Initial commit: AutoBlogger v0.1.0
WordPress plugin that auto-researches topics from Reddit, generates SEO-optimized articles via OpenRouter LLMs, runs them through a chief editor agent, and publishes on a daily schedule. Includes: - Full generation pipeline (collect → analyze → score → generate → review → publish) - Cost tracking and budget enforcement - Admin UI: settings, review queue, metrics, activity log - CI/CD pipeline (GitHub Actions → WordPress REST deploy) - Unit test suite (PHPUnit + Brain Monkey) - Structured logging with configurable verbosity Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Terence Ong
236
.github/mu-plugins/autoblogger-deploy-receiver.php
vendored
Executable file
236
.github/mu-plugins/autoblogger-deploy-receiver.php
vendored
Executable file
@@ -0,0 +1,236 @@
|
||||
<?php
|
||||
/**
|
||||
* Plugin Name: AutoBlogger Deploy Receiver
|
||||
* Description: REST endpoint that accepts authenticated plugin zip uploads for automated deployment.
|
||||
* Version: 1.0.0
|
||||
* Author: AutoBlogger CI/CD
|
||||
*
|
||||
* INSTALLATION:
|
||||
* 1. Upload this file to wp-content/mu-plugins/autoblogger-deploy-receiver.php
|
||||
* 2. Add to wp-config.php (above "That's all, stop editing!"):
|
||||
* define('AUTOBLOGGER_DEPLOY_KEY', 'your-random-64-char-token');
|
||||
* 3. Generate a key: php -r "echo bin2hex(random_bytes(32));"
|
||||
*
|
||||
* SECURITY:
|
||||
* - Deploy key validated with hash_equals() (timing-safe comparison).
|
||||
* - Only accepts zip files containing autoblogger/autoblogger.php.
|
||||
* - Backs up current plugin before extraction; rolls back on failure.
|
||||
* - Rate limited: max 1 deploy per 60 seconds.
|
||||
* - All actions logged to PHP error_log for audit trail.
|
||||
*
|
||||
* @see .github/workflows/deploy.yml — GitHub Actions workflow that calls this.
|
||||
* @see scripts/deploy.sh — Manual deploy script that calls this.
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
// Hard requirement: deploy key must be defined in wp-config.php.
|
||||
if ( ! defined( 'AUTOBLOGGER_DEPLOY_KEY' ) || '' === AUTOBLOGGER_DEPLOY_KEY ) {
|
||||
return;
|
||||
}
|
||||
|
||||
add_action( 'rest_api_init', 'autoblogger_deploy_register_route' );
|
||||
|
||||
/**
|
||||
* Register the deploy REST route.
|
||||
*/
|
||||
function autoblogger_deploy_register_route(): void {
|
||||
register_rest_route( 'autoblogger-deploy/v1', '/deploy', [
|
||||
'methods' => 'POST',
|
||||
'callback' => 'autoblogger_deploy_handle',
|
||||
'permission_callback' => 'autoblogger_deploy_check_auth',
|
||||
] );
|
||||
|
||||
// Health check endpoint (GET) — useful for monitoring.
|
||||
register_rest_route( 'autoblogger-deploy/v1', '/status', [
|
||||
'methods' => 'GET',
|
||||
'callback' => function () {
|
||||
return [
|
||||
'status' => 'ready',
|
||||
'plugin' => is_dir( WP_PLUGIN_DIR . '/autoblogger' ) ? 'installed' : 'not_installed',
|
||||
'active' => is_plugin_active( 'autoblogger/autoblogger.php' ),
|
||||
'version' => autoblogger_deploy_get_installed_version(),
|
||||
];
|
||||
},
|
||||
'permission_callback' => 'autoblogger_deploy_check_auth',
|
||||
] );
|
||||
}
|
||||
|
||||
/**
|
||||
* Validate the deploy key from the request header.
|
||||
* Uses hash_equals() for timing-safe comparison.
|
||||
*/
|
||||
function autoblogger_deploy_check_auth( WP_REST_Request $request ): bool {
|
||||
$key = $request->get_header( 'X-Deploy-Key' );
|
||||
if ( null === $key || '' === $key ) {
|
||||
return false;
|
||||
}
|
||||
return hash_equals( (string) AUTOBLOGGER_DEPLOY_KEY, $key );
|
||||
}
|
||||
|
||||
/**
|
||||
* Handle a deploy request: receive zip, validate, extract, activate.
|
||||
*/
|
||||
function autoblogger_deploy_handle( WP_REST_Request $request ): WP_REST_Response|WP_Error {
|
||||
// Rate limit: 1 deploy per 60 seconds.
