WP Native Builder Bridge v0.2.0

WP Native Builder Bridge v0.2.0

Minor release introducing administrator-controlled, provider-neutral Advanced Metadata support.

Added

• A dedicated Advanced Metadata access group, disabled by default and controlled by the WordPress administrator.
• Generic typed post-meta read, update, and delete abilities for WordPress post objects the connected user is authorized to edit, including private and non-REST CPTs.
• Support for authorized protected/private metadata without provider, post-type, or meta-key whitelists.

Safety and integrity

• Existing Core/provider metadata authorization remains authoritative where defined.
• Workspace internals and credential/session/security-like metadata keys remain outside the generic surface.
• Generic metadata deletion additionally requires Users & Destructive access.
• Mutation identity is based on physical metadata rows with byte-exact optimistic stale-write protection, explicit SQL NULL handling, ambiguity refusal, and row-scoped compensation for concurrency races.
• No generic SQL/database administration, arbitrary options/user-meta access, filesystem/shell execution, or credential retrieval was added.

Compatibility and validation

• WordPress 6.9+.
• Official WordPress MCP Adapter.
• Exact release commit passed Quality and both supported real-WordPress integration lanes.

Resolved: #34

Release artifact SHA-256: 8382960bd32eb23dbf36fc527f20446c99e54718578b84fe74b1d7f90cdbfdeb

WP Native Builder Bridge v0.1.2

WP Native Builder Bridge v0.1.2

Patch release focused on provider integration correctness and durable architecture guidance.

Fixed

• Gutenberg targeted mutations now accept the canonical top-level block path 0 and reject leading-zero aliases such as 00.
• Gravity Forms GFAPI fallback reads now use the provider-supported gravityforms_edit_forms capability; the nonexistent gravityforms_view_forms check has been removed from runtime and integration setup.
• GFAPI fallback read authorization is covered for allowed and denied users, including raw MCP transport coverage.

Architecture

• Provider integration is now explicitly discovery-first and provider-agnostic.
• Native Core/plugin/theme WordPress Abilities are reused first.
• Provider-specific fallback code is limited to real gaps backed by documented public APIs/contracts.
• Capability discovery never bypasses WordPress/provider authorization or Bridge access groups.

Compatibility and safety

• WordPress 6.9+.
• Official WordPress MCP Adapter.
• Existing stale-write, permission, OAuth, Workspace, and native-first safety boundaries remain intact.

Resolved: #27, #28, #29.

Release artifact SHA-256: f8fa563f37a9f00084075ff0a9d050a49d147a06349cfcd054ef509c0aa8c6fb

WP Native Builder Bridge v0.1.1

WP Native Builder Bridge v0.1.1

A polished patch release for the first public WP Native Builder Bridge line.

What it does

WP Native Builder Bridge connects a WordPress 6.9+ site directly to a ChatGPT Workspace App over HTTPS using WordPress-backed OAuth, the official WordPress MCP Adapter, and permission-checked WordPress Abilities.

Included

• Direct ChatGPT Workspace App OAuth/MCP connection with no tunnel requirement.
• WordPress content, Gutenberg block, Media Library, taxonomy, navigation, site-setting, extension, and user/role abilities.
• Persistent Workspace with Dashboard, Documents, Tasks, Activity, and Settings.
• Optimistic concurrency for overwrite-sensitive content and Workspace operations.
• Astra native Ability reuse when Astra Abilities are enabled.
• Managed Code Snippets support across the tested 3.9.x and 3.10.x provider generations.
• Gravity Forms GFAPI fallback when no native provider Ability surface is active.
• Persian (fa_IR) localization and RTL-compatible admin UI.
• GPL-2.0-or-later licensing.

v0.1.1 polish

• Plugin author metadata is now ACh with https://ach.li.
• Plugin homepage points to this GitHub repository.
• The WP Native Builder Bridge brand name remains untranslated.
• Public README/docs were reorganized as product and usage documentation rather than development-history notes.
• Tasks filter spacing was improved.
• Code Snippets 3.9.x integration-status detection was corrected.

Security boundaries

The Bridge does not expose arbitrary SQL, shell/WP-CLI, generic filesystem access, arbitrary plugin ZIP/PHP upload, arbitrary package URLs, or credential retrieval. Media upload is bounded through WordPress Media Library handling, and plugin/theme installation is limited to WordPress.org slugs.

See the repository README and docs/ directory for installation, permissions, integrations, security, troubleshooting, and development details.

WP Native Builder Bridge v0.1.0

WP Native Builder Bridge v0.1.0

First public release of the self-hosted WordPress bridge for direct ChatGPT Workspace App integration.

Highlights

• Direct ChatGPT Workspace App connection over public HTTPS using WordPress-backed OAuth; no tunnel or separate proxy service required.
• Official WordPress MCP Adapter integration with typed, permission-checked WordPress Abilities.
• Content, Gutenberg block, Media Library, taxonomy, navigation, bounded site settings, plugin/theme lifecycle, users/roles, and supported provider integrations.
• Persistent private Workspace with Dashboard, Documents, Tasks, Activity, and Settings admin screens.
• Workspace optimistic concurrency using version + state hash, compact resume context, export/clear controls, and preserve-on-deactivate/uninstall behavior.
• Astra native Ability reuse through the shared WordPress Abilities registry.
• Code Snippets support for both 3.9.x and 3.10.x provider model generations.
• Bundled Persian (fa_IR) localization and RTL/LTR-neutral WordPress admin UI.
• GPL-2.0-or-later licensed.

Security boundaries

Bridge access groups remain separate from normal WordPress capability checks. Sensitive mutation groups are explicit. Media upload uses WordPress MIME/upload handling and does not expose arbitrary server paths. Plugin/theme installation is bounded to WordPress.org slugs; this release does not expose arbitrary ZIP/PHP upload, shell, SQL, generic filesystem access, or credential retrieval.

Validated release identity

• Source: 1af6d2056639101cefa5ba11cfcdc3198e5a1c37
• CI: GitHub Actions run 34562058130
• Quality / PHP 8.4: PASS
• WordPress 6.9 / PHP 8.4 integration: PASS
• Current WordPress / PHP 8.4 integration: PASS
• MCP Adapter: 0.6.1
• Real ChatGPT Workspace OAuth + MCP connection: PASS on the authorized public test site
• Real connected Workspace document/task optimistic-concurrency checks: PASS
• Live Content disabled permission-denial path: PASS
• Code Snippets 3.9.6 and 3.10.2 provider lanes: PASS
• Astra 4.13.11 native Ability reuse lane: PASS
• Gravity Forms coverage is a GFAPI contract fixture; this release does not claim validation against the commercial Gravity Forms binary.

See README.md, docs/INSTALL-CONNECT.md, and docs/RELEASE-CHECKLIST.md for setup and operating details.