/LC_MESSAGES .
+        phpcs --standard=phpcs.xml --report=checkstyle --report-file=phpcs-report.xml . || true
+        phpcs --standard=phpcs.xml .
+      continue-on-error: true

From 95fb0c05aa9a7ad2aa6b0463b309e01446cc1cad Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 11:59:24 -0500
Subject: [PATCH 11/25] .

---
 .github/workflows/install-cacti.yml | 217 ++++++++++++++++++++++++++++
 .github/workflows/php-lint.yml      |  85 -----------
 2 files changed, 217 insertions(+), 85 deletions(-)
 create mode 100644 .github/workflows/install-cacti.yml
 delete mode 100644 .github/workflows/php-lint.yml

diff --git a/.github/workflows/install-cacti.yml b/.github/workflows/install-cacti.yml
new file mode 100644
index 0000000..8ec17f7
--- /dev/null
+++ b/.github/workflows/install-cacti.yml
@@ -0,0 +1,217 @@
+# +-------------------------------------------------------------------------+
+# | Copyright (C) 2004-2025 The Cacti Group                                 |
+# |                                                                         |
+# | This program is free software; you can redistribute it and/or           |
+# | modify it under the terms of the GNU General Public License             |
+# | as published by the Free Software Foundation; either version 2          |
+# | of the License, or (at your option) any later version.                  |
+# |                                                                         |
+# | This program is distributed in the hope that it will be useful,         |
+# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
+# | GNU General Public License for more details.                            |
+# +-------------------------------------------------------------------------+
+# | Cacti: The Complete RRDtool-based Graphing Solution                     |
+# +-------------------------------------------------------------------------+
+# | This code is designed, written, and maintained by the Cacti Group. See  |
+# | about.php and/or the AUTHORS file for specific developer information.   |
+# +-------------------------------------------------------------------------+
+# | http://www.cacti.net/                                                   |
+# +-------------------------------------------------------------------------+
+
+name: Plugin Integration Tests
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  integration-test:
+    runs-on: ${{ matrix.os }}
+    
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
+        os: [ubuntu-latest]
+    
+    services:
+      mysql:
+        image: mysql:8.0
+        env:
+          MYSQL_ROOT_PASSWORD: cactiroot
+          MYSQL_DATABASE: cacti
+          MYSQL_USER: cactiuser
+          MYSQL_PASSWORD: cactiuser
+        ports:
+          - 3306:3306
+        options: >-
+          --health-cmd="mysqladmin ping"
+          --health-interval=10s
+          --health-timeout=5s
+          --health-retries=3
+    
+    name: PHP ${{ matrix.php }} Integration Test on ${{ matrix.os }}
+    
+    steps:
+    - name: Checkout Cacti
+      uses: actions/checkout@v4
+      with:
+        repository: Cacti/cacti
+        path: cacti
+    
+    - name: Checkout Syslog Plugin
+      uses: actions/checkout@v4
+      with:
+        path: cacti/plugins/syslog
+    
+    - name: Install PHP ${{ matrix.php }}
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php }}
+        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
+        ini-values: "post_max_size=256M, max_execution_time=60, date.timezone=America/New_York"
+    
+    - name: Check PHP version
+      run: php -v
+    
+    - name: Run apt-get update
+      run: sudo apt-get update
+    
+    - name: Install System Dependencies
+      run: sudo apt-get install -y apache2 snmp snmpd rrdtool fping libapache2-mod-php${{ matrix.php }}
+    
+    - name: Start SNMPD Agent and Test
+      run: |
+        sudo systemctl start snmpd
+        sudo snmpwalk -c public -v2c -On localhost .1.3.6.1.2.1.1
+    
+    - name: Setup Permissions
+      run: |
+        sudo chown -R www-data:runner ${{ github.workspace }}/cacti
+        sudo find ${{ github.workspace }}/cacti -type d -exec chmod 775 {} \;
+        sudo find ${{ github.workspace }}/cacti -type f -exec chmod 664 {} \;
+        sudo chmod +x ${{ github.workspace }}/cacti/cmd.php
+        sudo chmod +x ${{ github.workspace }}/cacti/poller.php
+    
+    - name: Create MySQL Config
+      run: |
+        echo -e "[client]\nuser = root\npassword = cactiroot\nhost = 127.0.0.1\n" > ~/.my.cnf
+        cat ~/.my.cnf
+    
+    - name: Initialize Cacti Database
+      env:
+        MYSQL_AUTH_USR: '--defaults-file=~/.my.cnf'
+      run: |
+        mysql $MYSQL_AUTH_USR -e 'CREATE DATABASE IF NOT EXISTS cacti;'
+        mysql $MYSQL_AUTH_USR -e "CREATE USER IF NOT EXISTS 'cactiuser'@'localhost' IDENTIFIED BY 'cactiuser';"
+        mysql $MYSQL_AUTH_USR -e "GRANT ALL PRIVILEGES ON cacti.* TO 'cactiuser'@'localhost';"
+        mysql $MYSQL_AUTH_USR -e "GRANT SELECT ON mysql.time_zone_name TO 'cactiuser'@'localhost';"
+        mysql $MYSQL_AUTH_USR -e "FLUSH PRIVILEGES;"
+        mysql $MYSQL_AUTH_USR cacti < ${{ github.workspace }}/cacti/cacti.sql
+        mysql $MYSQL_AUTH_USR -e "INSERT INTO settings (name, value) VALUES ('path_php_binary', '/usr/bin/php')" cacti
+    
+    - name: Validate composer files
+      run: |
+        cd ${{ github.workspace }}/cacti
+        if [ -f composer.json ]; then
+          composer validate --strict || true
+        fi
+    
+    - name: Install Composer Dependencies
+      run: |
+        cd ${{ github.workspace }}/cacti
+        if [ -f composer.json ]; then
+          sudo composer install --prefer-dist --no-progress
+        fi
+    
+    - name: Create Cacti config.php
+      run: |
+        cat ${{ github.workspace }}/cacti/include/config.php.dist | \
+        sed -r "s/localhost/127.0.0.1/g" | \
+        sed -r "s/'cacti'/'cacti'/g" | \
+        sed -r "s/'cactiuser'/'cactiuser'/g" | \
+        sed -r "s/'cactiuser'/'cactiuser'/g" > ${{ github.workspace }}/cacti/include/config.php
+        sudo chmod 664 ${{ github.workspace }}/cacti/include/config.php
+    
+    - name: Create Syslog Plugin config.php
+      run: |
+        cp ${{ github.workspace }}/cacti/plugins/syslog/config.php.dist ${{ github.workspace }}/cacti/plugins/syslog/config.php
