Dossier page dead on prod (403) since v0.19.2 deploy. Root cause:
on_register_menu() registered under 'prautoblogger-settings' parent then
unset the slug from $submenu to hide the nav entry. At request time
get_admin_page_parent() scanned $submenu, found nothing, fell back to
orphan hookname 'admin_page_prautoblogger-dossier'. Render callback was
registered under 'prautoblogger_page_prautoblogger-dossier'. Mismatch ->
wp_die(403). Same hookname-mismatch class as the board 404 (v0.19.1).
Fix (seq 21 §Required fix items 1-6):
1. options.php-parent: add_submenu_page('options.php', ...) -> hookname
is 'admin_page_prautoblogger-dossier' at BOTH registration and request
time. Hidden by construction; no $submenu mutation needed or permitted.
Add PARENT_SLUG = 'options.php' constant.
2. Asset enqueue gate: updated from 'prautoblogger_page_*' to
'admin_page_*' prefix to match options.php-parent hookname.
3. Deep-link URLs (admin.php?page=prautoblogger-dossier&post_id=N):
parent-agnostic; unchanged. Asserted in
test_url_for_post_contains_slug_and_post_id +
test_url_for_post_exact_shape.
4. Regression test upgraded to request-time faithful:
test_request_time_hookname_matches_registration_hookname simulates
get_admin_page_parent() against post-registration $submenu state.
FAILS on v0.19.2 hide-by-unset (4 failures, captured in evidence):
- test_request_time_hookname_matches_registration_hookname FAIL
- test_dossier_parent_slug_is_options_php FAIL
- test_no_submenu_mutation_after_registration FAIL
- test_asset_enqueue_gate_uses_admin_page_prefix FAIL
PASSES on v0.19.3 options.php-parent (9/9 OK, captured in evidence).
test_hide_by_unset_would_fail_request_time_check documents broken
pattern inline.
5. ARCHITECTURE.md §22b: hidden-page convention cross-reference + v0.19.3
incident record added. §23: page registration description updated to
options.php-parent. File tree entry updated.
CONVENTIONS.md §Hidden Admin Pages: full rule + both incident history
(board 404 v0.19.1, dossier 403 v0.19.2) + test methodology.
6. Version 0.19.2 -> 0.19.3, CHANGELOG entry. tests/bootstrap.php:
PRAUTOBLOGGER_PLUGIN_URL + PRAUTOBLOGGER_VERSION constants added
(resolves 'Undefined constant' in enqueue tests).
Deletion audit: removed lines are the broken 'prautoblogger-settings'
parent string, the 12-line $submenu mutation block, the wrong hook prefix
'prautoblogger_page_*'. No other logic removed.
Agent-Session: dossier-403-hotfix-20260612
145 lines
6.9 KiB
PHP
145 lines
6.9 KiB
PHP
<?php
|
||
|
||
/**
|
||
* phpcs:ignore Generic.PHP.RequireStrictTypes.MissingDeclaration -- strict_types must precede docblock
|
||
*
|
||
* PRAutoBlogger — Automated Content Research & Publishing
|
||
*
|
||
* @wordpress-plugin
|
||
* Plugin Name: PRAutoBlogger
|
||
* Plugin URI: https://peptiderepo.com/prautoblogger
|
||
* Description: Monitors social media for trending topics, generates SEO-friendly blog posts using AI, and publishes them on a daily schedule with full cost tracking and self-improvement metrics.
|
||
* Version: 0.19.3
|
||
* Requires at least: 6.0
|
||
* Requires PHP: 7.4
|
||
* Author: PeptideRepo
|
||
* Author URI: https://peptiderepo.com
|
||
* License: GPL v2 or later
|
||
* License URI: https://www.gnu.org/licenses/gpl-2.0.html
|
||
* Text Domain: prautoblogger
|
||
* Domain Path: /languages
|
||
*
|
||
* @see ARCHITECTURE.md — Full data flow and file tree
|
||
* @see CONVENTIONS.md — Naming patterns and extension guides
|
||
*/
|
||
declare(strict_types=1);
|
||
|
||
// Abort if called directly.
