=== WP Agent Bridge ===
Tags: ai, mcp, automation, developer-tools, wordpress
Requires at least: 7.1
Tested up to: 7.1
Requires PHP: 8.1
Stable tag: 2.39.5
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Securely connect WordPress to compatible AI/MCP clients with guarded writes, snapshots, rollback, diagnostics, content and administration tools.

== Description ==

WP Agent Bridge provides an authenticated WordPress management and development bridge designed for AI/MCP clients. It includes read-only diagnostics, content and media management, guarded file and database operations, safe theme deployments, snapshots, rollback, audit logs, change receipts, builder integrations, Search Console tools, WooCommerce/ACF adapters when those plugins are available, and optional Quick Connect onboarding.

High-impact operations use safety controls such as dry-run plans, deterministic state hashes, explicit confirmation, snapshots, audit records and rollback where supported.

= External services =

Quick Connect (`wp-agent-bridge-quick-connect-production.up.railway.app`) is contacted only when an administrator explicitly creates or checks a Quick Connect connection. It receives the site connection information needed to establish the requested MCP connection and does not require WordPress hosting credentials.

WP Agent Bridge Cloud uses a dedicated Supabase project (`rvvyhjzxdxwblfxuvggj.supabase.co`) only when an administrator opts into Cloud Account features. For passwordless authentication, the entered email address is sent to Supabase Auth so an OTP can be delivered. After successful authentication, installation enrollment may send the site origin, privacy-safe site/fingerprint hashes, Bridge/WordPress/PHP versions, locale and multisite status. If cloud usage synchronization is enabled by linking an account, only aggregate daily total/read/write/error counts and normalized route counters are uploaded; prompts, request bodies, WordPress content, IP addresses and connection tokens are not included. Plan/subscription status requests do not expose payment-card data or provider customer/subscription identifiers to WordPress.

Openverse (`api.openverse.org`) is contacted only when an administrator or authorized AI client explicitly uses stock-media search/import features. Search results include creator/source/license metadata and should be reviewed before reuse.

Google Search Console and Google PageSpeed Insights are contacted only when an administrator or authorized AI client explicitly runs the corresponding SEO/performance tools and the required provider/API configuration is available. The requested property/URL and diagnostic parameters are sent to those services as needed to fulfill the request.

No advertising or behavioral analytics tracking is enabled by this plugin. Local usage statistics contain aggregate route/read/write/error counts only and do not store prompts, request bodies, IP addresses, email addresses or connection tokens.

== Installation ==

1. Upload and activate WP Agent Bridge.
2. Open the WP Agent Bridge menu in WordPress admin.
3. Use Quick Connect or the advanced connection settings to authorize a compatible AI/MCP client.
4. Review Connection Doctor and package health before enabling high-impact workflows.

== Frequently Asked Questions ==

= Does WP Agent Bridge execute arbitrary shell commands? =

No. The bridge exposes allowlisted WordPress operations and guarded development workflows rather than unrestricted shell/eval access.

= Are destructive actions automatic? =

High-impact operations are designed to require guarded workflows such as dry-run, state/plan verification and explicit confirmation where applicable.

= Does the plugin send my WordPress content to analytics services? =

No analytics tracking is enabled. Content is sent only as necessary when an authorized connected client explicitly requests an operation.

== Changelog ==

= 2.39.3 =
* Added guarded execution for third-party mutating WordPress Abilities without weakening the R12 readonly-only generic executor.
* Generic writes require public=true, readonly=false, destructive=false and idempotent=true, plus schema validation and permission checks.
* Added 10-minute plan hashes bound to normalized input, ability definition and a site-state fingerprint; execution requires exact plan hash and confirm=true.
* Added single-use replay receipts so an approved mutating plan cannot be executed twice.
* WP Agent Bridge's own abilities remain excluded from the generic write path and continue using their native guarded tools.
* Closed the 2.39 WPVibe parity subpackages for Fleet Jobs, authenticated Upload Handoff and safe mutating Ability approval; billing/quota remains the next commercial phase.

= 2.39.2 =
* Added first-party Upload Handoff: ChatGPT can create a 30-minute upload session, but file selection is available only to a logged-in WordPress administrator.
* Uploaded JPEG, PNG, WebP and GIF files go directly into the WordPress Media Library; there is no public staging bucket or third-party rehosting.
* Upload sessions use a random token hash, WordPress nonce, administrator capability check, 15 MB per-file limit and up to 10 images.
* Added request/status/cancel REST endpoints and MCP runtime tools for upload handoff orchestration.
* Public token-based Cloud upload staging was intentionally not enabled; the authenticated WordPress-admin flow is the safer default.

