| @@ -1,18 +1,24 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | /** |
| 3 | - * Desktop Mode — AI Copilot content search via OpenAI tool use. | |
| 3 | + * OpenStation — AI Copilot content search via the provider tool use. | |
| 4 | 4 | * |
| 5 | 5 | * Agentic search loop: the user describes something in natural language and |
| 6 | - * the OpenAI agent calls focused tools — search_posts, search_pages, | |
| 7 | - * search_comments — choosing the right one based on query semantics. Each | |
| 8 | - * tool runs WordPress's native search (WP_Query `s=` / get_comments | |
| 9 | - * `search=`) for the keywords the model distils from the request, then | |
| 10 | - * returns up to 10 matching entities with their real title + content | |
| 11 | - * excerpt for the model to compare to the user's description. No AI | |
| 12 | - * pre-analysis is required — every published post/page/comment is findable. | |
| 6 | + * the agent calls focused tools, choosing the right one based on query | |
| 7 | + * semantics. Built-in tools: four content-search tools — search_posts, | |
| 8 | + * search_pages, search_comments, search_comments_by_post — plus | |
| 9 | + * list_admin_pages (admin navigation catalog), search_wporg_plugins | |
| 10 | + * (WordPress.org plugin directory), and get_php_error_log (error-log | |
| 11 | + * tail). Each content-search tool runs WordPress's native search | |
| 12 | + * (WP_Query `s=` / get_comments `search=`) for the keywords the model | |
| 13 | + * distils from the request, then returns up to 10 matching entities with | |
| 14 | + * their real title + content excerpt for the model to compare to the | |
| 15 | + * user's description. No AI pre-analysis is required — every published | |
| 16 | + * post/page/comment is findable. The built-in tools are WordPress Abilities | |
| 17 | + * (see abilities.php); client command tools are advertised alongside them and | |
| 18 | + * dispatched by the same loop. | |
| 13 | 19 | * |
| 14 | - * Three tools instead of one parameter: | |
| 20 | + * Focused tools instead of one routing parameter: | |
| 15 | 21 | * - "I remember a comment where someone said congratulations…" → agent |
| 16 | 22 | * calls search_comments without needing a routing parameter. |
| 17 | 23 | * - "I wrote a post about paella in Canarias" → agent calls search_posts. |
| 18 | 24 | * - "Our About page mentions…" → agent calls search_pages. |
| @@ -18,210 +24,230 @@ | ||
| 18 | 24 | * - "Our About page mentions…" → agent calls search_pages. |
| 19 | 25 | * - Ambiguous queries → agent tries in priority order (posts → pages → |
| 20 | 26 | * comments) following the system-prompt guidance. |
| 21 | 27 | * |
| 22 | - * Budget: max DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS (10) tool-call rounds per | |
| 23 | - * request × DESKTOP_MODE_AI_SEARCH_BATCH_SIZE (10) items = up to 100 entities. | |
| 28 | + * Budget: max OPENSTATION_AI_SEARCH_MAX_ITERATIONS (10) tool-call rounds per | |
| 29 | + * request × OPENSTATION_AI_SEARCH_BATCH_SIZE (10) items = up to 100 entities. | |
| 24 | 30 | * When the budget is exhausted the response includes a `continue` object |
| 25 | 31 | * the client uses to resume from the exact offset that was last searched. |
| 26 | 32 | * |
| 27 | 33 | * REST endpoint: POST /desktop-mode/v1/ai/search |
| 28 | 34 | * |
| 29 | - * @package WPDesktopMode | |
| 35 | + * @package OpenStation | |
| 30 | 36 | */ |
| 31 | 37 | |
| 32 | 38 | defined( 'ABSPATH' ) || exit; |
| 33 | 39 | |
| 34 | 40 | /** Maximum agentic tool-call iterations per search request. */ |
| 35 | -const DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS = 10; | |
| 41 | +const OPENSTATION_AI_SEARCH_MAX_ITERATIONS = 10; | |
| 36 | 42 | |
| 37 | 43 | /** Entities fetched per tool-call round. */ |
| 38 | -const DESKTOP_MODE_AI_SEARCH_BATCH_SIZE = 10; | |
| 44 | +const OPENSTATION_AI_SEARCH_BATCH_SIZE = 10; | |
| 39 | 45 | |
| 40 | -// --------------------------------------------------------------------------- | |
| 41 | -// Tool definitions — one per entity type so the model picks semantically | |
| 42 | -// --------------------------------------------------------------------------- | |
| 43 | - | |
| 44 | 46 | /** |
| 45 | - * Returns all three search tools as an array ready for the OpenAI `tools` | |
| 46 | - * field. Providing three focused tools (rather than one with an entity_type | |
| 47 | - * parameter) lets the model reason about the query — "someone said X" → | |
| 48 | - * search_comments; "I published a post about Y" → search_posts — without | |
| 49 | - * needing an explicit routing hint from the user or the system prompt. | |
| 47 | + * Returns the catalog of common WordPress admin destinations. | |
| 50 | 48 | * |
| 51 | - * Each tool schema uses `strict: true` with a single `offset` parameter so | |
| 52 | - * the model can never hallucinate extra arguments. | |
| 49 | + * Used by the `list_admin_pages` tool. Each entry has a human title, the | |
| 50 | + * wp-admin URL (rendered through admin_url() so it respects the site's | |
| 51 | + * real admin path), a short description, and a Dashicons icon class the | |
| 52 | + * UI can use when opening the URL in a legacy iframe window. | |
| 53 | 53 | * |
| 54 | - * @since 0.14.0 | |
| 54 | + * Filterable via `openstation_ai_admin_page_catalog` so third-party | |
| 55 | + * plugins can contribute their own admin destinations (e.g. a plugin | |
| 56 | + * adding a top-level menu can surface its settings page here). | |
| 55 | 57 | * |
| 56 | 58 | * @return array[] |
| 57 | 59 | */ |
| 58 | -function desktop_mode_ai_search_tool_definitions() { | |
| 59 | - // Responses API tool definitions are FLAT — no nested `function` wrapper. | |
| 60 | - // The `type`, `name`, `description`, and `parameters` sit at the top level. | |
| 61 | - $query_offset_param = array( | |
| 62 | - 'type' => 'object', | |
| 63 | - 'additionalProperties' => false, | |
| 64 | - 'required' => array( 'query', 'offset' ), | |
| 65 | - 'properties' => array( | |
