Fix cost-tracker SELECT against canonical schema (v0.15.1)

The cost-preview probe in get_avg_tokens_for_stages() referenced
input_tokens/output_tokens/timestamp, which don't exist. Canonical
columns are prompt_tokens/completion_tokens/created_at. Empty-result
fallback was masking the failure functionally, but the wpdb debug
notice was visibly leaking to every admin visit of the AI Models tab.

Adds regression tests that assert $wpdb->last_error after the call,
so the next schema drift won't be masked the same way.

Bug present since v0.11.0 (2026-04-23).

Agent-Session: engineer-prautoblogger cost-tracker-schema-mismatch

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ['7.4', '8.1', '8.3']
+        php: ['8.1', '8.2', '8.3']
     steps:
       - uses: actions/checkout@v4
       - name: Setup PHP ${{ matrix.php }}
@@ -31,7 +31,7 @@ jobs:
           coverage: none
       - name: Syntax check all PHP files
         # Exclude .github/mu-plugins — those run on the production server (PHP 8+)
-        # and may use PHP 8+ syntax (union types etc.) that 7.4 rejects.
+        # and may use PHP 8+ syntax (union types etc.) that older versions reject.
         run: |
           set -e
           find . -name '*.php' \
@@ -44,14 +44,12 @@ jobs:
   phpcs:
     name: PHPCS (WordPress standards)
     runs-on: ubuntu-latest
-    continue-on-error: false  # now strict after PHPCS cleanup in v0.8.3
+    continue-on-error: false  # strict after PHPCS cleanup in v0.8.3
     permissions:
       contents: write  # allows phpcbf auto-fix commits back to the PR branch
     steps:
       - uses: actions/checkout@v4
         with:
-          # Check out the actual branch so phpcbf can push fixes back.
-          # github.head_ref is set on PR events; github.ref_name on push events.
           ref: ${{ github.head_ref || github.ref_name }}
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: Setup PHP
@@ -62,10 +60,7 @@ jobs:
           tools: composer:v2, phpcs
       - name: Install WordPress Coding Standards
         run: |
-          # Allow the PHPCS composer-installer plugin (auto-registers standards).
           composer global config --no-plugins allow-plugins.dealerdirect/phpcodesniffer-composer-installer true
-          # WPCS 3.x requires PHPCSExtra (for the Universal.* and NormalizedArrays.* sniffs)
-          # AND phpcsutils. Installing the installer itself lets it auto-register the standards path.
           composer global require --no-interaction \
             "dealerdirect/phpcodesniffer-composer-installer:^1.0" \
             "wp-coding-standards/wpcs:^3.0" \
@@ -101,7 +96,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ['7.4', '8.1', '8.3']
+        php: ['8.1', '8.2', '8.3']
     steps:
       - uses: actions/checkout@v4
       - name: Setup PHP ${{ matrix.php }}

.github/workflows/deploy.yml

@@ -61,9 +61,17 @@ jobs:
         if: always()
         run: rm -f ~/.ssh/deploy_key
 
+  smoke:
+    name: Smoke tests (staging)
+    needs: deploy-staging
+    uses: peptiderepo/peptide-e2e/.github/workflows/smoke.yml@main
+    secrets:
+      STAGING_WP_ADMIN_USER: ${{ secrets.STAGING_WP_ADMIN_USER }}
+      STAGING_WP_ADMIN_PASSWORD: ${{ secrets.STAGING_WP_ADMIN_PASSWORD }}
+
   deploy-production:
     name: Deploy to Production
-    needs: [validate, deploy-staging]
+    needs: [validate, deploy-staging, smoke]
     runs-on: ubuntu-latest
     environment: production
     steps:
@@ -103,3 +111,8 @@ jobs:
       - name: Cleanup
         if: always()
         run: rm -f ~/.ssh/deploy_key
+      - name: Deploy summary
+        run: |
+          echo "## Deployment Complete" >> $GITHUB_STEP_SUMMARY
+          echo "- **Commit:** \`${GITHUB_SHA::7}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- **Deployed to:** peptiderepo.com" >> $GITHUB_STEP_SUMMARY

ARCHITECTURE.md

@@ -476,7 +476,7 @@ Stored on every PRAutoBlogger-generated post:
 | Reddit RSS | Primary Reddit data source — Atom feeds for subreddit hot posts | None (unauthenticated) | No known rate limit; reliable from datacenter IPs | `providers/class-reddit-json-client.php` |
 | Reddit .json | Fallback for posts + only source for comments | None (unauthenticated) | ~10 req/min (datacenter IPs often blocked) | `providers/class-reddit-json-client.php` |
 | Google Analytics 4 | Post performance metrics | OAuth2 service account | Standard GA4 limits | `core/class-ga4-client.php`, `core/class-metrics-collector.php` |
-| Runware (FLUX.1 via runware.ai) | **Default** image backend (v0.9.0+): schnell ~$0.0006/image, dev ~$0.02/image. True parallel generation via curl_multi. | API key (encrypted in wp_options) | Account-level quotas | `providers/class-runware-image-provider.php`, `providers/class-runware-image-pricing.php`, `providers/class-runware-image-support.php`, `providers/class-runware-image-batch.php` |
+| Runware (FLUX.1 via runware.ai) | **Default** image backend (v0.9.0+): schnell ~$0.0006/image, dev ~$0.02/image. True parallel generation via curl_multi. **v0.15.0: live model catalog sync** from `/v1/models` endpoint (task-based API); normalized to Image_Model_Registry shape; cached with 24h TTL; on-demand refresh via AJAX. | API key (encrypted in wp_options) | Account-level quotas | `providers/class-runware-image-provider.php`, `providers/class-runware-image-pricing.php`, `providers/class-runware-image-support.php`, `providers/class-runware-image-batch.php`, `providers/class-runware-model-catalog.php` |
 
 ---
 

CHANGELOG.md

@@ -5,7 +5,52 @@ All notable changes to PRAutoBlogger will be documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project uses [Semantic Versioning](https://semver.org/).
 
