WP Sudo v2.14.0 — Research Snapshot

Versions before 4.9.0 automatically replayed an intercepted request after reauthentication (#322). Do not use this version.

RESEARCH PROTOTYPE ONLY. Do not install on production, public staging, or any site containing real users, credentials, or data. Use only in WordPress Playground or a disposable local test environment.

• Feature: Playwright end-to-end coverage — added browser-verified challenge, cookie, gate UI, admin bar timer, keyboard shortcut, MU-plugin AJAX, multisite network-admin, and visual-regression coverage to exercise the real user flows around reauthentication.
• Fix: multisite symlink and network-admin flow hardening — preserved network-admin return URLs and supported symlinked local multisite installs used in Local and Studio-style development.
• Fix: bootstrap plugin URL handling — plugin asset URLs now preserve normal plugins_url filtering and custom plugin roots instead of assuming a fixed /wp-content/plugins/ path.
• Testing workflow: Local socket support — bin/install-wp-tests.sh can now auto-detect a single Local by Flywheel MySQL socket when TCP MySQL is unavailable, with updated contributor guidance for local integration setup.
• Repo hygiene — added GPL license and repository health files, and centralized live test/size counts in docs/current-metrics.md.
• 504 unit tests, 1311 assertions. 140 integration tests in CI.