| 66 | - 'query' => array( | |
| 67 | - 'type' => 'string', | |
| 68 | - 'description' => 'Keyword search terms matched against the title and content (WordPress native search). Distil the user\'s request to the essential nouns — e.g. for "that post I wrote about making paella" pass "paella". Avoid stop-words and full sentences.', | |
| 69 | - ), | |
| 70 | - 'offset' => array( | |
| 71 | - 'type' => 'integer', | |
| 72 | - 'description' => 'Zero-based starting position. Use 0 for the first batch, 10 for the second, and so on.', | |
| 73 | - ), | |
| 60 | +function openstation_ai_get_admin_page_catalog() { | |
| 61 | + $catalog = array( | |
| 62 | + array( | |
| 63 | + 'title' => __( 'Dashboard', 'desktop-mode' ), | |
| 64 | + 'url' => admin_url( 'index.php' ), | |
| 65 | + 'icon' => 'dashicons-dashboard', | |
| 66 | + 'description' => __( 'The main admin dashboard: activity, drafts, site overview.', 'desktop-mode' ), | |
| 74 | 67 | ), |
| 75 | - ); | |
| 76 | - | |
| 77 | - return array( | |
| 78 | 68 | array( |
| 79 | - 'type' => 'function', | |
| 80 | - 'name' => 'search_posts', | |
| 81 | - 'description' => 'Keyword-searches published WordPress blog posts by title and content (WordPress native search). Use this when the user is looking for content they or someone else wrote as a post or article. Pass the key search terms as `query`. Returns up to 10 matching posts with their title, a content excerpt, date, and URLs. If has_more is true, call again with the next offset.', | |
| 82 | - 'parameters' => $query_offset_param, | |
| 69 | + 'title' => __( 'All Posts', 'desktop-mode' ), | |
| 70 | + 'url' => admin_url( 'edit.php' ), | |
| 71 | + 'icon' => 'dashicons-admin-post', | |
| 72 | + 'description' => __( 'List, edit, bulk-manage blog posts.', 'desktop-mode' ), | |
| 83 | 73 | ), |
| 84 | 74 | array( |
| 85 | - 'type' => 'function', | |
| 86 | - 'name' => 'search_pages', | |
| 87 | - 'description' => 'Keyword-searches published WordPress pages (About, Contact, Services, Portfolio, etc.) by title and content. Use this when the user is looking for a static page, landing page, or informational page on the site. Pass the key search terms as `query`. Returns up to 10 matching pages with their title, a content excerpt, and URLs. If has_more is true, call again with the next offset.', | |
| 88 | - 'parameters' => $query_offset_param, | |
| 75 | + 'title' => __( 'Add New Post', 'desktop-mode' ), | |
| 76 | + 'url' => admin_url( 'post-new.php' ), | |
| 77 | + 'icon' => 'dashicons-plus', | |
| 78 | + 'description' => __( 'Create a new blog post.', 'desktop-mode' ), | |
| 89 | 79 | ), |
| 90 | 80 | array( |
| 91 | - 'type' => 'function', | |
| 92 | - 'name' => 'search_comments', | |
| 93 | - 'description' => 'Keyword-searches approved WordPress comments across ALL posts by their text (WordPress native search). Use this when the user remembers something a reader said but does not know which post it was on. Pass the distinctive words from the comment as `query`. Returns up to 10 matching comments with an excerpt, parent post title, and URLs. If has_more is true, call again with the next offset.', | |
| 94 | - 'parameters' => $query_offset_param, | |
| 81 | + 'title' => __( 'Categories', 'desktop-mode' ), | |
| 82 | + 'url' => admin_url( 'edit-tags.php?taxonomy=category' ), | |
| 83 | + 'icon' => 'dashicons-category', | |
| 84 | + 'description' => __( 'Manage post categories: add, rename, merge.', 'desktop-mode' ), | |
| 95 | 85 | ), |
| 96 | 86 | array( |
| 97 | - 'type' => 'function', | |
| 98 | - 'name' => 'search_comments_by_post', | |
| 99 | - 'description' => 'Keyword-searches approved comments on a SPECIFIC post by its WordPress ID. Use this when you have already identified a post (via search_posts) and the user\'s query also mentions something a reader said on that post — e.g. "I remember a comment on my Málaga post asking about the Alcazaba at night." Call search_posts first to find the post ID, then call this tool with that ID and the distinctive words as `query`. Much more precise than search_comments when the parent post is known. If has_more is true, call again with the next offset.', | |
| 100 | - 'parameters' => array( | |
| 101 | - 'type' => 'object', | |
| 102 | - 'additionalProperties' => false, | |
| 103 | - 'required' => array( 'post_id', 'query', 'offset' ), | |
| 104 | - 'properties' => array( | |
| 105 | - 'post_id' => array( | |
| 106 | - 'type' => 'integer', | |
| 107 | - 'description' => 'The WordPress ID of the post whose comments should be searched. Obtain this from a prior search_posts call.', | |
| 108 | - ), | |
| 109 | - 'query' => array( | |
| 110 | - 'type' => 'string', | |
| 111 | - 'description' => 'Keyword search terms matched against the comment text. Pass the distinctive words the user remembers; use an empty string to list the post\'s comments without keyword filtering.', | |
| 112 | - ), | |
| 113 | - 'offset' => array( | |
| 114 | - 'type' => 'integer', | |
| 115 | - 'description' => 'Zero-based starting position. Use 0 for the first batch, 10 for the second, and so on.', | |
| 116 | - ), | |
| 117 | - ), | |
| 118 | - ), | |
| 87 | + 'title' => __( 'Tags', 'desktop-mode' ), | |
| 88 | + 'url' => admin_url( 'edit-tags.php?taxonomy=post_tag' ), | |
| 89 | + 'icon' => 'dashicons-tag', | |
| 90 | + 'description' => __( 'Manage post tags.', 'desktop-mode' ), | |
| 119 | 91 | ), |
| 120 | 92 | array( |
| 121 | - 'type' => 'function', | |
| 122 | - 'name' => 'list_admin_pages', | |
| 123 | - 'description' => 'Returns the full catalog of WordPress admin (wp-admin) destinations — pages for managing posts, categories, users, plugins, themes, settings, etc. Call this when the user asks "where can I find X?", "how do I get to Y?", "where are the settings for Z?" — any navigational question about the admin UI. Once you have the catalog, select the 1-3 most relevant entries for the user\'s query and include them in your answer under admin_links with answer_type="navigation". The catalog is small and stable so one call is enough.', | |
