NV oOS MCP Bridge

NV Digital Open Operator System (NVoOS)

-green)

Version: 1.2.10 Release Date: 2026-10-23

See § Release History for the 12 most recent releases; every older release is in the Previous Releases table. Full detail: CHANGELOG.md.

🆕 v1.2.10 Highlights: Console migration Phase 5b–5d (Proposal 084) + console polish, crash fixes, a real transcript-storage meter, and a dependency advisory sweep. Phase 5b–5d (PR #7180) — the orphaned cost/analytics REST controllers register (real Analytics page), the Unified Blueprints catalogue bridges behind mcp-ai-pro/v1/blueprints, the Command Center absorbs into the Dashboard, and the console gains a semantic DataTable + grouped collapsible sidebar. Crash fixes (PR #7184) — the blueprints 500 (admin-context class gating), React error #310 on four console pages (a permanent rules-of-hooks ESLint gate), a reworked settings page, and chat dock UX. Storage meter (PR #7185) — the status bar reads real server transcript storage via the new storage_bytes envelope field. Dependencies (PR #7186) — markdown-it 14.3.3, MCP SDK 1.32.0, launch-editor 2.14.2 (14 of 16 alerts). Build (PR #7182) — full tracked-bundle rebuild after lockfile movement. Docs (PRs #7183, #7178) — rebuild discipline codified in the spa-ui/dependabot skills; Cloudways Anti-Bot Protection playbook. Tool count: ~355 base + ~1,377 Pro (~1,731 total; unchanged).

MCP Specification: 2026-07-28 (Stateless Core, Full Compliance)
Maintained by NV Digital
License: GPLv3 or later
Requires: WordPress 6.0+, PHP 7.4+
Patent Status: Patent Pending (Application #19/410,504)
Documentation: Grade A (95/100) — 1,617 files across 12 directories, 108 admin screenshots, 100% feature coverage

🔍 For Reviewers & Auditors

New to this repo? Start here → docs/project/FOR_REVIEWERS.md

That document answers every common question in one place: what the project is, current security posture, what's production vs experimental, PHP version requirements, AI development methodology, compliance status, and scoping advice for a limited-budget review.

Quick links for reviewers:

• Addon Inventory — what each of 30 addons does and its status
• Security Posture — current state of all 50 audit findings
• Compliance Traceability — every .org rejection reason → commit → verification command
• AI-Assisted Development — methodology, transparency, and what to scrutinize
• Architecture Overview — component diagram and data flow

📑 Table of Contents

Getting Started

• 🧩 Overview
• 🎯 Our Mission
• 🛡️ Active Security Monitoring
• ⚠️ Warranty & Safe Use
• 🏗 System Architecture
• 🚀 Features
• 📦 Installation
  • 🌱 Try It on Your PC
• 🔌 What You Lose Without Third-Party Plugins
• ⚙️ Configuration Checklist
• 📚 Documentation

Core Functionality

• 🧠 Memory & Tool Stack Overview
• 🛠 Built-in tools & automations
• 🗨️ Front-end chat surfaces
• 💬 Frontend Shortcode

Addons & Extensions

• 🏗 System Architecture (covers addon ecosystem)

Orchestration & AI Features

• 🏗 System Architecture (covers orchestration, harnessing, MCP servers, memory bridge)

AI Providers & Integration

• 🧠 Language Model Providers
• 🧱 ChatKit Integration
• 🌐 Crawl4AI Integration
• 📡 Job Notification System
• 🧊 Elementor Widgets

Performance & Optimization

• ⚡ Message Bundling
• 🎯 Agentic Loop Token Management
• 🔄 Chat Performance Optimizations
• 🌐 Mesh Compute Routing
• 🔗 Federation & Discovery System

Remote MCP Setup

• 🔒 MCP Server Authentication
• 🌐 Connecting Remote MCP Clients
• 🛰 REST API Endpoints
• 🌊 SSE Streaming Support
• 📝 MCP JSON-RPC 2.0 Endpoint
• 🔑 Assistant API Credentials
• 🎫 Token Management UI

Assistant Management

• 🛠 Assistant Editor Overview
• 📊 Assistant Storage: CPT vs CCT
• ⚡ Assistant Tool Shortcuts
• 🧠 Agent Skills
• 👔 Professional & Team Layers
• 🧵 REST Chat Payloads & Attachments

Development

• 🐳 Local Development with Docker
• 🧑‍💻 Development Tooling
• 📦 NPM Packages
• 🧪 Testing & QA
• 🧩 Hooks & Filters
• 🧰 WP-CLI Commands

Reference

• 🔐 JetEngine Capability Reference
• 🛰 JetEngine REST API Reference
• 🧮 Usage Tracking
• 🧷 Attachment MIME Controls
• 🧾 Logging
• 🧾 JetEngine REST Endpoint Report Helper
• 🔌 Optional Tools & Dependencies
• ✅ Manual QA Scenarios

Changelog

• 📜 Release History
• 📋 Previous Releases

Sponsor & Support

• ❤️ Sponsor & Support

---

🗺 Repository Map

---

🧩 Overview

Real-time AI Orchestration Toolkit / Harness for Wordpress - NV oOS is a modular AI framework (Object-Oriented System) for WordPress that connects your site's data with 18 language-model providers: OpenAI, Gemini, Anthropic, DeepSeek, OpenRouter, Baseten, Kimi (Moonshot), Z.AI (GLM), DigitalOcean, NVIDIA NIM, Cloudflare Worker AI, Azure, Ollama, LM Studio, Hugging Face, and TypeSafe Jev (decision-only), plus local WebLLM and embedded engines. It allows you to create and manage AI Assistants that can interact with users, access WordPress data, and perform custom tool functions.

✨ What's New at a Glance (v1.2.10)

• 🧭 Console migration Phase 5b–5d + console polish (Proposal 084, PR #7180). The orphaned cost/analytics REST controllers now register in includes/bootstrap/loader.php and power the real Analytics page (cost trend, provider donut, top tools/users); the Unified Blueprints page bridges behind GET /mcp-ai-pro/v1/blueprints as a searchable install catalogue; the Agent Command Center absorbs into the console Dashboard (fail-soft KPI + activity). Console-wide: a semantic DataTable (sortable headers, master–detail rows, sticky header) replaces the div-list tables, buttons are standardized, and the sidebar groups into Workspace / Automation / Command Centers / Insights / Admin (W3C disclosure, persisted state).
• 🧩 Crash fixes (PR #7184). The blueprints 500 — the admin_blueprints module gated the page class behind an admin context, so its static catalogue seams fataled on front-end REST; the class now loads unconditionally (only init() stays is_admin()). React error #310 (hooks after early returns) fixed on Schedule Manager, Workflows, Pro Ops, and Orchestration Stats — with a permanent react-hooks/rules-of-hooks ESLint gate that caught 21 latent violations. The settings page gains section cards, cross-tab search, and a sticky save footer; the chat dock gets mode-synced conversation-list collapse, a theme switch, a stacked composer, and a working drag-resize.
• 💾 Real transcript-storage meter (PR #7185). The status-bar "Sessions: X KB" meter measured localStorage keys that can never exist for the server-side transcript store (always 0). WP_MCP_AI_Transcript_Repository::get_storage_bytes() now aggregates per-user payload lengths, the /chat-transcripts envelope carries storage_bytes, and the StatusBar prefers the server figure with a localStorage fallback for older installs.
• 🛡 Dependency advisories closed (PR #7186). markdown-it → 14.3.3 (ReDoS + O(n²)), @modelcontextprotocol/sdk → 1.32.0 (gateway 22/22), launch-editor → 2.14.2 — 14 of 16 open alerts; the vite pair already fixed on the alpha line.
• 🔨 Full tracked-bundle rebuild (PR #7182). Lockfile-only advisory bumps had left tracked bundles silently stale for 13 days — the full artifact tree was rebuilt (16 files) and the rebuild discipline codified in the spa-ui + dependabot-loop skills (#7183).
• 🚀 Standalone SPA endpoint sync (PR #7181). The Vite mirror gains the three canonical ProSpaEndpoints keys (cost, blueprints, commandCenter) and points analytics at the core namespace — the Velocity build gate fixed.
• 📚 Docs & skills (PRs #7178, #7183, #7185). The Schedule Anything ops skill gains the Cloudways Anti-Bot Protection (Imunify360 WebShield) failure class with the diagnostic ladder and fix; the spa-rest-contract skill gains bug class 11 (wrong-store meters); the test-suite skill documents the run-tests-docker.sh dump-autoload fallback.
• 📦 Versioning — bumped to 1.2.10 across all version-bearing files. Pro addon: 1.2.10. Tool count: ~355 base + ~1,377 Pro (~1,731 total — unchanged; live registry authoritative). Model catalog: v2026.10.03 (unchanged). Provider count: 18 (unchanged). Addon count: 30 (unchanged; Schedule Anything Platform 0.1.2). Media Worker: 3.4.0 (unchanged). Bundled skills: 77 base + 41 Pro (unchanged). Coding-time agent skills: 76 (unchanged). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.8 oOS set (30 files).

🎯 Mission: Modernizing Small to Medium Business Websites

NV oOS is specifically designed to help small to medium-sized businesses fast-track their outdated, stale, or insecure company websites to modern technology standards—without the need to add yet another wrapper around API calls. Instead, we're trying to peel back decades of API wrappers with the help of AI, providing:

• Direct AI Integration - No middleware required. Connect directly to OpenAI, Gemini, Anthropic, Hugging Face, Cloudflare Worker AI, Ollama, LM Studio, OpenRouter, and DeepSeek without custom development
• Security-First Architecture - Built-in protection against nefarious usage with active monitoring and prevention systems
• Enterprise-Grade Features - Access to capabilities typically requiring expensive custom development
• Compliance & Audit Tools - Comprehensive logging, rate limiting, and usage tracking built-in
• Zero Technical Debt - Modern codebase following WordPress standards, ready for current technology stacks

🛡 Active Security Monitoring

NV oOS actively prevents and monitors against nefarious behavior. The plugin includes:

• Nefarious Usage Monitor - Real-time detection of suspicious patterns and automatic emergency shutdown capabilities【F:includes/class-wp-mcp-ai-nefarious-usage-monitor.php†L1-L676】
• Root Security Key - Optional emergency authentication layer to prevent unauthorized reactivation after security incidents【F:docs/features/security/root-security-key.md†L1-L511】
• Granular Capability Controls - Every tool and API endpoint enforces WordPress capabilities to prevent unauthorized access
• Rate Limiting - Built-in protection against abuse with configurable limits per user, model, and time period
• Comprehensive Audit Logging - Track all API calls, tool executions, and security events for compliance and forensic analysis
• Input Sanitization & Output Escaping - All user input sanitized, all output escaped following WordPress security best practices

This is not a tool for circumventing security or promoting bad practices. Every feature is designed with security, transparency, and responsible AI usage as core principles. The plugin actively works to stop and prevent misuse before it happens.

Latest audit: See docs/operations/compliance/SECURITY_AUDIT_2026_04.md — the published summary of the April 2026 security & compliance code review (no Critical findings; 5 High items, 3 Fixed and 2 Partially Fixed). Full deliverables under docs/project/audits/2026-04/.

WordPress.org compliance hardening (May 9, 2026): docs/operations/compliance/WORDPRESS_ORG_COMPLIANCE_2026_05_09.md — findings B3, B8, B10, B13, and production vendor remap all resolved.

⚠ Warranty & Safe Use

We make every effort to keep NV oOS safe and secure — but by design, it can be destructive and resource-intensive when not properly configured.

NV oOS grants AI assistants access to powerful WordPress operations. The same capability that automates real work can cause irreversible harm if misconfigured:

• Destructive tools — bulk content deletion, user management, file writes, mass email, WP-CLI, direct database operations
• API billing exposure — uncapped AI provider calls can exhaust quotas and trigger unexpected charges
• Server resource exhaustion — concurrent agentic loops and SSE streams can saturate CPU/memory on shared hosting

Before going live: test on staging, take verified backups, apply least-privilege tool permissions, enable rate limiting, and review the system prompt of every public-facing assistant.

📄 Full details: WARRANTY.md — security commitment, "AS IS" disclaimer, destructive-operations table, resource-consumption guide, and mitigation checklist aligned with OWASP, NIST SP 800-53, ISO/IEC 27001, and the WordPress Plugin Developer Handbook.

Patent Pending

NV oOS is the subject of a pending patent application for its novel System and Method for Dynamic AI Orchestration Layer with Real-Time Capability Gating and Resource Budgeting.

Application Number: 19/410,504

The patent covers NV oOS's innovative approach to implementing sophisticated AI orchestration in WordPress's request-based PHP architecture—a platform not designed for real-time streaming, asynchronous operations, or persistent state management. This technical achievement enables enterprise-grade AI capabilities on WordPress by recreating event-driven behavior within PHP's synchronous execution model.

Key Innovations Covered:

• Dynamic resource budget allocation during streaming operations
• Capability-based access control for AI tool execution
• Registry-state-based scheduling in stateless environments
• Metrics-driven budget adjustment for real-time optimization
• Persistent-behavior illusion in request-based architectures

The orchestration layer makes NV oOS unique in the WordPress ecosystem by solving fundamental architectural limitations that prevent traditional WordPress plugins from supporting advanced AI features. See the System Architecture section below for technical details on how these innovations work together.

🏗 System Architecture

NV oOS implements a comprehensive orchestration layer for managing AI operations during real-time streaming events. The system architecture comprises:

• 18 language-model providers — OpenAI, Gemini, Anthropic, DeepSeek, OpenRouter, Baseten, Kimi (Moonshot), Z.AI (GLM), DigitalOcean, NVIDIA NIM, Cloudflare Worker AI, Azure, Ollama, LM Studio, Hugging Face, TypeSafe Jev (decision-only), plus local WebLLM + embedded engines
• ~1,731 tool classes (~355 base + ~1,377 Pro; live count via WP_MCP_AI_Tool_Registry::get_tools() is authoritative) registered through a singleton Tool Registry
• 36 REST controllers (16 base + 20 pro) under the mcp-ai/v1 namespace
• 64 service classes powering orchestration, budgets, and workflows
• 5 authentication methods — WordPress nonce, assistant credentials, mesh keys, Auth0 JWT, guest tokens
• Toolkit MCP servers — per-toolkit JSON-RPC 2.0 servers exposed under /wp-json/mcp-ai-pro/v1/mcp/{slug}; discoverable at /.well-known/mcp
• 8 inline-async-tick consumers — cooperative tick-lock pattern eliminates WP-Cron startup latency for background jobs (transcript mining, async tool executor, SaaS Apply, Crawl4AI, Docs Hub rebuild, Graphify reindex, Harness eval, Gemini Veo polling)
• 7 LLM Harness layers (+ 1 Pro) — opt-in epistemic layers A–H activated per-assistant via the LLM Harness metabox
• Orchestration Phases 1–7 — HITL approval queue, prompt-injection detector, structured output, OTel exporter, DAG builder, durable runs, triggers/webhooks, sub-agents

📖 For a detailed explanation of how NV oOS extends standard SSE and MCP protocols with novel orchestration features, see ORCHESTRATION-LAYER-ARCHITECTURE.md

Core Orchestration Layer: Overcoming PHP's Limitations

Critical Context: Most real-time AI streaming systems are built with Node.js, Python FastAPI, or Go — platforms designed for asynchronous, event-driven operations. These platforms natively support:

• Long-lived connections and persistent state
• Non-blocking I/O and parallel execution
• Event loops and asynchronous callbacks
• WebSocket protocols and SSE streaming

NV oOS achieves the same capabilities in PHP/WordPress — an environment fundamentally not designed for these patterns — through a sophisticated orchestration layer that creates a "persistent-behavior illusion":

1. Real-Time Budget Enforcement - Monitors token/memory usage during streaming, prevents exhaustion through predictive allocation
2. Capability-Based Tool Gating - WordPress role-based access control for AI tool execution
3. Predictive Optimization - Analyzes usage patterns to prevent resource overruns before they occur
4. Distributed Orchestration - Multi-provider support with policy-aware routing
5. Auditability & Compliance - Complete governance layer with logging and rate limiting
6. Cron-Based Task Orchestration - Extends orchestration to async operations with budget inheritance

Multi-Agent Orchestration Enhancement (DeepSeek V4-Inspired)

Added: January 2026 (v1.1.0)

Building upon the core orchestration layer, NV oOS now includes a sophisticated multi-agent coordination framework inspired by DeepSeek V4's orchestration patterns:

Key Components:

• Agent Role System - Four specialized roles (Planner, Executor, Critic, Specialist) with role-specific capabilities
• Team Composition - Automated team assembly based on task requirements and profession expertise
• Coordinated Workflows - Multi-step workflows with agent delegation, result aggregation, and validation
• Team CPT Integration - Persistent team configurations with orchestration modes (single/sequential/parallel/swarm)
• Profession-Based Discovery - 296 professions auto-assigned agent roles via intelligent seeding across 17 knowledge bases

Example Multi-Agent Workflow:

// 1. Compose research team (planner + executors + critic)
$orchestrator = new WP_MCP_AI_Agent_Team_Orchestrator();
$team = $orchestrator->compose_team( array( 'task_type' => 'research' ) );

// 2. Execute coordinated workflow
// Planner decomposes task → Executors research subtasks → 
// Communication service aggregates → Critic validates quality
$result = $orchestrator->execute_team_workflow( $team, $task, $context );

Documentation:

• See Multi-Agent Orchestration for complete technical details
• See DEEPSEEK-V4-README.md for documentation suite overview
• See DEEPSEEK-V4-USAGE-GUIDE.md for practical examples

Why This Architecture Is Novel: Overcoming PHP's Limitations

• Event loops and background workers

PHP/WordPress, by contrast, is fundamentally request-based:

• Every HTTP request spawns a new process that dies after responding
• I/O operations block execution
• No persistent memory between requests
• No native event loop or async coordination

NV oOS solves this by implementing an orchestration layer that creates a "persistent-behavior illusion" — effectively recreating Node.js's event loop behavior within WordPress's synchronous, request-based architecture. This architectural compensation is the system's core technical innovation:

This makes NV oOS patent-worthy as a technical workaround — it achieves sophisticated AI orchestration in an environment specifically not designed for such patterns. See ORCHESTRATION-LAYER-ARCHITECTURE.md for the complete technical analysis.