|
||
if ( ! defined( 'ABSPATH' ) ) {
|
||
exit;
|
||
}
|
||
/*
|
||
|--------------------------------------------------------------------------
|
||
| Plugin Constants
|
||
|--------------------------------------------------------------------------
|
||
| Defined here so every file in the plugin can reference paths, versions,
|
||
| and limits without magic strings.
|
||
*/
|
||
define( 'PRAUTOBLOGGER_VERSION', '0.19.3' );
|
||
define( 'PRAUTOBLOGGER_DB_VERSION', '1.1.0' );
|
||
define( 'PRAUTOBLOGGER_PLUGIN_FILE', __FILE__ );
|
||
define( 'PRAUTOBLOGGER_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );
|
||
define( 'PRAUTOBLOGGER_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
|
||
define( 'PRAUTOBLOGGER_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );
|
||
// API and retry limits — named constants instead of magic numbers.
|
||
define( 'PRAUTOBLOGGER_MAX_RETRIES', 3 );
|
||
define( 'PRAUTOBLOGGER_RETRY_BASE_DELAY_SECONDS', 2 );
|
||
define( 'PRAUTOBLOGGER_API_TIMEOUT_SECONDS', 180 );
|
||
define( 'PRAUTOBLOGGER_CACHE_TTL_SECONDS', 3600 );
|
||
// Default models for OpenRouter (user can override in settings).
|
||
define( 'PRAUTOBLOGGER_DEFAULT_ANALYSIS_MODEL', 'google/gemini-2.5-flash-lite' );
|
||
define( 'PRAUTOBLOGGER_DEFAULT_WRITING_MODEL', 'google/gemini-2.5-flash-lite' );
|
||
define( 'PRAUTOBLOGGER_DEFAULT_EDITOR_MODEL', 'google/gemini-2.5-flash-lite' );
|
||
// Image generation defaults.
|
||
// Default provider is Runware; OpenRouter (Gemini) remains as the alternate.
|
||
// Default model is FLUX.1 schnell via Runware (~$0.0006/image, ~2s). CEO
|
||
// decision 2026-04-21 after comic A/B: schnell's looser fidelity reads as
|
||
// editorial-cartoon style and is 65× cheaper than Nano Banana. Users can
|
||
// override via Settings → Images → Image Model.
|
||
define( 'PRAUTOBLOGGER_DEFAULT_IMAGE_PROVIDER', 'runware' );
|
||
define( 'PRAUTOBLOGGER_DEFAULT_IMAGE_MODEL', 'runware:100@1' );
|
||
// Default style suffix appended to every image-gen prompt. Updated
|
||
// 2026-04-18 v4: single-panel newspaper comic style. Caption is now
|
||
// inserted as HTML text below the image, NOT rendered inside it.
|
||
// Users may override via Settings → Images → Style Suffix.
|
||
define(
|
||
'PRAUTOBLOGGER_DEFAULT_IMAGE_STYLE_SUFFIX',
|
||
'Style: a single-panel newspaper comic in classic black ink on white paper, simple clean linework like The Far Side or B.C., slightly yellowed newsprint texture, hand-drawn crosshatching for shading, bold panel border, warm and humorous tone, visible in a newspaper comics section. IMPORTANT: Do not render any text, captions, speech bubbles, or words inside the image.'
|
||
);
|
||
// Default editorial-illustration prompt template for the image generator.
|
||
// Updated 2026-05-29 (v0.16.0): pivot from single-panel comic to text-free
|
||
// editorial scientific illustration. The {{ topic_summary }} token is filled
|
||
// at build time with a 1-2 sentence topic/mechanism description from the
|
||
// rewriter LLM; the rest is brand-locked. Replaces the old Style Suffix.
|
||
// Users may override via Settings -> Images -> Style Template. Per brief A5
|
||
// the template must contain exactly one {{ topic_summary }} token.
|
||
define(
|
||
'PRAUTOBLOGGER_DEFAULT_IMAGE_STYLE_TEMPLATE',
|
||
"Editorial scientific illustration, flat vector aesthetic, limited palette of\n" .