= 2.39.1 =
* Added privacy-safe Cloud Fleet Jobs foundation with plan hash confirmation, queued per-installation work items, status/cancel endpoints and a five-minute local worker.
* Fleet workers reuse the existing guarded R8 plugin/theme updater instead of introducing raw remote shell or WordPress credentials in Cloud.
* Bridge self-update is blocked from Fleet Jobs; active theme updates require explicit allow_active consent.
* Added Fleet Jobs workspace to the single-page admin shell and readonly Fleet plan/status/worker abilities.
* Added explicit deny-all client RLS policies for Fleet Job tables; only authenticated backend functions using service-role access can coordinate jobs.
* End-to-end multi-site execution remains pending until a second Cloud-connected installation is available; NamazVaktiPro worker/runtime QA passed in disconnected-safe mode.

= 2.39.0 =
* Added WPVibe functional parity matrix to the Advanced admin workspace, separating ready equivalents, planned product gaps and intentional guarded differences.
* Hardened Cloud disconnect lifecycle: the current installation is soft-revoked and detached from its Fleet before the local encrypted session is removed.
* Added wab-installation-revoke Edge Function with JWT authentication, owner/admin authorization and backend-only service-role access.
* Fleet inventory now excludes revoked installations.
* Expanded PageSpeed Insights to selectable performance, accessibility, best-practices and SEO requests; categories omitted by the upstream Site Kit/Google response are reported explicitly as unavailable instead of receiving a fabricated score.
* Kept unrestricted raw REST/WP-CLI writes intentionally out of scope in favor of allowlists, dry-runs, state hashes, audit receipts and rollback.

= 2.38.0 =
* Added a modern no-reload SEO & Analytics workspace to the single-page admin shell with Simple/Advanced detail levels.
* Fixed legacy R14 no-input Ability schemas so Search Console, GA4 and integration status checks work through the current WordPress Abilities API.
* Added lazy AJAX status checks for Search Console and GA4 so Google API probes run only when the SEO panel is opened or refreshed.
* Preserved a safe disconnected state for sites without Google Site Kit while keeping OAuth tokens and Google credentials out of Bridge responses.

= 2.37.0 =
* Added privacy-safe Cloud fleet inventory for connected accounts: accounts, fleets, installations, plan entitlement and site runtime metadata without returning credentials, prompts or WordPress content.
* Added Cloud Installation Heartbeat using the existing guarded enrollment upsert so Bridge, WordPress, PHP, locale, status and last-seen metadata stay current.
* Added a modern Fleet & Sites card to the connected Cloud Account panel and a read-only cloud-fleet-status ability.
* Pinned the new fleet Edge Function to @supabase/supabase-js 2.118.0 and kept service-role credentials backend-only.

= 2.33.0 =
* Published the verified WP Agent Bridge OAuth issuer metadata for ChatGPT/MCP public connectivity.
* Release readiness now performs a live OAuth discovery check, verifies issuer identity, authorization/token endpoints and dynamic client registration before marking ChatGPT Public ready.
* Confirmed the public product surface (Privacy, Terms, Support, Docs and Security) on wpagentbridge.net and retained billing/checkout enforcement in the disabled state.

= 2.32.0 =
* Added no-reload live dashboard state refresh for system health, Quick Connect, Cloud Account, plan/billing and Product Readiness.
* Dashboard state refreshes every 30 seconds and when the admin tab regains visibility or focus, while preserving the last known state on transient polling failures.
* Kept live-status polling admin-only, nonce-protected and free of secrets, prompts or WordPress content.

= 2.31.0 =
* Added official wpagentbridge.net public product website defaults for Privacy, Terms, Support and Docs release metadata.
* Added production-ready public website and release documentation foundation hosted separately from Quick Connect.
* Kept OAuth issuer and update-manifest metadata intentionally unset until those services are actually ready.

