The modern SPA admin is now built in; the standalone WP Maker Admin plugin is no longer needed. Recommended update.<\/p>","1.7.13":"
Case Portal catalog refresh; first release on the WordPress.org directory. Recommended update.<\/p>","1.7.4":"
WordPress.org guideline compliance fixes (enqueue, user capability checks, unique class\/option prefixes). Recommended update.<\/p>","1.7.3":"
Codebase refactored under includes\/. Recommended update.<\/p>","1.7.2":"
Zero Composer dependencies; Case Portal is now a pure showcase with documentation links. Recommended update.<\/p>","1.7.1":"
Added the Case Portal and on-demand guidance. Recommended update.<\/p>","1.6.6":"
The Plugin Center entry moved into the SPA. Update is recommended together with the latest WP Maker Admin.<\/p>","1.6.1":"
Security hardening and WordPress.org guideline compliance fixes. Recommended update.<\/p>","1.6.0":"
Settings pages and the security switch now live in the SPA. Upgrade is recommended together with the latest WP Maker Admin.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3671064,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3671064,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.7.13","1.7.14","1.7.5"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3671159,"resolution":"1","location":"assets","locale":"","width":1600,"height":841},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3671159,"resolution":"2","location":"assets","locale":"","width":1600,"height":841},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3671159,"resolution":"3","location":"assets","locale":"","width":1600,"height":841},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3671159,"resolution":"4","location":"assets","locale":"","width":1600,"height":841},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3671159,"resolution":"5","location":"assets","locale":"","width":1600,"height":841}},"screenshots":{"1":"AI Provider \u2014 configure AI service connectors (WP Maker AI integration)","2":"Post management \u2014 manage articles from the SPA admin","3":"Login page \u2014 modern SPA login experience (WP Maker Auth)","4":"Profile page \u2014 user profile in the SPA admin","5":"Dashboard \u2014 the SPA admin overview for your site"}},"plugin_section":[],"plugin_tags":[83,10447,441,600],"plugin_category":[51,54],"plugin_contributors":[278136],"plugin_business_model":[],"class_list":["post-355069","plugin","type-plugin","status-publish","hentry","plugin_tags-admin","plugin_tags-modules","plugin_tags-multisite","plugin_tags-security","plugin_category-multisite","plugin_category-security-and-spam-protection","plugin_contributors-chimy","plugin_committers-chimy"],"banners":{"banner":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/banner-772x250.png?rev=3671064","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/icon-128x128.png?rev=3671064","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/screenshot-1.png?rev=3671159","caption":"AI Provider \u2014 configure AI service connectors (WP Maker AI integration)"},{"src":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/screenshot-2.png?rev=3671159","caption":"Post management \u2014 manage articles from the SPA admin"},{"src":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/screenshot-3.png?rev=3671159","caption":"Login page \u2014 modern SPA login experience (WP Maker Auth)"},{"src":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/screenshot-4.png?rev=3671159","caption":"Profile page \u2014 user profile in the SPA admin"},{"src":"https:\/\/ps.w.org\/chimys-ai-coding-lab\/assets\/screenshot-5.png?rev=3671159","caption":"Dashboard \u2014 the SPA admin overview for your site"}],"raw_content":"\n
Chimy's AI Coding Lab is the platform core of the WP Maker plugin series: module management, unified REST API, security hardening, and ACF infrastructure. A modern React-based SPA admin is built in and replaces the native WordPress admin experience within its own menu, so no separate admin plugin is required. Advanced capabilities (image\/media optimization, AI, authentication, data synchronization, batch processing, etc.) are provided by dedicated standalone plugins in the wp-maker-* series.<\/p>\n\n
Some features have been split into standalone plugins (wp-maker-* series) that can be installed on demand; they are currently hosted on Gitee and will be listed on the official WordPress.org directory progressively.<\/p>\n\n
wpmaker\/v1\/admin\/*<\/code> REST API<\/li>\n- Admin customization<\/strong> \u2014 post editor (wpautop, featured images), general options (site icon), and media upload enhancements (SVG\/JSON, WebP, renaming) are provided by the wp-maker-site plugin (site & optimization module)<\/li>\n
- Application support<\/strong> \u2014 private-site APIs, CORS support; WatermelonDB sync is provided by the standalone wp-maker-system plugin<\/li>\n