+        sed -i "s/localhost/127.0.0.1/g" ${{ github.workspace }}/cacti/plugins/syslog/config.php
+        sed -i "s/'cacti'/'cacti'/g" ${{ github.workspace }}/cacti/plugins/syslog/config.php
+        sed -i "s/'cactiuser'/'cactiuser'/g" ${{ github.workspace }}/cacti/plugins/syslog/config.php
+        sed -i 's/\/\/\$/\$/g' ${{ github.workspace }}/cacti/plugins/syslog/config.php
+        sudo chmod 664 ${{ github.workspace }}/cacti/plugins/syslog/config.php
+    
+    - name: Configure Apache
+      run: |
+        cat << 'EOF' | sed 's#GITHUB_WORKSPACE#${{ github.workspace }}#g' > /tmp/cacti.conf
+        <VirtualHost *:80>
+          ServerAdmin webmaster@localhost
+          DocumentRoot GITHUB_WORKSPACE/cacti
+          
+          <Directory GITHUB_WORKSPACE/cacti>
+            Options Indexes FollowSymLinks
+            AllowOverride All
+            Require all granted
+          </Directory>
+          
+          ErrorLog ${APACHE_LOG_DIR}/error.log
+          CustomLog ${APACHE_LOG_DIR}/access.log combined
+        </VirtualHost>
+        EOF
+        sudo cp /tmp/cacti.conf /etc/apache2/sites-available/000-default.conf
+        sudo systemctl restart apache2
+    
+    - name: Install Cacti via CLI
+      run: |
+        cd ${{ github.workspace }}/cacti
+        sudo php cli/install_cacti.php --accept-eula --install --force
+    
+    - name: Install Syslog Plugin
+      run: |
+        cd ${{ github.workspace }}/cacti
+        sudo php cli/plugin_manage.php --plugin=syslog --install --enable
+    
+    - name: Check PHP Syntax for Plugin
+      run: |
+        cd ${{ github.workspace }}/cacti/plugins/syslog
+        if find . -name '*.php' -exec php -l {} 2>&1 \; | grep -iv 'no syntax errors detected'; then
+          echo "Syntax errors found!"
+          exit 1
+        fi
+    
+    - name: Run Cacti Poller
+      run: |
+        cd ${{ github.workspace }}/cacti
+        sudo php poller.php --poller=1 --force --debug
+        if ! grep -q "SYSTEM STATS" log/cacti.log; then
+          echo "Cacti poller did not finish successfully"
+          cat log/cacti.log
+          exit 1
+        fi
+    
+    - name: Test Syslog Plugin Functions
+      run: |
+        cd ${{ github.workspace }}/cacti/plugins/syslog
+        php -r "
+        require_once('../../include/global.php');
+        require_once('setup.php');
+        \$info = plugin_syslog_version();
+        echo 'Syslog Plugin Version: ' . \$info['version'] . PHP_EOL;
+        echo 'Plugin loaded successfully!' . PHP_EOL;
+        "
+    
+    - name: View Cacti Logs
+      if: always()
+      run: |
+        if [ -f ${{ github.workspace }}/cacti/log/cacti.log ]; then
+          echo "=== Cacti Log ==="
+          sudo cat ${{ github.workspace }}/cacti/log/cacti.log
+        fi
diff --git a/.github/workflows/php-lint.yml b/.github/workflows/php-lint.yml
deleted file mode 100644
index 9150710..0000000
--- a/.github/workflows/php-lint.yml
+++ /dev/null
@@ -1,85 +0,0 @@
-# +-------------------------------------------------------------------------+
-# | Copyright (C) 2004-2025 The Cacti Group                                 |
-# |                                                                         |
-# | This program is free software; you can redistribute it and/or           |
-# | modify it under the terms of the GNU General Public License             |
-# | as published by the Free Software Foundation; either version 2          |
-# | of the License, or (at your option) any later version.                  |
-# |                                                                         |
-# | This program is distributed in the hope that it will be useful,         |
-# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
-# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
-# | GNU General Public License for more details.                            |
-# +-------------------------------------------------------------------------+
-# | Cacti: The Complete RRDtool-based Graphing Solution                     |
-# +-------------------------------------------------------------------------+
-# | This code is designed, written, and maintained by the Cacti Group. See  |
-# | about.php and/or the AUTHORS file for specific developer information.   |
-# +-------------------------------------------------------------------------+
-# | http://www.cacti.net/                                                   |
-# +-------------------------------------------------------------------------+
-
-name: PHP Lint (Code Style)
-
-on:
-  push:
-    branches:
-      - main
-      - develop
-  pull_request:
-    branches:
-      - main
-      - develop
-
-jobs:
-  php-cs:
-    runs-on: ubuntu-latest
-    
-    name: PHP CodeSniffer
-    
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-    
-    - name: Setup PHP
-      uses: shivammathur/setup-php@v2
-      with:
-        php-version: '8.2'
-        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
-        coverage: none
-    
-    - name: Install PHP_CodeSniffer
-      run: composer global require squizlabs/php_codesniffer
-    
-    - name: Create phpcs.xml if not exists
-      run: |
-        if [ ! -f phpcs.xml ]; then
-          cat > phpcs.xml << 'EOF'
-        <?xml version="1.0"?>
-        <ruleset name="Syslog Plugin">
-            <description>Coding standards for Cacti Syslog Plugin</description>
-            
-            <file>.</file>
-            
-            <exclude-pattern>*/vendor/*</exclude-pattern>
-            <exclude-pattern>*/locales/*</exclude-pattern>
-            <exclude-pattern>*.js</exclude-pattern>
-            
-            <arg name="extensions" value="php"/>
-            <arg name="colors"/>
-            <arg value="p"/>
-            
-            <rule ref="PSR12">
-                <exclude name="PSR1.Files.SideEffects"/>
-                <exclude name="PSR12.Files.FileHeader"/>
-            </rule>
-        </ruleset>
-        EOF
-        fi
-    
-    - name: Run PHP CodeSniffer
-      run: |
-        export PATH="$HOME/.composer/vendor/bin:$PATH"
-        phpcs --standard=phpcs.xml --report=checkstyle --report-file=phpcs-report.xml . || true
-        phpcs --standard=phpcs.xml .
-      continue-on-error: true

From 737188e769a7a89931cd62d001326eb784693d8e Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:12:51 -0500
Subject: [PATCH 12/25] .