| 124 | - 'parameters' => array( | |
| 125 | - 'type' => 'object', | |
| 126 | - 'additionalProperties' => false, | |
| 127 | - 'required' => array(), | |
| 128 | - 'properties' => new stdClass(), | |
| 129 | - ), | |
| 93 | + 'title' => __( 'All Pages', 'desktop-mode' ), | |
| 94 | + 'url' => admin_url( 'edit.php?post_type=page' ), | |
| 95 | + 'icon' => 'dashicons-admin-page', | |
| 96 | + 'description' => __( 'List and edit static pages (About, Contact, etc.).', 'desktop-mode' ), | |
| 130 | 97 | ), |
| 131 | 98 | array( |
| 132 | - 'type' => 'function', | |
| 133 | - 'name' => 'search_wporg_plugins', | |
| 134 | - 'description' => 'Searches the official WordPress.org plugin directory. Use this when the user asks for a plugin recommendation — e.g. "is there a plugin for SEO?", "find me a backup plugin", "a caching plugin", "form builder". Returns up to 10 plugins with name, description, rating, active install count, and an admin URL that opens the plugin-info / install screen directly. Present the results as admin_links with answer_type="navigation", titled "Plugin Name · 5M+ installs · 4.8★".', | |
| 135 | - 'parameters' => array( | |
| 136 | - 'type' => 'object', | |
| 137 | - 'additionalProperties' => false, | |
| 138 | - 'required' => array( 'query' ), | |
| 139 | - 'properties' => array( | |
| 140 | - 'query' => array( | |
| 141 | - 'type' => 'string', | |
| 142 | - 'description' => 'Plain-language search terms — e.g. "seo", "backup", "caching", "woocommerce", "contact form".', | |
| 143 | - ), | |
| 144 | - ), | |
| 145 | - ), | |
| 99 | + 'title' => __( 'Add New Page', 'desktop-mode' ), | |
| 100 | + 'url' => admin_url( 'post-new.php?post_type=page' ), | |
| 101 | + 'icon' => 'dashicons-plus', | |
| 102 | + 'description' => __( 'Create a new page.', 'desktop-mode' ), | |
| 146 | 103 | ), |
| 147 | 104 | array( |
| 148 | - 'type' => 'function', | |
| 149 | - 'name' => 'get_php_error_log', | |
| 150 | - 'description' => 'Reads the most recent entries from the site\'s PHP error log — typically wp-content/debug.log when WP_DEBUG_LOG is enabled, or the path set by the PHP error_log directive. Use this when the user asks "are there any errors?", "check the logs", "what went wrong?", or is troubleshooting a white screen / 500. Each entry is parsed into { timestamp, level, message } so you can summarise them. Administrators only — the tool returns an error for non-admins.', | |
| 151 | - 'parameters' => array( | |
| 152 | - 'type' => 'object', | |
| 153 | - 'additionalProperties' => false, | |
| 154 | - 'required' => array( 'lines' ), | |
| 155 | - 'properties' => array( | |
| 156 | - 'lines' => array( | |
| 157 | - 'type' => 'integer', | |
| 158 | - 'description' => 'How many recent log lines to return (1-500). Use 20-50 for a quick look, 100-200 for wider context.', | |
| 159 | - ), | |
| 160 | - ), | |
| 161 | - ), | |
| 105 | + 'title' => __( 'Media Library', 'desktop-mode' ), | |
| 106 | + 'url' => admin_url( 'upload.php' ), | |
| 107 | + 'icon' => 'dashicons-admin-media', | |
| 108 | + 'description' => __( 'Browse, upload, and manage images, files, videos.', 'desktop-mode' ), | |
| 162 | 109 | ), |
| 110 | + array( | |
| 111 | + 'title' => __( 'Comments', 'desktop-mode' ), | |
| 112 | + 'url' => admin_url( 'edit-comments.php' ), | |
| 113 | + 'icon' => 'dashicons-admin-comments', | |
| 114 | + 'description' => __( 'Moderate and reply to comments on posts and pages.', 'desktop-mode' ), | |
| 115 | + ), | |
| 116 | + array( | |
| 117 | + 'title' => __( 'Themes', 'desktop-mode' ), | |
| 118 | + 'url' => admin_url( 'themes.php' ), | |
| 119 | + 'icon' => 'dashicons-admin-appearance', | |
| 120 | + 'description' => __( 'Change, install, or customize the active theme.', 'desktop-mode' ), | |
| 121 | + ), | |
| 122 | + array( | |
| 123 | + 'title' => __( 'Customize', 'desktop-mode' ), | |
| 124 | + 'url' => admin_url( 'customize.php' ), | |
| 125 | + 'icon' => 'dashicons-admin-customizer', | |
| 126 | + 'description' => __( 'Live-preview theme customisation: colors, fonts, layout.', 'desktop-mode' ), | |
| 127 | + ), | |
| 128 | + array( | |
| 129 | + 'title' => __( 'Widgets', 'desktop-mode' ), | |
| 130 | + 'url' => admin_url( 'widgets.php' ), | |
| 131 | + 'icon' => 'dashicons-screenoptions', | |
| 132 | + 'description' => __( 'Manage sidebar and footer widgets.', 'desktop-mode' ), | |
| 133 | + ), | |
| 134 | + array( | |
| 135 | + 'title' => __( 'Menus', 'desktop-mode' ), | |
| 136 | + 'url' => admin_url( 'nav-menus.php' ), | |
| 137 | + 'icon' => 'dashicons-menu', | |
| 138 | + 'description' => __( 'Create and edit navigation menus.', 'desktop-mode' ), | |
| 139 | + ), | |
| 140 | + array( | |
| 141 | + 'title' => __( 'Plugins', 'desktop-mode' ), | |
| 142 | + 'url' => admin_url( 'plugins.php' ), | |
| 143 | + 'icon' => 'dashicons-admin-plugins', | |
| 144 | + 'description' => __( 'Activate, deactivate, update or delete plugins.', 'desktop-mode' ), | |
| 145 | + ), | |
| 146 | + array( | |
| 147 | + 'title' => __( 'Add New Plugin', 'desktop-mode' ), | |
| 148 | + 'url' => admin_url( 'plugin-install.php' ), | |
| 149 | + 'icon' => 'dashicons-plus', | |
| 150 | + 'description' => __( 'Search and install new plugins from the directory.', 'desktop-mode' ), | |
| 151 | + ), | |
| 152 | + array( | |
| 153 | + 'title' => __( 'Users', 'desktop-mode' ), | |
| 154 | + 'url' => admin_url( 'users.php' ), | |
| 155 | + 'icon' => 'dashicons-admin-users', | |
| 156 | + 'description' => __( 'Manage user accounts and roles.', 'desktop-mode' ), | |
| 157 | + ), | |
| 158 | + array( | |
| 159 | + 'title' => __( 'Add New User', 'desktop-mode' ), | |
| 160 | + 'url' => admin_url( 'user-new.php' ), | |
| 161 | + 'icon' => 'dashicons-plus', | |
| 162 | + 'description' => __( 'Create a new user account.', 'desktop-mode' ), | |
| 163 | + ), | |
| 164 | + array( | |
| 165 | + 'title' => __( 'Your Profile', 'desktop-mode' ), | |
| 166 | + 'url' => admin_url( 'profile.php' ), | |