|
||
"teal (#1B8A92) and cream (#FAF6EE) with ink (#0D0D0D) line work and accents\n" .
|
||
"of orange (#FF8A3D) and lime (#7FD600). Subject: {{ topic_summary }}.\n" .
|
||
"Style reference: Quanta Magazine, The Pudding, scientific editorial illustration.\n" .
|
||
"Composition: clear focal point, balanced negative space, subtle textural detail.\n" .
|
||
'Mood: authoritative, clinical, calm. NO TEXT. NO PEOPLE. NO LOGOS. NO LABELS.'
|
||
);
|
||
// Opik observability (feature-flag gated).
|
||
// API credentials must be defined in wp-config.php constants:
|
||
// - PRAUTOBLOGGER_OPIK_API_KEY: API key for authentication
|
||
// - PRAUTOBLOGGER_OPIK_WORKSPACE: Opik workspace name (e.g. 'peptiderepo')
|
||
// - PRAUTOBLOGGER_OPIK_URL_OVERRIDE: Optional; defaults to https://www.comet.com/opik/api/
|
||
if ( ! defined( 'PRAUTOBLOGGER_OPIK_API_KEY' ) ) {
|
||
define( 'PRAUTOBLOGGER_OPIK_API_KEY', '' );
|
||
}
|
||
if ( ! defined( 'PRAUTOBLOGGER_OPIK_WORKSPACE' ) ) {
|
||
define( 'PRAUTOBLOGGER_OPIK_WORKSPACE', 'peptiderepo' );
|
||
}
|
||
if ( ! defined( 'PRAUTOBLOGGER_OPIK_URL_OVERRIDE' ) ) {
|
||
define( 'PRAUTOBLOGGER_OPIK_URL_OVERRIDE', 'https://www.comet.com/opik/api/' );
|
||
}
|
||
|
||
/*
|
||
|--------------------------------------------------------------------------
|
||
| Autoloader
|
||
|--------------------------------------------------------------------------
|
||
*/
|
||
require_once PRAUTOBLOGGER_PLUGIN_DIR . 'includes/class-autoloader.php';
|
||
PRAutoBlogger_Autoloader::register();
|
||
// The main orchestrator class is loaded explicitly because its CamelCase name
|
||
// (PRAutoBlogger) doesn't map cleanly to a filename via the autoloader's
|
||
// kebab-case convention (it would look for class-pr-auto-blogger.php).
|
||
require_once PRAUTOBLOGGER_PLUGIN_DIR . 'includes/class-db-migrations.php'; // Loaded explicitly: DB_Migrations -> class-d-b-migrations.php via autoloader
|
||
require_once PRAUTOBLOGGER_PLUGIN_DIR . 'includes/class-prautoblogger.php';
|
||
/*
|
||
|--------------------------------------------------------------------------
|
||
| Activation & Deactivation
|
||
|--------------------------------------------------------------------------
|
||
*/
|
||
register_activation_hook( __FILE__, array( 'PRAutoBlogger_Activator', 'activate' ) );
|
||
register_deactivation_hook( __FILE__, array( 'PRAutoBlogger_Deactivator', 'deactivate' ) );
|
||
/*
|
||
|--------------------------------------------------------------------------
|
||
| Boot the Plugin
|
||
|--------------------------------------------------------------------------
|
||
| The main orchestrator registers all hooks. Nothing else happens here —
|
||
| keep the bootstrap file minimal.
|
||
*/
|
||
/**
|
||
* Returns the singleton instance of the main plugin class.
|
||
*
|
||
* @return PRAutoBlogger
|
||
*/
|
||
function prautoblogger(): PRAutoBlogger {
|
||
static $instance = null;
|
||
if ( null === $instance ) {
|
||
$instance = new PRAutoBlogger();
|
||
}
|
||
return $instance;
|
||
}
|
||
// Initialize on plugins_loaded so all dependencies are available.
|
||
add_action(
|
||
'plugins_loaded',
|
||
static function (): void {
|
||
prautoblogger()->run();
|
||
}
|
||
);
|