---
 ...all-cacti.yml => install-syslog-cacti.yml} | 17 ++++
 .github/workflows/php-syntax.yml              | 84 -------------------
 .github/workflows/populate_syslog_incoming.sh | 28 +++++++
 3 files changed, 45 insertions(+), 84 deletions(-)
 rename .github/workflows/{install-cacti.yml => install-syslog-cacti.yml} (93%)
 delete mode 100644 .github/workflows/php-syntax.yml
 create mode 100644 .github/workflows/populate_syslog_incoming.sh

diff --git a/.github/workflows/install-cacti.yml b/.github/workflows/install-syslog-cacti.yml
similarity index 93%
rename from .github/workflows/install-cacti.yml
rename to .github/workflows/install-syslog-cacti.yml
index 8ec17f7..c5f0325 100644
--- a/.github/workflows/install-cacti.yml
+++ b/.github/workflows/install-syslog-cacti.yml
@@ -197,6 +197,23 @@ jobs:
           exit 1
         fi
     
+    - name: Populate Syslog Test Data
+      run: |
+        chmod +x ${{ github.workspace }}/cacti/plugins/syslog/.github/workflows/populate_syslog_incoming.sh
+        cd ${{ github.workspace }}/cacti/plugins/syslog/.github/workflows
+        ./populate_syslog_incoming.sh
+
+
+    - name: force Syslog Plugin Poller
+      run: |
+        cd ${{ github.workspace }}/cacti
+        sudo php plugins/syslog/syslog_process.php  --debug
+        if ! grep -q "SYSTEM SYSLOG STATS" log/cacti.log; then
+          echo "Syslog plugin poller did not finish successfully"
+          cat log/cacti.log
+          exit 1
+        fi
+
     - name: Test Syslog Plugin Functions
       run: |
         cd ${{ github.workspace }}/cacti/plugins/syslog
diff --git a/.github/workflows/php-syntax.yml b/.github/workflows/php-syntax.yml
deleted file mode 100644
index a7110ce..0000000
--- a/.github/workflows/php-syntax.yml
+++ /dev/null
@@ -1,84 +0,0 @@
-# +-------------------------------------------------------------------------+
-# | Copyright (C) 2004-2025 The Cacti Group                                 |
-# |                                                                         |
-# | This program is free software; you can redistribute it and/or           |
-# | modify it under the terms of the GNU General Public License             |
-# | as published by the Free Software Foundation; either version 2          |
-# | of the License, or (at your option) any later version.                  |
-# |                                                                         |
-# | This program is distributed in the hope that it will be useful,         |
-# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
-# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
-# | GNU General Public License for more details.                            |
-# +-------------------------------------------------------------------------+
-# | Cacti: The Complete RRDtool-based Graphing Solution                     |
-# +-------------------------------------------------------------------------+
-# | This code is designed, written, and maintained by the Cacti Group. See  |
-# | about.php and/or the AUTHORS file for specific developer information.   |
-# +-------------------------------------------------------------------------+
-# | http://www.cacti.net/                                                   |
-# +-------------------------------------------------------------------------+
-
-name: PHP Syntax Check
-
-on:
-  push:
-    branches:
-      - main
-      - develop
-  pull_request:
-    branches:
-      - main
-      - develop
-
-jobs:
-  php-syntax:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
-        os: [ubuntu-latest]
-    
-    name: PHP ${{ matrix.php }} Syntax Check on ${{ matrix.os }}
-    
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-    
-    - name: Install PHP ${{ matrix.php }}
-      uses: shivammathur/setup-php@v2
-      with:
-        php-version: ${{ matrix.php }}
-        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
-        ini-values: "post_max_size=256M, max_execution_time=60, date.timezone=America/New_York"
-    
-    - name: Check PHP version
-      run: php -v
-    
-    - name: Create config file from dist
-      run: |
-        if [ -f config.php.dist ]; then
-          cp config.php.dist config.php
-        elif [ -f config_local.php.dist ]; then
-          cp config_local.php.dist config_local.php
-        fi
-    
-    - name: Check PHP syntax for all PHP files
-      run: |
-        echo "Checking PHP syntax..."
-        if find . -name '*.php' -exec php -l {} 2>&1 \; | grep -iv 'no syntax errors detected'; then
-          echo "Syntax errors found!"
-          exit 1
-        else
-          echo "No syntax errors detected."
-          exit 0
-        fi
-    
-    - name: Run PHP lint recursively
-      run: |
-        echo "Running comprehensive PHP lint check..."
-        find . -type f -name "*.php" | while read file; do
-          php -l "$file" || exit 1
-        done
-        echo "All PHP files passed syntax check!"
diff --git a/.github/workflows/populate_syslog_incoming.sh b/.github/workflows/populate_syslog_incoming.sh
new file mode 100644
index 0000000..2484723
--- /dev/null
+++ b/.github/workflows/populate_syslog_incoming.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+# filepath: insert_syslog_test_data.sh
+
+# Number of iterations
+ITERATIONS=100
+
+# SQL statement to execute
+SQL_INSERT="INSERT INTO syslog_incoming (facility_id, priority_id, program, logtime, host, message, status) VALUES 
+    (1, 1, 'app1', NOW(), 'bob', 'interface down', 0),
+    (2, 3, 'app2', NOW(), 'alice', 'cpu high', 1),
+    (1, 2, 'app1', NOW(), 'router_1', 'the box exploded', 0);"
+
+echo "Starting insert of $ITERATIONS batches (30,000 total records)..."
+echo "Start time: $(date)"
+
+# Loop and insert
+for i in $(seq 1 $ITERATIONS); do
+    mysql -u root -e "$SQL_INSERT"
+    
+    # Show progress every 100 iterations
+    if [ $((i % 100)) -eq 0 ]; then
+        echo "Progress: $i / $ITERATIONS batches inserted"
+    fi
+done
+
+echo "Completed!"
+echo "End time: $(date)"
+echo "Total records inserted: $((ITERATIONS * 3))"

From 943f4d641d1f9d0c16564555b83c5e3bcc366eee Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:15:30 -0500
Subject: [PATCH 13/25] Update install-syslog-cacti.yml

---
 .github/workflows/install-syslog-cacti.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/install-syslog-cacti.yml b/.github/workflows/install-syslog-cacti.yml
index c5f0325..49d0015 100644
--- a/.github/workflows/install-syslog-cacti.yml
+++ b/.github/workflows/install-syslog-cacti.yml
@@ -199,9 +199,9 @@ jobs:
     
     - name: Populate Syslog Test Data
       run: |
-        chmod +x ${{ github.workspace }}/cacti/plugins/syslog/.github/workflows/populate_syslog_incoming.sh
+        sudo chmod +x ${{ github.workspace }}/cacti/plugins/syslog/.github/workflows/populate_syslog_incoming.sh
         cd ${{ github.workspace }}/cacti/plugins/syslog/.github/workflows
-        ./populate_syslog_incoming.sh
+        sudo ./populate_syslog_incoming.sh
 
