ChatAdmin v0.7.14

See readme.txt changelog for 0.7.14.

ChatAdmin v0.7.13

See readme.txt changelog for 0.7.13.

ChatAdmin v0.7.12

See readme.txt changelog for 0.7.12.

ChatAdmin v0.7.11

See readme.txt changelog for 0.7.11.

ChatAdmin v0.7.10

See readme.txt changelog for 0.7.10.

ChatAdmin v0.7.9

See readme.txt changelog for 0.7.9.

ChatAdmin v0.7.8

See readme.txt changelog for 0.7.8.

ChatAdmin v0.7.6

See readme.txt changelog for 0.7.6.

ChatAdmin v0.7.5

See readme.txt changelog for 0.7.5.

ChatAdmin v0.7.3

Security hardening for the confirmation gate and content-edit permissions. Recommended for all users.

Fixes

Confirmation is bound to your real message. A mutating action (order status / note / action, publish, content edit) now proceeds only when the confirmation is a phrase you actually typed — not one the model supplied. This closes a path where text read from order or content data (prompt injection) could otherwise drive an unconfirmed change across turns. (High)

Refusals are read as refusals. The confirmation whitelist now rejects "not" / "don't" / "dont", so "do not do it" and "don't do it" are no longer mistaken for consent. (Medium)

Listing content is permission-checked. list_content_blocks now applies the same per-kind capability check as preview/apply, so post meta can't be listed for posts you can't edit. (Medium)

Protected meta is read-only from chat. wp_post_meta edits reject protected (_-prefixed) keys such as _wp_page_template. (Med/Low)

Per-post SEO permissions. Editing a post's SEO title / description now requires edit rights on that post, not the generic edit-posts role. (Low)

Hardened the optional git-sync repo-root boundary check. (Informational; only relevant with the off-by-default git-sync feature enabled.)

No functional changes to normal chat flows. Full test suite: 256 tests green.