Computer-Implemented Resource Management

The system operates as a computer-implemented method executing on a processor with memory, performing:

1. Dynamic Resource Budget Allocation: The orchestration layer dynamically allocates token and memory budgets to tool execution requests based on real-time system capacity and operation requirements. The WP_MCP_AI_Resource_Manager continuously monitors server resources (PHP memory limits, execution time constraints) and automatically adjusts operational parameters.
2. Capability-Based Access Control: Tool execution endpoints enforce granular capability-based access controls. Each tool in the registry declares required WordPress capabilities, and the REST API controller validates user permissions before allowing execution. This ensures secure, policy-driven access to all operations.
3. Registry-State-Based Scheduling: The WP_MCP_AI_Tool_Registry maintains tool availability state and schedules execution based on policy constraints. Tools are loaded conditionally based on dependency availability, and execution is scheduled according to assistant configuration and user permissions.
4. Metrics-Driven Budget Adjustment: The system continuously monitors execution metrics (memory usage, API response times, token consumption) and adjusts resource budgets in response to prevent resource exhaustion and reduce latency. The WP_MCP_AI_Token_Budget_Manager implements safety margins and dynamic chunking to prevent API limit overruns.

System Components

The system comprises a processor and memory storing instructions that:

• Monitor real-time resource availability through PHP runtime introspection
• Enforce capability checks at REST endpoint boundaries
• Schedule tool execution through a centralized registry
• Adjust token and memory budgets based on detected system metrics
• Maintain operation logs for audit and optimization

This architecture is embodied in non-transitory computer-readable media (PHP source files) that, when executed by a web server processor, cause the system to perform the complete resource management workflow. The implementation prioritizes stability, security, and efficient resource utilization across diverse hosting environments.

Symfony Process Integration (December 2025)

NV oOS Pro addon integrates the Symfony Process component for secure external command execution. This modern framework replaces direct exec() calls in 6 Pro tools and 2 supporting services, providing:

• Enhanced Security: Proper argument escaping and command validation
• Timeout Management: Configurable timeouts with graceful handling
• Better Error Handling: Comprehensive exception catching and WordPress-friendly error reporting
• Process Control: Real-time output streaming and cancellation support

Migrated Tools & Services:

• FFmpeg operations (video frame extraction, metadata reading)
• Python rembg (background removal)
• WP-CLI execution
• Meta AI Jukebox (music generation)
• Supporting services for video and audio processing

The Process Service (WP_MCP_AI_Process_Service) provides WordPress-friendly wrappers with WP_Error integration, making external process execution consistent with WordPress coding standards.【F:includes/services/class-wp-mcp-ai-process-service.php†L1-L220】【F:docs/history/2025/implementations/symfony-phases/SYMFONY_PHASE2B_PROCESS_INTEGRATION.md†L1-L100】

---

📜 Release History

The 12 most recent releases are documented in full below. Every older release has a one-line summary in the Previous Releases table, and complete per-release detail lives in CHANGELOG.md.

v1.2.10 — October 23, 2026

Console Migration Phase 5b–5d, Crash Fixes, Storage Meter & Advisory Sweep

• 🧭 Admin-surface console migration Phase 5b–5d + polish (Proposal 084, PR #7180). The orphaned WP_MCP_AI_REST_Cost_Manager + WP_MCP_AI_REST_Analytics_Manager controllers now register in includes/bootstrap/loader.php (Phase 5b) and power the real Analytics page (cost trend, provider donut, top tools/users — manage_options-gated, wrapping the existing service layers); the Unified Blueprints page bridges behind GET /mcp-ai-pro/v1/blueprints as a searchable install catalogue (5c); the Agent Command Center absorbs into the console Dashboard (5d, fail-soft KPI + activity). Console-wide polish: a semantic DataTable (sortable headers, master–detail expandable rows, sticky header, scroll containment, zebra striping) replaces the div-list tables; standardized primary/danger buttons; a grouped collapsible sidebar (ConsoleSidebar + nav-features: Workspace / Automation / Command Centers / Insights / Admin) with the W3C disclosure pattern, persisted state, and default-Workspace-expanded.
• 🧩 Crash fixes + settings + chat dock (PR #7184). The blueprints 500 — the admin_blueprints module gated the page class behind context => 'admin', so its static catalogue seams fataled on front-end REST; the class loads unconditionally now (only init() stays is_admin()), pinned by an 11-test REST suite. React error #310 (hooks after early returns) fixed on Schedule Manager, Workflows, Pro Ops, and Orchestration Stats — with a permanent react-hooks/rules-of-hooks ESLint gate that caught 21 latent violations across 4 files. The settings page gains section cards per tab (the schema's previously unused section/section_id), cross-tab search with breadcrumbs, a sticky save footer, and dirty-field indicators. The chat dock: mode-synced conversation-list collapse (docked starts collapsed, full-page open — boot-synced to avoid a first-frame flash), the visible status-bar ☰ toggle, a light/dark theme switch, a stacked composer (textarea no longer squashed to 31px), and drag-resize on the textarea itself.
• 💾 Server transcript storage meter (PR #7185). The status-bar "Sessions: X KB" meter measured same-origin localStorage keys that can never exist for the server-side transcript store. WP_MCP_AI_Transcript_Repository::get_storage_bytes() aggregates per-user payload lengths (0 when the CCT is unavailable), GET /mcp-ai/v1/chat-transcripts carries storage_bytes, and the StatusBar prefers the server figure with a localStorage fallback for older installs.
• 🛡 Dependency advisory sweep (PR #7186). markdown-it → 14.3.3 (ReDoS + O(n²), bounded override — 6 alerts), @modelcontextprotocol/sdk → 1.32.0 (gateway exact pin, 22/22 — 8 alerts), launch-editor floor → 2.14.2 (2 alerts) — 14 of 16 open alerts closed; the vite pair already fixed on the alpha line.
• 🔨 Full tracked-bundle rebuild (PR #7182). Lockfile-only advisory bumps (#7175, #7106) had left tracked bundles silently stale for 13 days — the full artifact tree rebuilt (16 files: the three generate-* worker bundles, chat bundles, SPA dists, TMA entries, drift manifest); spa-v2 + complete-velocity rebuilt byte-identical same-day.
• 🚀 Standalone SPA endpoint sync (PR #7181). The Vite mirror gains the three canonical ProSpaEndpoints keys (cost, blueprints, commandCenter) and points analytics at the core mcp-ai/v1/analytics namespace (matching the canonical PHP config) — the Velocity build gate's TS2739 fixed.
• 📚 Docs & skills (PRs #7178, #7183, #7185). The spa-ui skill gains a "Rebuild discipline" subsection (lockfile-movement staleness signature, the vendor never-commit rule, the revert-on-shared-branch play, merge discipline) and the dependabot-loop skill gains Step 7 (rebuild tracked bundles); the Schedule Anything ops skill gains the Cloudways Anti-Bot Protection (Imunify360 WebShield) failure class — symptom signature, the pdata/wsidchk clues, the diagnostic ladder, and the fix — cross-referenced from the Complete Console deploy runbook; the spa-rest-contract skill gains bug class 11 (wrong-store meters) + the storage_bytes baseline; the test-suite skill documents the run-tests-docker.sh silent dump-autoload fallback.
• 🧪 Tests (PRs #7184, #7185). Regression pins for the blueprints REST surface (11 tests / 103 assertions), the cost/analytics/command-center REST surfaces (17 tests), the loading → loaded transitions on the four hook-order pages, the transcript-storage suite (3 tests), and the useTranscripts storageBytes parsing/fallback cases.
• 📦 Versioning — bumped to 1.2.10 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.10. No addon version moves in-window (Schedule Anything Platform stays 0.1.2). Media Worker: 3.4.0 (unchanged — verified across package.json + both health/status surfaces). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~355 base + ~1,377 Pro (~1,731 total — unchanged) — zero registry registrations in-window (the cost/analytics managers are REST controllers; live registry authoritative). Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 77 base + 41 Pro (unchanged). Coding-time agent skills: 76 (unchanged — five skills updated in place). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.8 oOS set (30 files — 9 + 2 + 19).

v1.2.9 — October 22, 2026

Complete Console App + Admin Console Migration, SA Visibility & New REST Routes

• 🖥 NV oOS Complete Console Velocity app (Proposal 083, PRs #7150, #7154). A new standalone Cloudways Velocity app (examples/nvoos-complete-velocity/) serving the full spa-v2 admin surface for Complete customers — build-time composition via the @nvoos/pro-spa-v2 Vite alias (no spa-v2 fork), cookie auth through the proven same-origin BFF proxy (serve.mjs, no connection screen), and a Schedule Anything-format shell: dashboard home, one route-split page per addon, a collapsible nav rail, and a persistent chat dock (single ChatPage instance — conversations keep streaming while browsing).
• 🧭 Admin-surface console migration, Phases 0–4d (Proposal 084, PRs #7164, #7166). WP_MCP_AI_Feature_Flags + GET /mcp-ai/v1/features gate the console nav (fail-open); Approvals/Slash Commands/Triggers/Portability/Security/Teams ports with per-page wp-admin kill-switches; a schema-driven Settings engine (/settings/schema + /settings/values, dirty-diff saves, secret masking); ops/diagnostics/token-manager pages + GET /mcp-ai-pro/v1/ops/overview; Schedule Manager (P9) + Workflow Builder (ReactFlow canvas) + records/dashboards/calendar/F&B/channels/media-ops pages. A REST contract parity audit fixed nine client/server mismatches — including the assistants GET/PUT routes that broke the edit form. Phase 5 (retirement soak + kill-switch flips) remains.
• 📅 Schedule Anything full visibility (PR #7147 — platform 0.1.1 → 0.1.2). The builder palette now reads the live registry via GET /mcp-ai-pro/v1/sa-tools (paged light rows, server search + group facet — replaces a hardcoded 19-tool fixture); GET /toolkits returns tier/platform_active/entitled (server-decided, greys out of-tier toggles); the missing flowhub + shopify-sync toolkit rows are back; multisite admins gain sa_manage_workspace idempotently; preset filters use server facet dropdowns + load-more; same-state toggles are a successful no-op.
• ⚙ New base settings/features routes (PRs #7157, #7164). GET/POST /mcp-ai/v1/settings (SPA-shaped { success, data }, secrets masked as the admin placeholder, whitelisted sanitize + key mapping + clamps), GET /mcp-ai/v1/features, GET /mcp-ai/v1/teams, and the settings schema/values pair.
• 🛡 Opt-in debug logging (PR #7161). The JetEngine CCT hot path no longer logs a debug event per request; debug-level events gate behind enable_debug_logging (default off) while errors/warnings/criticals stay always-on; the CG Pro logger port mirrors the gate and degrades to a safe no-op standalone.
• 🔗 Memory-graph bridge seams (PR #7145). trace_memory_provenance resolves its bridge/DB walker through three filters and walks DERIVED_FROM/OBSERVED_BY/MEMBER_OF (not the never-populated RECALLS) with a new kind field; the RRF fusion stream resolves its bridge via wp_mcp_ai_memory_rrf_graph_bridge; the Content Graph plugin self-declares as the bridge (no CG version bump — release prep is a follow-up).
• 🧩 Console reliability (PRs #7174, #7176, #7163). Six 404ing mcp-ai-pro/v1 console routes fixed by a context-free rest_console_bridges registry module (the admin-context gate never fired for the front-end SPA); the schedule picker moves to its own /schedules/selectable route (last-registrant-wins collision fixed); dashboards and nav gate on toolkit toggles (disabled toolkits vanish server-side); loading states replace empty-then-loaded flashes on Assistants/Tools/Settings/Records/Dashboards/Channels.
• 🧾 SPA REST contract fixes (PRs #7156, #7155). The tools-list client maps the real { tools, total } envelope (route additively returns slug + required_capability); the knowledge-graph visual-config fetch sends the wp_rest nonce (cookie-mode 401 fixed); the Content Graph guest branch validates through the real guest-token layer; transcript 404s mean "fresh session".
• 🚀 Schedule Anything Velocity deploy chain (PRs #7146, #7148, #7151). Missing CSS assets fixed (asset-closure gate + 404-loudly serve.mjs, MIME-verified in the sync workflow); React 18.3 → 19.1.0 as a documented Pattern-B deviation; the complete-console mirror's build scripts are no-op shims with dependencies stripped (Velocity deploy fixed).
• 📉 Build & dependencies (PRs #7167, #7168, #7175, #7144, #7171, #7173, #7165). The Pro zip stops shipping root examples/ (−5.4 MB); vite → 8.2.4 across the 9 alerted manifests + schedule-anything-spa 6.4.4, hono ≥4.13.11, follow-redirects ≥1.16.1 (alerts 1336–1377); the dictate workflows install the real rustup arch targets (tauri lipo-merges the universal bundle); the standalone SPA's @xyflow/react lockfile + paths/aliases fixed.
• 📚 Docs & skills (PRs #7162, #7170, #7169, #7172, #7160, #7153). New mcp-ai-wpoos-spa-rest-contract skill (75 → 76) canonizes the REST contract audit (seven bug classes, audit path, fix decision rules, validation matrix); spa-ui gains the Tailwind v4 tracked-dist loop, the Pattern-B React 19 checklist, and the clean-install lockfile gotcha; content-graph-spa + schedule-anything-ops updated; README sponsor section + FUNDING.yml activated (VS16 anchor fixed); Proposal 085 (Funiq Velocity storefront) is docs-only.
• 🧪 Tests (PRs #7149, #7174). The order-dependent tenant-isolation failure is fixed (option reset in setUp()); phpunit.xml.dist drops its no-op source excludes (the 70 GB Rust target/ walk no longer hangs suite startup); the console-bridge registration is regression-pinned.
• 📦 Versioning — bumped to 1.2.9 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.9. Schedule Anything Platform: 0.1.1 → 0.1.2 (#7147). Media Worker: 3.4.0 (unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~355 base + ~1,377 Pro (~1,731 total — unchanged) — zero registry registrations in-window (sa-tools + the settings/features/ops routes are REST surfaces, not tools; live registry authoritative). Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 77 base + 41 Pro (unchanged). Coding-time agent skills: 75 → 76 (+mcp-ai-wpoos-spa-rest-contract). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.7 oOS set (30 files) + the superseded Schedule Anything Platform v0.1.1 ZIP.

v1.2.8 — October 19, 2026

Schedule Anything API + Single-Site Mode, F&B Worker Offload & MCP OAuth Hardening