 
     - name: force Syslog Plugin Poller

From 7873d7cd653d67b226c7d068b1a1f2377052a727 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:20:10 -0500
Subject: [PATCH 14/25] Update populate_syslog_incoming.sh

---
 .github/workflows/populate_syslog_incoming.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/populate_syslog_incoming.sh b/.github/workflows/populate_syslog_incoming.sh
index 2484723..7a10c8a 100644
--- a/.github/workflows/populate_syslog_incoming.sh
+++ b/.github/workflows/populate_syslog_incoming.sh
@@ -13,9 +13,12 @@ SQL_INSERT="INSERT INTO syslog_incoming (facility_id, priority_id, program, logt
 echo "Starting insert of $ITERATIONS batches (30,000 total records)..."
 echo "Start time: $(date)"
 
+# MySQL connection parameters
+MYSQL_CMD="mysql -h 127.0.0.1 -u cactiuser -pcactiuser cacti"
+
 # Loop and insert
 for i in $(seq 1 $ITERATIONS); do
-    mysql -u root -e "$SQL_INSERT"
+    $MYSQL_CMD -e "$SQL_INSERT"
     
     # Show progress every 100 iterations
     if [ $((i % 100)) -eq 0 ]; then
@@ -26,3 +29,7 @@ done
 echo "Completed!"
 echo "End time: $(date)"
 echo "Total records inserted: $((ITERATIONS * 3))"
+
+# Verify insertion
+echo "Verifying record count:"
+$MYSQL_CMD -e "SELECT COUNT(*) as total_records FROM syslog_incoming;"

From 2670af452e1fe6f95176ab8c03f44b5ef37a94b7 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:23:44 -0500
Subject: [PATCH 15/25] .

---
 .github/workflows/install-syslog-cacti.yml |  37 ++++++
 .github/workflows/phpstan.yml              | 141 ---------------------
 2 files changed, 37 insertions(+), 141 deletions(-)
 delete mode 100644 .github/workflows/phpstan.yml

diff --git a/.github/workflows/install-syslog-cacti.yml b/.github/workflows/install-syslog-cacti.yml
index 49d0015..29a8a84 100644
--- a/.github/workflows/install-syslog-cacti.yml
+++ b/.github/workflows/install-syslog-cacti.yml
@@ -187,6 +187,7 @@ jobs:
           exit 1
         fi
     
+    
     - name: Run Cacti Poller
       run: |
         cd ${{ github.workspace }}/cacti
@@ -232,3 +233,39 @@ jobs:
           echo "=== Cacti Log ==="
           sudo cat ${{ github.workspace }}/cacti/log/cacti.log
         fi
+
+
+    - name: Create PHPStan config
+      run: |
+        cd ${{ github.workspace }}/cacti/plugins/syslog
+        cat > phpstan.neon << 'EOF'
+        parameters:
+          level: 5
+          paths:
+            - .
+          excludePaths:
+            - vendor/
+            - locales/
+          ignoreErrors:
+            - '#Function db_[a-z_]+ not found\.#'
+            - '#Function cacti_[a-z_]+ not found\.#'
+            - '#has invalid return type the\.#'
+            - '#Class [a-zA-Z_\\]+ not found\.#'
+          bootstrapFiles:
+            - ../../include/global.php
+        EOF
+    
+    - name: Install PHPStan
+      run: |
+        cd ${{ github.workspace }}/cacti/plugins/syslog
+        composer require --dev phpstan/phpstan --with-all-dependencies || composer global require phpstan/phpstan
+    
+    - name: Run PHPStan Analysis
+      run: |
+        cd ${{ github.workspace }}/cacti/plugins/syslog
+        if [ -f vendor/bin/phpstan ]; then
+          vendor/bin/phpstan analyse --no-progress --error-format=github || true
+        else
+          phpstan analyse --no-progress --error-format=github || true
+        fi
+      continue-on-error: true
\ No newline at end of file
diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
deleted file mode 100644
index cbe4f6e..0000000
--- a/.github/workflows/phpstan.yml
+++ /dev/null
@@ -1,141 +0,0 @@
-# +-------------------------------------------------------------------------+
-# | Copyright (C) 2004-2025 The Cacti Group                                 |
-# |                                                                         |
-# | This program is free software; you can redistribute it and/or           |
-# | modify it under the terms of the GNU General Public License             |
-# | as published by the Free Software Foundation; either version 2          |
-# | of the License, or (at your option) any later version.                  |
-# |                                                                         |
-# | This program is distributed in the hope that it will be useful,         |
-# | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
-# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
-# | GNU General Public License for more details.                            |
-# +-------------------------------------------------------------------------+
-# | Cacti: The Complete RRDtool-based Graphing Solution                     |
-# +-------------------------------------------------------------------------+
-# | This code is designed, written, and maintained by the Cacti Group. See  |
-# | about.php and/or the AUTHORS file for specific developer information.   |
-# +-------------------------------------------------------------------------+
-# | http://www.cacti.net/                                                   |
-# +-------------------------------------------------------------------------+
-
-name: "PHPStan Static Analysis"
-
-on:
-  push:
-    branches:
-      - main
-      - develop
-  pull_request:
-    branches:
-      - main
-      - develop
-  schedule:
-    # Run PHPStan analysis weekly on Mondays at 00:00 UTC
-    - cron: '0 0 * * 1'
-
-jobs:
-  phpstan:
-    name: PHPStan Analysis
-    runs-on: ubuntu-latest
-
-    strategy:
-      fail-fast: false
-      matrix:
-        php: ['8.0', '8.1', '8.2', '8.3']
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
-
-    - name: Setup PHP ${{ matrix.php }}
-      uses: shivammathur/setup-php@v2
-      with:
-        php-version: ${{ matrix.php }}
-        extensions: intl, mysql, gd, ldap, gmp, xml, curl, json, mbstring
-        coverage: none
-
-    - name: Install Composer dependencies
-      run: |
-        if [ -f composer.json ]; then
-          composer install --prefer-dist --no-progress --no-suggest
-        fi
-
-    - name: Create PHPStan config if not exists
-      run: |
-        if [ ! -f phpstan.neon ]; then
-          cat > phpstan.neon << 'EOF'
-        parameters:
-          level: 5
-          paths:
-            - .
-          excludePaths:
-            - vendor/
-            - locales/
-          ignoreErrors:
-            - '#Function db_[a-z_]+ not found\.#'
-            - '#Function cacti_[a-z_]+ not found\.#'
-            - '#has invalid return type the\.#'
-            - '#Class [a-zA-Z_\\]+ not found\.#'
-          bootstrapFiles:
-            - .github/workflows/phpstan-bootstrap.php
-        EOF
-        fi
-
-    - name: Create PHPStan bootstrap for Cacti functions
-      run: |
-        mkdir -p .github/workflows
-        cat > .github/workflows/phpstan-bootstrap.php << 'EOF'
-        <?php
-        // PHPStan bootstrap file for Cacti plugin functions
-        // These functions are provided by the main Cacti application
-        
-        if (!function_exists('db_connect_real')) {
-            function db_connect_real(string $host, string $user, string $pass, string $db, string $type, int $port = 0, bool $ssl = false, string $ssl_ca = '', string $ssl_cert = '', string $ssl_key = '') {}
-        }
-        if (!function_exists('db_close')) {
-            function db_close(&$link = null): bool { return true; }
-        }
-        if (!function_exists('db_execute')) {
-            function db_execute(string $sql, bool $log = true, int $db_conn = 0): bool { return true; }
-        }
-        if (!function_exists('db_execute_prepared')) {
-            function db_execute_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): bool { return true; }
-        }
-        if (!function_exists('db_fetch_cell')) {
-            function db_fetch_cell(string $sql, string $col_name = '', bool $log = true, int $db_conn = 0) { return ''; }
-        }
-        if (!function_exists('db_fetch_cell_prepared')) {
-            function db_fetch_cell_prepared(string $sql, array $params = [], string $col_name = '', bool $log = true, int $db_conn = 0) { return ''; }
-        }
-        if (!function_exists('db_fetch_row')) {
-            function db_fetch_row(string $sql, bool $log = true, int $db_conn = 0): array { return []; }
-        }
-        if (!function_exists('db_fetch_row_prepared')) {
-            function db_fetch_row_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): array { return []; }
-        }
-        if (!function_exists('db_fetch_assoc')) {
-            function db_fetch_assoc(string $sql, bool $log = true, int $db_conn = 0): array { return []; }
-        }
-        if (!function_exists('db_fetch_assoc_prepared')) {
-            function db_fetch_assoc_prepared(string $sql, array $params = [], bool $log = true, int $db_conn = 0): array { return []; }
-        }
-        if (!function_exists('cacti_log')) {
-            function cacti_log(string $message, bool $output = false, string $environ = 'CMDPHP', int $level = 0): void {}
-        }
-        if (!function_exists('cacti_sizeof')) {
-            function cacti_sizeof($array): int { return is_array($array) ? count($array) : 0; }
-        }
-        EOF
-
-    - name: Install PHPStan
-      run: composer require --dev phpstan/phpstan --with-all-dependencies || composer global require phpstan/phpstan
-
-    - name: Run PHPStan
-      run: |
-        if [ -f vendor/bin/phpstan ]; then
-          vendor/bin/phpstan analyse --no-progress --error-format=github || true
-        else
-          phpstan analyse --no-progress --error-format=github || true
-        fi
-      continue-on-error: true

