4eee9f5f64
P0 security: - PRV_Gateway_Client: remove response body from RuntimeException (HTTP status only) - PRV_Capture_Writer: allowlist-only write (prompt/response text, never headers/auth) - Mandatory capture order: can_afford → probe → persist_result → update_row_cost → write_meta → capture_io - capture_io last and wrapped in swallowing try/catch New tables (SCHEMA_VERSION 3): - prv_call_meta: cost/metadata per call, kept indefinitely - prv_call_io: rendered prompt + raw response, pruned on retention window (default 90d) New classes: - PRV_Call_Meta_Table, PRV_Call_Io_Table: table schema + dbDelta - PRV_Capture_Writer: metadata + I/O write; security allowlist enforced - PRV_Prune_Cron: daily prv_daily_prune cron deletes aged prv_call_io rows only - PRV_Cost_Rollup_Query: MTD summary, model breakdown, drill-down, projection - PRV_Call_Log_Query: paginated + filtered call-log query + per-call I/O fetch - PRV_Costs_Page + PRV_Costs_Renderer: Costs admin sub-page (cap progress, bento, model table, drill-down) - PRV_Call_Log_Page + PRV_Call_Log_Table_Renderer: Call Log admin sub-page (filter bar, paginated table, WCAG AA pagination) - PRV_Call_Drawer_Renderer: non-modal complementary drawer (5 states: Normal/Pruned/Legacy/Failed/Loading) - PRV_Call_Drawer_Script: inline JS for drawer (300-line split from renderer) - PRV_Call_Detail_Ajax: wp_ajax_prv_call_detail AJAX handler - PRV_Admin_Page_Css: CSS provider (300-line split from PRV_Admin_Page) - PRV_Probe_Run_Executor: inner probe loop (300-line split from PRV_Probe_Runner) Updated: - PRV_Probe_Result: tokens_in/tokens_out params + getters - Both providers: report tokens_in/tokens_out from usage.prompt_tokens/completion_tokens - PRV_Probe_Runner: slimmed to lock+UUID+delegation; injects PRV_Capture_Writer - PRV_Config: get_io_retention_days(); PRV_IO_RETENTION_DEFAULT_DAYS constant - PRV_Upgrader/Activator/Deactivator/Plugin: register new tables, cron, pages, AJAX - Settings: retention days field + save in controller - uninstall.php: DROP both new tables, clear prv_daily_prune cron - Subnav 4-tab strip (Dashboard | Costs | Call Log | Settings) on all pages - ARCHITECTURE.md, CHANGELOG.md, CONTEXT.md, CONVENTIONS.md updated Tests: - test-capture-writer.php: write_meta, write_io, P0 security (401 record has no key/Bearer/sk-or-) - test-cost-audit.php: MTD reconciliation, projection, prune, forced capture_io exception, table drops Agent-Session: peptiderepo-geomonitor-v0.3.0-cost-audit
76 lines
2.2 KiB
PHP
76 lines
2.2 KiB
PHP
<?php
|
|
/**
|
|
* Main orchestrator for the PR Vision plugin.
|
|
*
|
|
* @package PrVision
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
/**
|
|
* Main orchestrator for the PR Vision plugin.
|
|
*
|
|
* Boots sub-systems in the correct order, runs pending data migrations,
|
|
* hooks into WP, and keeps the top-level file under the 300-line limit by
|
|
* delegating all logic to specialist classes.
|
|
*
|
|
* Who triggers: plugins_loaded action (pr-vision.php).
|
|
* Dependencies: PRV_Upgrader, PRV_Cron, PRV_Admin_Page, PRV_Settings_Page,
|
|
* PRV_Settings_Controller, PRV_Costs_Page, PRV_Call_Log_Page,
|
|
* PRV_Call_Detail_Ajax, PRV_Prune_Cron, PRV_Collector_Registry.
|
|
*
|
|
* @see ARCHITECTURE.md -- Boot sequence diagram.
|
|
* @see class-prv-upgrader.php -- Runs migrations on every boot.
|
|
* @see class-prv-costs-page.php -- [v0.3.0] Costs admin sub-page.
|
|
* @see class-prv-call-log-page.php -- [v0.3.0] Call Log admin sub-page.
|
|
* @see class-prv-prune-cron.php -- [v0.3.0] Daily prune cron.
|
|
* @package PrVision
|
|
*/
|
|
class PRV_Plugin {
|
|
|
|
/**
|
|
* Wire up all WordPress hooks.
|
|
*
|
|
* Migrations run before anything reads from prv_models so the v2 format
|
|
* is always in place regardless of whether the plugin was freshly activated
|
|
* or just upgraded from v0.1.x while live.
|
|
*
|
|
* Side effects: Registers admin menus, enqueues assets, registers the
|
|
* collector/panel registry, runs data migrations.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function init(): void {
|
|
// Migrations first -- must run before any config read.
|
|
PRV_Upgrader::run();
|
|
|
|
$cron = new PRV_Cron();
|
|
$cron->register_hooks();
|
|
|
|
$prune = new PRV_Prune_Cron();
|
|
$prune->register_hooks();
|
|
|
|
if ( is_admin() ) {
|
|
$page = new PRV_Admin_Page();
|
|
$page->register_hooks();
|
|
|
|
$settings = new PRV_Settings_Page();
|
|
$settings->register_hooks();
|
|
|
|
$costs = new PRV_Costs_Page();
|
|
$costs->register_hooks();
|
|
|
|
$call_log = new PRV_Call_Log_Page();
|
|
$call_log->register_hooks();
|
|
|
|
$ajax = new PRV_Call_Detail_Ajax();
|
|
$ajax->register_hooks();
|
|
}
|
|
|
|
// Register the v1 AI-visibility collector + panel.
|
|
$registry = PRV_Collector_Registry::instance();
|
|
$registry->register_collector( new PRV_Ai_Visibility_Collector() );
|
|
$registry->register_panel( 'ai_visibility', new PRV_Ai_Visibility_Panel() );
|
|
}
|
|
}
|