+## [0.15.1] - 2026-05-14
+
+### Fixed
+- Cost preview in AI Models settings tab no longer prints a WordPress database
+  error notice; query now uses canonical column names (`prompt_tokens`,
+  `completion_tokens`, `created_at`). Bug present since v0.11.0 (2026-04-23).
+
 ## [0.14.0] - 2026-04-26
+## [0.15.0] - 2026-04-26
+
+### Added
+- **Live Runware Model Catalog Sync**: New `class-runware-model-catalog.php`
+  fetches the live Runware model list via their `/v1` endpoint (task-based API),
+  filters to `taskType=imageInference` (text-to-image only, excluding inpainting),
+  normalizes to the Image_Model_Registry shape, and caches in `prautoblogger_runware_model_cache`
+  with a 24-hour TTL. Fixes the pattern from v0.13.8 and v0.14.0 where the
+  hardcoded Runware model list was a maintenance burden and gaps (missing models,
+  wrong prices) went unnoticed until customer images generation broke.
+- Daily WP-Cron sync (`prautoblogger_sync_runware_models`) scheduled on activation
+  and unscheduled on deactivation.
+- On-demand "Sync now" AJAX button in PRAdmin (Images settings section) with
+  nonce protection and `manage_options` cap check. Refreshes model count and
+  last-synced timestamp in the UI without full page reload.
+- Smart caching + fallback strategy: if cache is < 24h old, use it; if stale,
+  trigger a sync; if sync fails, use the last-known-good cache; if no cache,
+  fall back to hardcoded list (never returns empty array).
+- Pricing merge: Runware API may not expose per-image cost. The catalog pulls
+  costs from `class-runware-image-pricing.php::COST_PER_IMAGE` on every sync,
+  ensuring pricing data is always authoritative and up-to-date.
+- Unit tests for `PRAutoBlogger_Runware_Model_Catalog`: sync success/failure,
+  fallback on API unreachable, stale cache behavior, cost merge logic.
+- `class-image-model-registry.php` refactored: `get_models()` now delegates to
+  the catalog for Runware models + static OpenRouter list. Extracted fallback
+  lists into private `get_runware_fallback_models()` and `get_openrouter_models()`
+  for clarity.
+
+### Fixed
+- Silent model list gaps no longer possible: Runware no longer depends on manual
+  model list maintenance in the pricing class. The live catalog is the source of
+  truth; pricing is merged in on every sync.
+
+### Changed
+- `class-image-model-registry.php`: `get_models()` is now a thin wrapper around
+  the catalog + OpenRouter static list. Breaking change: callers that expect a
+  specific static list should note the new dynamic Runware side.
+
 
 ### Fixed
 - Runware image generation now correctly uses the admin-selected model instead

includes/admin/class-image-model-registry.php

@@ -6,22 +6,25 @@ declare(strict_types=1);
  *
  * Static registry of available image generation models.
  *
- * What: Returns a hardcoded list of image models for the admin model picker.
- *       No API discovery — updated manually when providers add/remove models.
- *       As of 2026-04-26, registry includes 21 models across Runware (15) and
- *       OpenRouter (6), ordered cheapest-to-most-expensive within each provider.
+ * What: Returns a merged list of Runware models (from live catalog sync) and
+ *       OpenRouter models (static list). No API discovery for OpenRouter — updated
+ *       manually when new models are available.
+ *       As of 2026-04-26, registry includes 15 Runware models (live) + 6 OpenRouter
+ *       models (static), ordered cheapest-to-most-expensive within each provider.
  * Who calls it: PRAutoBlogger_Admin_Page (model picker UI + save-time provider
  *               derivation) and PRAutoBlogger_Image_Pipeline (provider lookup).
- * Dependencies: None.
+ * Dependencies: PRAutoBlogger_Runware_Model_Catalog (live Runware models),
+ *               hardcoded fallback lists for resilience.
  *
  * @see admin/class-settings-fields-extended.php — Image settings reference this registry.
  * @see core/class-image-pipeline.php            — Derives provider from picked model.
  * @see providers/class-runware-image-provider.php — Runware FLUX backend.
+ * @see providers/class-runware-model-catalog.php — Live model sync and caching.
  */
 class PRAutoBlogger_Image_Model_Registry {
 
 	/**
-	 * Get all available image generation models.
+	 * Get all available image generation models (Runware live + OpenRouter static).
 	 *
 	 * Each entry contains:
 	 * - id:             Model identifier used in API calls.
@@ -34,15 +37,44 @@ class PRAutoBlogger_Image_Model_Registry {
 	 * Ordered cheapest-to-most-expensive within each provider, with the
 	 * recommended default (Runware schnell) at the top.
 	 *
-	 * Last verified: 2026-04-26. To update: check https://runware.ai/models (text-to-image section)
-	 * and https://openrouter.ai/api/v1/models filtering output_modalities containing 'image'.
-	 * Exclude: inpainting (needs mask), img2img (needs seedImage), video, upscalers, background removal.
-	 *
 	 * @return array<int, array<string, mixed>>
 	 */
 	public static function get_models(): array {
+		$catalog = new PRAutoBlogger_Runware_Model_Catalog();
+		$runware_models = $catalog->get_models();
+		$openrouter_models = self::get_openrouter_models();
+		return array_merge( $runware_models, $openrouter_models );
+	}
+
+	/**
+	 * Return the provider id for a known model, or empty string if the
+	 * model id is not in the registry.
+	 *
+	 * @param string $model_id Model slug from the admin UI.
+	 * @return string Provider id ('runware' | 'openrouter' | '').
+	 */
+	public static function provider_for( string $model_id ): string {
+		foreach ( self::get_models() as $model ) {
+			if ( ( $model['id'] ?? '' ) === $model_id ) {
+				return (string) ( $model['provider'] ?? '' );
+			}
+		}
+		return '';
+	}
+
+	/**
+	 * Hardcoded Runware model list used as fallback when the live catalog
+	 * sync fails or API is unreachable. Kept in sync with actual Runware
+	 * pricing page (runware.ai/pricing). This is the source of truth for
+	 * pricing data when the Runware API doesn't expose cost information.
+	 *
+	 * Last verified: 2026-04-26. To update: check runware.ai/pricing for new
+	 * text-to-image models and their costs.
+	 *
+	 * @return array<int, array<string, mixed>>
+	 */
+	public static function get_runware_fallback_models(): array {
 		return array(
-			// RUNWARE MODELS
 			array(
 				'id'             => 'runware:100@1',
 				'name'           => 'FLUX.1 schnell (Runware)',
@@ -163,7 +195,22 @@ class PRAutoBlogger_Image_Model_Registry {
 				'capabilities'   => array( 'image_generation' ),
 				'description'    => __( 'GLM-Image. Hybrid autoregressive+diffusion, excellent text rendering.', 'prautoblogger' ),
 			),
-			// OPENROUTER MODELS
+		);
+	}
+
+	/**
+	 * Hardcoded OpenRouter image model list. Left static for now because
+	 * OpenRouter's catalog is large (hundreds of models) with noisy filtering.
+	 * Future iteration will add smart filtering strategy (output_modalities,
+	 * pricing, rate limits).
+	 *
+	 * Last verified: 2026-04-26. To update: check openrouter.ai/api/v1/models
+	 * filtering to output_modalities containing 'image'.
+	 *
+	 * @return array<int, array<string, mixed>>
+	 */
+	private static function get_openrouter_models(): array {
+		return array(
 			array(
 				'id'             => 'google/gemini-2.5-flash-image',
 				'name'           => 'Gemini 2.5 Flash Image (OpenRouter)',
@@ -214,20 +261,4 @@ class PRAutoBlogger_Image_Model_Registry {
 			),
 		);
 	}
-
-	/**
-	 * Return the provider id for a known model, or empty string if the
-	 * model id is not in the registry.
-	 *
-	 * @param string $model_id Model slug from the admin UI.
-	 * @return string Provider id ('runware' | 'openrouter' | '').
-	 */
-	public static function provider_for( string $model_id ): string {
-		foreach ( self::get_models() as $model ) {
-			if ( ( $model['id'] ?? '' ) === $model_id ) {
-				return (string) ( $model['provider'] ?? '' );
-			}
-		}
-		return '';
-	}
 }