| 167 | + 'icon' => 'dashicons-id', | |
| 168 | + 'description' => __( 'Edit your own profile, password, admin colour scheme.', 'desktop-mode' ), | |
| 169 | + ), | |
| 170 | + array( | |
| 171 | + 'title' => __( 'General Settings', 'desktop-mode' ), | |
| 172 | + 'url' => admin_url( 'options-general.php' ), | |
| 173 | + 'icon' => 'dashicons-admin-settings', | |
| 174 | + 'description' => __( 'Site title, tagline, URL, timezone, language.', 'desktop-mode' ), | |
| 175 | + ), | |
| 176 | + array( | |
| 177 | + 'title' => __( 'Writing Settings', 'desktop-mode' ), | |
| 178 | + 'url' => admin_url( 'options-writing.php' ), | |
| 179 | + 'icon' => 'dashicons-edit', | |
| 180 | + 'description' => __( 'Default post category, post format, remote publishing.', 'desktop-mode' ), | |
| 181 | + ), | |
| 182 | + array( | |
| 183 | + 'title' => __( 'Reading Settings', 'desktop-mode' ), | |
| 184 | + 'url' => admin_url( 'options-reading.php' ), | |
| 185 | + 'icon' => 'dashicons-book', | |
| 186 | + 'description' => __( 'Homepage, blog posts per page, search-engine visibility.', 'desktop-mode' ), | |
| 187 | + ), | |
| 188 | + array( | |
| 189 | + 'title' => __( 'Discussion Settings', 'desktop-mode' ), | |
| 190 | + 'url' => admin_url( 'options-discussion.php' ), | |
| 191 | + 'icon' => 'dashicons-format-chat', | |
| 192 | + 'description' => __( 'Comment moderation, avatars, email notifications.', 'desktop-mode' ), | |
| 193 | + ), | |
| 194 | + array( | |
| 195 | + 'title' => __( 'Media Settings', 'desktop-mode' ), | |
| 196 | + 'url' => admin_url( 'options-media.php' ), | |
| 197 | + 'icon' => 'dashicons-format-image', | |
| 198 | + 'description' => __( 'Image size settings for thumbnail / medium / large.', 'desktop-mode' ), | |
| 199 | + ), | |
| 200 | + array( | |
| 201 | + 'title' => __( 'Permalinks', 'desktop-mode' ), | |
| 202 | + 'url' => admin_url( 'options-permalink.php' ), | |
| 203 | + 'icon' => 'dashicons-admin-links', | |
| 204 | + 'description' => __( 'URL structure for posts, pages, categories, tags.', 'desktop-mode' ), | |
| 205 | + ), | |
| 206 | + array( | |
| 207 | + 'title' => __( 'Privacy', 'desktop-mode' ), | |
| 208 | + 'url' => admin_url( 'options-privacy.php' ), | |
| 209 | + 'icon' => 'dashicons-privacy', | |
| 210 | + 'description' => __( 'Privacy policy page selection and preview.', 'desktop-mode' ), | |
| 211 | + ), | |
| 212 | + array( | |
| 213 | + 'title' => __( 'Tools', 'desktop-mode' ), | |
| 214 | + 'url' => admin_url( 'tools.php' ), | |
| 215 | + 'icon' => 'dashicons-admin-tools', | |
| 216 | + 'description' => __( 'Built-in site tools.', 'desktop-mode' ), | |
| 217 | + ), | |
| 218 | + array( | |
| 219 | + 'title' => __( 'Import', 'desktop-mode' ), | |
| 220 | + 'url' => admin_url( 'import.php' ), | |
| 221 | + 'icon' => 'dashicons-download', | |
| 222 | + 'description' => __( 'Import content from other platforms (WP, Tumblr, RSS, etc.).', 'desktop-mode' ), | |
| 223 | + ), | |
| 224 | + array( | |
| 225 | + 'title' => __( 'Export', 'desktop-mode' ), | |
| 226 | + 'url' => admin_url( 'export.php' ), | |
| 227 | + 'icon' => 'dashicons-upload', | |
| 228 | + 'description' => __( 'Export all site content as XML.', 'desktop-mode' ), | |
| 229 | + ), | |
| 230 | + array( | |
| 231 | + 'title' => __( 'Site Health', 'desktop-mode' ), | |
| 232 | + 'url' => admin_url( 'site-health.php' ), | |
| 233 | + 'icon' => 'dashicons-heart', | |
| 234 | + 'description' => __( 'Performance and security recommendations for the site.', 'desktop-mode' ), | |
| 235 | + ), | |
| 236 | + array( | |
| 237 | + 'title' => __( 'Updates', 'desktop-mode' ), | |
| 238 | + 'url' => admin_url( 'update-core.php' ), | |
| 239 | + 'icon' => 'dashicons-update', | |
| 240 | + 'description' => __( 'WordPress, theme, and plugin updates.', 'desktop-mode' ), | |
| 241 | + ), | |
| 163 | 242 | ); |
| 164 | -} | |
| 165 | 243 | |
| 166 | -/** | |
| 167 | - * Returns the catalog of common WordPress admin destinations. | |
| 168 | - * | |
| 169 | - * Used by the `list_admin_pages` tool. Each entry has a human title, the | |
| 170 | - * wp-admin URL (rendered through admin_url() so it respects the site's | |
| 171 | - * real admin path), a short description, and a Dashicons icon class the | |
| 172 | - * UI can use when opening the URL in a legacy iframe window. | |
| 173 | - * | |
| 174 | - * Filterable via `desktop_mode_ai_admin_page_catalog` so third-party | |
| 175 | - * plugins can contribute their own admin destinations (e.g. a plugin | |
| 176 | - * adding a top-level menu can surface its settings page here). | |
| 177 | - * | |
| 178 | - * @since 0.14.0 | |
| 179 | - * | |
| 180 | - * @return array[] | |
| 181 | - */ | |
| 182 | -function desktop_mode_ai_get_admin_page_catalog() { | |
| 183 | - $catalog = array( | |
| 184 | - array( 'title' => 'Dashboard', 'url' => admin_url( 'index.php' ), 'icon' => 'dashicons-dashboard', 'description' => 'The main admin dashboard — activity, drafts, site overview.' ), | |
| 185 | - array( 'title' => 'All Posts', 'url' => admin_url( 'edit.php' ), 'icon' => 'dashicons-admin-post', 'description' => 'List, edit, bulk-manage blog posts.' ), | |
| 186 | - array( 'title' => 'Add New Post', 'url' => admin_url( 'post-new.php' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new blog post.' ), | |
| 187 | - array( 'title' => 'Categories', 'url' => admin_url( 'edit-tags.php?taxonomy=category' ), 'icon' => 'dashicons-category', 'description' => 'Manage post categories — add, rename, merge.' ), | |
| 188 | - array( 'title' => 'Tags', 'url' => admin_url( 'edit-tags.php?taxonomy=post_tag' ), 'icon' => 'dashicons-tag', 'description' => 'Manage post tags.' ), | |
| 189 | - array( 'title' => 'All Pages', 'url' => admin_url( 'edit.php?post_type=page' ), 'icon' => 'dashicons-admin-page', 'description' => 'List and edit static pages (About, Contact, etc.).' ), | |
| 190 | - array( 'title' => 'Add New Page', 'url' => admin_url( 'post-new.php?post_type=page' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new page.' ), | |