From cdefb5ad874574f5bde4b381b0b2223190b9dd2a Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:33:39 -0500
Subject: [PATCH 16/25] Update install-syslog-cacti.yml

---
 .github/workflows/install-syslog-cacti.yml | 15 +--------------
 1 file changed, 1 insertion(+), 14 deletions(-)

diff --git a/.github/workflows/install-syslog-cacti.yml b/.github/workflows/install-syslog-cacti.yml
index 29a8a84..04bcc9d 100644
--- a/.github/workflows/install-syslog-cacti.yml
+++ b/.github/workflows/install-syslog-cacti.yml
@@ -38,7 +38,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ['7.4', '8.0', '8.1', '8.2', '8.3']
+        php: ['8.1', '8.2', '8.3']
         os: [ubuntu-latest]
     
     services:
@@ -215,16 +215,6 @@ jobs:
           exit 1
         fi
 
-    - name: Test Syslog Plugin Functions
-      run: |
-        cd ${{ github.workspace }}/cacti/plugins/syslog
-        php -r "
-        require_once('../../include/global.php');
-        require_once('setup.php');
-        \$info = plugin_syslog_version();
-        echo 'Syslog Plugin Version: ' . \$info['version'] . PHP_EOL;
-        echo 'Plugin loaded successfully!' . PHP_EOL;
-        "
     
     - name: View Cacti Logs
       if: always()
@@ -247,10 +237,7 @@ jobs:
             - vendor/
             - locales/
           ignoreErrors:
-            - '#Function db_[a-z_]+ not found\.#'
-            - '#Function cacti_[a-z_]+ not found\.#'
             - '#has invalid return type the\.#'
-            - '#Class [a-zA-Z_\\]+ not found\.#'
           bootstrapFiles:
             - ../../include/global.php
         EOF

From e0005d74758781299ac12a8c1ee3454e78862452 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:40:43 -0500
Subject: [PATCH 17/25] rename file prepare for PR

---
 .../{install-syslog-cacti.yml => plugin-ci-workflow.yml}          | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename .github/workflows/{install-syslog-cacti.yml => plugin-ci-workflow.yml} (100%)

diff --git a/.github/workflows/install-syslog-cacti.yml b/.github/workflows/plugin-ci-workflow.yml
similarity index 100%
rename from .github/workflows/install-syslog-cacti.yml
rename to .github/workflows/plugin-ci-workflow.yml

From 497009a600304490f2ef3b741924c67086132309 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 12:43:23 -0500
Subject: [PATCH 18/25] Update populate_syslog_incoming.sh

---
 .github/workflows/populate_syslog_incoming.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/populate_syslog_incoming.sh b/.github/workflows/populate_syslog_incoming.sh
index 7a10c8a..4b8f87a 100644
--- a/.github/workflows/populate_syslog_incoming.sh
+++ b/.github/workflows/populate_syslog_incoming.sh
@@ -14,7 +14,8 @@ echo "Starting insert of $ITERATIONS batches (30,000 total records)..."
 echo "Start time: $(date)"
 
 # MySQL connection parameters
-MYSQL_CMD="mysql -h 127.0.0.1 -u cactiuser -pcactiuser cacti"
+export MYSQL_PWD="cactiuser"
+MYSQL_CMD="mysql -h 127.0.0.1 -u cactiuser cacti"
 
 # Loop and insert
 for i in $(seq 1 $ITERATIONS); do

From 5b363b0805f2f58e798eeb1610fb5cc464a4f99e Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 13:09:48 -0500
Subject: [PATCH 19/25] add removal and alert rules

---
 .github/workflows/populate_syslog_incoming.sh | 23 +++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/populate_syslog_incoming.sh b/.github/workflows/populate_syslog_incoming.sh
index 4b8f87a..dcdb905 100644
--- a/.github/workflows/populate_syslog_incoming.sh
+++ b/.github/workflows/populate_syslog_incoming.sh
@@ -4,12 +4,21 @@
 # Number of iterations
 ITERATIONS=100
 