includes/admin/class-settings-fields-extended.php

@@ -258,6 +258,13 @@ class PRAutoBlogger_Settings_Fields_Extended {
 				'default'     => '1',
 				'description' => __( 'When the provider rejects an image prompt as NSFW, retry once with a generic fallback scene built from the article title. Disable to fail fast if the filter gets trigger-happy.', 'prautoblogger' ),
 			),
+			array(
+				'id'          => 'prautoblogger_runware_model_catalog',
+				'label'       => __( 'Runware Model Catalog', 'prautoblogger' ),
+				'type'        => 'runware_catalog_sync',
+				'section'     => 'prautoblogger_images',
+				'description' => __( 'Live model catalog sync status and on-demand refresh.', 'prautoblogger' ),
+			),
 		);
 	}
 }

includes/class-activator.php

@@ -130,6 +130,11 @@ class PRAutoBlogger_Activator {
 				wp_schedule_event( $tomorrow, 'daily', 'prautoblogger_reap_orphan_research_rows' );
 			}
 		}
+
+		// v0.15.0: daily Runware model catalog sync.
+		if ( ! wp_next_scheduled( 'prautoblogger_sync_runware_models' ) ) {
+			wp_schedule_event( time() + HOUR_IN_SECONDS, 'daily', 'prautoblogger_sync_runware_models' );
+		}
 	}
 
 	/**

includes/class-ajax-handlers.php

@@ -151,6 +151,53 @@ class PRAutoBlogger_Ajax_Handlers {
 		wp_send_json_success( $results );
 	}
 
+	/**
+	 * AJAX handler: sync Runware model catalog on demand.
+	 *
+	 * Nonce-protected and requires manage_options capability.
+	 * Returns the updated cache timestamp and model count.
+	 *
+	 * Side effects: makes HTTP request to Runware API, writes WP options.
+	 */
+	public function on_ajax_sync_runware_models_now(): void {
+		check_ajax_referer( 'prautoblogger_sync_runware_models_now', 'nonce' );
+
+		if ( ! current_user_can( 'manage_options' ) ) {
+			wp_send_json_error( array( 'message' => __( 'Insufficient permissions.', 'prautoblogger' ) ), 403 );
+			return;
+		}
+
+		try {
+			$catalog = new PRAutoBlogger_Runware_Model_Catalog();
+			$success = $catalog->sync();
+
+			if ( ! $success ) {
+				wp_send_json_error( array( 'message' => __( 'Catalog sync failed. Check logs for details.', 'prautoblogger' ) ) );
+				return;
+			}
+
+			$models = $catalog->get_models();
+			$synced_at = $catalog->get_last_synced_at();
+			$synced_at_str = $synced_at
+				? wp_date( __( 'Y-m-d H:i:s', 'prautoblogger' ), $synced_at )
+				: __( 'Never', 'prautoblogger' );
+
+			wp_send_json_success(
+				array(
+					'message'   => __( 'Runware model catalog synced successfully.', 'prautoblogger' ),
+					'model_count' => count( $models ),
+					'synced_at' => $synced_at_str,
+				)
+			);
+		} catch ( \Throwable $e ) {
+			PRAutoBlogger_Logger::instance()->error(
+				sprintf( 'AJAX sync Runware models failed: %s (%s)', $e->getMessage(), get_class( $e ) ),
+				'runware-catalog'
+			);
+			wp_send_json_error( array( 'message' => $e->getMessage() ) );
+		}
+	}
+
 	/**
 	 * Get the shared model registry instance.
 	 *

includes/class-deactivator.php

@@ -39,6 +39,7 @@ class PRAutoBlogger_Deactivator {
 			'prautoblogger_daily_generation',
 			'prautoblogger_collect_metrics',
 			'prautoblogger_reap_orphan_research_rows',
+			'prautoblogger_sync_runware_models',
 		);
 
 		foreach ( $hooks as $hook ) {

includes/class-prautoblogger.php

@@ -116,6 +116,8 @@ class PRAutoBlogger {
 
 		$registry = $this->executor->get_model_registry();
 		add_action( 'prautoblogger_refresh_model_registry', array( $registry, 'refresh' ) );
+		// v0.15.0: daily Runware model catalog sync to keep the live model list fresh.
+		add_action( 'prautoblogger_sync_runware_models', array( new PRAutoBlogger_Runware_Model_Catalog(), 'sync' ) );
 