• 📅 Schedule Anything presets + toolkits API (PR #7124, Proposal 081). Four mcp-ai-pro/v1 routes (rest_schedule_anything module): GET /toolkits + POST /toolkits/{slug}/toggle (server-side tier entitlements via the platform's SA_Toolkit_Manager, 403 sa_toolkit_not_entitled), GET /presets + /presets/{id} (12 presets across 6 toolkits), and idempotent POST /presets/{id}/install (replay returns the original schedule). Schedule records leaving REST are redacted (redact_schedule_for_public() — credential-bearing fields stripped), and the SPA builder payload aligns with the server contract (sonner error surfacing).
• 🏠 Schedule Anything Platform single-site mode (PR #7134, Proposal 082 — addon 0.1.0 → 0.1.1). No more activation wp_die on non-multisite: sole-tenant self-provisioning (tier default enterprise, filter sa_single_site_tier), a manage_options capability seam for SPA REST, 409 sa_cannot_offboard_sole_tenant, a SA_SAAS_API_KEY-gated heartbeat, and a 17-case suite wired into the root PHPUnit run via a self-guarding addon tests bootstrap.
• 🏭 F&B ingest × media-worker offload (PR #7114, Proposal 079 + Appendix B). The worker's POST /api/ingest/parse returns the F&B {columns, rows} matrix contract (XLSX/CSV/TSV/JSON/JSONL/PDF/photo; .xls/.ods → 503 capability_unavailable with local fallback), /api/image/batch gains the files[N] contract + per-file tolerance; the F&B loader parses heavy formats sidecar-first with local PhpSpreadsheet/PdfParser fallbacks; optimise_images_batch and the OCR-service PDF path offload; opt-in ocr_vision_fallback rung.
• 🛡 MCP OAuth authorize hardening (PR #7133). Exact-string redirect URI matching (RFC 9700 — the wildcard bypass is gone), registration-time URI validation, a nonce-bound consent page before any code is issued, unknown-scope rejection, and token-endpoint redirect_uri matching — Pro addon + the byte-identical Content Graph Pro mirror (19-test suites, 114 adjacent assertions on WP 6.9 + 7.1).
• 🖥 WP-CLI integration gaps closed (PR #7135). The dead mcp-ai content command registers again; a canonical WP_MCP_AI_Pro_Toolkit_Settings_Map (40 toolkits) fixes "Unknown toolkit key" for 11 real settings keys; toolkit enable|disable are manage_options-gated (--yes); new foundry/para/qms/mcp-app/fnb commands with the integration CLIs discovered via wp help mcp-ai.
• 💬 Chat composer vertical expansion + collapsible toolbar (Proposal 080, PRs #7113, #7116, #7118–#7120). Auto-grow 1→3 lines (field-sizing: content + fallback), iOS keyboard reflow (interactive-widget=resizes-content, dvh chain, useVisualViewport), a Zed-style drag-resize divider (clamped + persisted), a focus composer, an in-place collapsing desktop toolbar, a mobile toolbar row, and three pre-existing a11y lint failures fixed — 202 vitest tests green.
• 📧 Gmail body hydration + attachment text (PR #7110). HTML-only empty_parts emails hydrate via body.attachmentId before normalization; attachments return extracted text (PDFs via smalot/pdfparser, text/csv/json, actionable errors for scanned PDFs); unpadded base64url re-padding fixed.
• 🍽 F&B fixes (PRs #7108–#7112). Excel serial dates (46023 = 2026-01-01) no longer read as Unix epoch (the 1970-01 collapse that blanked every trend chart); the universal reader honors the operator's table_map; the raw-row import keeps non-canonical columns; resume/retry imports persist a resumeCursor; progress placeholders render.
• 🎙 Dictation macOS verification + universal builds (PRs #7122, #7123, #7137). A macos-latest boot-smoke job (30 s boot-residency gate + headless --mcp engine probe), an interactive tmate session workflow (scripts/macos-matrix-remote.sh), and one universal arm64+x86_64 artifact (lipo merged, both slices boot-verified) replacing the per-arch DMGs.
• 🚀 Schedule Anything Velocity app (PRs #7125, #7126, #7131). examples/schedule-anything-velocity/ serves the prebuilt SPA with the proven proxy core (no CORS config); a root server.js ESM shim satisfies Velocity PM2's default entry; the sync-token secret renamed NVOOS_SA_VELOCITY_REPO_TOKEN (GitHub caps secret names at 40 chars). The platform plugin's Requires Plugins header is dropped so the oos-complete bundle activates (core matches the dependency against the folder slug — three distribution slugs; #7132).
• 🔗 Dependencies (PRs #7106, #7121). handlebars 4.7.9 → 4.7.10 (GHSA-8r5x-fm3f-whwj); the Schedule Anything SPA joins every SPA zip build + release gate.
• 📚 Docs & skills (PRs #7115, #7128, #7129). New mcp-ai-schedule-anything-ops skill (74 → 75); the dictation-app skill gains the macOS remote verification loop; Pro tool coverage manifest regenerated (1,387 classes).
• 📦 Versioning — bumped to 1.2.8 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.8. Schedule Anything Platform: 0.1.0 → 0.1.1 (#7134). Media Worker: 3.4.0 (unchanged — the new ingest route ships without a worker bump). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~355 base + ~1,377 Pro (~1,731 total — unchanged) — zero registry registrations in-window (#7135's commands are WP-CLI, #7124's surface is REST, #7114's client is a service; live registry authoritative). Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 77 base + 41 Pro (unchanged — the dictation-app bundled copy re-synced byte-identical). Coding-time agent skills: 74 → 75 (+mcp-ai-schedule-anything-ops). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.6 oOS set (30 files) + the superseded Schedule Anything Platform v0.1.0 ZIP.

v1.2.7 — October 17, 2026

F&B Universalisation, Sinhala TTS, and the Pro SPA Multi-Page Expansion

• 🍽️ Food & Beverage universalisation + open-format ingestion (PRs #7094–#7096, Proposal 078). The F&B toolkit moves from a single-tenant demo to a universal product: WP_MCP_AI_Fnb_Tenant_Profile de-couples currency (canonical neutral metric keys with legacy *_lkr aliases for the 20/20 oracle), render() de-venues both assistant surfaces via token substitution, demo_mode => false, and a new WP_MCP_AI_Fnb_Report_Exporter (DomPDF-first PDF + html_to_pdf fallback + CSV) powers fnb_export_report (+1 Pro). The universal reader scores a single Drive folder to table roles; the multi-format loader + Observation/terminology-map layer and a read-only Ingest & Review dashboard complete the ingestion track; an analytics dashboard adds KPI tiles + trend charts + panel tables.
• 🗣 Sinhala-native TTS (PR #7099). generate_sinhala_speech (+1 base) closes the generate_openai_speech gap (OpenAI voices are English-optimized, Google Cloud TTS has no si-LK voice) via SpeechGen (si-LK), Hugging Face facebook/mms-tts-sin, or a custom webhook; wired into the media_generation preset, with a teacher-assistant-sri-lanka.md system-prompt + tool pack.
• 🧩 Pro SPA multi-page expansion (PRs #7078–#7080). #/docs, #/media, and #/documents frame the Docs Hub / Media Studio / Document Editor SPAs in sandboxed iframes (mirroring #/knowledge-graph), with filterable docsHub/mediaStudio/documentEditor endpoints and nav-* commands; the standalone app defaults docsHub to the console docs hub.
• 🎙 Dictation-app skill bundling (PR #7077). mcp-ai-wpoos-dictation-app ships inside includes/bundled-skills/ and the bin/sync-agent-skills.php allowlist (base bundled 76 → 77).
• 🛡 Tool-schema hardening (PRs #7087, #7100, #7104). Per-property boolean required hoisted to the top-level array (both ChatOrchestrator + REST build_tools_payload()) and empty properties emitted as {} (seven no-arg tools + the central Tool_Schema_Auditor + the CG-AI mirror), fixing DeepSeek 400s.
• 🔍 Google Workspace unification + native Sheets (PRs #7097, #7101, #7105). search_gmail/search_drive delegate to the shared clients (fixing the google_workspace/email_imap rejection); get_drive_file reads native Google Sheets via the Sheets API v4 (sheet_name, tabs, row_count); extract_google_error_message() surfaces the real 403 cause.
• 📊 F&B reliability (PRs #7091, #7092, #7102, #7103). Recoverable unknown-metric errors (Levenshtein closest-ID suggestion), complete-by-default + resumable imports (25,000-row cap), header-dictionary metric resolution + covers fallbacks + fixed-height KPI charts, and a WPCS indentation pass.
• 👥 Team-member tool invocation (PR #7088). invoke_team_member() resolves profession slugs through build_tools_payload() (proper {type,function} definitions + attention/capability inheritance).
• 🔐 Framed SPA credential auth + surface fix (PRs #7075, #7076, #7085). Headless Bearer cred_… auth for framed Media Studio/Document Editor (capability-gated to the issuing user), the broken home-URL iframe fallback removed, and keep-alive hub tabs.
• 🔗 Dependency (PR #7074). @modelcontextprotocol/sdk 1.30.1 → 1.31.0 in the mcp-wordpress-gateway (GHSA-6qxp-vccf-f47h).
• 📚 Docs & skills (PRs #7081, #7082, #7084, #7086, #7093). design-performance-audit Flatsome + post-deploy sync, four more skill refreshes + Proposal 075, a Cloudflare 520 troubleshooting entry, the nvoos-dictate lockfile sync, and the Pro coverage-manifest regeneration.
• 📦 Versioning — bumped to 1.2.7 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.7. No addon version moves in-window. Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~355 base + ~1,377 Pro (~1,731 total — +1 base +1 Pro) — generate_sinhala_speech (#7099) + fnb_export_report (#7094); live registry authoritative; lib/core/sub-project tools never counted. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 77 base (+mcp-ai-wpoos-dictation-app) + 41 Pro. Coding-time agent skills: 73 → 74 (+mcp-ai-wpoos-toolkit-ingestion; -universalisation self-bookkept at #7094). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.5 oOS set (30 files — see §2.5).

v1.2.6 — October 14, 2026

Drive OAuth Restored, F&B Reliability, OCR vLLM & the Dictation Browser Agent

• 🔐 Google Drive OAuth restored (PR #7053). The #6981 narrowing to the non-sensitive drive.file scope silently broke search_drive, get_drive_file, and the F&B tools for pre-existing content — a per-file scope that can't see anything the app didn't create. drive.readonly is restored as the default alongside drive.file, behind the unchanged wp_mcp_ai_google_drive_oauth_scope filter; the CG-AI-platform OAuth manager mirrors it (sub-project, flag-not-edited).
• 🍽 Food & Beverage reader reliability (PRs #7057, #7060, #7061, #7062). The Sheets reader assumed one Drive file per table; real clients use a single workbook. The WP_MCP_AI_Pro_Google_Drive_Client gains Sheets-API-v4 helpers (get_sheet_values()/get_sheets_metadata()) and the reader resolves table IDs to worksheet tabs with fuzzy matching (case/underscore/hyphen/substring) + a preserved split-file fallback. A DEMO_WORKBOOK_ID fallback + workbook_id() accessor fix the fresh-install file-lookup break; the spreadsheets.readonly OAuth scope + maybe_annotate_sheets_error() surface the real Sheets scope failure instead of a misleading split-file "not found". A new WP_MCP_AI_Fnb_Csv_Exporter (workbook → CSV-per-table with an admin export button) and the 18-table demo dataset (~10,700 rows) now ship in data/*.csv (the tests/ path was stripped from release builds).
• 🔒 Drive connection fixes (PR #7051). The WP_MCP_AI_Inline_Async_Tick_Trait double-declaration fatal in the harness eval scheduler (the non-once Composer classmap load raced a later require_once); Drive 400 responses now log the full body (so invalid_grant vs invalid_client is finally visible); folder_id can now be cleared (preserve only when the key is absent — the always-posted empty string was mistaken for an omission).
• 🔍 Self-hosted OCR vLLM contract (PR #7055). WP_MCP_AI_Self_Hosted_OCR_Client::ocr_images() emitted the SGLang dialect while every operator surface directs users to deploy vLLM — so the no-repeat-ngram processor was never engaged and long documents looped on coordinate tokens. Rewritten to the vLLM OpenAI-compatible shape (model = HF id; skip_special_tokens + ngram_size/window_size + DeepSeek's whitelist_token_ids under extra_body.vllm_xargs); base + CG Pro mirror byte-identical.
• 🤖 Dictation browser agent + FastConformer (PRs #7041, #7043–#7050). The agent feature drives a real browser over CDP (chromiumoxide) from dictated/typed instructions — a ReAct loop, a six-variant verdict model with real read-back, an origin-guarded safety gate + sensitive-field masking + async HITL Approve/Deny, and the brain model now correctly uses settings.agent.model (never the shared cleanup/TTS model). A second local STT engine (fastconformer nemo_ctc) ships; an explicit CleanupConfig.polish_enabled master switch replaces the wait_for_llm_ms > 0 gate (the 0 default used to silently disable polish); model download/install hardened (.download moved out of the install dir, 5× staging-swap retry, spawn_blocking install).
• 🧭 NV oOS multi-SPA hub + Pro SPA v2 fixes (PRs #7063, #7066, #7064, #7072). A new GET /mcp-ai-pro/v1/spa-surfaces discovery endpoint (WP_MCP_AI_Pro_SPA_Surfaces_Controller, gated on shortcode_exists()/class_exists()) + the dictate app's "NV oOS" multi-surface hub. The Pro SPA v2 last-message-save + assistant-memory regressions are fixed (#7066); the tool-shortcuts/slash-commands/OKF drawers now accept guest/bearer/assistant-credential auth via the new trait-wp-mcp-ai-spa-credential-auth.php (they were cookie-only → 401 inside the dictate iframe, #7072).
• 🔗 Dependency (PR #7059). shell-quote bumped to >=1.11.0 (resolving 1.12.0) across the root + saas-controller + Pro SPA manifests, closing the GHSA-pqg4-j6r4-53mv command-injection alert in three lockfiles.
• 📦 Versioning — bumped to 1.2.6 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.6. No addon version moves in-window. Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~354 base + ~1,376 Pro (~1,730 total — unchanged) — zero registry diff in-window (no class-wp-mcp-ai-tool-* registrations; #7063's spa-surfaces is a REST endpoint and #7062's CSV exporter is a service, both non-tool). Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 72 (unchanged — no new skills in-window). Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.4 oOS root set (30 files — see §2.5).