| 191 | - array( 'title' => 'Media Library', 'url' => admin_url( 'upload.php' ), 'icon' => 'dashicons-admin-media', 'description' => 'Browse, upload, and manage images, files, videos.' ), | |
| 192 | - array( 'title' => 'Comments', 'url' => admin_url( 'edit-comments.php' ), 'icon' => 'dashicons-admin-comments', 'description' => 'Moderate and reply to comments on posts and pages.' ), | |
| 193 | - array( 'title' => 'Themes', 'url' => admin_url( 'themes.php' ), 'icon' => 'dashicons-admin-appearance', 'description' => 'Change, install, or customize the active theme.' ), | |
| 194 | - array( 'title' => 'Customize', 'url' => admin_url( 'customize.php' ), 'icon' => 'dashicons-admin-customizer', 'description' => 'Live-preview theme customisation — colors, fonts, layout.' ), | |
| 195 | - array( 'title' => 'Widgets', 'url' => admin_url( 'widgets.php' ), 'icon' => 'dashicons-screenoptions', 'description' => 'Manage sidebar and footer widgets.' ), | |
| 196 | - array( 'title' => 'Menus', 'url' => admin_url( 'nav-menus.php' ), 'icon' => 'dashicons-menu', 'description' => 'Create and edit navigation menus.' ), | |
| 197 | - array( 'title' => 'Plugins', 'url' => admin_url( 'plugins.php' ), 'icon' => 'dashicons-admin-plugins', 'description' => 'Activate, deactivate, update or delete plugins.' ), | |
| 198 | - array( 'title' => 'Add New Plugin', 'url' => admin_url( 'plugin-install.php' ), 'icon' => 'dashicons-plus', 'description' => 'Search and install new plugins from the directory.' ), | |
| 199 | - array( 'title' => 'Users', 'url' => admin_url( 'users.php' ), 'icon' => 'dashicons-admin-users', 'description' => 'Manage user accounts and roles.' ), | |
| 200 | - array( 'title' => 'Add New User', 'url' => admin_url( 'user-new.php' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new user account.' ), | |
| 201 | - array( 'title' => 'Your Profile', 'url' => admin_url( 'profile.php' ), 'icon' => 'dashicons-id', 'description' => 'Edit your own profile, password, admin colour scheme.' ), | |
| 202 | - array( 'title' => 'General Settings', 'url' => admin_url( 'options-general.php' ), 'icon' => 'dashicons-admin-settings', 'description' => 'Site title, tagline, URL, timezone, language.' ), | |
| 203 | - array( 'title' => 'Writing Settings', 'url' => admin_url( 'options-writing.php' ), 'icon' => 'dashicons-edit', 'description' => 'Default post category, post format, remote publishing.' ), | |
| 204 | - array( 'title' => 'Reading Settings', 'url' => admin_url( 'options-reading.php' ), 'icon' => 'dashicons-book', 'description' => 'Homepage, blog posts per page, search-engine visibility.' ), | |
| 205 | - array( 'title' => 'Discussion Settings','url' => admin_url( 'options-discussion.php' ), 'icon' => 'dashicons-format-chat', 'description' => 'Comment moderation, avatars, email notifications.' ), | |
| 206 | - array( 'title' => 'Media Settings', 'url' => admin_url( 'options-media.php' ), 'icon' => 'dashicons-format-image', 'description' => 'Image size settings for thumbnail / medium / large.' ), | |
| 207 | - array( 'title' => 'Permalinks', 'url' => admin_url( 'options-permalink.php' ), 'icon' => 'dashicons-admin-links', 'description' => 'URL structure for posts, pages, categories, tags.' ), | |
| 208 | - array( 'title' => 'Privacy', 'url' => admin_url( 'options-privacy.php' ), 'icon' => 'dashicons-privacy', 'description' => 'Privacy policy page selection and preview.' ), | |
| 209 | - array( 'title' => 'Tools', 'url' => admin_url( 'tools.php' ), 'icon' => 'dashicons-admin-tools', 'description' => 'Built-in site tools.' ), | |
| 210 | - array( 'title' => 'Import', 'url' => admin_url( 'import.php' ), 'icon' => 'dashicons-download', 'description' => 'Import content from other platforms (WP, Tumblr, RSS, etc.).' ), | |
| 211 | - array( 'title' => 'Export', 'url' => admin_url( 'export.php' ), 'icon' => 'dashicons-upload', 'description' => 'Export all site content as XML.' ), | |
| 212 | - array( 'title' => 'Site Health', 'url' => admin_url( 'site-health.php' ), 'icon' => 'dashicons-heart', 'description' => 'Performance and security recommendations for the site.' ), | |
| 213 | - array( 'title' => 'Updates', 'url' => admin_url( 'update-core.php' ), 'icon' => 'dashicons-update', 'description' => 'WordPress, theme, and plugin updates.' ), | |
| 214 | - ); | |
| 215 | - | |
| 216 | 244 | /** |
| 217 | 245 | * Filters the wp-admin page catalog surfaced by the AI assistant. |
| 218 | 246 | * |
| 219 | - * @since 0.14.0 | |
| 220 | - * | |
| 221 | 247 | * @param array[] $catalog Array of entries, each with title/url/icon/description. |
| 222 | 248 | */ |
| 223 | - return (array) apply_filters( 'desktop_mode_ai_admin_page_catalog', $catalog ); | |
| 249 | + return (array) apply_filters( 'openstation_ai_admin_page_catalog', $catalog ); | |
| 224 | 250 | } |
| 225 | 251 | |
| 226 | 252 | // --------------------------------------------------------------------------- |
| 227 | 253 | // Final-answer JSON Schema |
| @@ -229,13 +255,11 @@ | ||
| 229 | 255 | |
| 230 | 256 | /** |
| 231 | 257 | * JSON Schema for the agent's final structured answer. |
| 232 | 258 | * |
| 233 | - * @since 0.14.0 | |
| 234 | - * | |
| 235 | 259 | * @return array |
| 236 | 260 | */ |
| 237 | -function desktop_mode_ai_search_answer_schema() { | |
| 261 | +function openstation_ai_search_answer_schema() { | |
| 238 | 262 | return array( |
| 239 | 263 | 'type' => 'object', |
| 240 | 264 | 'additionalProperties' => false, |
| 241 | 265 | 'required' => array( 'answer_type', 'message', 'entity_id', 'entity_type', 'admin_links' ), |
| @@ -257,9 +281,12 @@ | ||
| 257 | 281 | 'description' => 'The WordPress ID of the matching entity. Required when answer_type is "entity"; set to null otherwise.', |
| 258 | 282 | ), |
| 259 | 283 | 'entity_type' => array( |
| 260 | 284 | 'anyOf' => array( |
| 261 | - array( 'type' => 'string', 'enum' => array( 'post', 'page', 'comment' ) ), | |
| 285 | + array( | |
| 286 | + 'type' => 'string', | |
| 287 | + 'enum' => array( 'post', 'page', 'comment' ), | |