 		// Opik observability: async trace/span dispatch.
 		add_action(
@@ -179,6 +181,7 @@ class PRAutoBlogger {
 		add_action( 'wp_ajax_prautoblogger_test_connection', array( $this->ajax_handlers, 'on_ajax_test_connection' ) );
 		add_action( 'wp_ajax_prautoblogger_get_models', array( $this->ajax_handlers, 'on_ajax_get_models' ) );
 		add_action( 'wp_ajax_prautoblogger_refresh_models', array( new PRAutoBlogger_Model_Registry_Refresh( $this->ajax_handlers->get_registry() ), 'handle' ) );
+		add_action( 'wp_ajax_prautoblogger_sync_runware_models_now', array( $this->ajax_handlers, 'on_ajax_sync_runware_models_now' ) );
 
 		$review_queue = new PRAutoBlogger_Review_Queue();
 		add_action( 'wp_ajax_prautoblogger_approve_post', array( $review_queue, 'on_ajax_approve_post' ) );

includes/core/class-cost-tracker.php

@@ -235,19 +235,19 @@ class PRAutoBlogger_Cost_Tracker {
 			);
 		}
 
-		$cutoff_time   = time() - ( $days * DAY_IN_SECONDS );
-		$stage_list    = implode( ',', array_map( array( $wpdb, 'prepare' ), array_fill( 0, count( $stages ), '%s' ), $stages ) );
-		$table_name    = $wpdb->prefix . 'prautoblogger_generation_log';
+		$cutoff_datetime = gmdate( 'Y-m-d H:i:s', time() - ( $days * DAY_IN_SECONDS ) );
+		$stage_list      = implode( ',', array_map( array( $wpdb, 'prepare' ), array_fill( 0, count( $stages ), '%s' ), $stages ) );
+		$table_name      = $wpdb->prefix . 'prautoblogger_generation_log';
 
 		// phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- Prepared stage list via array_map + prepare
 		$query = $wpdb->prepare(
-			"SELECT AVG(input_tokens) as avg_input,
-                    AVG(output_tokens) as avg_output,
+			"SELECT AVG(prompt_tokens) as avg_prompt,
+                    AVG(completion_tokens) as avg_completion,
                     COUNT(*) as sample_count
              FROM $table_name
              WHERE stage IN ( $stage_list )
-             AND timestamp >= %d",
-			$cutoff_time
+             AND created_at >= %s",
+			$cutoff_datetime
 		);
 
 		// phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared -- phpcs pragma above
@@ -262,8 +262,8 @@ class PRAutoBlogger_Cost_Tracker {
 		}
 
 		return array(
-			'avg_prompt_tokens'      => (float) ( $result['avg_input'] ?? 0 ),
-			'avg_completion_tokens'  => (float) ( $result['avg_output'] ?? 0 ),
+			'avg_prompt_tokens'      => (float) ( $result['avg_prompt'] ?? 0 ),
+			'avg_completion_tokens'  => (float) ( $result['avg_completion'] ?? 0 ),
 			'sample_size'            => (int) ( $result['sample_count'] ?? 0 ),
 		);
 	}

includes/providers/class-runware-image-pricing.php

@@ -15,6 +15,7 @@ declare(strict_types=1);
  * Dependencies: None — pure calculation + option reads.
  *
  * @see class-runware-image-provider.php — Primary caller.
+ * @see class-runware-model-catalog.php — Live model sync; authoritative pricing source.
  * @see class-open-router-image-pricing.php — Sibling pattern for OpenRouter.
  * @see admin/class-image-model-registry.php — Source of truth for model list; keep in sync.
  */

