v1.3.0: Self-hosted WordPress AI Bridge

What's new in v1.3.0

• New setting: Allow root-level file access (off by default) — file_* actions now stay scoped to wp-content unless this setting is explicitly turned on and the request passes "root": true. When enabled, it also unlocks access to wp-config.php, .htaccess, .user.ini and anything else at the WordPress install root.
• plugin_install / theme_install actions — install a plugin or theme from a base64-encoded .zip via WordPress's own Plugin_Upgrader / Theme_Upgrader classes (the same code path as wp-admin's "Upload Plugin"). No arbitrary URL fetching.
• Updated README documenting the new actions and settings.

Install

1. Download wp-ssh.zip below.
2. In wp-admin: Plugins → Add New → Upload Plugin, upload the zip, Activate.
3. Go to Tools → WP SSH, copy your auto-generated secret key, enable the bridge.

See the README for the full action reference.