| 288 | + ), | |
| 262 | 289 | array( 'type' => 'null' ), |
| 263 | 290 | ), |
| 264 | 291 | 'description' => 'Type of the matching entity. Required when answer_type is "entity"; set to null otherwise.', |
| 265 | 292 | ), |
| @@ -299,36 +326,34 @@ | ||
| 299 | 326 | * matched with WordPress's native search; `search_comments_by_post` |
| 300 | 327 | * needs an additional `post_id`. The caller passes the full decoded |
| 301 | 328 | * arguments array so this function can extract whatever it needs. |
| 302 | 329 | * |
| 303 | - * @since 0.14.0 | |
| 304 | - * | |
| 305 | 330 | * @param string $tool_name Tool function name. |
| 306 | 331 | * @param array $args Decoded arguments from the model's tool call. |
| 307 | 332 | * @return array Tool result payload. |
| 308 | 333 | */ |
| 309 | -function desktop_mode_ai_search_dispatch_tool( $tool_name, array $args ) { | |
| 334 | +function openstation_ai_search_dispatch_tool( $tool_name, array $args ) { | |
| 310 | 335 | $offset = max( 0, (int) ( $args['offset'] ?? 0 ) ); |
| 311 | 336 | $query = isset( $args['query'] ) ? sanitize_text_field( (string) $args['query'] ) : ''; |
| 312 | 337 | |
| 313 | 338 | switch ( $tool_name ) { |
| 314 | 339 | case 'search_posts': |
| 315 | - return desktop_mode_ai_search_fetch_posts( 'post', $query, $offset ); | |
| 340 | + return openstation_ai_search_fetch_posts( 'post', $query, $offset ); | |
| 316 | 341 | case 'search_pages': |
| 317 | - return desktop_mode_ai_search_fetch_posts( 'page', $query, $offset ); | |
| 342 | + return openstation_ai_search_fetch_posts( 'page', $query, $offset ); | |
| 318 | 343 | case 'search_comments': |
| 319 | - return desktop_mode_ai_search_fetch_comments( $query, $offset ); | |
| 344 | + return openstation_ai_search_fetch_comments( $query, $offset ); | |
| 320 | 345 | case 'search_comments_by_post': |
| 321 | 346 | $post_id = max( 0, (int) ( $args['post_id'] ?? 0 ) ); |
| 322 | - return desktop_mode_ai_search_fetch_comments_by_post( $post_id, $query, $offset ); | |
| 347 | + return openstation_ai_search_fetch_comments_by_post( $post_id, $query, $offset ); | |
| 323 | 348 | case 'list_admin_pages': |
| 324 | 349 | return array( |
| 325 | 350 | 'tool' => 'list_admin_pages', |
| 326 | - 'pages' => desktop_mode_ai_get_admin_page_catalog(), | |
| 351 | + 'pages' => openstation_ai_get_admin_page_catalog(), | |
| 327 | 352 | ); |
| 328 | 353 | case 'search_wporg_plugins': |
| 329 | 354 | $q = isset( $args['query'] ) ? sanitize_text_field( (string) $args['query'] ) : ''; |
| 330 | - return desktop_mode_ai_fetch_wporg_plugins( $q ); | |
| 355 | + return openstation_ai_fetch_wporg_plugins( $q ); | |
| 331 | 356 | case 'get_php_error_log': |
| 332 | 357 | if ( ! current_user_can( 'manage_options' ) ) { |
| 333 | 358 | return array( |
| 334 | 359 | 'tool' => 'get_php_error_log', |
| @@ -337,9 +362,9 @@ | ||
| 337 | 362 | 'entries' => array(), |
| 338 | 363 | ); |
| 339 | 364 | } |
| 340 | 365 | $lines = isset( $args['lines'] ) ? max( 1, min( 500, (int) $args['lines'] ) ) : 50; |
| 341 | - return desktop_mode_ai_fetch_error_log( $lines ); | |
| 366 | + return openstation_ai_fetch_error_log( $lines ); | |
| 342 | 367 | } |
| 343 | 368 | |
| 344 | 369 | return array( |
| 345 | 370 | 'tool' => $tool_name, |
| @@ -356,11 +381,15 @@ | ||
| 356 | 381 | * Keyword-searches published posts or pages with WordPress's native search |
| 357 | 382 | * (`WP_Query` `s=`), returning data rich enough for the agent to compare |
| 358 | 383 | * AND for the UI to render links. |
| 359 | 384 | * |
| 360 | - * No AI analysis is required — every published post/page is searchable. | |
| 385 | + * No AI analysis is required — every published, non-password-protected post/page is searchable. | |
| 361 | 386 | * |
| 362 | - * @since 0.14.0 | |
| 387 | + * Password-protected posts are excluded (`has_password => false`): `publish` | |
| 388 | + * is also the status of a password-protected post, and this tool emits the | |
| 389 | + * stored body as an excerpt without ever passing through `post_password_required()`. | |
| 390 | + * Filtering at the query level keeps them out of both `items` and `found_posts`, | |
| 391 | + * so the `total` counter cannot become an oracle for their contents either. | |
| 363 | 392 | * |
| 364 | 393 | * @param string $post_type 'post' | 'page'. |
| 365 | 394 | * @param string $query Keyword search terms (may be empty to list newest). |
| 366 | 395 | * @param int $offset |
| @@ -365,15 +394,16 @@ | ||
| 365 | 394 | * @param string $query Keyword search terms (may be empty to list newest). |
| 366 | 395 | * @param int $offset |
| 367 | 396 | * @return array |
| 368 | 397 | */ |
| 369 | -function desktop_mode_ai_search_fetch_posts( $post_type, $query, $offset ) { | |
| 398 | +function openstation_ai_search_fetch_posts( $post_type, $query, $offset ) { | |
| 370 | 399 | $wp_query = new WP_Query( |
| 371 | 400 | array( |
| 372 | 401 | 'post_type' => $post_type, |
| 373 | 402 | 'post_status' => 'publish', |
| 403 | + 'has_password' => false, | |
| 374 | 404 | 's' => (string) $query, |
| 375 | - 'posts_per_page' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 405 | + 'posts_per_page' => OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 376 | 406 | 'offset' => $offset, |
| 377 | 407 | 'no_found_rows' => false, |
| 378 | 408 | 'update_post_term_cache' => false, |
| 379 | 409 | 'update_post_meta_cache' => false, |
| @@ -387,9 +417,9 @@ | ||
| 387 | 417 | 'id' => $post->ID, |
| 388 | 418 | 'type' => $post->post_type, |
| 389 | 419 | // Comparison data for the model — real title + content excerpt. |
| 390 | 420 | 'title' => wp_strip_all_tags( $post->post_title ), |
| 391 | - 'excerpt' => desktop_mode_ai_search_excerpt( $post->post_content ), | |
| 421 | + 'excerpt' => openstation_ai_search_excerpt( $post->post_content ), | |
| 392 | 422 | 'date' => $post->post_date ? substr( $post->post_date, 0, 10 ) : '', |
| 393 | 423 | // Links — passed through so the UI can link to the entity |
| 394 | 424 | // once the agent identifies a match. |
