a09bda0181
P1-A: Remove defined()/constant() declarations from tests/bootstrap.php
- Both shadow PHP built-ins → 'Cannot redeclare' fatal on PHP 8.x
- Killed PHP Lint (8.2) job and cancelled 8.1/8.3 jobs
- Full bootstrap audit: no other PHP built-in shadows remain
P1-B: Re-escape pre-escaped vars at echo site (class-prv-model-manager-table)
- $prov, $slug, $note: esc_html() at output (was only at assignment)
- $id: esc_attr() at every output site (3 places)
- $checked_attr/$toggle_attrs: phpcs:ignore -- hard-coded attribute strings
- render_health_badge(): phpcs:ignore -- returns pre-escaped HTML markup
P1-C: phpcs:disable/enable NonceVerification.Missing (class-prv-settings-page)
- Wraps all four handle_*() POST blocks
- Justification inline: nonce verified via require_admin_nonce() private helper
P1-D/E: Auto-fixable PHPCS violations (array formatting + style)
- class-prv-config.php: expand 12 inline associative peptide arrays to multi-line
- class-prv-probe-runner.php: expand inline {probed,errors} array; align param docs
- class-prv-model-test-ajax.php: multi-line wp_send_json_success/error calls
- class-prv-settings-renderer.php: extract cadence options array to variable
- class-prv-model-registry.php: capitalise docblock first word; align param spacing
P2: CONTEXT.md v0.2.0 -- add 7 new domain terms
- Config Version, Run Lock, Model Registry, Run Health, Projected Cost,
Config-version Stamp, Truncation State
Agent-Session: pr-vision admin v0.2.0 CI fix
96 lines
2.8 KiB
PHP
96 lines
2.8 KiB
PHP
<?php
|
|
/**
|
|
* AJAX handler: Test model slug validity.
|
|
*
|
|
* @package PrVision
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
/**
|
|
* AJAX handler for the "Test" model button.
|
|
*
|
|
* Performs a single cheap probe to verify a model slug resolves at the
|
|
* provider. Rate-limited to one test per slug per 30 seconds via transient.
|
|
* This is a point-in-time check (not a monitor) -- the UI labels it as such.
|
|
* Never displays the API key.
|
|
*
|
|
* Who triggers: wp_ajax_prv_test_model (registered by PRV_Settings_Page).
|
|
* Dependencies: PRV_Model_Registry, PRV_Perplexity_Provider, PRV_OpenRouter_Provider.
|
|
*
|
|
* @see class-prv-settings-page.php -- Registers the wp_ajax_ hook.
|
|
* @see class-prv-model-registry.php -- Provides model data by id.
|
|
* @package PrVision
|
|
*/
|
|
class PRV_Model_Test_Ajax {
|
|
|
|
/**
|
|
* Rate-limit window in seconds.
|
|
*/
|
|
const RATE_LIMIT_SECONDS = 30;
|
|
|
|
/**
|
|
* Handle the prv_test_model AJAX request.
|
|
*
|
|
* Verifies capability + nonce, rate-limits, performs one probe, returns JSON.
|
|
*
|
|
* Side effects: HTTP call to LLM provider; sets a short-lived transient; exits.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function handle(): void {
|
|
if ( ! current_user_can( 'manage_options' ) ) {
|
|
wp_send_json_error( array( 'message' => 'Insufficient permissions.' ) );
|
|
}
|
|
|
|
$nonce = isset( $_POST['prv_nonce'] ) ? sanitize_text_field( wp_unslash( (string) $_POST['prv_nonce'] ) ) : '';
|
|
if ( ! wp_verify_nonce( $nonce, PRV_Settings_Page::NONCE_TEST ) ) {
|
|
wp_send_json_error( array( 'message' => 'Security check failed.' ) );
|
|
}
|
|
|
|
$model_id = isset( $_POST['model_id'] ) ? sanitize_text_field( wp_unslash( (string) $_POST['model_id'] ) ) : '';
|
|
$model = PRV_Model_Registry::find_by_id( $model_id );
|
|
|
|
if ( null === $model ) {
|
|
wp_send_json_error( array( 'message' => 'Model not found.' ) );
|
|
}
|
|
|
|
$slug = (string) $model['slug'];
|
|
$lock_key = 'prv_test_lock_' . md5( $slug );
|
|
if ( false !== get_transient( $lock_key ) ) {
|
|
wp_send_json_error( array( 'message' => 'Rate limited -- wait 30 s between tests.' ) );
|
|
}
|
|
set_transient( $lock_key, 1, self::RATE_LIMIT_SECONDS );
|
|
|
|
$start = microtime( true );
|
|
$provider = ( 'perplexity/sonar' === $slug )
|
|
? new PRV_Perplexity_Provider()
|
|
: new PRV_OpenRouter_Provider( $slug );
|
|
|
|
if ( ! $provider->is_configured() ) {
|
|
wp_send_json_error( array( 'message' => 'API key not configured (check wp-config.php).' ) );
|
|
}
|
|
|
|
try {
|
|
$provider->probe( 'what is BPC-157' );
|
|
$ms = (int) round( ( microtime( true ) - $start ) * 1000 );
|
|
wp_send_json_success(
|
|
array(
|
|
'resolved' => true,
|
|
'latency_ms' => $ms,
|
|
'slug' => $slug,
|
|
'message' => sprintf( 'Resolved · %d ms', $ms ),
|
|
)
|
|
);
|
|
} catch ( \Exception $e ) {
|
|
wp_send_json_error(
|
|
array(
|
|
'resolved' => false,
|
|
'slug' => $slug,
|
|
'message' => 'Not resolved -- provider returned error (slug retired?)',
|
|
)
|
|
);
|
|
}
|
|
}
|
|
}
|