v1.2.5 — October 13, 2026

GTmetrix × WPCode Toolkit, Food & Beverage Phase 9 & the Hardened Dictation App

• 🚀 GTmetrix × WPCode performance toolkit (PR #7026, Proposal 068). +24 Pro tools — a 23-tool gtmetrix_* set (start/monitor/retest, report + Lighthouse-audit + resource-summary reads, browser/location/simulated-device listing, alert + page-tag + monitoring management, and generate_wpcode_snippet) plus the read-only list_wpcode_snippets on a shared WP_MCP_AI_Pro_WPCode_Snippet_Repository (extracted zero-behavior-change from create_wpcode_snippet, conditional_logic support). Deterministic CWV/grade/weight scoring with a 41-check standalone oracle, a credit-aware Action Scheduler poller + CPT snapshot store surviving GTmetrix's 1-month retention, a Basic-auth client with 429 backoff + sensitive-resource hard-blocks, and gtmetrix_install_wpcode_fix drafts-only/chat-restricted. Five schedule + two workflow presets, an assistant pack + wp mcp-ai pro gtmetrix seed-assistant, full 7-surface registration + regenerated coverage manifests. Deferred (plan §8): WP 7.1 second pass, live-key smoke test, proposals-README status.
• 🍽 Food & Beverage Phase 9 (PR #7032). +10 Pro tools — five transactional-table CPT backends (mcp_ai_fnb_sale|purchase|stock|waste|booking behind enable_fnb_native_storage, with idempotent upserts + before/after hooks) read by metrics/reports unchanged through a WP_MCP_AI_Fnb_Cpt_Reader; the ACT-tier fnb_import_table Sheet/CSV→CPT bridge (dry-run, idempotent); and nine fnb_pr_* purchase-request tools running the approval lifecycle on the QMS engine (preconditions via wp_mcp_ai_qms_state_preconditions, PO numbering PR-YYYYMM-###, release-signature relaxation). The four A1–A4 assistants ship as unified Blueprints; a new top-level F&B Management menu (CRM/PM pattern) with five CPT screens + a dashboard + settings link. Deferred: Phase 10 chat/social/booking wiring, reference-table CCT fields, Appendix A10.
• ⚙️ F&B admin menu + module-registry fix (PR #7029). tools/food-beverage/init.php was dead code — fnb was missing from the Pro Module Registry's conditional_toolkits/dir_map, so the admin menu never registered (tools still worked via the central map). A new F&B settings page + the CRM-style enable gate land; the 21 shipped tools now surface correctly. design-...-toolkit-creation case study updated to eleven registration surfaces.
• 🍱 F&B assistant-pack seeding + CSV guidance (PR #7033). The truncated WP_MCP_AI_Fnb_Assistant_Seeder completed (seed(), portability-engine load, image-tool add) so the one-click Seed assistant packs admin button and the wp mcp-ai pro fnb seed-assistants CLI share identical semantics; CSV data-directory guidance + a read-only status row (configured/exists/is-directory/readable/writable).
• 🎙 Dictation companion app hardened (examples/nvoos-dictate, PRs #7017, #7020, #7021, #7025). The live-capture stream-hold regression (cpal Stream dropped on return → zero callbacks), the stuck-Alt hotkey (synthetic key-up after unhook), adaptive energy-VAD with a real-signal fallback, and the model re-download OpenOptions write-access bug fixed; whisper+parakeet now build into one binary (vendored whisper-rs-sys static CRT); a Diagnostics page + mic input-device picker ship. Deferred: auto-restart watchdog, loopback meeting audio.
• 🔐 Dictation follow-up: credentials + macOS + whisper speed (PR #7027). whisper release speed fixed (RTF 5.2 → 0.36 via whisper-rs-sys/force-debug); version 0.1.0 → 0.2.0; a Windows Credential Manager backend (win_cred.rs writing CRED_PERSIST_LOCAL_MACHINE) replaces keyring 3.6.3's broken CRED_PERSIST_ENTERPRISE path (write-then-read-back verification); the macOS port proposal (068) lands as a plan doc.
• 🍬 macOS port (P5, PR #7030). cfg-gated PTT (permission-free Cmd+Opt+Space toggle + opt-in CGEventTap hold), a TCC permissions layer with System Settings deep links, CoreGraphics paste, ScreenCaptureKit meeting audio via a Swift sidecar (NDJSON), per-app cleanup profiles (NSWorkspace frontmost detection), Info.plist/entitlements, and a macos-latest CI job. Not yet verified on real Mac hardware (CI has no audio/screen/permission hardware).
• 🤖 Local LLM polish, video input & licensing (PR #7037, Proposals 071/072). lm_studio/ollama Stage-2 cleanup providers on a shared local_openai transport; DecodedMedia + a chunker demux MKV/MP4(MOV)/WebM without FFmpeg (transcribe_media/summarize_media IPC); nvoos-dictate + the two SPA demos marked proprietary NV Digital (license = "proprietary"/"UNLICENSED", LICENSE.txt/NOTICE.md/.reuse/dep5).
• 👁 Vision object detection + VLM label polish (PRs #7039, #7040, Proposals 075/076). Opt-in ONNX-YOLO detection (yolov11n default, yolov8n fallback) with SORT/ByteTrack tracking and a click-to-select pin overlaid on the webview canvas, plus an opt-in Qwen2.5-VL label-polish layer (crop → base64 PNG to LM Studio/Ollama) that re-labels the closed-vocabulary detector's low-confidence/misnamed boxes. Deferred: MediaPipe-hand, ByteTrack low-confidence recovery, biometric identity.
• 👤 Standalone SPA login presets (PR #7031). HOME-selected deploy-specific login pages (cookie-dev-proxy / application-password / assistant-credential / preconfigured) with runtime NVOOS_* env injection through serve.mjs (secret-free startup logging, < escaping) and an opt-in NVOOS_AUTO_CONNECT kiosk mode.
• 🐞 Coverage & contract drift (PRs #7035, #7036). The three model-foundry exporters' produces handoff side corrected to null (corpus schema identifiers aren't ID-handoff keys); the enable_webchat_integration toolkit count fixed (36 → 37); the Pro coverage manifest regenerated (+ wp-mcp-ai-fnb-assistant-seeder).
• 📝 Docs & skills (PRs #7015, #7016, #7019, #7023, #7024, #7028, #7038). Two new coding-time skills (71 → 72: mcp-ai-artcraft-ops — ArtCraft MCP reverse-engineering/rebuild guide; design-performance-audit — the GTmetrix → WPCode optimization pipeline) + Rust editor config (Zed + VS Code) + proposal docs 068/070/071/072/074/075/076 + the 1.2.4 readme.txt/README gap closure (#7019, which also encoded the check against recurrence in the updates skill). Sub-project: nvoos-content-graph 1.0.11 prep for wp.org (#7014 — own changelog/readme/POT track, flag-not-edited).
• 📦 Versioning — bumped to 1.2.5 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.5. No addon version moves in-window (content-graph 1.0.11 + CG-AI-platform 2.0.0 ZIP rebuilds are sub-project/build-only). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~354 base + ~1,376 Pro (~1,730 total — +34 Pro) — the 24-tool GTmetrix toolkit (#7026) + the 10-tool F&B Phase 9 wave (#7032); live registry authoritative; lib/core/sub-project tools never counted. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged — the two new skills are coding-time only). Coding-time agent skills: 71 → 72. Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.3 oOS root set (see §2.5).

v1.2.4 — October 12, 2026

MCP Quirk Hardening, Chart Recipes, Model Foundry Phase 1 & the Content Graph SPA Page

• 🛡 MCP client-quirk hardening (PR #7007, Proposal 066). Every advertised tools/list schema now carries a root type: object and hazardous schemas are skipped-with-reason instead of dropping the whole catalog (bracketed property names, >20 KB schemas, root combinators, >64-char slugs — the new WP_MCP_AI_Tool_Schema_Auditor); nvoos_get_profile attaches structuredContent whenever its outputSchema is advertised (Codex turns declared-outputSchema text-only results into errors); the registry fires wp_mcp_ai_mcp_tools_list_changed (once per request) backing listChanged; JetEngine MCP + MCP App discovery caches cap at the server ttlMs and invalidate on notifications/tools/list_changed; the CG-AI standalone mirror ports the hardening. Site Health direct test + debug field; 44 new tests on WP 6.9 + 7.1.
• 📈 nvoos-chart recipe rendering (PRs #7003, #7005). Fenced nvoos-chart JSON renders as real HTML/CSS charts on all three chat surfaces (no SVG/canvas/CDN) — 29 types (v1's bar/column/line/area/dot/donut/heatmap + v2's histogram, box, strip, stem, violin, pie, waffle, unit, diverging, lollipop, dumbbell, slope, bullet, pyramid, waterfall, candlestick, gantt, sparkline, radial, dial, race, grid); invalid fences degrade to escaped code blocks; sanitisation by construction (extracted before marked/DOMPurify, createElement + textContent); resource caps (40 labels / 12 series / 120 points / 240 cells); theme-adaptive, dark-mode-aware, prefers-reduced-motion; grouped-bar rendering fixed. +1 base tool create_chart_fence (server-side validator mirror) + the design-chart-recipes skill + byte-identical conformance fixtures across the three suites. Deferred (plan §12): race replay, SPA CSV copy, render_chart_preview REST, mermaid spike, a11y scan.
• 🧠 Model Foundry Phase 1 — Corpus Foundry (PR #7008, Proposal 067). +3 Pro tools — export_trajectory_corpus (harness traces → OpenAI tool-calling rows), export_preference_pairs (DPO rows, R4, min_margin skip), export_plugin_docs_corpus (docs-hub uploads or a symlink-safe validated dir → docs_v1 rows with per-document provenance) — behind the new deactivatable model_foundry Pro module + the ai_ml preset. The WP_MCP_AI_Corpus_Governance engine is consent fail-closed (_wp_mcp_ai_training_consent; caps → exact → fuzzy → opt-in semantic dedup → PII scrub → deterministic content-hash holdout split → R12 provenance → guarded sharded write — holdout rows never enter train.jsonl; skip-never-truncate). Consent UI ships in Phase 3 (wp_mcp_ai_model_foundry_assistant_consented until then); Phases 0/2–6 deferred in the implementation plan. mcp-ai-wpoos-model-foundry skill + docs/features/model-foundry.md.
• 🗺 Content Graph explorer page in the Pro SPA (PR #6998). #/knowledge-graph in the admin surface + standalone Vite app — the plugin's Cytoscape explorer vendored with a documented wrapper-only delta (IIFE → exported factory, jQuery-namespaced listeners, destroy() teardown, body byte-identical to upstream); jQuery bundled into the lazy 213 KB-gzip chunk. The CG plugin gains a read-only GET /graph/visual-config route + assistant-credential read auth (write routes stay manage_options-only — sub-project track, flag-not-edited; its own changelog/readme.txt updated in-window). Trade-off: the admin IIFE grows 563 KB → 1.2 MB — entry split deferred.
• 🌐 Standalone SPA deploy & auth hardening (PRs #6999, #7000, #7002, #7004, #7006). Cookie-mode login re-scoped through the proxy (absolute wp-login.php form actions/redirect_to broke cross-host deploys — serve.mjs buffers only the login page and rewrites them to the app origin; the Vite dev proxy mirrors it); the vendored explorer's $.ajax calls carry bearer/basic/guest/worker auth via a new ajaxPrefilter (no vendored changes — byte-identity preserved); tsconfig paths + CI build-verify unblock the Velocity deploy; serve.mjs gains a #!/usr/bin/env node shebang (Velocity executes the entry through sh) + a server.on('error') handler with an EADDRINUSE hint; the Velocity doc gains the entry-path callout.
• 🛡 SPA static-server headers (PR #7009). X-Content-Type-Options: nosniff + Strict-Transport-Security: max-age=86400 on the static branch only (ramp to 31536000 after a clean week; no includeSubDomains/preload); CSP Report-Only template ships commented (the inline Cloudflare challenge script would break script-src 'self').
• 🍽 F&B toolkit toggle restored (PR #7010). enable_fnb_toolkit was defined but never listed in the features subtab group — render() only outputs fields in the active group, so the checkbox never appeared and the toolkit couldn't be enabled from the UI. Added to the subtab fields + memory map (64 MB) + footer counter; regression test; toolkit-count expectation 35 → 36.
• 📝 Docs & skills (this pass). User-directed partial @since reconciliation — the literal @since 2.x.0 placeholder family (never recorded in OI-1) corrected to its true shipped versions (1.1.43/1.1.51/1.1.54/1.2.4, blame-verified, incl. three @deprecated lines) and the new model-foundry 1.6.0 + chart-fence 1.4.0 tags corrected to 1.2.4 — the mcp-apps 1.9.x module family and all historical OI-1 groups stay parked (issue #5968). Coding-time skills 66 → 69 in-window (design-chart-recipes, mcp-ai-wpoos-content-graph-spa, mcp-ai-wpoos-model-foundry); AGENTS.md + copilot-instructions updated by the introducing PRs, the README repo-map fold-in + the §1.5 design-* 34 → 35 correction land here; in-window spa-ui/content-graph-spa/test-suite skill edits reconciled.
• 📦 Versioning — bumped to 1.2.4 across all version-bearing files (plugin header, WP_MCP_AI_VERSION, WP_MCP_AI_PRO_VERSION, package.json, readme.txt Stable tag). Pro addon: 1.2.4. No addon version moves in-window (content-graph 1.0.10, CG-AI 1.0.4, CG-AI-platform 2.0.0 ZIP rebuilds — build-only, unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~354 base + ~1,342 Pro (~1,696 total — +1 base +3 Pro) — create_chart_fence (#7005) + the three model-foundry exporters (#7008); live registry authoritative; lib/core/sub-project tools never counted. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 66 → 69. Security classes: 12 (unchanged). Stale build ZIPs removed: the 1.2.2 oOS root set (6 files — 3 ZIPs + 3 .sha256; the 1.2.3 set stays until the 1.2.4 ZIPs build).

v1.2.3 — October 10, 2026

CORS Same-Origin Enforcement, Standalone SPA WordPress Login & REST Auth Fixes

• 🛡 CORS same-origin enforcement (PR #6986). WordPress core rest_send_cors_headers() (rest_pre_serve_request, priority 10) reflects any Origin header back with Access-Control-Allow-Credentials: true on every REST response — which silently overrode the Security → Network "Same Origin" setting, so a hardened site still echoed arbitrary origins. The new WP_MCP_AI_CORS_Guard (12th includes/security/ class) hooks priority 20 and, in site mode, replaces the reflected header with the configured policy: exact-allowlisted origins (site origin + the new cors_allowed_origins setting, one origin per line + the wp_mcp_ai_cors_allowed_origins filter) are echoed with credentials; everything else gets the site's own origin with credentials off; star mode keeps core's allow-all reflection. Enforcement covers the plugin's REST routes (/mcp-ai/v1 by default, extensible via wp_mcp_ai_cors_guard_route_prefixes); the MCP/OPTIONS/SSE/controller emitters share one resolve_allow_origin(). 20 new tests; 138 related REST/security tests pass.
• 🔐 Standalone SPA WordPress login (PR #6993, Proposal 064). A fourth auth mode for examples/nvoos-pro-spa-vite — WordPress login via an Application Password (Basic auth over REST): wp/v2/users/me?context=edit validation with a UTF-8-safe Basic header, and the real user + capabilities mounted into the runtime, so the deployed app (chat.nvoos.cloud) gets the full admin surface with real server-side capability enforcement instead of the bearer mode's client-side manage_options. The Basic header attaches only to requests targeting the configured site origin (never the media worker or third parties). Plugin-side gaps fixed by live verification: chat_transcripts_permissions_check() skips the nonce for Authorization-header requests (CSRF-safe by construction), and permissions_check()/permissions_check_assistant_list() gained Application Password branches (same capability gates, admin bypass + rate limiting intact). 39 PHPUnit tests; full live matrix verified.
• 🛰 OOS streaming CORS fixed (PR #6993). The OOS engine's SSE emitter (lib/core SseHandler) sent no CORS headers — every cross-origin browser chat stream on OOS-routed sites was blocked (pre-existing; bearer/guest modes too). WP_MCP_AI_CORS_Guard::emit_stream_cors_headers() fires from the WP adapter before handleChatStreaming(); lib/core stays framework-agnostic.
• 🔑 SPA REST auth: credentials & session nonce (PR #6990 — closes #6987, #6985). Transcripts/approvals now validate a pure assistant credential (Bearer cred_… or raw header) via the shared WP_MCP_AI_REST::validate_request_credential() — reads scoped to the credential's issuing assistant (mismatched assistant_id → 403); approve/deny stay manage_options-only so a leaked credential can't bypass the HITL gate. handle_session_nonce() re-binds identity from the auth cookie (wp_validate_auth_cookie) before wp_create_nonce() — core's rest_cookie_check_errors had zeroed the session user, so the minted nonce failed rest_cookie_invalid_nonce on retry; cookie-less requests still get the guest nonce. 10 new tests; 38/38 on WP 7.1.3 + WP 7.2-alpha.
• 📅 Pro Schedule Manager multi-recipient notify_email (PR #6991 — closes #6642, #6651). Comma/space/semicolon-separated recipient lists normalize through normalize_notify_email() (reusing sanitize_email_recipients() behind the class_exists guard) with per-address Symfony validation; plan_schedules_from_workflow uses the same normalizer; the create/edit inputs moved type="email" → type="text" with a comma-separated hint. The five CRM slugs land in tool-status.txt as dev (OI-5 closed) and the pagination-fields fixture accumulation is fixed (setUp ordering — #6975 item 3). 136/136 batch on WP 6.9 + 7.1.2.
• 🌐 Standalone SPA cookie mode + production proxy (PR #6994). Cookie mode died with a JSON parse error wherever the app origin had no proxy (the SPA fallback answers unknown paths with index.html + HTTP 200) — a probe now verifies the origin serves the WP REST API and readJson() refuses non-JSON with actionable errors. The zero-dependency scripts/serve.mjs production proxy (/wp-json, /wp-admin, /wp-login.php, /wp-includes when NVOOS_TARGET_SITE is set) streams SSE, rewrites login Location/redirect_to, strips Set-Cookie Domain, and 502s cleanly on upstream failure; App/EmbeddedApp are React.lazy in the shell (entry 501 KB → 196 KB minified, 148 → 63 KB gzip).
• ⚙️ .env loading for the standalone SPA (PR #6996). defineConfig(({ mode }) => …) + loadEnv(mode, envDir, '') (empty prefix → non-VITE_ keys load) so NVOOS_TARGET_SITE/NVOOS_WORKER_URL come from .env files; scripts/dev.mjs resolves shell > .env > http://localhost:8000 precedence; scripts/serve.mjs intentionally stays process-env-only (Velocity runtime env vars).
• 📦 npm package ESM dists fixed (PR #6984). nvoos-slash-commands, nvoos-dom-batcher, and nvoos-audio published dists that were syntactically invalid ESM (export statements inside unclosed IIFEs — the strip regexes anchored at ^ missed docblock-led sources). Generators fixed, all 22 manifests modernized to "type": "module" (CJS scripts → adapt-for-npm.cjs), all 23 packages rebuilt with valid dists, and the new examples/nvoos-vite-demo/ (Vite + TS sample over 8 packages with a dev-only mock SSE server) ships. The three fixed packages bump to 0.1.0-alpha.4 — publish deferred (needs npm auth), then the demo's vendor/ aliases drop.
• 🏗 Build (#6988/#6995). The spa-standalone sync/deploy workflows pin main at git init (git init -q -b main — bare git init named the branch from init.defaultBranch, so the push died with refspec main does not match) and assemble the deploy tree under examples/ so Velocity's root directory finds package.json (chat.nvoos.cloud was stuck serving the initial build).
• 📝 Docs (#6989, #6992). The CORS guard + docs/operations/deployment/nvoos-pro-spa-velocity-setup.md deploy guide (root-directory pitfall, build/entry commands, VITE_DEFAULT_SITE_URL, auth modes, the §5 CORS allowlist) and the one-shot docs/project/open-issues-triage-2026-10-10.md snapshot (36 remaining issues tiered A–D; five closed in-session).
• 📦 Versioning — bumped to 1.2.3 across all version-bearing files. Pro addon: 1.2.3. No addon version moves in-window (docs-hub 0.5.3, content-graph 1.0.10, CG-AI-platform 2.0.0 ZIP rebuilds — build-only, unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff in-window). Tool count: ~353 base + ~1,339 Pro (~1,692 total — unchanged) — no registry diffs in-window; live registry authoritative. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 66 (unchanged — three updated in place: plugin, spa-ui, updates). Security classes: 11 → 12 (WP_MCP_AI_CORS_Guard). Stale build ZIPs removed: the 1.2.1 oOS build set (30 files — 9 root + 2 optional-components + 19 toolkit-addons) with the blueprints/ollama-demo.json URL carried to the complete-1.2.2 ZIP.