= 2.30.0 =
* Rebuilt the WordPress admin experience as a single-page shell with instant in-page navigation and hash/local-state persistence.
* Added a modern internal sidebar, unified panel headers and responsive workspace while preserving existing guarded actions and module renderers.
* Integrated Simple / Advanced mode into navigation so routine users see a minimal surface and operational/diagnostic panels stay in Advanced mode.
* Removed the long WordPress submenu stack; all existing Bridge sections now open inside the same admin workspace without full-page navigation.

= 2.29.0 =
* Added support for 6–10 digit numeric email OTPs so hosted Supabase Auth configurations with 8-digit codes work without changing project settings.
* Updated Cloud Account UX and setup guidance so Confirm sign up and Magic Link templates both use the OTP token flow.

= 2.28.0 =
* Hardened Cloud Account email OTP flow with a 60-second resend guard and clearer rate-limit handling.
* Added safe session cleanup after failed account bootstrap or installation enrollment.
* Added explicit installation ownership-conflict handling and preserved Edge Function HTTP status diagnostics.

= 2.27.0 =
* Added a schema-rich MCP capability manifest for safe dynamic discovery of public read-only WP Agent Bridge abilities.
* Dynamic discovery explicitly excludes destructive/write abilities; guarded write tools remain explicit and hard-coded.
* Added a stable execute-via contract through the existing R12 read-only ability runner to reduce future Quick Connect catalog drift.

= 2.26.0 =
* Added live Free / Pro / Agency entitlement comparison from the central plan catalog.
* Corrected Cloud status so account-link state reflects the real encrypted local session.
* Added the JWT-protected billing-status function to Cloud diagnostics while keeping checkout and quota enforcement disabled.

= 2.25.0 =
* Added bundled release templates for Privacy, Terms, Support, Getting Started and Security documentation.
* Added a guarded Release Metadata form in WordPress admin for publisher and public HTTPS release URLs.
* Extended release self-checks and downloadable ZIP integrity checks to include the bundled Release Kit.

= 2.24.0 =
* Hardened the downloadable installation ZIP with full bundled-module, readme, license and package-version verification.
* Added stable-tag verification inside the generated ZIP before it can be served to the administrator.

= 2.23.0 =
* Added a simple-mode onboarding hub with ChatGPT, optional Cloud Account, current plan/billing state and Product Readiness at a glance.
* Added direct navigation to Cloud Account, Plan & Billing and Product Readiness without exposing tokens or secrets.

= 2.22.0 =
* Hardened WordPress.org release self-checks with stable-tag/version consistency and external-service disclosure validation.
* Corrected ChatGPT Directory readiness so the post-approval directory URL no longer blocks pre-submission readiness.
* Expanded privacy disclosures for Cloud, Quick Connect, Openverse, Search Console and PageSpeed services.

= 2.21.0 =
* Added backward-compatible Cloud/Billing readiness data to the existing Productization and Usage abilities used by Quick Connect 2.12.
* Preserved existing local usage counters while extending cloud sync and plan status reporting.

= 2.20.0 =
* Added provider-agnostic billing status and entitlement foundation with JWT-protected backend access.
* Added Plan & Billing UI while keeping checkout, charging and quota enforcement disabled.

= 2.19.0 =
* Added unified Product Readiness reporting for Bridge, Quick Connect, Cloud, usage sync and public distribution.
* Fixed Connection Doctor Abilities API schema compatibility.

= 2.18.0 =
* Added privacy-safe automatic cloud usage synchronization for linked accounts.
* Kept prompt content, request bodies, email, IP and tokens out of usage uploads.

= 2.17.0 =
* Added passwordless Cloud Account linking with email OTP and encrypted local session storage.
* Added automatic account bootstrap and site-to-fleet enrollment after explicit authentication.

= 2.16.0 =
* Added dedicated WP Agent Bridge Cloud backend discovery and plan-catalog health checks.
* Added JWT-gated account, installation enrollment and privacy-safe usage sync backend foundation.

= 2.15.0 =
* Added local Free / Pro / Agency plan catalog and entitlement matrix.
* Added billing-provider foundation without checkout, charges or quota enforcement.

= 2.14.0 =
* Added privacy-safe installation identity and account/fleet enrollment foundation.
* Added self-hosted entitlement profile and future Free/Pro/Agency plan readiness without quota enforcement.

= 2.13.0 =
* Added public release readiness checks and distribution metadata foundation.
* Added privacy-preserving usage/plan foundation, ACF/Openverse integrations, approval receipts and productization diagnostics from the preceding 2.x releases.