| 395 | 425 | 'url' => (string) get_permalink( $post ), |
| @@ -405,10 +435,10 @@ | ||
| 405 | 435 | 'offset' => $offset, |
| 406 | 436 | 'items' => $items, |
| 407 | 437 | 'count' => count( $items ), |
| 408 | 438 | 'total' => $total, |
| 409 | - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 410 | - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 439 | + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 440 | + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 411 | 441 | ); |
| 412 | 442 | } |
| 413 | 443 | |
| 414 | 444 | /** |
| @@ -413,14 +443,12 @@ | ||
| 413 | 443 | |
| 414 | 444 | /** |
| 415 | 445 | * Trims raw post/comment content into a plain-text excerpt for the model. |
| 416 | 446 | * |
| 417 | - * @since 0.11.0 | |
| 418 | - * | |
| 419 | 447 | * @param string $content Raw post/comment content. |
| 420 | 448 | * @return string |
| 421 | 449 | */ |
| 422 | -function desktop_mode_ai_search_excerpt( $content ) { | |
| 450 | +function openstation_ai_search_excerpt( $content ) { | |
| 423 | 451 | $text = wp_strip_all_tags( (string) $content ); |
| 424 | 452 | $text = preg_replace( '/\s+/', ' ', trim( $text ) ); |
| 425 | 453 | return (string) mb_substr( $text, 0, 300 ); |
| 426 | 454 | } |
| @@ -425,20 +453,92 @@ | ||
| 425 | 453 | return (string) mb_substr( $text, 0, 300 ); |
| 426 | 454 | } |
| 427 | 455 | |
| 428 | 456 | /** |
| 457 | + * Whether the current user may read a post the comment tools are about to | |
| 458 | + * surface. | |
| 459 | + * | |
| 460 | + * A comment being `approved` is a moderation decision — it says nothing about | |
| 461 | + * who may see the discussion. An approved comment can hang on a private, | |
| 462 | + * draft, or password-protected post the caller cannot reach, so the comment | |
| 463 | + * search tools must gate on the PARENT POST's visibility before returning the | |
| 464 | + * comment text or the parent title. Mirrors Core's | |
| 465 | + * `WP_REST_Comments_Controller::check_read_post_permission()`: | |
| 466 | + * | |
| 467 | + * - a password-protected parent needs the password satisfied or `edit_post`. | |
| 468 | + * `post_password_required()` honours the `wp-postpass` cookie Core's | |
| 469 | + * password form sets, and that is deliberate Core parity, not a gap: the | |
| 470 | + * cookie only exists because the caller already entered the correct | |
| 471 | + * password, and Core's comments controller reads the same cookie. The | |
| 472 | + * ability itself has no password input, so a caller who never unlocked | |
| 473 | + * the post front-end is refused; | |
| 474 | + * - a publicly viewable parent (public status AND viewable post type) is | |
| 475 | + * readable by anyone the ability admits; | |
| 476 | + * - a parent whose post TYPE is not viewable (an internal/admin-only CPT) | |
| 477 | + * needs `edit_post` — `read_post` cannot stand in, because a public status | |
| 478 | + * resolves it to plain `read` whatever the type's visibility, which is how | |
| 479 | + * Core's REST layer needs its own post-type gate too; | |
| 480 | + * - any other parent (private, draft, pending, …) needs `read_post`. | |
| 481 | + * | |
| 482 | + * @param int|WP_Post $post Post ID or object. | |
| 483 | + * @return bool | |
| 484 | + */ | |
| 485 | +function openstation_ai_can_read_post( $post ) { | |
| 486 | + // An id of 0 must stay unreadable: get_post( 0 ) falls back to the global | |
| 487 | + // $post, which would judge an orphaned comment against an unrelated post. | |
| 488 | + if ( is_numeric( $post ) && (int) $post <= 0 ) { | |
| 489 | + return false; | |
| 490 | + } | |
| 491 | + | |
| 492 | + $post = get_post( $post ); | |
| 493 | + if ( ! $post instanceof WP_Post ) { | |
| 494 | + return false; | |
| 495 | + } | |
| 496 | + | |
| 497 | + if ( post_password_required( $post ) && ! current_user_can( 'edit_post', $post->ID ) ) { | |
| 498 | + return false; | |
| 499 | + } | |
| 500 | + | |
| 501 | + if ( is_post_publicly_viewable( $post ) ) { | |
| 502 | + return true; | |
| 503 | + } | |
| 504 | + | |
| 505 | + $post_type = get_post_type_object( $post->post_type ); | |
| 506 | + if ( ! $post_type || ! is_post_type_viewable( $post_type ) ) { | |
| 507 | + return current_user_can( 'edit_post', $post->ID ); | |
| 508 | + } | |
| 509 | + | |
| 510 | + return current_user_can( 'read_post', $post->ID ); | |
| 511 | +} | |
| 512 | + | |
| 513 | +/** | |
| 514 | + * Whether the current user may read the post a comment is attached to. | |
| 515 | + * | |
| 516 | + * Used to drop comments on posts the caller cannot see from the comment | |
| 517 | + * search results. See {@see openstation_ai_can_read_post()}. | |
| 518 | + * | |
| 519 | + * @param int|WP_Comment $comment Comment ID or object. | |
| 520 | + * @return bool | |
| 521 | + */ | |
| 522 | +function openstation_ai_can_read_comment_parent( $comment ) { | |
| 523 | + $comment = get_comment( $comment ); | |
| 524 | + if ( ! $comment instanceof WP_Comment ) { | |
| 525 | + return false; | |
| 526 | + } | |
| 527 | + return openstation_ai_can_read_post( (int) $comment->comment_post_ID ); | |
| 528 | +} | |
| 529 | + | |
| 530 | +/** | |
| 429 | 531 | * Keyword-searches approved comments across all posts with WordPress's |
| 430 | 532 | * native comment search (`get_comments` `search=`). |
| 431 | 533 | * |
| 432 | 534 | * No AI analysis is required — every approved comment is searchable. |
| 433 | 535 | * |
| 434 | - * @since 0.14.0 | |
| 435 | - * | |
| 436 | 536 | * @param string $query Keyword search terms (may be empty to list newest). |
| 437 | 537 | * @param int $offset |
| 438 | 538 | * @return array |
| 439 | 539 | */ |
| 440 | -function desktop_mode_ai_search_fetch_comments( $query, $offset ) { | |
| 540 | +function openstation_ai_search_fetch_comments( $query, $offset ) { | |
| 441 | 541 | $base_args = array( |
| 442 | 542 | 'status' => 'approve', |
| 443 | 543 | 'type' => 'comment', |
| 444 | 544 | 'search' => (string) $query, |
| @@ -443,32 +543,55 @@ | ||