v1.2.2 — October 10, 2026

Chat Profiles Read-Only Mode, F&B Assistant Packs & Google OAuth Production Readiness

• 🛡 Chat profiles with server-enforced read-only mode (PR #6977, Proposal 015). Two built-ins — write (non-restrictive default) and read-only (blocks tools carrying write/state-changing/destructive/irreversible/financial-impact/access-control-change/mass-email/data-destruction capability flags). Profiles resolve server-side per request (user meta → site default → write fail-safe) so a client can never widen its own grant; client-sent profiles honoured only for wp_mcp_ai_change_chat_profile (→ manage_options) holders; downgrades allowed for any logged-in user; guests default to read-only. The new 11th security class WP_MCP_AI_Read_Only_Profile_Gate hooks wp_mcp_ai_before_tool_execution at priority 0 before the destructive-ops gate (deny → ask → allow; 403 WP_MCP_AI_Chat_Profile_Blocked envelope; audit events chat_profile_blocked/chat_profile_escalation_attempt; advisory system-prompt hint). REST GET/POST /mcp-ai/v1/chat-profile (deliberately not a tool — the agent can't self-elevate mid-run), wp mcp-ai chat-profile list|get|set|audit-flags, settings, and the Pro SPA v2 profile selectors. 49/49 tests on WP 6.9 + 7.1; Phase D gaps documented (queue-time async enforcement; confirm_write deferred).
• 🍽 F&B assistant packs A1–A4 (PR #6982, Proposal 062 Phase 4). Four canonical v1 nvoos-assistant bundles (addons/pro/presets/assistant-packs/fnb/ — A1 Manager, A2 Kitchen & Bar Stock, A3 Financial, A4 Content) with spec-verbatim G-01…G-12 instructions; seeder wp mcp-ai pro fnb seed-assistants (--dry-run/--mode/--status/--porcelain/--include-image-tools) importing through the shared WP_MCP_AI_Assistant_Portability engine; READ + DRAFT tiers, ACT off; fnb_audit_log A1-only; A4 image tools off by default. Standalone 4/4 validator + 45 tests / 192 assertions. Phases 5b/6/8/9/10 still pending.
• 🔐 Google OAuth production readiness (PR #6981). Drive scopes unified on the non-sensitive drive.file scope across all four flows behind the wp_mcp_ai_google_drive_oauth_scope filter — removes Drive from the CASA verification surface (full-Drive reads remain available via the filter); Calendar defaults to Minimal for new installs; upstream token revocation on Gmail/Drive disconnect; publishing-status warnings on the Gmail/Drive footers; production-verification plan + customer guide docs.
• 🐞 Pro SPA v2 fixes (#6974/#6976). The default-assistant fallback delegated to a nonexistent class — new wp_mcp_ai_pro_get_default_assistant_id() + non-admin directory visibility (assistant_visible_to_current_user(), cache bypass, no hidden-default advertising) + the assistantSelector runtime flag; the embedded sidebar hamburger moved out of the sidebar and the status-bar Sessions figure tracks localStorage live (useStorageUsage).
• 🛠 Workflow-builder TS parity + full JS rebuild (#6979). exportWorkflow/importWorkflow + the DFS validateWorkflow ported into the TypeScript edition (Export/Import called undefined at runtime), animated edges restored, five dead .js duplicates dropped, and every JS package + addon bundle rebuilt.
• 🔧 Test drift fixed (#6978/#6980). The F&B oracle's key-name/float-delta drift and the CG-AI platform evolved-prompt guest-profile pollution — both lessons encoded in the coding-time skills.
• 🏗 Build (#6970/#6972, c9d54bd273). The SPA addon tag-release flow works (new release-spa-addons.yml; the workflow's inputs.create_release == true string bug fixed); the demo-videos pipeline is manual-only until CI-verified (issue #6971); the F&B oracle path, workflow-preset edges, and coverage-manifest CI failures fixed.
• 📦 Sub-projects. nvoos-docs-hub 0.5.2 → 0.5.3 (#6966 checkout config object name — the modal was dead on arrival; #6967 rebuild reliability — the live cache is no longer cleared on settings saves/updates, atomic staging promotion serves the previous index during rebuilds; #6968 pre-submission pass — PCP 0 blocking errors, 5 allowlisted OffloadedContent rows + the documented NonPrefixedTraitFound warning; tag docs-hub-v0.5.3 pushed and 0.5.3 is live on the wp.org directory). nvoos-content-graph 1.0.9 → 1.0.10 (#6973 — excluded CCTs/CPTs now actually leave the graph via pruneExcludedSources() with a post_id > 0 guard + chunked pruneNodesByTypes(); opt-in CPTs captured; auto-rebuild skips excluded types; 183 tests / 801 assertions; run Rebuild Graph once after deploying 1.0.10).
• 📝 Docs & skills (#6969, this pass). Proposal 063 (PhreshOS Pro toolkit + Cloudways Velocity addon) lands — docs only, five decision points required. Five coding-time skills updated in place: plugin (×3 copies + RELEASE-NOTES), wporg-submission (docs-hub 0.5.3 + CG 1.0.10), checkout-integration (0.5.3/1.0.10 refs), test-suite (patterns 68 → 69), updates.
• 📦 Versioning — bumped to 1.2.2 across all version-bearing files. Pro addon: 1.2.2. nvoos-content-graph: 1.0.9 → 1.0.10 (#6973 — sub-project track, flag-not-edited). Docs Hub addon: 0.5.2 → 0.5.3 (#6968 — the 1.2.1 pass's tag-pending follow-up completed). Toolkit Shell: 0.3.0 (unchanged). Schedule Anything SPA: 0.2.0 (unchanged). MCP Gateway: 0.1.1 (unchanged). Media Worker: 3.4.0 (unchanged). Fleet Operator: 1.0.0 (unchanged). Media Studio: 0.6.1 (unchanged). SaaS Controller: 0.3.0 (unchanged). Design System addon: 0.3.0 (unchanged). ChatGPT Plugin addon: 0.1.0 (unchanged). Chat SPA: 0.7.0 (unchanged — the FOR_REVIEWERS row's 0.6.0 was pre-existing drift, corrected this pass). Comic Reader: 0.5.0 (unchanged). nvoos-content-graph-ai: 1.0.4 (unchanged). nvoos-content-graph-ai-platform: 2.0.0 (unchanged — the v2.0.0 ZIP build commits are build-only). nvoos-content-graph-pro: 1.0.0 (unchanged). Checkout API: 0.1.2 (unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff in-window). Tool count: ~353 base + ~1,339 Pro (~1,692 total — unchanged) — no registry diffs in-window; the chat-profile REST endpoint is deliberately not a tool and the F&B assistant packs are bundles, not tools; live registry authoritative. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 66 (unchanged — five updated in place). Security classes: 10 → 11 (WP_MCP_AI_Read_Only_Profile_Gate). Stale build ZIPs removed: the 1.1.99 oOS build set (30 files — 9 root + 2 optional-components + 19 toolkit-addons) + the superseded docs-hub v0.5.1/v0.5.2 and content-graph v1.0.8 addon ZIPs (4 files).

v1.2.1 — October 8, 2026

Food & Beverage Pro Toolkit, Docs Hub Tools & Checkout, MCP Server Identity

• 🍽 Food & Beverage Management Pro Toolkit (PR #6962, Proposal 062). 21 fnb_* Pro tools gated behind enable_fnb_toolkit (default off) — read/search/calculate/compare/variance/stock/waste/days-of-cover/weekend/price/budget/margin/duplicate-invoice/labour/utilities/report/drafts/audit — on a deterministic metric engine (M-01…M-21 + Kasavana & Smith menu-engineering quadrants + as-of price joins + incurred-vs-paid split) with a 17-table registry (column-alias drift tolerance), Drive + CSV fixture readers, report builder R-01…R-13, and a drafts-only writer. Grounded in the Surf Club Midigama spec + demo workbook; 20/20 Check-totals oracle PASS (food cost % 26.88%, beverage % 28.15%, total opex 9,988,745.79, cost per cover 4,092.07; all 59 menu items classified); 18 fixture CSVs + a 243-value oracle ship with a standalone smoke-run.php + the ready PHPUnit oracle. 5 schedule presets + 2 workflow presets + SA Toolkit Manager + WP-CLI. Phases 4/5b/6/8/9/10 deferred (assistant packs, schedule install, MCP exposure, demo dry-run — needs Drive folder IDs + service-account scoping + the DeepSeek demo-model confirmation —, native CPT/CCT storage + the Appendix A fnb_pr_* QMS lifecycle, channel/social/booking wiring). The new mcp-ai-wpoos-toolkit-creation skill documents the build pattern.
• 📄 Docs Hub content management tools (PR #6964). Five docs_hub_* Pro tools in the Document Generation toolkit manage the Docs Hub uploads content folder — write (YAML frontmatter + auto index rebuild), read, list, delete (dry-run by default), and rebuild (sync/async) — through a shared traversal-safe validator (no ../absolute/drive-letter paths, realpath containment, the 2 MB cap mirroring the Docs Hub scanner); active-plugin integration via uploads_docs_dir() + NV_oOS_Docs_Hub_Rebuild_Job, graceful degradation when inactive; manage_options for writes, edit_posts for reads. 32 tests / 105 assertions on WP 6.9 + 7.1.
• 🪪 MCP server identity discovery (PR #6956). The new base tool mcp_server_info (+1 base) reports server name, plugin version, mode, Pro-active flag, site name/URL, MCP endpoint, and the optional bridge name — a deliberately non-sensitive payload (read capability; the wp_mcp_ai_mcp_server_identity filter docblock forbids secrets). list_mcp_tools gains the shared _meta identity block (opt-out include_meta=false) and the X-MCP-Bridge-Name header flows sanitized + 120-char capped into $context['bridge_name'] — informational only, never used for authorization. 9/9 tests; the CG-AI ListMcpToolsTool sync is a Pending-sync tracker row.
• 💳 Docs Hub checkout upsell (PR #6963, addon 0.5.1 → 0.5.2). The Content Graph commerce stack ports into the wp.org Docs Hub plugin: an "Unlock AI-powered features / Get NV oOS Complete" card, a five-class includes/checkout/ stack (config, vendor client for the nvoos-checkout API, autoload-free license store, Plugin_Upgrader installer with base-plugin conflict guard, admin-only REST POST /nvoos-docs/v1/payments/{session,verify} + GET …/health with per-user throttling and the already-licensed short-circuit — no second charge possible), and the nvoos-dh-* purchase modal (on-demand Stripe.js, ToS/refund consent + buyer email + EU VAT, pending-intent recovery, manual ZIP download). == External Services == disclosure + commerce review notes; POT 193 → 271 msgids; PCP PASS. Follow-up: tag docs-hub-v0.5.2 to build the ZIP, then the SVN upload. The new mcp-ai-wpoos-checkout-integration skill documents the port.
• 🐞 Skill-catalogue gaps fixed (PR #6954). Subfolder sidecars (references//scripts/) install via one Git-Tree walk (non-executable extensions, 40-file cap, best-effort); GitHub token support (WP_MCP_AI_SKILL_CATALOGUE_GITHUB_TOKEN → filter → the existing github_access_token setting — token never sent to other hosts) with anonymous enrichment capped at 10 skills per source and stopped on the first 403/429; the empty VoltAgent/awesome-agent-skills default removed. 17/17 tests; CG Pro mirror with the documented per-mode deviations. (Release notes pre-staged into the 1.1.99 section in-window.)
• 🔇 Elementor partial-deploy warnings fixed (PR #6961). class_exists( $widget_class, false ) keeps the widget-registration loop off the Composer autoloader — a partially-deployed plugin copy no longer spams two PHP warnings per missing class per elementor/widgets/register fire; behaviour is identical when files exist (they are require_once'd explicitly).
• 📦 Sub-projects. nvoos-content-graph 1.0.8 → 1.0.9 (#6959) — the wp.org re-submission review pass (cron scheduling on init, packaging tri-sync, free-base-version disclosure, regenerated POT; PCP 0 ERRORs / 161 known-category WARNINGs) with the checkout-modal polish (#6958 — Stripe loading spinner, the filterable free base-version link, the honest dev-status note). Proposal 061 (MCP Registry & Directory Publishing, docs-only) — Phase 2 executed: bridge published to the official MCP Registry + npm 0.1.0-alpha.4; the gateway remotes publish stays gated on decision D6.
• 📝 Docs & skills (PRs #6955, #6960, #6957). Three coding-time skills ship in-window (63 → 66): mcp-ai-wpoos-spa-ui, mcp-ai-wpoos-toolkit-creation, mcp-ai-wpoos-checkout-integration (all count surfaces updated in-window); the content-graph 1.0.9 wp.org lessons fold into mcp-ai-wpoos-wporg-submission + mcp-ai-wpoos-test-suite (patterns 67 → 68); the docs-hub rsync line-continuation CI abort is fixed (#6957).
• 📦 Versioning — bumped to 1.2.1 across all version-bearing files (the version-jump decision — the ROADMAP's planned 1.2.0 scope was delivered early across v1.1.1–v1.1.35, so the first 1.2-line release is numbered 1.2.1; recorded in the open-items tracker). Pro addon: 1.2.1. nvoos-content-graph: 1.0.8 → 1.0.9 (#6959 — sub-project track, flag-not-edited). Docs Hub addon: 0.5.1 → 0.5.2 (#6963). Toolkit Shell: 0.3.0 (unchanged). Schedule Anything SPA: 0.2.0 (unchanged). MCP Gateway: 0.1.1 (unchanged). Media Worker: 3.4.0 (unchanged). Fleet Operator: 1.0.0 (unchanged). Media Studio: 0.6.1 (unchanged). SaaS Controller: 0.3.0 (unchanged). Design System addon: 0.3.0 (unchanged). ChatGPT Plugin addon: 0.1.0 (unchanged). nvoos-content-graph-ai: 1.0.4 (unchanged). nvoos-content-graph-ai-platform: 2.0.0 (unchanged — the v2.0.0 ZIP build commit is build-only). nvoos-content-graph-pro: 1.0.0 (unchanged — #6954's mirror carries the documented per-mode deviations). Checkout API: 0.1.2 (unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~353 base + ~1,339 Pro (~1,692 total — +1 base +26 Pro) — mcp_server_info (base, #6956) + the 21 gated fnb_* tools (#6962 — the v1.1.89 ECA precedent counts gated tools) + the 5 docs_hub_* tools (#6964); live registry authoritative. Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 66 (63 → 66 in-window — spa-ui, toolkit-creation, checkout-integration; the count bookkeeping landed with the introducing PRs). Stale build ZIPs removed: the 1.1.98 oOS build set (30 files — 9 root + 2 optional-components + 19 toolkit-addons).