-# SQL statement to execute
-SQL_INSERT="INSERT INTO syslog_incoming (facility_id, priority_id, program, logtime, host, message, status) VALUES 
+
+SQL_ALERT_RULE_INSERT="INSERT INTO syslog_alert (id,hash,name,severity,method,level,num,type,enabled,repeat_alert,open_ticket,message,body,user,date,email,notify,command,notes)
+                        VALUES (1,'8f440030d3425e37cb66e5df54902bb0','interface down alert',1,0,1,1,'messageb','on',0,'','interface down','admin',1767376990,NULL,0,NULL,NULL);"
+
+SQL_REMOVAL_RULE_INSERT="INSERT INTO syslog_remove (id,hash,name,type,enabled,method,message,user,date,notes)
+                          VALUES (1,'0faf589f7b6b7da1bcec40b92340487d','exploded','messageb','on','del',
+                          'the box exploded','admin',1767376604,NULL);"
+
+
+SYSLOG_EVENTS_INSERT="INSERT INTO syslog_incoming (facility_id, priority_id, program, logtime, host, message, status) VALUES 
     (1, 1, 'app1', NOW(), 'bob', 'interface down', 0),
     (2, 3, 'app2', NOW(), 'alice', 'cpu high', 1),
     (1, 2, 'app1', NOW(), 'router_1', 'the box exploded', 0);"
 
+
 echo "Starting insert of $ITERATIONS batches (30,000 total records)..."
 echo "Start time: $(date)"
 
@@ -17,9 +26,14 @@ echo "Start time: $(date)"
 export MYSQL_PWD="cactiuser"
 MYSQL_CMD="mysql -h 127.0.0.1 -u cactiuser cacti"
 
-# Loop and insert
+# Create Rules
+$MYSQL_CMD -e "$SQL_ALERT_RULE_INSERT"
+$MYSQL_CMD -e "$SQL_REMOVAL_RULE_INSERT"
+
+
+# Create test syslog events
 for i in $(seq 1 $ITERATIONS); do
-    $MYSQL_CMD -e "$SQL_INSERT"
+    $MYSQL_CMD -e "$SYSLOG_EVENTS_INSERT"
     
     # Show progress every 100 iterations
     if [ $((i % 100)) -eq 0 ]; then
@@ -27,6 +41,7 @@ for i in $(seq 1 $ITERATIONS); do
     fi
 done
 
+
 echo "Completed!"
 echo "End time: $(date)"
 echo "Total records inserted: $((ITERATIONS * 3))"

From b68e5f3b433e16df08d36e8187e435a844787613 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 13:18:16 -0500
Subject: [PATCH 20/25] add output for tracing

---
 .github/workflows/populate_syslog_incoming.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/populate_syslog_incoming.sh b/.github/workflows/populate_syslog_incoming.sh
index dcdb905..e51878f 100644
--- a/.github/workflows/populate_syslog_incoming.sh
+++ b/.github/workflows/populate_syslog_incoming.sh
@@ -27,7 +27,11 @@ export MYSQL_PWD="cactiuser"
 MYSQL_CMD="mysql -h 127.0.0.1 -u cactiuser cacti"
 
 # Create Rules
+
+echo "Creating alert and removal rules..."
 $MYSQL_CMD -e "$SQL_ALERT_RULE_INSERT"
+
+echo "Creating removal rule..."
 $MYSQL_CMD -e "$SQL_REMOVAL_RULE_INSERT"
 
 

From 49420f09f22087b9cda5a3816ddb5bdde488cd41 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 13:21:53 -0500
Subject: [PATCH 21/25] Update plugin-ci-workflow.yml

---
 .github/workflows/plugin-ci-workflow.yml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/plugin-ci-workflow.yml b/.github/workflows/plugin-ci-workflow.yml
index 04bcc9d..4ae98ea 100644
--- a/.github/workflows/plugin-ci-workflow.yml
+++ b/.github/workflows/plugin-ci-workflow.yml
@@ -255,4 +255,17 @@ jobs:
         else
           phpstan analyse --no-progress --error-format=github || true
         fi
-      continue-on-error: true
\ No newline at end of file
+      continue-on-error: true
+
+
+    - name: Call Code Quality Agent
+      if: github.event_name == 'pull_request'
+      env:
+        AGENT_URL: ${{ secrets.CODE_QUALITY_AGENT_URL }}
+        AGENT_TOKEN: ${{ secrets.CODE_QUALITY_AGENT_TOKEN }}
+      run: |
+        echo "Calling Code Quality Specialist agent for this PR..."
+        curl -sS -X POST "$AGENT_URL/run_agent" \
+          -H "Authorization: Bearer $AGENT_TOKEN" \
+          -H "Content-Type: application/json" \
+          -d "{\"repo\":\"${{ github.repository }}\",\"pr\":${{ toJson(github.event.pull_request)}}}" || true
\ No newline at end of file

From 43b1288dbd83c34f5904fb1cb04be3b0f610dfff Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 13:23:51 -0500
Subject: [PATCH 22/25] Update plugin-ci-workflow.yml

---
 .github/workflows/plugin-ci-workflow.yml | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/plugin-ci-workflow.yml b/.github/workflows/plugin-ci-workflow.yml
index 4ae98ea..b7648c2 100644
--- a/.github/workflows/plugin-ci-workflow.yml
+++ b/.github/workflows/plugin-ci-workflow.yml
@@ -81,6 +81,19 @@ jobs:
     - name: Check PHP version
       run: php -v
     
+
+    - name: Call Code Quality Agent
+      env:
+        AGENT_URL: ${{ secrets.CODE_QUALITY_AGENT_URL }}
+        AGENT_TOKEN: ${{ secrets.CODE_QUALITY_AGENT_TOKEN }}
+      run: |
+        echo "Calling Code Quality Specialist agent for this PR..."
+        curl -sS -X POST "$AGENT_URL/run_agent" \
+          -H "Authorization: Bearer $AGENT_TOKEN" \
+          -H "Content-Type: application/json" \
+          -d "{\"repo\":\"${{ github.repository }}\",\"pr\":${{ toJson(github.event.pull_request)}}}" || true
+
+
     - name: Run apt-get update
       run: sudo apt-get update
     