includes/providers/class-runware-model-catalog.php

@@ -0,0 +1,298 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * phpcs:ignore WordPress.Files.FileName.InvalidClassFileName -- class naming convention differs from WordPress standard
+ *
+ * Runware model catalog sync — fetches live model list via Runware's /v1 endpoint,
+ * filters to text-to-image tasks, caches normalized results, and falls back to
+ * hardcoded list on API failure.
+ *
+ * What: Syncs Runware's model catalog periodically (daily cron + on-demand AJAX),
+ *       caches the results in WP options, and merges pricing data from the pricing
+ *       class when Runware's API doesn't expose it.
+ * Who triggers it: Daily cron (prautoblogger_sync_runware_models), AJAX "Sync now"
+ *                  button in PRAdmin, and lazy-load via PRAutoBlogger_Image_Model_Registry.
+ * Dependencies: PRAutoBlogger_Logger, PRAutoBlogger_Runware_Image_Pricing,
+ *               PRAutoBlogger_Image_Model_Registry.
+ *
+ * @see class-runware-image-pricing.php        — Authoritative pricing source & fallback models.
+ * @see admin/class-image-model-registry.php   — Caller; merges Runware + OpenRouter lists.
+ * @see class-prautoblogger.php                — Registers daily cron + AJAX hook.
+ * @see class-activator.php / class-deactivator.php — Schedule / unschedule on activation/deactivation.
+ */
+class PRAutoBlogger_Runware_Model_Catalog {
+
+	private const RUNWARE_API_URL = 'https://api.runware.ai/v1';
+	private const CACHE_TTL_SECONDS = 86400;
+	private const HTTP_TIMEOUT_SECONDS = 30;
+
+	/**
+	 * Fetch the Runware model catalog, normalize to the Image_Model_Registry
+	 * shape, and write to WP options cache. Returns true on success, false on
+	 * API failure or parse error.
+	 *
+	 * Side effects: makes HTTP request to Runware API, writes WP options.
+	 * Error handling: logs via PRAutoBlogger_Logger, never throws, always
+	 *                 returns bool to allow fallback to cached list.
+	 *
+	 * @return bool True on successful fetch and cache update; false on API or parse error.
+	 */
+	public function sync(): bool {
+		try {
+			$api_key = $this->get_api_key();
+			if ( '' === $api_key ) {
+				PRAutoBlogger_Logger::instance()->warning(
+					'Runware model catalog sync: API key not configured. Using cached/fallback models.',
+					'runware-catalog'
+				);
+				return false;
+			}
+
+			$raw_models = $this->fetch_models_from_api( $api_key );
+			if ( empty( $raw_models ) ) {
+				PRAutoBlogger_Logger::instance()->warning(
+					'Runware model catalog fetch returned empty list. Using cached/fallback models.',
+					'runware-catalog'
+				);
+				return false;
+			}
+
+			$normalized = $this->normalize_models( $raw_models );
+			$with_pricing = $this->merge_pricing( $normalized );
+
+			if ( empty( $with_pricing ) ) {
+				PRAutoBlogger_Logger::instance()->warning(
+					'Runware model catalog normalization resulted in empty list. Using cached/fallback models.',
+					'runware-catalog'
+				);
+				return false;
+			}
+
+			update_option( 'prautoblogger_runware_model_cache', $with_pricing, false );
+			update_option( 'prautoblogger_runware_model_cache_updated_at', time(), false );
+
+			PRAutoBlogger_Logger::instance()->info(
+				sprintf( 'Runware model catalog synced: %d models cached.', count( $with_pricing ) ),
+				'runware-catalog'
+			);
+			return true;
+		} catch ( \Throwable $e ) {
+			PRAutoBlogger_Logger::instance()->error(
+				sprintf( 'Runware model catalog sync failed: %s (%s)', $e->getMessage(), get_class( $e ) ),
+				'runware-catalog'
+			);
+			return false;
+		}
+	}
+
+	/**
+	 * Get the normalized model list, with smart caching logic:
+	 * - If cache is fresh (< 24h), return it.
+	 * - If cache is stale or absent, trigger a sync.
+	 * - If sync fails, return the last-known-good cache.
+	 * - If no cache exists, return the hardcoded fallback (never empty).
+	 *
+	 * @return array<int, array<string, mixed>> Normalized model list.
+	 */
+	public function get_models(): array {
+		if ( ! $this->is_stale() ) {
+			$cached = get_option( 'prautoblogger_runware_model_cache', array() );
+			if ( is_array( $cached ) && ! empty( $cached ) ) {
+				return $cached;
+			}
+		}
+
+		if ( $this->sync() ) {
+			$cached = get_option( 'prautoblogger_runware_model_cache', array() );
+			if ( is_array( $cached ) && ! empty( $cached ) ) {
+				return $cached;
+			}
+		}
+
+		$cached = get_option( 'prautoblogger_runware_model_cache', array() );
+		if ( is_array( $cached ) && ! empty( $cached ) ) {
+			PRAutoBlogger_Logger::instance()->info(
+				'Using stale Runware model cache (live sync failed).',
+				'runware-catalog'
+			);
+			return $cached;
+		}
+
+		$fallback = PRAutoBlogger_Image_Model_Registry::get_runware_fallback_models();
+		PRAutoBlogger_Logger::instance()->warning(
+			sprintf(
+				'No Runware model cache available; using hardcoded fallback (%d models).',
+				count( $fallback )
+			),
+			'runware-catalog'
+		);
+		return $fallback;
+	}
+
+	/**
+	 * Get the Unix timestamp of the last successful sync, or null if never synced.
+	 *
+	 * @return int|null Unix timestamp, or null if never synced.
+	 */
+	public function get_last_synced_at(): ?int {
+		$ts = get_option( 'prautoblogger_runware_model_cache_updated_at', null );
+		if ( null === $ts ) {
+			return null;
+		}
+		$ts = (int) $ts;
+		return $ts > 0 ? $ts : null;
+	}
+
+	/**
+	 * Check if the cache is stale (older than 24h) or absent.
+	 *
+	 * @return bool True if cache should be refreshed; false if still fresh.
+	 */
+	public function is_stale(): bool {
+		$updated_at = $this->get_last_synced_at();
+		if ( null === $updated_at ) {
+			return true;
+		}
+		return ( time() - $updated_at ) > self::CACHE_TTL_SECONDS;
+	}
+
+	/**
+	 * Fetch the raw model list from Runware's /v1 endpoint via a models task.
+	 *
+	 * @param string $api_key Decrypted Runware API key.
+	 * @return array Raw model list (may be empty).
+	 * @throws \RuntimeException On HTTP error or malformed response.
+	 */
+	private function fetch_models_from_api( string $api_key ): array {
+		$body = wp_json_encode(
+			array(
+				array(
+					'taskType' => 'models',
+					'apiKey'   => $api_key,
+				),
+			)
+		);
+
+		$response = wp_remote_post(
+			self::RUNWARE_API_URL,
+			array(
+				'timeout' => self::HTTP_TIMEOUT_SECONDS,
+				'headers' => array( 'Content-Type' => 'application/json' ),
+				'body'    => $body,
+			)
+		);
+
+		if ( is_wp_error( $response ) ) {
+			throw new \RuntimeException(
+				sprintf( 'Runware models endpoint unreachable: %s', $response->get_error_message() )
+			);
+		}
+
+		$status = (int) wp_remote_retrieve_response_code( $response );
+		if ( 200 !== $status ) {
+			$raw = wp_remote_retrieve_body( $response );
+			throw new \RuntimeException(
+				sprintf( 'Runware models endpoint returned HTTP %d', $status )
+			);
+		}
+
+		$raw = (string) wp_remote_retrieve_body( $response );
+		$decoded = json_decode( $raw, true );
+
+		if ( ! is_array( $decoded ) ) {
+			throw new \RuntimeException( 'Runware models response is not valid JSON.' );
+		}
+
+		if ( isset( $decoded['errors'] ) && is_array( $decoded['errors'] ) && ! empty( $decoded['errors'] ) ) {
+			throw new \RuntimeException( 'Runware API returned an error.' );
+		}
+
+		$data = $decoded['data'] ?? array();
+		return is_array( $data ) ? $data : array();
+	}
+
+	/**
+	 * Normalize raw Runware model objects to the PRAutoBlogger_Image_Model_Registry
+	 * shape: id, name, provider, cost_per_image, capabilities, description.
+	 *
+	 * Filters to taskType='imageInference' (text-to-image only), excluding
+	 * inpainting (imageInference + requiresImage=true), img2img, video, upscalers.
+	 *
+	 * @param array<int, array<string, mixed>> $raw_models Raw API response.
+	 * @return array<int, array<string, mixed>> Normalized models.
+	 */
+	private function normalize_models( array $raw_models ): array {
+		$normalized = array();
+
+		foreach ( $raw_models as $raw ) {
+			if ( ! is_array( $raw ) ) {
+				continue;
+			}
+
+			$task_type = $raw['taskType'] ?? '';
+			if ( 'imageInference' !== $task_type ) {
+				continue;
+			}
+
+			if ( isset( $raw['requiresImage'] ) && true === $raw['requiresImage'] ) {
+				continue;
+			}
+
+			$model_id = (string) ( $raw['id'] ?? '' );
+			if ( '' === $model_id ) {
+				continue;
+			}
+
+			$normalized[] = array(
+				'id'             => $model_id,
+				'name'           => (string) ( $raw['name'] ?? $model_id ),
+				'provider'       => 'runware',
+				'cost_per_image' => null,
+				'capabilities'   => array( 'image_generation' ),
+				'description'    => (string) ( $raw['description'] ?? '' ),
+			);
+		}
+
+		return $normalized;
+	}
+
+	/**
+	 * Merge pricing data from PRAutoBlogger_Runware_Image_Pricing into the
+	 * normalized catalog. Models without pricing data get cost_per_image=null.
+	 *
+	 * @param array<int, array<string, mixed>> $normalized Normalized models.
+	 * @return array<int, array<string, mixed>> Models with pricing merged.
+	 */
+	private function merge_pricing( array $normalized ): array {
+		$pricing_table = PRAutoBlogger_Runware_Image_Pricing::get_model_costs();
+
+		foreach ( $normalized as &$model ) {
+			$model_id = $model['id'] ?? '';
+			if ( isset( $pricing_table[ $model_id ] ) ) {
+				$model['cost_per_image'] = (float) $pricing_table[ $model_id ];
+			}
+		}
+
+		return $normalized;
+	}
+
+	/**
+	 * Get the decrypted Runware API key from settings.
+	 *
+	 * @return string Plaintext key, or empty string if not configured.
+	 */
+	private function get_api_key(): string {
+		$stored = (string) get_option( 'prautoblogger_runware_api_key', '' );
+		if ( '' === $stored ) {
+			return '';
+		}
+
+		if ( PRAutoBlogger_Encryption::is_encrypted( $stored ) ) {
+			$decrypted = PRAutoBlogger_Encryption::decrypt( $stored );
+			return '' === $decrypted ? '' : $decrypted;
+		}
+
+		return $stored;
+	}
+}