v1.1.99 — October 7, 2026

SPA UI Stack Enhancement, Gateway OAuth 2.1 & the Docs Hub Playground

• 🧩 SPA UI stack enhancement (PR #6952, Proposal 060). toolkit-shell 0.2.0 → 0.3.0 — Radix Dialog/ConfirmDialog/DropdownMenu/Select/Tabs/Checkbox + CVA Button primitives, a TanStack TableView (sortable headers, ConfirmDialog deletes), a @dnd-kit KanbanView (persisted reorder + cross-column moves via updateResource(group_by)), a react-hook-form + zod FormView (runtime schema from the manifest, per-field role="alert" errors), sonner toasts, 14 --nds-* design-token references, and an ESLint dual-React guard (bundled React 19 off @wordpress/element); schedule-anything-spa → 0.2.0 — Tailwind v3 → v4 (@theme inline NDS aliases), 16 shadcn-style primitives, @xyflow/react v12, route-level code splitting, @wordpress/i18n, axe + jsx-a11y gate. Shipped suites 31/31 + 23/23 (vitest + jsdom + Testing Library); three bugs caught pre-ship (zod 0-coercion, RHF resolver-identity churn, Kanban a11y).
• 🔐 MCP Gateway OAuth 2.1 resource server (PR #6945, Phase 1). With GATEWAY_OAUTH_ISSUER set, the gateway becomes an RFC 9728 protected resource alongside static API keys (inert otherwise): RFC 9728 metadata (GET /.well-known/oauth-protected-resource + /mcp variant), 401 WWW-Authenticate challenges with resource_metadata + scopes, zero-dependency JWT validation (node:crypto RS256/384/512 + ES256/384, in-memory JWKS cache with rotation refetch, strict iss/aud/exp/nbf/scope, fail-closed), scope-based site binding (site:<slug> mirrors static-key semantics; site:read advertised), and no token passthrough (the gateway keeps exchanging for per-site Fleet Operator tokens). 58/58 tests. Phases 2–5 deferred — Auth0 provisioning (RFC 8414 + DCR + PKCE), scripted PKCE e2e + ChatGPT test, server.json + registry submission, deployment guide.
• 🎮 Docs Hub Playground demo + wp.org Live Preview (PRs #6944, #6946–#6949). The "Project Asteria" pattern (#6662) applied to Docs Hub: an idempotent local-first seed (6 Markdown pages + a published /docs/ page embedding [nvoos_docs]), a standalone demo.json, the Live Preview blueprint.json (already live in SVN r3731775), and a generator script — blueprints/ dev-only across all three exclusion lists. Self-activate fix (#6946) — the preview loader installs without activating, so both runPHP steps activate_plugin() with an include_once fallback (reproduced + verified with @wp-playground/cli@3.1.54). Wiki seed + full-page SPA (#6947) — a 10-page wiki seed (the readme slug fixes the empty Live Preview) and /docs/ embedding ONLY [nvoos_docs] (no-title template, Additional-CSS full-bleed, demo-scoped skip-link removal). Zero margins (#6949) + the Playground badge (#6948).
• 🔧 Gateway listing prep, icon & Claude Code plugin (PRs #6941–#6943). GPL-3.0 LICENSE + license field + docs/operations/deployment/mcp-gateway-directory-submission.md (mcpservers.org / mcp.directory / pulsemcp); the mcp-gateway.svg icon (+ /assets static serving, landing logo/favicon, Dockerfile copy); the .claude-plugin/plugin.json (sensitive userConfig → MCP Authorization header) + /connect command + gateway skill; the Velocity guide §5/§6 marked to reality.
• 🔍 Figma Agent Skills in the default catalogues (PR #6938). figma/mcp-server-guide joins the Pro Skill Catalogue default sources (14 Figma skills + 2 workflow skills, on-demand install); normalise_manifest_skills() dedupes by name (the figma repo mirrors the same skills in two trees — 28 colliding entries would overwrite each other; shortest path wins). CG Pro mirror with the documented per-mode deviations; existing installs see the source after Restore Default Catalogues. Catalogue gaps fixed in the same release (follow-up): subfolder sidecars install (references//scripts/ trees — non-executable extensions only, 40-file cap, best-effort), GitHub token support (constant → filter → the existing github_access_token setting; token only ever sent to GitHub hosts) with anonymous enrichment capped at 10 skills per source and stopped on the first 403/429, and the empty VoltAgent/awesome-agent-skills default removed. 17/17 catalogue tests.
• 🐞 Gmail body extraction fixed (PR #6939). extract_body() walks candidates in preferred-format order, skips empty parts, falls back text/plain ↔ text/html, searches message/rfc822 parts last (forwarded emails), decodes base64 transfer-encoded parts; normalize_message() reports body_source + body_empty_reason so assistants get actionable reasons. 27/27 tests.
• 📦 Complete-ZIP blueprint stripping fixed (PRs #6936, #6940). The 1.1.98 Complete ZIP shipped 0 blueprint JSONs (Pro ZIP: 65) — bin/build-plugin-zip.sh and release.yml's COMMON_EXCLUDES carried their own unanchored --exclude 'examples'; both root-anchored + a hard CI guard (Assert blueprint examples present in full build); the blueprints empty state distinguishes "library missing" from "toolkit disabled".
• 🛡 Security & fixes. Fleet Operator tokens are no longer printed in plaintext (readonly type="password" input with Show/Hide + Copy, credential blocks behind <details>, #6950 — the console site needs the updated fleet-operator build deployed); the media worker's synthetic external targets (STATUS_EXTERNAL_TARGETS, synthetic-only mode, sweeper stays the single transition owner) + the split-brain checkedAt fix + downSince recovery clear (#6941, 46/46 status tests); the docs-hub rsync \-continuation CI abort (#6951).
• 📝 Docs (PR #6947). mcp-ai-wpoos-test-suite gains pattern 67 (loader-exclude + --list-tests), mcp-ai-wpoos-playground-demos gains the docs-hub demo + wp.org no-activation trap, mcp-ai-wpoos-wporg-submission gains the Live Preview blueprints section, and the nvoos-operations + mcp-gateway addon skills are updated.
• 📦 Versioning — bumped to 1.1.99 across all version-bearing files. Pro addon: 1.1.99. Toolkit Shell: 0.2.0 → 0.3.0; Schedule Anything SPA: 0.1.0 → 0.2.0. MCP Gateway: 0.1.1 (unchanged — the window's five gateway PRs ride the shipped line; addons/mcp-gateway/CHANGELOG.md gains an Unreleased section). Media Worker: 3.4.0 (unchanged — #6941 defers the bump to the release process). Docs Hub addon: 0.5.1 (unchanged). Fleet Operator: 1.0.0 (unchanged). Media Studio: 0.6.1 (unchanged). SaaS Controller: 0.3.0 (unchanged). Design System addon: 0.3.0 (unchanged). ChatGPT Plugin addon: 0.1.0 (unchanged). nvoos-content-graph: 1.0.8 (unchanged). nvoos-content-graph-ai: 1.0.4 (unchanged). nvoos-content-graph-ai-platform: 2.0.0 (unchanged). nvoos-content-graph-pro: 1.0.0 (unchanged — #6938's mirror verified byte-identical). Checkout API: 0.1.2 (unchanged). Comic Reader addon: 0.5.0 (unchanged). Chat SPA: 0.7.0 + Canvas Toolkit: 0.2.0 (unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff). Tool count: ~352 base + ~1,313 Pro (~1,665 total — unchanged) — zero registry-map diff in-window (live registry authoritative). Provider count: 18 (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (unchanged). Coding-time agent skills: 63 (unchanged). Stale build ZIPs removed: the 1.1.97 oOS set (6 root files — 3 ZIPs + 3 .sha256) + the superseded nvoos-toolkit-shell-v0.2.0.zip (the v0.3.0 ZIP built by the build-spa-addons run and committed to alpha-working post-branch-cut).

v1.1.98 — October 6, 2026

Figma-to-Elementor Pipeline, Unified Blueprints Fixes & the Dependabot Sweep

• 🎨 Figma-to-Elementor design-to-build pipeline (PR #6934, Proposals 057–059 — docs + skill, no PHP). The 7-stage agentic pipeline (Scope → Read → Plan → Tokenize → Build → Verify → Handoff) rides the shipped MCP Apps / OAuth / A2A / per-toolkit MCP server machinery — Figma MCP on the read side, Elementor MCP on the write side, single-assistant and split topologies — with the normative stage rules (get_design_context first, tokenize-before-build, drafts only, never publish, Figma read-only), a build-manifest contract + JSON Schema (reference/build-manifest.schema.json), and the design-file contract. The new bundled skill design-figma-to-elementor (Zed + includes/bundled-skills/ mirrors, byte-identical) and the user guide ship with it — coding-time skills 62 → 63, base bundled 75 → 76. Proposal 058 (transactional DTCG token import) is the user-facing follow-up; Proposal 057 (SPA toolkit design-file system) is parked by decision as reference; Phase 3 (end-to-end demo + Verify seed test) is deferred on live endpoints (Figma account + Elementor 4.3+ site).
• 🧩 Unified Blueprints fixed (PR #6933). (1) The blueprint library was stripped from release builds — the unanchored examples/ (.gitattributes) / examples (.distignore) exclusions matched every directory named examples, removing all 65 toolkit blueprint JSONs + the per-toolkit import tools from git archive/release ZIPs; both rules are now root-anchored (/examples, /assets/examples). (2) The page listed every toolkit on disk, contradicting its own empty state and the import tools' is_available() gates — a new $toolkit_enable_keys map mirrors each import tool's gate, get_all_blueprints_grouped() skips disabled toolkits, both AJAX handlers (install, get_details) reject disabled toolkits, and cards fall back to post_title for Healthcare-style JSONs.
• 🔧 Gateway sync dispatch + changelog (PR #6927). The #6925 merge push produced zero workflow runs (the squashed message absorbed a CI-suppression marker), leaving nvoos-mcp-gateway:main on 0.1.0 — sync-mcp-gateway.yml gains a workflow_dispatch trigger and a version guard (syncs skip when the incoming package.json is older than the mirror tip, so out-of-order runs can never roll the public mirror backwards); addons/mcp-gateway/CHANGELOG.md now tracks 0.1.0 → 0.1.1.
• 🔒 Dependabot sweep (PR #6931) — 138 of 166 open npm alerts resolved. Bounded in-major bumps across 17 trees: axios ≥1.20.0 <2 (51), brace-expansion@^1 ≥1.1.21 <2 (41), source-map-js ≥1.2.2 <2 (16), dompurify (8), proxy-addr ≥2.0.8 <3 (4), compression ≥1.8.2 <2 (3), joi (3), katex ^0.18.2 (3), moment ≥2.31.0 <3 (3), simple-git ≥4.0.1 <5 + @simple-git/argv-parser ≥2.0.1 <3 (4), basic-ftp ≥6.2.1 <7 (1), postcss-selector-parser@^7 ≥7.1.6 <8, webpack-dev-middleware ≥7.4.6 <8 — with npm-pack evidence for every cross-version move. 28 deferred in issue #6930; the dashboard is dismissed (138 fix_started + 28 tolerable_risk → 0 open alerts; main clears once alpha-working merges).
• 📝 Docs (PRs #6929, #6932). PR-hygiene + sync-recovery lessons land in the mcp-ai-wpoos-updates skill (fresh origin/alpha-working cuts, PRs against alpha-working, no CI-skip markers in commit messages — with recovery steps) + the gateway deployment guide §7; the design-ai-assistant-admin skill gains the NV oOS agent-enablement detection section (Zed sessions) with the mcp-ai-wpoos-plugin cross-reference.
• 🛡 Memory-leak & unbounded-growth hardening (PR #6937) — 29 verified findings fixed (audit plan: docs/project/plans/memory-leak-hardening-plan.md; conventions: docs/features/performance/RESOURCE-MANAGEMENT.md). Media worker: queue retries carry their attempt count so persistently failing jobs emit failed instead of retrying forever (regression-tested), the Puppeteer slot is held until the browser disconnects, SMTP transports are memoized + closed on shutdown, uploads are unlinked on every /api/video/process path, the crawl4ai store is capped at 200, graceful shutdown disconnects Redis/SMTP + stops queue loops, the ffmpeg service gains a kill timeout, the Dockerfile gains NODE_OPTIONS heap cap + OOM snapshots, and /api/health exposes process.memoryUsage(). Browser JS: chat.js stream teardown, self-clearing quota interval, single Escape handler; cron-status-service cleanup; chat-spa job map capped. Base PHP: keyset-paginated transcript rebuild + chunked provenance verification, semantic cache rewritten to per-hash TTL transients (generation counter + FIFO registry), tool-load monitor consolidated with legacy migration, chat-response-cache registry + daily cron, LIMITs on harness-evolver/token-tracking/dashboard scans, Redis pconnect(). Pro PHP: bounded contacts/orders/vitals/execution-history queries, new 365d/90d retention crons, wp_next_scheduled/as_has_scheduled_action dedupe guards (report scheduling, Gmail Pub/Sub, compression sweep), health reminders non-autoloaded, OCR page cap. DLQ/SLA review: SLA Manager + queue-health snapshots verified bounded; the job-notifier cleanup that was wiping all fresh job-status transients hourly is fixed (canonical paired timeout-row delete) and the webhook registry prunes after 30 days. Follow-ups closed: webhook-dispatch dedupe (transient coalescing gate), DLQ retry_history ring-buffer + max-retry gate, async-queue stale-job reaper, and the two latent nonexistent-method calls replaced with the real WP_MCP_AI_Dead_Letter_Queue::add() / WP_MCP_AI_Job_Notifier::handle_job_completed() APIs.
• 📦 Versioning — bumped to 1.1.98 across all version-bearing files. Pro addon: 1.1.98. MCP Gateway: 0.1.1 (unchanged). nvoos-mcp-bridge: 0.1.0-alpha.3 (unchanged). Media Worker: 3.4.0 (unchanged). Media Studio: 0.6.1 (unchanged). SaaS Controller: 0.3.0 (unchanged). Design System addon: 0.3.0 (unchanged). ChatGPT Plugin addon: 0.1.0 (unchanged). Fleet Operator: 1.0.0 (unchanged). nvoos-content-graph: 1.0.8 (unchanged). nvoos-content-graph-ai: 1.0.4 (unchanged). nvoos-content-graph-ai-platform: 2.0.0 (unchanged). nvoos-content-graph-pro: 1.0.0 (unchanged — zero plugins/ diff in-window). Checkout API: 0.1.2 (unchanged). Docs Hub addon: 0.5.1 (unchanged). Comic Reader addon: 0.5.0 (unchanged). Model catalog: v2026.10.03 (unchanged — zero catalog diff in-window). Tool count: ~352 base + ~1,313 Pro (~1,665 total — unchanged) — zero registry-map diff in-window (live registry authoritative). Provider count: 18 chat providers (unchanged). Addon count: 30 (unchanged). Bundled skills: 76 base + 41 Pro (75 → 76 — design-figma-to-elementor, #6934). Coding-time agent skills: 63 (62 → 63 — the same skill; the repo-map fold-in lands here). Stale build ZIPs removed: the 1.1.96 oOS set (9 root + 2 optional-components + 19 toolkit-addons = 30 files). Post-window PR #6937 (memory-leak hardening): zero count changes.

📋 Previous Releases

---

🚀 Features

Note: Some features require third-party plugins (WooCommerce, JetEngine, Elementor, etc.). See 🔌 What You Lose Without Third-Party Plugins for details.

Assistant & conversation tools

• 🧠 Create AI Assistants via a custom post type (mcp_ai_assistant)
• 👔 Professional & Team Templates - Deploy assistants from ~311 pre-built profession templates spanning 12 industry categories, or create entire teams of specialists with one click. Includes backend testing for professions, teams, and assistants before public deployment.
• 🚀 Getting Started Wizard - Guided 4-step onboarding (/wp-admin/admin.php?page=wp-mcp-ai-getting-started) that walks new users through provider setup and use-case selection. Selecting a preset (Content Creator, Customer Support, E-commerce, SEO & Research, Developer Copilot, Media & Creative Studio, Site Administrator, or General Purpose) seeds a fully-configured assistant with tools, system prompt, and tuned temperature — ready to use immediately.【F:includes/admin/class-wp-mcp-ai-onboarding-wizard.php†L1-L53】【F:assets/js/onboarding-wizard.js†L1-L303】
• 🔄 Automatic synchronization to JetEngine Custom Content Types when available (CPT → CCT)
• 💬 Chat interface via [mcp_ai_chat assistant="ID"]
• 🧰 Per-assistant defaults for model, temperature, system prompt, and knowledge attachments with permission-aware download URLs
• ⚡ Build reusable prompt shortcuts with optional tool targeting and inline descriptions so operators can trigger common tasks with one click.【F:includes/assistants/class-wp-mcp-ai-assistant-cpt.php†L893-L1048】【F:includes/class-wp-mcp-ai-shortcode.php†L430-L693】【F:assets/js/chat.js†L600-L666】
• 🧊 Elementor widgets for embedding chat surfaces, onboarding content, and MCP dashboards inside Elementor

Language routing & knowledge management

• 🔁 Route conversations through OpenAI or Gemini using a provider-aware language model router
• 🎯 Enhanced Gemini API integration: list models dynamically, count tokens for budget management, create embeddings for RAG/semantic search, and streaming support for real-time responses【F:docs/reference/api/gemini/gemini-api-enhancements.md†L1-L100】
• 🧠 Assistant knowledge base management with Media Library files and optional vector store IDs
• 📚 OKF (Open Knowledge Format v0.1) engine with 6 MCP tools for curated, deterministic knowledge with cross-link navigation — complementary to vector/RAG stores
• 🔎 Perform lightweight web searches (DuckDuckGo or Brave) without leaving the assistant conversation
• 🌐 Crawl4AI job runner tool for large-scale content gathering workflows