|
||||
$lock = get_transient( 'autoblogger_deploy_lock' );
|
||||
if ( false !== $lock ) {
|
||||
return new WP_Error(
|
||||
'rate_limited',
|
||||
'Deploy in progress or recently completed. Wait 60 seconds.',
|
||||
[ 'status' => 429 ]
|
||||
);
|
||||
}
|
||||
set_transient( 'autoblogger_deploy_lock', time(), 60 );
|
||||
|
||||
// 1. Validate uploaded file exists.
|
||||
$files = $request->get_file_params();
|
||||
if ( empty( $files['plugin']['tmp_name'] ) || ! is_uploaded_file( $files['plugin']['tmp_name'] ) ) {
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
return new WP_Error( 'no_file', 'No plugin zip uploaded.', [ 'status' => 400 ] );
|
||||
}
|
||||
|
||||
$tmp_file = $files['plugin']['tmp_name'];
|
||||
|
||||
// 2. Validate it's a real zip and contains our plugin.
|
||||
$zip = new ZipArchive();
|
||||
if ( true !== $zip->open( $tmp_file ) ) {
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
return new WP_Error( 'invalid_zip', 'Uploaded file is not a valid zip.', [ 'status' => 400 ] );
|
||||
}
|
||||
|
||||
$has_main_file = false;
|
||||
for ( $i = 0; $i < $zip->numFiles; $i++ ) {
|
||||
if ( 'autoblogger/autoblogger.php' === $zip->getNameIndex( $i ) ) {
|
||||
$has_main_file = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if ( ! $has_main_file ) {
|
||||
$zip->close();
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
return new WP_Error(
|
||||
'invalid_plugin',
|
||||
'Zip must contain autoblogger/autoblogger.php at root.',
|
||||
[ 'status' => 400 ]
|
||||
);
|
||||
}
|
||||
|
||||
// 3. Read version from the incoming zip before extraction.
|
||||
$incoming_main = $zip->getFromName( 'autoblogger/autoblogger.php' );
|
||||
$incoming_version = 'unknown';
|
||||
if ( $incoming_main && preg_match( '/Version:\s*([0-9]+\.[0-9]+\.[0-9]+)/', $incoming_main, $m ) ) {
|
||||
$incoming_version = $m[1];
|
||||
}
|
||||
|
||||
$plugin_dir = WP_PLUGIN_DIR . '/autoblogger';
|
||||
$backup_dir = null;
|
||||
|
||||
// 4. Deactivate plugin before file operations (prevent fatal errors).
|
||||
$was_active = is_plugin_active( 'autoblogger/autoblogger.php' );
|
||||
if ( $was_active ) {
|
||||
deactivate_plugins( 'autoblogger/autoblogger.php', true );
|
||||
}
|
||||
|
||||
// 5. Backup current installation if it exists.
|
||||
if ( is_dir( $plugin_dir ) ) {
|
||||
$backup_dir = WP_PLUGIN_DIR . '/autoblogger-backup-' . time();
|
||||
if ( ! rename( $plugin_dir, $backup_dir ) ) {
|
||||
$zip->close();
|
||||
// Re-activate if we deactivated.
|
||||
if ( $was_active ) {
|
||||
activate_plugin( 'autoblogger/autoblogger.php' );
|
||||
}
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
return new WP_Error( 'backup_failed', 'Could not backup current plugin.', [ 'status' => 500 ] );
|
||||
}
|
||||
}
|
||||
|
||||
// 6. Extract the zip.
|
||||
$extract_ok = $zip->extractTo( WP_PLUGIN_DIR );
|
||||
$zip->close();
|
||||
|
||||
if ( ! $extract_ok || ! file_exists( $plugin_dir . '/autoblogger.php' ) ) {
|
||||
// Rollback: restore backup.
|
||||
if ( $backup_dir && is_dir( $backup_dir ) ) {
|
||||
rename( $backup_dir, $plugin_dir );
|
||||
}
|
||||
if ( $was_active ) {
|
||||
activate_plugin( 'autoblogger/autoblogger.php' );
|
||||
}
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
error_log( '[AutoBlogger Deploy] Extraction failed. Rolled back to previous version.' );
|
||||
return new WP_Error( 'extract_failed', 'Zip extraction failed. Rolled back.', [ 'status' => 500 ] );
|
||||
}
|
||||
|
||||
// 7. Activate plugin.
|
||||
$activation_result = activate_plugin( 'autoblogger/autoblogger.php' );
|
||||
if ( is_wp_error( $activation_result ) ) {
|
||||
// Activation failed — rollback.