- Local avatars<\/strong> \u2014 preset SVG avatars available on the profile page<\/li>\n
- Security<\/strong> \u2014 malicious request blocking, SQL injection protection, XSS protection, directory traversal protection, login rate limiting, XML-RPC disabling; one-click temporary shutdown from the SPA dashboard<\/li>\n<\/ul>\n\n
Modular Architecture<\/h4>\n\n
All modules are described by manifest.json with metadata and SPA menu configuration, managed by ModuleManager.<\/p>\n\n
External plugins can register via ModuleManager:<\/p>\n\n
\\WPMaker\\Core\\ModuleManager::registerModulePath( __DIR__ );\n<\/code><\/pre>\n\nREST API Namespaces<\/h4>\n\n\nwpmaker\/v1\/admin\/*<\/code> \u2014 platform administration (options, modules, system, network, categories, comments, users, etc.)<\/li>\nwpmaker\/v1\/sync\/*<\/code> \u2014 WatermelonDB data sync (pull\/push, provided by the standalone wp-maker-system plugin)<\/li>\nwpmaker\/v1\/sites\/*<\/code> \u2014 private-site APIs<\/li>\n<\/ul>\n\nDependencies<\/h4>\n\n\n- Batch queue \u2014 provided by the standalone wp-maker-system plugin (with Action Scheduler), not distributed with this plugin<\/li>\n<\/ul>\n\n
Technical Requirements<\/h4>\n\n\n- PHP 7.4 or higher<\/li>\n
- WordPress 6.0 or higher<\/li>\n<\/ul>\n\n
External services<\/h3>\n\n
This plugin does not contact any external service on its own. Previous versions optionally fetched a component catalog from Gitee inside the Case Portal; that feature has been removed.<\/p>\n\n
Privacy<\/h3>\n\n
This plugin does not collect user data, does not perform remote telemetry, and does not send any information to the author's server.<\/p>\n\n
\n- CORS<\/strong> \u2014 cross-origin response headers are configured to support app requests; no data is actively sent out<\/li>\n<\/ul>\n\n
All external interactions are enabled explicitly by the site administrator; the plugin itself has no phone-home behavior.<\/p>\n\n\n
\n- Upload the plugin folder to the
\/wp-content\/plugins\/<\/code> directory<\/li>\n- Activate \"Chimy's AI Coding Lab\" in the WordPress Plugins menu<\/li>\n
- Open the \"WPMaker\" top-level menu to use the built-in SPA admin<\/li>\n<\/ol>\n\n\n
\nWhere can I find documentation and support?<\/h3><\/dt>\nDocumentation is available at https:\/\/aiwp.pro. For support, please use the WordPress.org support forum for this plugin.<\/p><\/dd>\n
Is Multisite supported?<\/h3><\/dt>\nYes. Network-level plugin management and network admin entries are provided.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.7.14<\/h4>\n\n\n- The admin SPA (formerly the standalone wp-maker-admin plugin) is now built in: runtime (AdminSpa), REST endpoints, local avatars, manifest, and bundled build\/ assets<\/li>\n
- Removed the Case Portal\/Case Guide showcase pages<\/li>\n
- Cleaned up legacy mappings for discontinued content types (reward, book, chat_group, wp_app)<\/li>\n<\/ul>\n\n
1.7.13<\/h4>\n\n\n- Case Portal catalog refreshed: icon and type mappings updated; discontinued entries (wp-maker-chat, wp-maker-network, wp-maker-wpopt-integration, wp-maker-baidu-tongji) pruned<\/li>\n
- Case Portal now features entries for the core platform (chimys-ai-coding-lab) and the resource host (wp-maker-resource)<\/li>\n
- ContentController and CaseGuide refinements<\/li>\n
- Release pipeline automation improvements across packaging and deployment scripts<\/li>\n
- Readme updated with accurate screenshots and external-service wording for the WordPress.org directory<\/li>\n<\/ul>\n\n
1.7.5<\/h4>\n\n\n- Manifest path resolved via plugin_dir_path() instead of a brittle relative dirname() traversal<\/li>\n
- User deletion now requires the target-specific delete_user capability<\/li>\n
- Remote address (REMOTE_ADDR) is sanitized before use in rate-limit transients and the 404 log<\/li>\n<\/ul>\n\n
1.7.4<\/h4>\n\n\n- Case Portal styles\/scripts now loaded via the WordPress enqueue API (admin_enqueue_scripts + wp_add_inline_style\/script)<\/li>\n
- User management hardening: role validation on creation, promote_user requirement for role assignment, and target-specific edit_user checks on user updates<\/li>\n
- All global classes prefixed with CHIMAICO_ and the no-ACF fallback option keys changed to chimaico_options_ (unique naming per WordPress.org guideline)<\/li>\n<\/ul>\n\n
1.7.3<\/h4>\n\n\n- Refactored the codebase: core logic consolidated under includes\/ (REST controllers, Case Portal showcase, module manager)<\/li>\n<\/ul>\n\n
1.7.2<\/h4>\n\n\n- Removed all Composer dependencies; the plugin now has zero third-party runtime dependencies<\/li>\n
- Case Portal repositioned as a pure showcase: per-card download buttons removed, documentation links only<\/li>\n
- Admin copy refined to be user-facing (catalog status, update button, no download-oriented wording)<\/li>\n<\/ul>\n\n