@@ -258,14 +271,3 @@ jobs:
       continue-on-error: true
 
 
-    - name: Call Code Quality Agent
-      if: github.event_name == 'pull_request'
-      env:
-        AGENT_URL: ${{ secrets.CODE_QUALITY_AGENT_URL }}
-        AGENT_TOKEN: ${{ secrets.CODE_QUALITY_AGENT_TOKEN }}
-      run: |
-        echo "Calling Code Quality Specialist agent for this PR..."
-        curl -sS -X POST "$AGENT_URL/run_agent" \
-          -H "Authorization: Bearer $AGENT_TOKEN" \
-          -H "Content-Type: application/json" \
-          -d "{\"repo\":\"${{ github.repository }}\",\"pr\":${{ toJson(github.event.pull_request)}}}" || true
\ No newline at end of file

From 59768269c78bea1fe62fb9dca7bb5425a593e564 Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 13:25:11 -0500
Subject: [PATCH 23/25] Update plugin-ci-workflow.yml

---
 .github/workflows/plugin-ci-workflow.yml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/.github/workflows/plugin-ci-workflow.yml b/.github/workflows/plugin-ci-workflow.yml
index b7648c2..c97e155 100644
--- a/.github/workflows/plugin-ci-workflow.yml
+++ b/.github/workflows/plugin-ci-workflow.yml
@@ -81,19 +81,7 @@ jobs:
     - name: Check PHP version
       run: php -v
     
-
-    - name: Call Code Quality Agent
-      env:
-        AGENT_URL: ${{ secrets.CODE_QUALITY_AGENT_URL }}
-        AGENT_TOKEN: ${{ secrets.CODE_QUALITY_AGENT_TOKEN }}
-      run: |
-        echo "Calling Code Quality Specialist agent for this PR..."
-        curl -sS -X POST "$AGENT_URL/run_agent" \
-          -H "Authorization: Bearer $AGENT_TOKEN" \
-          -H "Content-Type: application/json" \
-          -d "{\"repo\":\"${{ github.repository }}\",\"pr\":${{ toJson(github.event.pull_request)}}}" || true
-
-
+    
     - name: Run apt-get update
       run: sudo apt-get update
     

From 95bf6cdc1b74da6bd35ce257f4b167f3c06ebf9d Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 23:04:13 -0500
Subject: [PATCH 24/25] Update agent tools

---
 .github/agents/code-quality.agent.md  | 2 +-
 .github/agents/mysql-mariadb.agent.md | 2 +-
 .github/agents/php-developer.agent.md | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/agents/code-quality.agent.md b/.github/agents/code-quality.agent.md
index 0c93293..02aa9f3 100644
--- a/.github/agents/code-quality.agent.md
+++ b/.github/agents/code-quality.agent.md
@@ -1,7 +1,7 @@
 ---
 description: "This Custom agent acts as a quality assurance specialist, focusing on code quality, best practices, and maintainability."
 name: "Code Quality Specialist"
-tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+tools: ['vscode/extensions', 'execute/testFailure', 'execute/getTerminalOutput', 'execute/getTaskOutput', 'execute/runInTerminal', 'execute/runTests', 'read', 'edit/createFile', 'edit/editFiles', 'search', 'web']
 model: "Claude Sonnet 4.5"
 ---
 
diff --git a/.github/agents/mysql-mariadb.agent.md b/.github/agents/mysql-mariadb.agent.md
index 4ab939b..ee4a602 100644
--- a/.github/agents/mysql-mariadb.agent.md
+++ b/.github/agents/mysql-mariadb.agent.md
@@ -1,7 +1,7 @@
 ---
 description: "This custom agent assits with enhancements, troubleshooting, and management of MySQL and MariaDB databases."
 name: "MySQL/ MariaDB Database Administrator"
-tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+tools: ['vscode/extensions', 'execute/testFailure', 'execute/getTerminalOutput', 'execute/getTaskOutput', 'execute/runInTerminal', 'execute/runTests', 'read', 'edit/createFile', 'edit/editFiles', 'search', 'web']
 model: "Claude Sonnet 4.5"
 ---
 
diff --git a/.github/agents/php-developer.agent.md b/.github/agents/php-developer.agent.md
index 1992350..4153ea3 100644
--- a/.github/agents/php-developer.agent.md
+++ b/.github/agents/php-developer.agent.md
@@ -1,7 +1,7 @@
 ---
 description: "This custom agent acts as a PHP developer, assisting with PHP code development, debugging, and optimization."
 name: "PHP Developer"
-tools: ["search/codebase", "edit/editFiles", "web/githubRepo", "vscode/extensions", "execute/getTerminalOutput", "web"]
+tools: ['vscode/extensions', 'execute/testFailure', 'execute/getTerminalOutput', 'execute/getTaskOutput', 'execute/runInTerminal', 'execute/runTests', 'read', 'edit/createFile', 'edit/editFiles', 'search', 'web']
 model: "Claude Sonnet 4.5"
 ---
 

From 001ebd3c5fd88cea752cc9024ef8e0ad660fee6f Mon Sep 17 00:00:00 2001
From: Sean Mancini <sean@seanmancini.com>
Date: Fri, 2 Jan 2026 23:58:44 -0500
Subject: [PATCH 25/25] Triage Agent

---
 .github/agents/triage_agent.md.agent.md | 132 ++++++++++++++++++++++++
 1 file changed, 132 insertions(+)
 create mode 100644 .github/agents/triage_agent.md.agent.md