Media generation & transcription

• 🔊 Generate speech audio via OpenAI's Text-to-Speech API and save the result to the Media Library
• 🎵 Generate instrumental music using Google Gemini Lyria with controls for genre, mood, tempo, and instrumentation
• 🎨 Generate on-brand imagery with OpenAI's Images API, honouring the configured response format (including GPT-Image-1's url responses) and storing the files as WordPress attachments
• 🖼️ Generate images with Cloudflare Workers AI using Stable Diffusion, Flux-2 Dev, Leonardo AI (Lucid Origin, Phoenix 1.0), and other text-to-image models with configurable dimensions and generation parameters
• 🖼️ Vectorize raster images (PNG, JPEG, WebP, GIF) to SVG format using @neplex/vectorizer with configurable quality settings - perfect for logos and icons
• 🎨 Comprehensive graphic editing with Graphic Editor Plus combining local operations (logo overlay, smart resize) and AI-powered features (style transfer, background removal, enhancement)
• 🏗️ Pro: Generate professional architectural drawings (floor plans, elevations, sections) with building codes, dimensions, and material specifications - designed for construction professionals
• 🎧 Transcribe or translate uploaded audio with OpenAI's speech-to-text endpoints

Commerce & finance workflows

• 🛍 WooCommerce-aware tools (fetch orders or products, requires WooCommerce)
• 📊 Finance-ready QuickBooks Online reporting tool for surfacing Profit and Loss, Balance Sheet, and other statements inside assistant conversations【F:includes/tools/class-wp-mcp-ai-tool-get-quickbooks-report.php†L15-L214】【F:includes/admin/class-wp-mcp-ai-admin-settings.php†L906-L955】
• 🖥️ Pro: QuickBooks Desktop sync via QODBC relay API — connect to QuickBooks Desktop through a Windows relay server for data synchronization
• 🛒 Pro: Shopify integration with auto-resolved connections — connection_id auto-resolved from assistant context, covering products, orders, customers, inventory, and catalog tools
• 🚗 Pro: Vehicle estimation tools — VIN decode (NHTSA vPIC), image-to-repair-estimate pipeline, and car wash package pricing engine (always available)
• 📸 Pro: Listing image download tools — bulk-download Google Maps, Facebook, and Instagram business listing images into the Media Library or ZIP

Slash Commands & Workflow Automation ⭐ NEW

• ⚡ 8 Core Commands: /help, /next-task, /ship, /clean-content, /optimize-perf, /sync-docs, /workflow - Command-line style interface for content management
• 🔄 Workflow Orchestrator: Multi-step workflow execution with state management, conditional logic, and human-in-the-loop checkpoints
• 🛠️ 21 Pro Toolkit Commands: Specialized commands for E-commerce (6), Social Media (6), and Video Production (6) toolkits
• 🎯 7 Automated Workflows: Pre-built workflow templates for abandoned cart recovery, social media campaigns, video marketing, inventory management, and more
• 🔐 Security: Capability-based authorization, rate limiting, comprehensive audit logging
• 💡 Integration: JavaScript autocomplete, REST API endpoint, WP-CLI support
• Documentation → | Pro Commands →

Chat Channels & Messaging Integration ⭐ NEW

• 💬 Chat Channels Toolkit (47 Tools): Integrate with 11 platforms - Telegram, WhatsApp, Slack, Discord, Microsoft Teams, Facebook Messenger, Apple Messages for Business, Google Chat/Spaces, Twitter/X, Office 365 (Outlook + OneDrive), iCloud Drive
• 📧 Office 365 Integration ⭐ NEW: Send and retrieve Outlook mail, list/download/upload OneDrive files via Microsoft Graph API (5 tools)
• ☁️ iCloud Drive Integration ⭐ NEW: List, download, and upload iCloud Drive files via a configurable gateway service (3 tools)
• 🌐 Unified Broadcasting: Send messages across multiple platforms simultaneously with unified_channel_broadcast tool
• 🏠 WebChat Rooms: Custom post type for real-time collaborative chat rooms with AI assistant assignment
• 📝 Message Persistence: JetEngine CCT integration for permanent message history
• 🔊 WebRTC Support: Self-hosted WebRTC signaling via WordPress REST API for voice/video
• 🤖 AI-Powered Rooms: Assign dedicated assistants to chat rooms for automated support
• Chat Channels Guide → | WebChat Setup →

Communications & outreach

• ✉️ Mailjet-powered outbound email automation with granular capability enforcement and sender defaults configurable in the MCP settings.【F:includes/tools/class-wp-mcp-ai-tool-send-mailjet-email.php†L19-L405】【F:includes/admin/class-wp-mcp-ai-admin-settings.php†L1008-L1054】
• 📅 Google Workspace automations for creating calendar events and searching connected Gmail inboxes directly from assistant workflows.【F:includes/tools/class-wp-mcp-ai-tool-create-google-calendar-event.php†L1-L200】【F:includes/tools/class-wp-mcp-ai-tool-search-gmail.php†L1-L200】
• 🧾 JetFormBuilder orchestration for listing forms, reviewing submissions, and proxying REST calls on behalf of assistants (requires JetFormBuilder)
• 📚 JetEngine REST route reference tool for surfacing endpoint metadata inside AI workflows
• 🧱 Ready for extension with ChatKit integration

Integrations, security & controls

• 🔧 Tool Registry for registering PHP functions callable by the AI
• ⚙️ JetEngine integration for dynamic content queries (requires JetEngine)
• 🔌 JetEngine 3.8 MCP Server Bridge ⭐ NEW - JSON-RPC 2.0 client bridges NV oOS into JetEngine's native MCP Server with 7 new Pro tools for CPT/taxonomy/meta field creation, relations management, site context grounding, and prompt template access. MCP-first dispatch with REST v2 fallback.
• 🤝 Agent-to-Agent (A2A) Protocol ⭐ NEW - Full A2A protocol making NV oOS assistants discoverable and interoperable with any A2A-compliant agent. /.well-known/agent.json discovery, JSON-RPC 2.0 server with task state machine, A2A client for remote agent delegation, push notification webhooks.
• 📊 Agent Command Center ⭐ NEW - Unified agent management dashboard with 7 tabs: Overview (KPI cards, live status), Activity Log, Active Tasks, Approvals (human-in-the-loop), Analytics (Chart.js with real per-agent metrics), Uptime & Health, and Strategy (efficiency scoring with recommendations).
• 💬 Floating Chat Bubble ⭐ NEW - Configurable floating chat bubble widget for Elementor and Gutenberg. 4 position variants, 3 sizes, bounce/pulse animations, dark mode, WCAG focus states, sessionStorage persistence.
• 🧷 Granular control over allowed attachment MIME types for chat uploads
• 🔐 Secure REST API endpoints
• 🔑 Root Security Key - Optional wp-config.php constant that can be enabled during emergency shutdown to require authentication before re-initializing the plugin. Provides an additional layer of protection against unauthorized reactivation after security incidents.【F:docs/features/security/root-security-key.md†L1-L511】【F:includes/class-wp-mcp-ai-root-security-key.php†L1-L360】
• 🛰 Assistant directory endpoint that advertises MCP tool/resource capabilities and negotiates Server-Sent Events handshakes for clients such as LM Studio or Claude Desktop.【F:includes/class-wp-mcp-ai-rest.php†L520-L666】【F:includes/class-wp-mcp-ai-rest.php†L1690-L1772】
• 📝 Full JSON-RPC 2.0 MCP endpoint (/mcp) for standards-compliant remote client communication
• 🔑 Configurable API credentials and defaults for OpenAI, Gemini, and Anthropic (with subscription tier support for Team/Enterprise plans and custom base URLs)
• 🤖 ChatGPT’s connector beta currently requires an Auth0 tenant; the plugin’s assistant credentials are compatible with LM Studio, Claude, and other MCP clients that support bearer headers directly.【F:docs/reference/api/mcp-server-authentication.md†L22-L46】
• 🌐 Mesh networking for distributed compute pooling across multiple WordPress sites. Server-to-server architecture enables anonymous and authenticated users to benefit from shared AI resources, budget pooling, and workload distribution across 100+ trusted peer sites. Backend assistants coordinate mesh operations via secure inter-site keys while maintaining user attribution and audit trails for compliance.【F:docs/features/federation/mesh-compute-pooling.md†L1-L615】【F:includes/tools/class-wp-mcp-ai-tool-query-remote-site.php†L1-L237】
• 🔗 Federation & Discovery - Decentralized AI capability network allowing WordPress sites to publish their capabilities via well-known endpoints (/.well-known/ai-peer) and discover peer sites through directory services. Supports peer registration, health verification, search & ranking by capability/region/policy, and automatic cron-based health monitoring. Enable federation to join the network or run your own directory service for private peer discovery.【F:docs/features/federation/federation-discovery.md†L1-L511】【F:FEDERATION-IMPLEMENTATION-SUMMARY.md†L1-L381】
• 🧾 Optional logging of chat interactions, tool executions, and API errors
• 🧮 Built-in per-user usage tracking for provider/model billing summaries
• 🧩 Developer hooks and filters for integrating custom behaviours
• ⏱ Per-site request timeout control with sensible minimum enforcement
• 🗑 Toggleable uninstall cleanup to purge stored assistants and settings automatically

Performance & reliability

• ⚡ Client-side message bundling (800ms window) to reduce API calls and server load【F:docs/user-guides/chat/message-bundling-feature.md†L1-L80】
• 🎯 Intelligent token overflow handling with automatic model switching (gpt-4.1-mini → Gemini 2.0 Flash)【F:docs/features/tools/presets/high-token-tool-handling.md†L1-L80】
• 📡 Server-Sent Events (SSE) support for real-time streaming responses and job notifications【F:docs/features/streaming/ENABLE-SSE-STREAMING.md†L1-L100】
• 🌊 Real-time job status updates via SSE streaming and webhook notifications for async operations【F:docs/features/async-jobs/job-notification-system.md†L1-L100】
• 🔧 Symfony Process Component - Modern process execution framework replacing direct exec() calls in Pro addon tools for enhanced security, timeout management, and error handling【F:includes/services/class-wp-mcp-ai-process-service.php†L1-L220】【F:docs/history/2025/implementations/symfony-phases/SYMFONY_PHASE2B_PROCESS_INTEGRATION.md†L1-L100】
• 🔄 Server-side WP-Cron polling for long-running tasks (Crawl4AI, background jobs)
• 💾 Chat history persistence with localStorage (24h) and optional JetEngine CCT storage【F:docs/user-guides/chat/chat-history-persistence.md†L1-L50】
• ⚙️ Optimized settings page with external CSS stylesheet (240 lines added to admin-settings.css) and request-level caching for improved admin performance【F:assets/css/admin-settings.css†L1-L984】【F:includes/admin/class-wp-mcp-ai-admin-settings.php†L27-L32】

Settings Management ⭐ NEW

• 🔧 Robust Settings System - 7-step save process with automatic backups, validation, and cache management ensures settings persist correctly across all tabs and subtabs【F:includes/admin/class-wp-mcp-ai-settings-dashboard.php†L262-L410】
• 🔍 Health Check - Run 6 diagnostic checks to verify settings integrity, provider configuration, and system status with GOOD/WARNING/CRITICAL status indicators【F:includes/admin/sections/class-wp-mcp-ai-section-advanced.php†L1500-L1650】
• 💾 Export Settings - Download all plugin settings as timestamped JSON files for backup or migration to other sites【F:docs/admin-guides/settings-management.md†L40-L80】
• 📤 Import Settings - Upload and validate settings from previously exported backups with automatic pre-import backup and 5-step validation【F:docs/admin-guides/settings-management.md†L85-L135】
• 🗑️ Clear Cache - One-click clearing of static cache, object cache, and transients when settings changes don't take effect【F:docs/admin-guides/settings-management.md†L140-L165】
• ↩️ Reset to Defaults - Safely reset all settings to default values with automatic backup before reset【F:docs/admin-guides/settings-management.md†L170-L200】
• 🔒 Security - File size validation (max 5MB), MIME type checking, JSON validation, and comprehensive input sanitization【F:includes/admin/class-wp-mcp-ai-settings-dashboard.php†L970-L1030】
• 📊 Automatic Backups - Every save operation creates a timestamped backup (keeps last 5) for emergency recovery【F:includes/admin/class-wp-mcp-ai-settings-dashboard.php†L285-L295】
• 🛡️ Data Protection - 3-layer protection (section filtering, merge strategy, sensitive key filtering) prevents accidental data loss when saving from tabs/subtabs【F:docs/admin-guides/settings-management.md†L230-L280】
• 📖 Pro Toolkits - Enable and configure 8 specialized Pro toolkits (650+ tools) including Project Management, Document Generation, Health & Wellness, CRE Debt & Securitization, and more【F:docs/admin-guides/pro-settings-toolkits.md†L1-L650】

➡️ Complete Documentation: Settings Management Guide | Quick Reference | Visual UI Guide | Pro Toolkits Guide

🧠 Memory & Tool Stack Overview

Model defaults

Global settings capture the default provider, model, and timeout used when assistants are created, ensuring every conversation inherits stable generation behaviour until explicitly overridden. These defaults ship with sensible values for OpenAI and Gemini out of the box and can be tailored from the NV oOS settings screen.【F:includes/admin/class-wp-mcp-ai-admin-settings.php†L36-L77】

Base knowledge

Each assistant can preload Media Library files and optionally link to an external vector store, giving the model persistent project context before a chat begins. Editors manage these knowledge sources from the assistant post type via the “Base Knowledge” meta box, which supports multiple attachments and vector store identifiers.【F:includes/assistants/class-wp-mcp-ai-assistant-cpt.php†L892-L1002】

Available tools

The tool registry boots with a curated catalogue of content, commerce, automation, and research utilities, then exposes hooks so developers can register their own providers. During initialisation the registry loads each bundled tool class—ranging from JetEngine accessors to Crawl4AI jobs and Mailjet automations—and makes them callable within conversations.【F:includes/class-wp-mcp-ai-tool-registry.php†L74-L220】

Chat-client Memory Drawer

The chat front-end exposes a persistent Memory Drawer (assets/js/chat-memory-drawer.js) with three tabs:

• Memories — browse, pin, and delete stored context items; 🧠 badge auto-appears on any assistant message that used a memory tool.
• Scope — set the active wing/room scope for subsequent memory operations in the current session.
• Audit — lazy-loaded audit trail from WP_MCP_AI_REST_Chat_Memory_Controller::audit().

The drawer is wired to the REST proxy at /mcp-ai/v1/chat-memory/ and receives real-time updates via the memory_event SSE frame emitted by the agentic loop. Pagehide auto-capture stores the session state before tab close. Two gates control access: site-wide filter wp_mcp_ai_chat_memory_enabled and per-user meta wp_mcp_ai_chat_memory_enabled. Full reference: docs/features/memory/chat-client-integration.md.

Retroactive Transcript Mining

WP_MCP_AI_Transcript_Mining_Job retrospectively extracts memories from past chat transcripts. Enqueue a job via POST /mcp-ai/v1/transcript-mining/jobs (admin-only), poll progress with GET /jobs/{id}, or cancel with POST /jobs/{id}/cancel. Full reference: docs/features/memory/transcript-mining.md.

LLM Harnessing Subsystem

Seven opt-in per-request layers (includes/harness/) improve response quality without changing existing tool behaviour. Activated per-assistant via the LLM Harness metabox. Layers: A Prompt/Cue → B Reasoning Trace → C Tool Routing → D Retrieval → E Self-Refine → F Memory Scoping + PII Filter → G Eval Scheduler. Pro Layer H exports fine-tune curricula as OpenAI JSONL. Full reference: docs/features/llm-harness.md.

Workflow families & tool combos

The core plugin ships with a centrally registered tool catalogue that lets assistants mix and match capabilities into cohesive workflows without additional coding. Teams can chain authoring, media, research, commerce, marketing, and operational tools to deliver end-to-end outcomes inside a single conversation.

• Content & knowledge production – Combine submit_document_prompt, search_content, and search_attachments to gather source material, then follow up with save_post, create_wpcode_snippet, or get_rankmath_seo for structured drafting and optimisation.
• Media generation & transcription – Pair generate_openai_image, generate_gemini_image, vectorize_image, or graphic_editor_plus with generate_openai_speech and transcribe_openai_audio to build multimedia assets that flow into editorial or marketing outputs. Use vectorize_image to convert logos to scalable vectors, and graphic_editor_plus for comprehensive image editing with both local and AI-powered operations.
• Research & situational awareness – Chain discovery helpers like web_search, run_crawl4ai_job, reliefweb_reports, get_gdacs_events, and get_nhc_active_storms to assemble briefing packs before drafting follow-up actions.
• Commerce & finance operations – Use WooCommerce and finance tools such as create_woo_product, get_woo_products, get_woo_recent_orders, crawl4ai_price_lookup, get_import_duty, and quickbooks_report to coordinate merchandising, pricing, and bookkeeping reviews.
• Marketing & analytics insights – Combine measurement tools including google_analytics_report, get_google_business_insights, get_facebook_instagram_insights, get_linkedin_insights, and get_tiktok_insights to guide campaigns and reporting.
• Publishing & outreach automations – Trigger distribution via post_facebook_instagram, post_google_business_update, post_linkedin_update, post_tiktok_video, send_group_email, send_mailjet_email, send_telegram_message, send_whatsapp_message, and schedule_notify_sms once plans are ready.
• Integrations & scheduling – Connect external systems with create_google_calendar_event, search_gmail, list_jetengine_rest_routes, invoke_jetengine_route, and run_openai_external_action as part of larger automations.
• Operations & diagnostics – Close the loop with create_cron_job, list_cron_jobs, get_cron_job, delete_cron_job, check_wp_cli, purge_cache, purge_cloudflare_cache, purge_varnish_cache, get_site_summary, get_site_health, get_system_logs, get_update_status, and OpenAI usage/log review helpers for monitoring and maintenance.
• Automation & scheduling workflows – Agents can autonomously schedule background tasks with create_cron_job, monitor scheduled operations via list_cron_jobs and get_cron_job, and clean up outdated automations with delete_cron_job. Combine with cache management tools (purge_cache, purge_cloudflare_cache, purge_varnish_cache) to orchestrate content publishing workflows where agents schedule posts, then automatically invalidate caches at publication time.