|
||||
autoblogger_deploy_rmdir_recursive( $plugin_dir );
|
||||
if ( $backup_dir && is_dir( $backup_dir ) ) {
|
||||
rename( $backup_dir, $plugin_dir );
|
||||
activate_plugin( 'autoblogger/autoblogger.php' );
|
||||
}
|
||||
delete_transient( 'autoblogger_deploy_lock' );
|
||||
error_log( '[AutoBlogger Deploy] Activation failed: ' . $activation_result->get_error_message() . '. Rolled back.' );
|
||||
return new WP_Error(
|
||||
'activation_failed',
|
||||
'Plugin activation failed: ' . $activation_result->get_error_message() . '. Rolled back.',
|
||||
[ 'status' => 500 ]
|
||||
);
|
||||
}
|
||||
|
||||
// 8. Clean up backup.
|
||||
if ( $backup_dir && is_dir( $backup_dir ) ) {
|
||||
autoblogger_deploy_rmdir_recursive( $backup_dir );
|
||||
}
|
||||
|
||||
$old_version = autoblogger_deploy_get_installed_version();
|
||||
error_log( sprintf(
|
||||
'[AutoBlogger Deploy] Successfully deployed v%s (was: %s) at %s',
|
||||
$incoming_version,
|
||||
$old_version ?: 'fresh install',
|
||||
gmdate( 'Y-m-d H:i:s' )
|
||||
) );
|
||||
|
||||
return new WP_REST_Response( [
|
||||
'success' => true,
|
||||
'version' => $incoming_version,
|
||||
'message' => "AutoBlogger v{$incoming_version} deployed and activated.",
|
||||
], 200 );
|
||||
}
|
||||
|
||||
/**
|
||||
* Get the currently installed plugin version from the main file header.
|
||||
*/
|
||||
function autoblogger_deploy_get_installed_version(): string {
|
||||
$main_file = WP_PLUGIN_DIR . '/autoblogger/autoblogger.php';
|
||||
if ( ! file_exists( $main_file ) ) {
|
||||
return '';
|
||||
}
|
||||
$data = get_file_data( $main_file, [ 'Version' => 'Version' ] );
|
||||
return $data['Version'] ?? '';
|
||||
}
|
||||
|
||||
/**
|
||||
* Recursively delete a directory.
|
||||
*/
|
||||
function autoblogger_deploy_rmdir_recursive( string $dir ): void {
|
||||
if ( ! is_dir( $dir ) ) {
|
||||
return;
|
||||
}
|
||||
$iterator = new RecursiveIteratorIterator(
|
||||
new RecursiveDirectoryIterator( $dir, RecursiveDirectoryIterator::SKIP_DOTS ),
|
||||
RecursiveIteratorIterator::CHILD_FIRST
|
||||
);
|
||||
foreach ( $iterator as $file ) {
|
||||
if ( $file->isDir() ) {
|
||||
rmdir( $file->getPathname() );
|
||||
} else {
|
||||
unlink( $file->getPathname() );
|
||||
}
|
||||
}
|
||||
rmdir( $dir );