patchwork.json

@@ -0,0 +1,5 @@
+{
+    "redefinable-internals": [
+        "time"
+    ]
+}

prautoblogger.php

@@ -9,7 +9,7 @@
  * Plugin Name:       PRAutoBlogger
  * Plugin URI:        https://peptiderepo.com/prautoblogger
  * Description:       Monitors social media for trending topics, generates SEO-friendly blog posts using AI, and publishes them on a daily schedule with full cost tracking and self-improvement metrics.
- * Version:           0.14.0
+ * Version:           0.15.1
  * Requires at least: 6.0
  * Requires PHP:      7.4
  * Author:            PeptideRepo
@@ -35,7 +35,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 | Defined here so every file in the plugin can reference paths, versions,
 | and limits without magic strings.
 */
-define( 'PRAUTOBLOGGER_VERSION', '0.14.0' );
+define( 'PRAUTOBLOGGER_VERSION', '0.15.1' );
 define( 'PRAUTOBLOGGER_DB_VERSION', '1.1.0' );
 define( 'PRAUTOBLOGGER_PLUGIN_FILE', __FILE__ );
 define( 'PRAUTOBLOGGER_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

tests/bootstrap.php

@@ -63,6 +63,9 @@ if ( ! defined( 'PRAUTOBLOGGER_DEFAULT_EDITOR_MODEL' ) ) {
 if ( ! defined( 'PRAUTOBLOGGER_DEFAULT_IMAGE_MODEL' ) ) {
     define( 'PRAUTOBLOGGER_DEFAULT_IMAGE_MODEL', 'runware:100@1' );
 }
+if ( ! defined( 'PRAUTOBLOGGER_DEFAULT_IMAGE_PROVIDER' ) ) {
+    define( 'PRAUTOBLOGGER_DEFAULT_IMAGE_PROVIDER', 'runware' );
+}
 
 // Default image style suffix used by ImagePromptBuilder and settings UI.
 if ( ! defined( 'PRAUTOBLOGGER_DEFAULT_IMAGE_STYLE_SUFFIX' ) ) {