1.7.1<\/h4>\n\n\n- Added the Case Portal: a top-level admin menu (no WP Maker Admin required) listing the catalog of plugins\/themes\/Apps developed by Chimy's AI Coding Lab, with documentation links<\/li>\n
- Added on-demand guidance: a dismissible admin notice and a \"Current site suggestions\" block in the Case Portal that only list missing core companion plugins (Admin\/Auth\/App\/Sync\/AI); the guidance disappears once they are enabled<\/li>\n
- Case Portal menu is not registered when wp-maker-admin is active, since the SPA Plugin Center provides the entry<\/li>\n
- Case Portal catalog is fetched from Gitee only on an explicit admin action (the \"Update catalog\" button), never automatically<\/li>\n
- Removed the custom plugin updater; plugin updates are handled by the official WordPress.org channel<\/li>\n<\/ul>\n\n
1.6.6<\/h4>\n\n\n- Removed the native Plugin Center admin page; the entry now converges into the SPA (System Management \u2192 Plugin Center) when wp-maker-admin is active<\/li>\n
- Update notifications only appear when wp-maker-admin is active and redirect to the SPA Plugin Center<\/li>\n
- Reorganized and documented the bundled nginx security rules<\/li>\n<\/ul>\n\n
1.6.5<\/h4>\n\n\n- Added PluginUpdater: Tools \u2192 WP Maker Plugin Center with version comparison against the version manifest<\/li>\n
- New REST API endpoints: GET wpmaker\/v1\/admin\/updates, POST wpmaker\/v1\/admin\/updates\/apply<\/li>\n
- One-click updates: download zip \u2192 verify (folder name + manifest.json) \u2192 backup and replace, with automatic rollback on failure<\/li>\n
- Admin notification when plugin updates are available<\/li>\n
- Packaging pipeline: OUT_DIR environment variable support; zip top-level folder now matches the plugin folder name<\/li>\n<\/ul>\n\n
1.6.4<\/h4>\n\n\n- Dashboard overview enhancements: content trend statistics and uploads size in ContentController<\/li>\n
- Improved WP_DEBUG toggle error handling in SystemController<\/li>\n
- Other maintenance updates<\/li>\n<\/ul>\n\n
1.6.3<\/h4>\n\n\n- Deployment and packaging scripts streamlined to the core plugin list (basic, admin, auth, app, ai)<\/li>\n<\/ul>\n\n
1.6.2<\/h4>\n\n\n- Version bump to align the plugin header; no functional changes<\/li>\n<\/ul>\n\n
1.6.1<\/h4>\n\n\n- Security hardening: escaped security error output; replaced unlink()\/date()\/mt_rand() with WordPress-native functions<\/li>\n
- WP_Filesystem-based writability check for wp-config.php (Plugin Check compliance)<\/li>\n
- Input handling: wp_unslash() for server variables with justified suppressions for security-context checks<\/li>\n
- Removed manual load_plugin_textdomain() (WordPress.org loads translations automatically)<\/li>\n
- readme.txt fully translated to English<\/li>\n
- Plugin URI updated to https:\/\/aiwp.pro<\/li>\n<\/ul>\n\n
1.6.0<\/h4>\n\n\n- Streamlined admin customization: removed avatar, privacy menu, site health, and other features already replaced by the SPA<\/li>\n
- Image optimization (WebP conversion, rename modes, quality) now uses ACF configuration<\/li>\n
- Security switch moved from the Admin Bar to the SPA dashboard (REST API + Switch)<\/li>\n
- Settings pages support a no-ACF fallback: OptionsController parses acf-json and reads\/writes the options table directly<\/li>\n
- Batch processing queue split into the standalone wp-maker-system plugin (with Action Scheduler)<\/li>\n
- WatermelonDB data sync split into the standalone wp-maker-system plugin<\/li>\n<\/ul>\n\n
1.5.3<\/h4>\n\n\n- Synced manifest.json and index.php version numbers<\/li>\n
- Improved the modular loading chain and delayed registration for external modules<\/li>\n
- Optimized ACF field-group auto-loading and configuration reading<\/li>\n<\/ul>\n\n
1.5.2<\/h4>\n\n\n- Enhanced REST API security (IP whitelist, anonymous comment control, route blocking)<\/li>\n
- Improved the image optimization batch queue<\/li>\n
- Added Feishu visitor notifications and FluentChat Feishu notifications<\/li>\n<\/ul>\n\n
1.5.0<\/h4>\n\n\n- Refactored into a modular platform core framework<\/li>\n
- Introduced ModuleManager and FeatureRegistry<\/li>\n
- Added WatermelonDB sync protocol support<\/li>\n<\/ul>","raw_excerpt":"Platform core of the WP Maker plugin series, with a built-in modern SPA admin.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/355069","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=355069"}],"author":[{"embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/chimy"}],"wp:attachment":[{"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=355069"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=355069"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=355069"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=355069"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=355069"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/hy.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=355069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}