diff --git a/.github/agents/triage_agent.md.agent.md b/.github/agents/triage_agent.md.agent.md
new file mode 100644
index 0000000..b46af24
--- /dev/null
+++ b/.github/agents/triage_agent.md.agent.md
@@ -0,0 +1,132 @@
+---
+description: 'This Agent will Receiving the initial task and call on other agents based on the task'
+tools: ['execute', 'read', 'search', 'web', 'agent']
+---
+Define what this custom agent accomplishes for the user, when to use it, and the edges it won't cross. Specify its ideal inputs/outputs, the tools it may call, and how it reports progress or asks for help.
+
+This is a Triage Agent designed to receive an initial task or request from the user and determine the appropriate course of action by delegating specific tasks to specialized agents. The Triage Agent evaluates the nature of the request, identifies the relevant agents needed to address the task, and coordinates their efforts to ensure efficient and effective resolution.
+
+## Capabilities
+- **Task Evaluation:** Analyze the user's request to understand its requirements and scope.
+- **Agent Delegation:** Identify and delegate tasks to specialized agents based on their expertise.
+- **Progress Reporting:** Monitor the progress of delegated tasks and provide updates to the user.
+- **Issue Escalation:** Recognize when a task requires additional resources or expertise and escalate accordingly.
+- **Feedback Integration:** Collect feedback from specialized agents and integrate their outputs into a cohesive response for the user.
+
+## Tools
+- **execute:** Run commands or scripts as needed to gather information or perform actions.
+- **read:** Access relevant files or data sources to inform decision-making.
+- **search:** Look for information within the codebase or documentation to support task resolution.
+- **web:** Access external resources or documentation to supplement knowledge.
+- **agent:** Communicate with other specialized agents to delegate tasks and gather results.  
+
+## Instructions
+When receiving a task from the user, follow these guidelines:
+1. **Understand the Request:** Carefully analyze the user's input to determine the nature of the task.
+2. **Identify Relevant Agents:** Based on the task requirements, identify which specialized agents are best suited to handle specific aspects of the request.
+3. **Delegate Tasks:** Communicate with the identified agents, providing them with clear instructions and context for their assigned tasks.
+4. **Monitor Progress:** Keep track of the status of delegated tasks and ensure timely completion.
+5. **Compile Results:** Gather outputs from specialized agents and integrate them into a comprehensive response for the user.
+6. **Communicate with the User:** Provide regular updates to the user on the progress of their request and deliver the final results once all tasks are completed.
+7. **Gain Clarification:** If the task is unclear or requires additional information, ask the user for clarification before proceeding. by either responding directly or responding to the ticket.
+
+## Ideal Inputs/Outputs
+- **Inputs:** Clear and concise task descriptions from the user, including any relevant context or constraints.
+- **Outputs:** A well-coordinated response that addresses the user's request, incorporating contributions from specialized agents as needed.
+
+## Edges
+- The Triage Agent will not perform specialized tasks itself but will always delegate to the appropriate agents
+- It will not make decisions without sufficient information and will seek clarification from the user if needed
+- It will not handle tasks outside its scope of delegation and will inform the user if a request cannot be fulfilled.
+- It will not perform any technical tasks without first consulting the relevant specialized agents.
+
+## Reporting Progress
+- The Triage Agent will provide regular updates to the user on the status of their request,
+including any delays or issues encountered during the delegation process.
+- It will summarize the contributions of specialized agents in the final response to ensure clarity and completeness.
+- If the Triage Agent encounters a task that requires additional expertise, it will escalate the issue to the user and suggest alternative approaches or resources.
+
+
+## Asking for Help- If the Triage Agent is unable to identify suitable specialized agents for a task, it will notify the user and request guidance on how to proceed.
+- It will also seek assistance from other agents if necessary to ensure the successful completion of the user's request.
+
+
+## Example Workflow1. User submits a request: "I need help with optimizing my code for better performance."
+2. Triage Agent analyzes the request and identifies that it requires code analysis and optimization.
+3. Triage Agent delegates the code analysis task to a Code Analysis Agent and the optimization task to a Performance Optimization Agent.
+4. Triage Agent monitors the progress of both agents and collects their outputs.
+5. Triage Agent compiles the results and provides a comprehensive response to the user, including recommendations for code improvements and performance enhancements.
+6. Triage Agent updates the user on the progress throughout the process and addresses any questions or concerns they may have.
+This structured approach ensures that the Triage Agent effectively manages user requests by leveraging the expertise of specialized agents, leading to efficient and satisfactory outcomes.
+
+
+## Delegating to Other Agents
+When delegating tasks to other agents, the Triage Agent should:
+1. Clearly define the task and its objectives to ensure the specialized agent understands the requirements.
+2. Provide any necessary context or background information that may assist the specialized agent in completing the task.
+3. Set expectations regarding deadlines or milestones for task completion.
+4. Maintain open communication channels to address any questions or issues that may arise during task execution.
+5. Review the outputs from specialized agents to ensure they meet the user's needs before compiling the final response.
+
+## Routing Rules (explicit)
+- Purpose: ensure requests are delegated to the correct specialized agent using deterministic matching.
+- Strategy: match request text against ordered rules (regex/keyword sets). First matching rule with highest priority wins. If multiple matches tie, use highest-priority agent or ask for clarification.
+- Implementation guidance:
+  - Tokenize and lowercase user text.
+  - Run rules in priority order.
+  - Use exact agent names (e.g., "mysql" or "postgres") in the mapping.
+  - Log the matched rule, confidence score, and chosen agent for auditing.
+
+### Sample Rule Set (order = priority)
+1. Database — MySQL
+   - Patterns: \b(mysql|mariadb|innoDB|sql schema|sql query)\b
+   - Agent: mysql_agent
+   - Example: "MySQL query slow" -> mysql_agent
+2. Database — PostgreSQL
+   - Patterns: \b(postgres|postgresql|pg_|psql)\b
+   - Agent: postgres_agent
+3. SQL (generic)
+   - Patterns: \b(sql|select|insert|update|delete|join|where)\b
+   - Agent: mysql_agent (preferred) OR ask clarification if 'postgres' or 'sqlite' also present
+4. Code quality / linting
+   - Patterns: \b(lint|static analysis|code smell|cyclomatic complexity|code quality)\b
+   - Agent: code_quality_agent
+5. Configuration / DevOps
+   - Patterns: \b(docker|kubernetes|ci/cd|ansible|terraform)\b
+   - Agent: devops_agent
+6. Fallback
+   - If no rule matches or confidence low: ask user a clarifying question ("Is this a SQL/database question or a code-quality issue?") or route to a human/triage_admin_agent.
+
+### Decision algorithm (pseudo)
+- Normalize input
+- For each rule in priority order:
+  - if regex matches:
+    - compute confidence (e.g., number of matched tokens / rule token count)
+    - if confidence >= threshold => select agent and stop
+    - else collect low-confidence matches and continue
+- If multiple high-confidence matches -> choose the one with higher priority or ask user
+- If none -> ask clarification or use fallback agent
+
+## Delegation payload template
+When calling other agents via the 'agent' tool, pass a structured payload:
+{
+  "task": "<original user text>",
+  "context": "<relevant file paths, logs, stack traces>",
+  "expected_output": "<what we expect e.g., SQL explain plan or patch>",
+  "deadline": "<optional>"
+}
+
+## Examples (for tests)
+- Input: "MySQL slow select with missing index" -> Route to mysql_agent
+- Input: "Code smells in function foo() — reduce complexity" -> Route to code_quality_agent
+- Input: "SELECT JOIN performance" -> Route to mysql_agent (or ask if Postgres present)
+- Input: "Error: unknown column in SQL" -> Route to mysql_agent
+
+## Logging & Monitoring
+- Always log: input, matched rule id, matched tokens, chosen agent, timestamp
+- Expose a debug mode that returns which rule matched and why
+- report what agent was chosen and confidence level back to user
+
+## Testing
+- Create unit tests for the rule set covering edge cases where both 'sql' and 'lint' appear.
+- Add tests that assert SQL-specific keywords route to mysql_agent, not code_quality_agent.
\ No newline at end of file