tests/unit/Core/CostTrackerTest.php

@@ -113,4 +113,139 @@ class CostTrackerTest extends BaseTestCase {
         // If we get here without exception, the method worked.
         $this->assertTrue( true );
     }
+
+    /**
+     * Regression: get_avg_tokens_for_stages must return the documented zero
+     * shape when there is no generation history, without leaving a $wpdb
+     * error behind.
+     *
+     * Load-bearing: asserting $wpdb->last_error === '' alongside the shape
+     * is what would have caught the v0.11.0 column-name drift. The empty-
+     * result fallback silently masked the failure from shape-only tests.
+     */
+    public function test_get_avg_tokens_returns_zero_shape_when_no_history(): void {
+        $captured_query = '';
+        $this->wpdb->method( 'prepare' )->willReturnCallback(
+            function ( $sql, ...$args ) use ( &$captured_query ) {
+                $captured_query = $sql;
+                return $sql; // Simulate prepared SQL passthrough.
+            }
+        );
+        // Empty result row — fallback branch.
+        $this->wpdb->method( 'get_row' )->willReturn( null );
+
+        $tracker = new \PRAutoBlogger_Cost_Tracker();
+        $result  = $tracker->get_avg_tokens_for_stages( [ 'analysis' ], 30 );
+
+        $this->assertSame(
+            [
+                'avg_prompt_tokens'     => 0.0,
+                'avg_completion_tokens' => 0.0,
+                'sample_size'           => 0,
+            ],
+            $result
+        );
+        $this->assertSame( '', $this->wpdb->last_error, 'wpdb->last_error must be empty after the query' );
+
+        // Schema-drift guard: query must reference canonical columns, not the
+        // pre-v0.15.1 names that don't exist on wp_prautoblogger_generation_log.
+        $this->assertStringContainsString( 'prompt_tokens', $captured_query );
+        $this->assertStringContainsString( 'completion_tokens', $captured_query );
+        $this->assertStringContainsString( 'created_at', $captured_query );
+        $this->assertStringNotContainsString( 'input_tokens', $captured_query );
+        $this->assertStringNotContainsString( 'output_tokens', $captured_query );
+        // The bug query had `AND timestamp >= %d`; canonical query uses
+        // `AND created_at >= %s`. Guard against the column reference, not the
+        // bare word (a SQL comment in future code could legitimately mention
+        // "timestamp" in prose).
+        $this->assertStringNotContainsString( 'timestamp >=', $captured_query );
+    }
+
+    /**
+     * Regression: with seeded rows the method returns real averages and the
+     * canonical SELECT aliases (avg_prompt / avg_completion) are extracted
+     * correctly.
+     */
+    public function test_get_avg_tokens_returns_real_averages_with_seeded_rows(): void {
+        $this->wpdb->method( 'prepare' )->willReturnCallback(
+            static function ( $sql ) {
+                return $sql;
+            }
+        );
+        // Simulate three rows averaged: prompt_tokens=100, completion_tokens=50.
+        $this->wpdb->method( 'get_row' )->willReturn(
+            [
+                'avg_prompt'     => '100.0000',
+                'avg_completion' => '50.0000',
+                'sample_count'   => '3',
+            ]
+        );
+
+        $tracker = new \PRAutoBlogger_Cost_Tracker();
+        $result  = $tracker->get_avg_tokens_for_stages( [ 'analysis' ], 30 );
+
+        $this->assertSame( 100.0, $result['avg_prompt_tokens'] );
+        $this->assertSame( 50.0, $result['avg_completion_tokens'] );
+        $this->assertSame( 3, $result['sample_size'] );
+        $this->assertSame( '', $this->wpdb->last_error );
+    }
+
+    /**
+     * Regression: the days cutoff must be a MySQL DATETIME string (compared
+     * against the canonical created_at column), not a unix int. Captured via
+     * the prepare() callback so we can inspect the bound parameter.
+     */
+    public function test_get_avg_tokens_respects_days_cutoff_as_datetime(): void {
+        $captured_args = [];
+        $this->wpdb->method( 'prepare' )->willReturnCallback(
+            function ( $sql, ...$args ) use ( &$captured_args ) {
+                $captured_args = $args;
+                return $sql;
+            }
+        );
+        $this->wpdb->method( 'get_row' )->willReturn( null );
+
+        $tracker = new \PRAutoBlogger_Cost_Tracker();
+        $tracker->get_avg_tokens_for_stages( [ 'analysis' ], 30 );
+
+        // Exactly one bound param: the DATETIME cutoff.
+        $this->assertCount( 1, $captured_args );
+        $this->assertIsString( $captured_args[0], 'Cutoff must be a DATETIME string, not a unix int' );
+        $this->assertMatchesRegularExpression(
+            '/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$/',
+            $captured_args[0]
+        );
+    }
+
+    /**
+     * Regression: the stage filter is propagated into the SQL. Calling with
+     * a single stage should result in exactly one prepared %s placeholder
+     * for the IN ( … ) list.
+     */
+    public function test_get_avg_tokens_filters_by_stage(): void {
+        $stage_prepare_calls = 0;
+        $main_query          = '';
+        $this->wpdb->method( 'prepare' )->willReturnCallback(
+            function ( $sql, ...$args ) use ( &$stage_prepare_calls, &$main_query ) {
+                // The method calls $wpdb->prepare twice in two distinct shapes:
+                //  1. per-stage placeholder prep (sql='%s', single arg)
+                //  2. the main SELECT (sql contains 'SELECT', many tokens)
+                if ( strpos( $sql, 'SELECT' ) !== false ) {
+                    $main_query = $sql;
+                } else {
+                    ++$stage_prepare_calls;
+                }
+                return $sql;
+            }
+        );
+        $this->wpdb->method( 'get_row' )->willReturn( null );
+
+        $tracker = new \PRAutoBlogger_Cost_Tracker();
+        $tracker->get_avg_tokens_for_stages( [ 'analysis' ], 30 );
+
+        $this->assertSame( 1, $stage_prepare_calls, 'One stage → one per-stage prepare() call' );
+        $this->assertStringContainsString( 'stage IN', $main_query );
+        $this->assertStringContainsString( 'wp_prautoblogger_generation_log', $main_query );
+        $this->assertSame( '', $this->wpdb->last_error );
+    }
 }