|
||||
}
|
||||
159
.github/workflows/deploy.yml
vendored
Executable file
159
.github/workflows/deploy.yml
vendored
Executable file
@@ -0,0 +1,159 @@
|
||||
# AutoBlogger CI/CD Pipeline
|
||||
#
|
||||
# Triggers on every push to main. Runs PHP lint and coding standards checks,
|
||||
# packages the plugin into a clean zip (excluding dev files), and deploys it
|
||||
# to the live WordPress site via the deploy-receiver mu-plugin REST endpoint.
|
||||
#
|
||||
# Required GitHub Secrets:
|
||||
# DEPLOY_URL — https://peptiderepo.com/wp-json/autoblogger-deploy/v1/deploy
|
||||
# DEPLOY_KEY — The token matching AUTOBLOGGER_DEPLOY_KEY in wp-config.php
|
||||
#
|
||||
# @see .github/mu-plugins/autoblogger-deploy-receiver.php — Server-side endpoint.
|
||||
# @see scripts/deploy.sh — Manual deploy script.
|
||||
|
||||
name: Deploy AutoBlogger
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
workflow_dispatch: # Allow manual trigger from GitHub UI
|
||||
|
||||
concurrency:
|
||||
group: deploy-${{ github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
jobs:
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
# Stage 1: Lint & Standards
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
lint:
|
||||
name: PHP Lint & PHPCS
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Set up PHP
|
||||
uses: shivammathur/setup-php@v2
|
||||
with:
|
||||
php-version: '8.1'
|
||||
tools: cs2pr, phpcs
|
||||
coverage: none
|
||||
|
||||
- name: PHP syntax check
|
||||
run: |
|
||||
find . -name '*.php' -not -path './vendor/*' -not -path './tests/*' \
|
||||
-exec php -l {} \; 2>&1 | grep -v "No syntax errors" | head -50
|
||||
# Fail if any file has syntax errors
|
||||
find . -name '*.php' -not -path './vendor/*' -not -path './tests/*' \
|
||||
-exec php -l {} \; 2>&1 | grep -q "Parse error" && exit 1 || true
|
||||
|
||||
- name: Install WordPress Coding Standards
|
||||
run: |
|
||||
composer global config allow-plugins.dealerdirect/phpcodesniffer-composer-installer true
|
||||
composer global require --dev wp-coding-standards/wpcs:"^3.0" \
|
||||
phpcsstandards/phpcsextra:"^1.0" \
|
||||
phpcsstandards/phpcsutils:"^1.0"
|
||||
|
||||
- name: Run PHPCS (warnings only, non-blocking)
|
||||
run: |
|
||||
phpcs --standard=WordPress --extensions=php \
|
||||
--ignore=vendor,tests,node_modules \
|
||||
--report=checkstyle \
|
||||
--warning-severity=0 \
|
||||
. | cs2pr || true
|
||||
# Non-blocking for now — we want visibility without breaking deploys
|
||||
# while we clean up existing code. Remove "|| true" once clean.
|
||||
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
# Stage 2: Unit Tests
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
test:
|
||||
name: PHPUnit Tests
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Set up PHP
|
||||
uses: shivammathur/setup-php@v2
|
||||
with:
|
||||
php-version: '8.1'
|
||||
extensions: openssl, json, mbstring
|
||||
coverage: none
|
||||
|
||||
- name: Install Composer dependencies
|
||||
run: composer install --no-interaction --prefer-dist
|
||||
|
||||
- name: Run PHPUnit
|
||||
run: vendor/bin/phpunit --testdox
|
||||
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
# Stage 3: Package & Deploy
|
||||
# ──────────────────────────────────────────────────────────────────────
|
||||
deploy:
|
||||
name: Package & Deploy to Production
|
||||
runs-on: ubuntu-latest
|
||||
needs: [lint, test]
|
||||
if: github.ref == 'refs/heads/main'
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Read plugin version
|
||||
id: version
|
||||
run: |
|
||||
VERSION=$(grep -oP "Version:\s*\K[0-9]+\.[0-9]+\.[0-9]+" autoblogger.php)
|
||||
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
||||
echo "Plugin version: $VERSION"
|
||||
|
||||
- name: Build plugin zip
|
||||
run: |
|
||||
# Create a clean build directory
|
||||
mkdir -p build/autoblogger
|
||||
|
||||
# Copy only production files (exclude dev/CI artifacts)
|
||||
rsync -av --exclude-from='.distignore' ./ build/autoblogger/
|
||||
|
||||
# Create the zip
|
||||
cd build
|
||||
zip -r "autoblogger-${{ steps.version.outputs.version }}.zip" autoblogger/
|
||||
ls -lh "autoblogger-${{ steps.version.outputs.version }}.zip"
|
||||
|
||||
- name: Deploy to WordPress
|
||||
env:
|
||||
DEPLOY_URL: ${{ secrets.DEPLOY_URL }}
|
||||
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
|
||||
run: |
|
||||
VERSION="${{ steps.version.outputs.version }}"
|
||||
ZIP_PATH="build/autoblogger-${VERSION}.zip"
|
||||
|
||||
echo "Deploying AutoBlogger v${VERSION} to production..."
|
||||
|
||||
RESPONSE=$(curl -sS -w "\n%{http_code}" \
|
||||
-X POST "${DEPLOY_URL}" \
|
||||
-H "X-Deploy-Key: ${DEPLOY_KEY}" \
|
||||
-F "plugin=@${ZIP_PATH}" \
|
||||
--max-time 120)
|
||||
|
||||
HTTP_CODE=$(echo "$RESPONSE" | tail -1)
|
||||
BODY=$(echo "$RESPONSE" | head -n -1)
|
||||
|
||||
echo "HTTP ${HTTP_CODE}: ${BODY}"
|
||||
|
||||
if [ "$HTTP_CODE" -ne 200 ]; then
|
||||
echo "::error::Deployment failed with HTTP ${HTTP_CODE}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Deployment successful!"
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: autoblogger-${{ steps.version.outputs.version }}
|
||||
path: build/autoblogger-${{ steps.version.outputs.version }}.zip
|
||||
retention-days: 30
|
||||
Reference in New Issue
Block a user