---

🛠 Built-in tools & automations

The assistant registry ships with a comprehensive catalogue of editorial, marketing, commerce, and operational helpers. The tables below outline every bundled tool and the slug assistants call when orchestrating workflows.

Content & knowledge workflows

Media generation & transcription

Research & situational awareness

Commerce & finance operations

Marketing & analytics insights

Publishing & outreach

Integrations & scheduling

Operations & diagnostics

What the Cron Manager means to AI agents

The Cron Management Suite transforms AI assistants from reactive responders into proactive automation orchestrators. By providing full control over WordPress's background task scheduler, agents can:

Autonomous Task Scheduling

• Schedule content publishing workflows to go live at optimal times without human intervention
• Automate recurring maintenance tasks like cache clearing, database optimization, or backup operations
• Coordinate multi-step operations that span hours or days by chaining scheduled hooks

Intelligent Monitoring & Self-Management

• List and inspect all scheduled tasks to understand what automation is currently active
• Audit who created each task and when it's scheduled to run next
• Identify and remove outdated or redundant scheduled tasks to maintain system health

Real-World Agent Workflows

1. Content Calendar Automation - An agent helping with content strategy can schedule posts to publish at researched optimal engagement times, set up recurring social media cross-posts, and schedule follow-up email campaigns.
2. Site Maintenance Orchestration - When troubleshooting performance issues, agents can schedule off-peak cache purges, coordinate database cleanup tasks, and set up recurring health check notifications.
3. Business Process Automation - Agents can schedule recurring report generation, periodic data syncs with external systems, and automated backup verification checks.

Technical Implementation The cron manager tracks all scheduled tasks in wp_mcp_ai_cron_jobs option with full audit trails including:

• Job ID for unique identification
• Hook name and sanitized arguments
• Schedule type (single-run or recurring interval)
• Creation timestamp and user attribution
• Next execution time for monitoring

Jobs are automatically pruned when they complete (single-run) or are manually removed (recurring), keeping the tracking database clean. All cron operations require manage_options capability, ensuring only authorized users can delegate automation authority to agents.【F:includes/class-wp-mcp-ai-cron-manager.php†L12-L280】

Each tool inherits the assistant context and authenticated user from the REST layer, making it easy to layer custom permissions or extend behaviour via the documented filters and actions.【F:includes/class-wp-mcp-ai-rest.php†L236-L360】【F:includes/class-wp-mcp-ai-rest.php†L1124-L1198】

Need per-tool prerequisites or capability callouts? Consult docs/reference/tools/tool-reference.md for a detailed matrix of every bundled integration.

Tool Status Labels

The Tools Manager page displays status labels beside tool names to indicate their development stage and stability:

Status labels are displayed as 3-letter abbreviations (e.g., "STA" for stable, "BET" for beta) to keep the UI compact.

Important: Tools marked with the bug status are automatically disabled when the plugin loads. This prevents problematic tools from being used until issues are resolved. Administrators can manually re-enable them from the Tools Manager if needed for testing.

Status labels are managed via the tool-status.txt file in the repository. To assign a status label to a tool:

1. Open docs/tool-status.txt in a text editor
2. Add a line in the format: tool_slug = status_label
3. Save the file - changes appear immediately in the Tools Manager

Example:

create_post = stable
web_search = beta
generate_openai_image_validated = experimental
problematic_tool = bug

This file-based approach allows quick status updates without code changes, making it easy for maintainers to reflect tool maturity as development progresses. The automatic disabling of buggy tools provides an additional safety layer to prevent issues in production environments.

---

🗨 Front-end chat surfaces

NV oOS ships multiple ways to embed assistants on the front end:

• Classic chat shortcode – [mcp_ai_chat] renders the bundled interface with attachment uploads, tool invocation feedback, and optional guest access via allow_guests="true". When guest mode is enabled, the shortcode provisions a temporary token and injects it into the JavaScript bootstrap so visitors without WordPress accounts can continue chatting while still respecting capability checks and attachment safety limits.【F:includes/class-wp-mcp-ai-shortcode.php†L132-L258】【F:includes/class-wp-mcp-ai-shortcode.php†L188-L226】
• Floating chat bubble ⭐ NEW – A configurable floating button that sits at a screen corner and opens a chat panel powered by the [mcp_ai_chat] shortcode. Available as both an Elementor widget and a Gutenberg block. Supports 4 position variants, 3 sizes, auto-open delay, session persistence, dark mode, and WCAG keyboard navigation.【F:includes/elementor/class-wp-mcp-ai-elementor-chat-bubble-widget.php†L1-L200】【F:includes/blocks/chat-bubble/block.json†L1-L50】
• Elementor widgets – Drop the chat UI anywhere Elementor is active, pair it with intro/FAQ blocks, and surface dashboard telemetry without custom code. The chat widget mirrors the shortcode controls (including allow_guests), and companion widgets expose onboarding content, usage timers, provider quick links, and activity feeds for operational views.【F:includes/elementor/class-wp-mcp-ai-elementor-widget.php†L79-L138】【F:includes/class-wp-mcp-ai-elementor-integration.php†L48-L98】【F:includes/elementor/class-wp-mcp-ai-elementor-chat-intro-widget.php†L47-L140】【F:includes/elementor/class-wp-mcp-ai-elementor-chat-usage-timer-widget.php†L48-L226】【F:includes/elementor/class-wp-mcp-ai-elementor-dashboard-activity-feed-widget.php†L48-L167】

Guest tokens are honoured by the REST endpoints through the X-WP-MCP-AI-Guest header or guest_token parameter, allowing the chat shortcode and Elementor widget to make authenticated requests on behalf of public visitors without exposing persistent credentials.【F:includes/class-wp-mcp-ai-rest.php†L289-L307】【F:includes/class-wp-mcp-ai-rest.php†L2088-L2104】

Chat History Persistence

The chat interface automatically persists conversation history to the browser's localStorage, preventing data loss when users navigate away or refresh the page. Conversations are:

• Automatically saved after each user message and assistant response
• Automatically restored when returning to the chat page (within 24 hours)
• Stored per assistant so different assistant conversations remain separate
• Server-side storage available with JetEngine - See note below about optional JetEngine integration

Server-Side Chat Transcript Storage (Requires JetEngine)

⚠️ Third-Party Plugin Required: JetEngine (not included with NV oOS)

Without JetEngine, chat conversations are only stored in browser localStorage (client-side, 24-hour retention). To enable permanent server-side chat transcript archiving:

1. Install and activate the JetEngine plugin (third-party, paid plugin from Crocoblock)
2. Enable the Custom Content Types module in JetEngine settings
3. NV oOS will automatically provision the ai_chat_transcripts CCT for permanent storage

What you get with JetEngine:

• ✅ Permanent server-side chat transcript storage
• ✅ Cross-device conversation access
• ✅ Admin visibility into chat history
• ✅ Database-backed chat logs for compliance/auditing

Without JetEngine:

• ⚠️ Chat history only stored in browser localStorage
• ⚠️ Limited to 24-hour retention
• ⚠️ No cross-device synchronization
• ⚠️ Lost if browser data is cleared

See docs/user-guides/chat/chat-history-persistence.md for complete details on the persistence mechanism, data structure, and troubleshooting.

---

📦 Installation

ℹ️ Plugin Directory Status
This plugin is currently pending approval in the WordPress Plugin Directory. We are committed to maintaining high quality and security standards throughout the review process. You can install the plugin manually from our GitHub repository or wait for the official WordPress Plugin Directory listing.

🚀 Getting Started Wizard
After activating the plugin, you'll be redirected to a 4-step setup wizard that walks you through connecting an AI provider, choosing a use case, and creating your first assistant — all in under 2 minutes. The wizard creates fully-configured assistants with tools, system prompts, and tuned temperatures so your site is working out of the box. You can access the wizard any time at NV oOS → Getting Started or directly at /wp-admin/admin.php?page=wp-mcp-ai-getting-started.

🌱 Try It on Your PC

No live site. No API costs. No risk. The primary way to test NV oOS is a one-command demo that boots WordPress and the Complete bundle locally via WordPress Playground and wires the chat to your local Ollama — no API key, no server, and no prompts leave your machine.

⚡ Fastest: One Command (Playground + Local Ollama)

One-time prerequisites:

1. Install Ollama and pull a model:

    ollama pull llama3.1:8b

2. Allow the local origin, then restart Ollama:
   • Windows: setx OLLAMA_ORIGINS "https://playground.wordpress.net,http://localhost,http://127.0.0.1", then quit Ollama from the system tray and relaunch it.
   • macOS / Linux: OLLAMA_ORIGINS="https://playground.wordpress.net,http://localhost,http://127.0.0.1" ollama serve

Then run this command (requires Node.js 20+):

npx -y @wp-playground/cli@3.1.54 server --blueprint=https://raw.githubusercontent.com/nvdigitalsolutions/mcp-ai-wpoos/alpha-working/blueprints/ollama-demo.json --login

Open the printed local URL (e.g. http://127.0.0.1:9400/ollama-test-lab/). The first boot takes a few minutes while it downloads and installs the whole stack — after that you land on the Ollama Test Lab: a live status banner plus a chat that answers from your local model. Admin login: admin / password.

Full walkthrough, browser quick-preview link, and troubleshooting: docs/user-guides/playground-demo.md.

🧰 Classic 3-Step Install (Local, Studio, XAMPP, etc.)

Prefer a traditional local WordPress install? Follow the full walkthrough on the NV Digital Solutions blog: How to Test NV oOS on Your Own PC Using Local + Downloading the Plugin →

1. Install a local WordPress environment — Local by WP Engine or WordPress Studio is the easiest option (one-click install, no server config). Alternatives: XAMPP, MAMP, or DevKinsta.
2. Download the NV oOS plugin zip — grab the latest release from GitHub Releases (look for mcp-ai-wpoos-x.x.x.zip), or use the Code → Download ZIP button for the current development snapshot.
3. Upload, activate, and run the wizard — in your local WordPress dashboard go to Plugins → Add New → Upload Plugin, select the zip, activate it, and follow the 🚀 Getting Started Wizard. For a free local AI model (no API key needed), install LM Studio and point the wizard at http://localhost:1234.

🗺 Single-file auto-installer (roadmap) — A single cross-platform installer that bootstraps the entire stack automatically is on the roadmap. See the App / Plugin Distribution Proposal for current status and the plan.

Requirements

Minimum Requirements:

• WordPress 6.0+
• PHP 7.4+ (PHP 8.0+ recommended)
• MySQL 5.7+ or MariaDB 10.3+

Optional Requirements for Enhanced Features:

• Node.js 14+: Required for image vectorization tools (vectorize_image tool)
• PHP Functions: proc_open, proc_close, proc_terminate (for Node.js integration and Process Service)
  • These functions are often disabled on shared hosting for security
  • Can be enabled on Cloudways via Application Settings (see troubleshooting guide)
• JetEngine Plugin: For CCT storage and advanced content management tools
• WooCommerce: For e-commerce integration tools
• Elementor: For visual page builder widgets

Note: The plugin works without optional requirements, but some features will be disabled. See deployment troubleshooting for enabling disabled PHP functions.

For Developers (GitHub Clone)

✅ Production-Ready Repository
This repository includes production-optimized vendor dependencies with classmap-authoritative autoloading configured by default in composer.json. You can clone and activate immediately without running composer. The composer install command is only needed if you want to update dependencies or add development tools.

⚡ Use a shallow clone
A full clone of this repository is ~10 GB due to its long history. Use --depth 1 to download only the latest snapshot (~500 MB) — much faster and smaller. If you later need the full history, run git fetch --unshallow.

git clone --depth 1 https://github.com/nvdigitalsolutions/mcp-ai-wpoos.git

If you're cloning from GitHub:

Option 1: Cloudways and Managed Hosting (Recommended)

For Cloudways and similar managed hosting platforms, clone directly into the WordPress plugins directory:

# SSH into your server
# Navigate to WordPress plugins directory
cd /home/master/applications/YOURAPP/public_html/wp-content/plugins/

# Clone the repository (production-ready, no composer needed!)
# Use --depth 1 for a fast shallow clone (recommended for production)
git clone --depth 1 https://github.com/nvdigitalsolutions/mcp-ai-wpoos.git
cd mcp-ai-wpoos

# Verify you're in the correct directory
pwd  # Should show the plugins path

# Optional: Only needed for frontend asset rebuilding or development
# npm install && npm run build

# Optional: Only run if you need to update dependencies or add dev tools
# Note: Autoloader optimization is now configured by default in composer.json
# composer install --no-dev

⚠️ Cloudways Important Notes:

• Always clone directly into /home/master/applications/YOURAPP/public_html/wp-content/plugins/
• Do NOT clone elsewhere and then move/copy - this causes getcwd() failed errors
• Replace YOURAPP with your actual Cloudways application name

Option 2: Local Development or VPS

For local development or standard VPS hosting:

# Option A: Clone directly into WordPress plugins directory (recommended, production-ready!)
cd /path/to/wordpress/wp-content/plugins/
# Use --depth 1 for a fast shallow clone (recommended for production)
git clone --depth 1 https://github.com/nvdigitalsolutions/mcp-ai-wpoos.git
cd mcp-ai-wpoos
# Ready to activate! No composer or npm needed for production use.

# Option B: Clone and copy (also production-ready!)
# Use --depth 1 for a fast shallow clone (recommended for production)
git clone --depth 1 https://github.com/nvdigitalsolutions/mcp-ai-wpoos.git
cd mcp-ai-wpoos
cp -r . /path/to/wordpress/wp-content/plugins/mcp-ai-wpoos/

For Development Only:

# Only if you need to rebuild assets or modify dependencies:
npm install && npm run build
# Note: Autoloader optimization is now configured by default in composer.json
composer install --no-dev

Optional: Strip Dev Files for Production

If you are deploying via git clone to a production server with anti-malware / EDR scanning, the working tree will contain test fixtures that embed verbatim attack-payload literals (XSS canaries, SQL-injection samples, prompt-injection strings) used by the security test suite. These can occasionally trip signature-based scanners.

For a clean production tree, run the bundled strip script after cloning:

# Preview what would be removed
bin/strip-dev-files.sh --dry-run

# Remove tests/, docs/, bin/, .github/, .bmad/, .context/, examples/,
# phpunit.xml.dist, phpcs.xml.dist, dev configs, etc.
bin/strip-dev-files.sh

The script mirrors the exclusion list in .distignore (used for the WordPress.org SVN deploy) and the export-ignore rules in .gitattributes (used for GitHub-distributed ZIPs). It is idempotent and refuses to run on a working tree with uncommitted changes (override with --force).

Note: Do not run this on a development checkout — it removes the test suite, docs, and build tooling. It is intended for deploy targets that only run the plugin.

Final Steps

1. Activate Open Operator System Complete (NV oOS) from WordPress admin
2. You now have the complete version with all ~1,692 tools (~353 base + ~1,339 Pro; live count via WP_MCP_AI_Tool_Registry::get_tools() is authoritative)

What you get from the repository clone:

• ✅ The full codebase — all ~1,692 built-in tools ready to use (~353 base + ~1,339 Pro; live count via WP_MCP_AI_Tool_Registry::get_tools() is authoritative)
• ✅ Single plugin activation (not separate base + pro)
• ✅ Pro features automatically available (no separate Pro plugin to install)

Notes:

• The repository includes mcp-ai-wpoos-base.php and addons/pro/mcp-ai-wpoos-pro.php which are used for building separate distributions but do NOT appear as separate plugins when cloning
• Only the main plugin file (mcp-ai-wpoos.php) has a plugin header in the repository
• The build script adds headers to the other files when creating standalone distributions

Standard Installation

1. Upload mcp-ai-wpoos.zip to /wp-content/plugins/
2. Activate NV oOS from the WordPress admin
3. Go to Settings → NV oOS
4. Enter your OpenAI API key
5. Create a new “AI Assistant” in AI Assistants
6. Add [mcp_ai_chat assistant="123"] to a page or post

Optional: JetEngine Integration

⚠️ Third-Party Plugin (Not Included): [JetEngine](https://crocob