tests/unit/Providers/RunwareModelCatalogTest.php

@@ -0,0 +1,189 @@
+<?php
+/**
+ * Tests for PRAutoBlogger_Runware_Model_Catalog.
+ *
+ * Validates live sync, fallback logic, cache staleness, and pricing merge.
+ *
+ * @package PRAutoBlogger\Tests\Providers
+ */
+
+namespace PRAutoBlogger\Tests\Providers;
+
+use PRAutoBlogger\Tests\BaseTestCase;
+use Brain\Monkey\Functions;
+use Brain\Monkey\Actions;
+
+class RunwareModelCatalogTest extends BaseTestCase {
+
+	protected function setUp(): void {
+		parent::setUp();
+		// Mock WP options for cache simulation.
+		Functions\when( 'get_option' )->alias( function ( $key, $default = false ) {
+			static $options = array();
+			return $options[ $key ] ?? $default;
+		} );
+		Functions\when( 'update_option' )->alias( function ( $key, $value ) {
+			static $options = array();
+			$options[ $key ] = $value;
+			return true;
+		} );
+		Functions\when( 'time' )->justReturn( 1704067200 ); // 2024-01-01 00:00:00
+	}
+
+	/** Sync with empty or missing API key returns false. */
+	public function test_sync_no_api_key(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$result = $catalog->sync();
+		$this->assertFalse( $result );
+	}
+
+	/** get_models returns fallback if no cache and sync fails. */
+	public function test_get_models_fallback_on_sync_failure(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$models = $catalog->get_models();
+
+		// Should have the fallback list (15 Runware models).
+		$this->assertIsArray( $models );
+		$this->assertGreaterThan( 0, count( $models ) );
+
+		// Check at least one expected fallback model exists.
+		$schnell_exists = false;
+		foreach ( $models as $model ) {
+			if ( 'runware:100@1' === ( $model['id'] ?? '' ) ) {
+				$schnell_exists = true;
+				$this->assertSame( 'FLUX.1 schnell (Runware)', $model['name'] );
+				$this->assertSame( 'runware', $model['provider'] );
+				break;
+			}
+		}
+		$this->assertTrue( $schnell_exists, 'Fallback should include FLUX.1 schnell' );
+	}
+
+	/** is_stale returns true if never synced. */
+	public function test_is_stale_never_synced(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$this->assertTrue( $catalog->is_stale() );
+	}
+
+	/** get_last_synced_at returns null if never synced. */
+	public function test_get_last_synced_at_never(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$this->assertNull( $catalog->get_last_synced_at() );
+	}
+
+	/** Fallback list is never empty. */
+	public function test_get_models_never_empty(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+
+		// Even with no cache and failed sync, get_models should return the fallback.
+		$models = $catalog->get_models();
+		$this->assertIsArray( $models );
+		$this->assertNotEmpty( $models );
+
+		// All models should have required fields.
+		foreach ( $models as $model ) {
+			$this->assertArrayHasKey( 'id', $model );
+			$this->assertArrayHasKey( 'name', $model );
+			$this->assertArrayHasKey( 'provider', $model );
+			$this->assertArrayHasKey( 'capabilities', $model );
+		}
+	}
+
+	/** Fallback models have correct pricing. */
+	public function test_fallback_models_have_pricing(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$models = $catalog->get_models();
+
+		$schnell = null;
+		$dev = null;
+		foreach ( $models as $model ) {
+			if ( 'runware:100@1' === $model['id'] ) {
+				$schnell = $model;
+			}
+			if ( 'runware:101@1' === $model['id'] ) {
+				$dev = $model;
+			}
+		}
+
+		$this->assertNotNull( $schnell );
+		$this->assertEqualsWithDelta( 0.0006, $schnell['cost_per_image'], 0.000001 );
+
+		$this->assertNotNull( $dev );
+		$this->assertEqualsWithDelta( 0.02, $dev['cost_per_image'], 0.000001 );
+	}
+
+	/** Fallback models all have 'image_generation' capability. */
+	public function test_fallback_models_have_capabilities(): void {
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$models = $catalog->get_models();
+
+		foreach ( $models as $model ) {
+			$this->assertIsArray( $model['capabilities'] );
+			$this->assertContains( 'image_generation', $model['capabilities'] );
+		}
+	}
+
+	/** Happy path: successful sync caches models and get_models returns them. */
+	public function test_sync_success_caches_and_returns_models(): void {
+		// The mocked API response body — models must have taskType=imageInference
+		// so normalize_models() doesn't filter them out.
+		$fake_body = json_encode(
+			array(
+				'data' => array(
+					array(
+						'id'       => 'test-model-1',
+						'name'     => 'Test Model 1',
+						'taskType' => 'imageInference',
+					),
+					array(
+						'id'       => 'test-model-2',
+						'name'     => 'Test Model 2',
+						'taskType' => 'imageInference',
+					),
+				),
+			)
+		);
+
+		$fake_response = array(
+			'response' => array( 'code' => 200 ),
+			'body'     => $fake_body,
+		);
+
+		Functions\when( 'wp_remote_post' )->justReturn( $fake_response );
+		// Alias the WP response-parsing helpers so they work against our array.
+		Functions\when( 'wp_remote_retrieve_response_code' )->alias(
+			function ( $r ) { return (int) ( $r['response']['code'] ?? 0 ); }
+		);
+		Functions\when( 'wp_remote_retrieve_body' )->alias(
+			function ( $r ) { return (string) ( $r['body'] ?? '' ); }
+		);
+		Functions\when( 'is_wp_error' )->justReturn( false );
+
+		// Shared options store so get_option/update_option stay in sync
+		// within this test. The API key must be non-empty for sync() to proceed.
+		$store = array( 'prautoblogger_runware_api_key' => 'test-api-key-plain' );
+		Functions\when( 'get_option' )->alias(
+			function ( $key, $default = false ) use ( &$store ) {
+				return $store[ $key ] ?? $default;
+			}
+		);
+		Functions\when( 'update_option' )->alias(
+			function ( $key, $value ) use ( &$store ) {
+				$store[ $key ] = $value;
+				return true;
+			}
+		);
+
+		// Sync should succeed: API key present, HTTP 200, 2 imageInference models.
+		$catalog = new \PRAutoBlogger_Runware_Model_Catalog();
+		$result = $catalog->sync();
+		$this->assertTrue( $result, 'Sync should return true on HTTP 200 with valid models' );
+
+		// get_models() should now return the synced list from cache.
+		$models = $catalog->get_models();
+		$this->assertIsArray( $models );
+		$this->assertCount( 2, $models );
+		$this->assertSame( 'test-model-1', $models[0]['id'] );
+		$this->assertSame( 'test-model-2', $models[1]['id'] );
+	}
+}

tests/unit/Services/ImageModelRegistryTest.php

@@ -16,6 +16,18 @@ use PRAutoBlogger\Tests\BaseTestCase;
 
 class ImageModelRegistryTest extends BaseTestCase {
 
+	/**
+	 * Stub WP cache functions so the catalog class falls back to the
+	 * hardcoded model list without hitting get_option or update_option.
+	 */
+	protected function setUp(): void {
+		parent::setUp();
+		// Catalog checks for cached data; return false → falls back to hardcoded list.
+		\Brain\Monkey\Functions\when( 'get_option' )->justReturn( false );
+		// Catalog writes cache on sync; stub so it doesn't throw in tests.
+		\Brain\Monkey\Functions\when( 'update_option' )->justReturn( true );
+	}
+
 	/**
 	 * Every entry returned by get_models() must carry a non-empty id and
 	 * a provider of 'runware' or 'openrouter' (Cloudflare Workers AI was