| 443 | 543 | 'type' => 'comment', |
| 444 | 544 | 'search' => (string) $query, |
| 445 | 545 | ); |
| 446 | 546 | |
| 447 | - $comments = get_comments( array_merge( $base_args, array( | |
| 448 | - 'number' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 449 | - 'offset' => $offset, | |
| 450 | - 'count' => false, | |
| 451 | - ) ) ); | |
| 547 | + $comments = get_comments( | |
| 548 | + array_merge( | |
| 549 | + $base_args, | |
| 550 | + array( | |
| 551 | + 'number' => OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 552 | + 'offset' => $offset, | |
| 553 | + 'count' => false, | |
| 554 | + ) | |
| 555 | + ) | |
| 556 | + ); | |
| 452 | 557 | |
| 453 | 558 | $total = (int) get_comments( array_merge( $base_args, array( 'count' => true ) ) ); |
| 454 | 559 | |
| 455 | 560 | // Prime the parent posts in a single query so the per-comment |
| 456 | 561 | // get_post() calls below are cache hits, not N+1 round-trips. |
| 457 | - $parent_ids = array_unique( array_map( | |
| 458 | - static function ( $c ) { | |
| 459 | - return (int) $c->comment_post_ID; | |
| 460 | - }, | |
| 461 | - $comments | |
| 462 | - ) ); | |
| 562 | + $parent_ids = array_unique( | |
| 563 | + array_map( | |
| 564 | + static function ( $c ) { | |
| 565 | + return (int) $c->comment_post_ID; | |
| 566 | + }, | |
| 567 | + $comments | |
| 568 | + ) | |
| 569 | + ); | |
| 463 | 570 | if ( $parent_ids ) { |
| 464 | 571 | _prime_post_caches( $parent_ids, false, false ); |
| 465 | 572 | } |
| 466 | 573 | |
| 574 | + // "Approved" is a moderation decision, not a visibility one: drop comments | |
| 575 | + // whose parent post the caller cannot read (private / draft / password / | |
| 576 | + // internal CPT), so the comment text and the parent title never leak. See | |
| 577 | + // openstation_ai_can_read_comment_parent(). | |
| 578 | + // | |
| 579 | + // This runs per row, after the batch, and that is the price of gating on | |
| 580 | + // per-caller readability: an Administrator reads comments on private | |
| 581 | + // posts and a reader who entered a post password reads that post's | |
| 582 | + // discussion, neither of which a single `post_status` or `has_password` | |
| 583 | + // query var can express. `total` therefore counts rows this caller does | |
| 584 | + // not get, and a batch can come back short. The alternative — a blanket | |
| 585 | + // publish-only, no-password query — would be exact and would also hide | |
| 586 | + // those discussions from the people entitled to them. | |
| 587 | + $comments = array_values( array_filter( $comments, 'openstation_ai_can_read_comment_parent' ) ); | |
| 588 | + | |
| 467 | 589 | $items = array(); |
| 468 | 590 | foreach ( $comments as $comment ) { |
| 591 | + // Readable, per the filter above. | |
| 469 | 592 | $parent_post = get_post( $comment->comment_post_ID ); |
| 470 | - $parent_title = $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : ''; | |
| 593 | + $parent_title = wp_strip_all_tags( $parent_post->post_title ); | |
| 471 | 594 | |
| 472 | 595 | $items[] = array( |
| 473 | 596 | 'id' => (int) $comment->comment_ID, |
| 474 | 597 | 'type' => 'comment', |
| @@ -473,14 +596,14 @@ | ||
| 473 | 596 | 'id' => (int) $comment->comment_ID, |
| 474 | 597 | 'type' => 'comment', |
| 475 | 598 | // Comparison data — real comment text + parent post title. |
| 476 | 599 | 'post_title' => $parent_title, |
| 477 | - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ), | |
| 600 | + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ), | |
| 478 | 601 | // Links. |
| 479 | 602 | 'url' => (string) get_comment_link( $comment ), |
| 480 | 603 | 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . (int) $comment->comment_ID ), |
| 481 | 604 | 'post_id' => (int) $comment->comment_post_ID, |
| 482 | - 'post_url' => $parent_post ? (string) get_permalink( $parent_post ) : '', | |
| 605 | + 'post_url' => (string) get_permalink( $parent_post ), | |
| 483 | 606 | ); |
| 484 | 607 | } |
| 485 | 608 | |
| 486 | 609 | return array( |
| @@ -489,10 +612,10 @@ | ||
| 489 | 612 | 'offset' => $offset, |
| 490 | 613 | 'items' => $items, |
| 491 | 614 | 'count' => count( $items ), |
| 492 | 615 | 'total' => $total, |
| 493 | - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 494 | - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 616 | + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 617 | + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 495 | 618 | ); |
| 496 | 619 | } |
| 497 | 620 | |
| 498 | 621 | // --------------------------------------------------------------------------- |
| @@ -506,16 +629,14 @@ | ||
| 506 | 629 | * identifying a post via `search_posts`, giving it a scoped, precise set of |
| 507 | 630 | * comments to compare against the user's description. An empty `$query` |
| 508 | 631 | * lists the post's comments without keyword filtering. |
| 509 | 632 | * |
| 510 | - * @since 0.14.0 | |
| 511 | - * | |
| 512 | 633 | * @param int $post_id The WordPress post ID. |
| 513 | 634 | * @param string $query Keyword search terms (may be empty). |
| 514 | 635 | * @param int $offset |
| 515 | 636 | * @return array Tool result payload. |
| 516 | 637 | */ |
| 517 | -function desktop_mode_ai_search_fetch_comments_by_post( $post_id, $query, $offset ) { | |
| 638 | +function openstation_ai_search_fetch_comments_by_post( $post_id, $query, $offset ) { | |
| 518 | 639 | $post_id = (int) $post_id; |
| 519 | 640 | |
| 520 | 641 | if ( $post_id <= 0 ) { |
| 521 | 642 | return array( |
| @@ -529,8 +650,25 @@ | ||
| 529 | 650 | 'error' => 'post_id must be a positive integer.', |
| 530 | 651 | ); |
| 531 | 652 | } |
| 532 | 653 | |
| 654 | + // The model picks the post id, so it is untrusted the same way an entity | |
| 655 | + // id is. Comments inherit their parent's reach: a thread on a private, | |
| 656 | + // draft, password-protected or internal-CPT post is not this user's to | |
| 657 | + // read, and the envelope below would otherwise echo its title back. | |
| 658 | + if ( ! openstation_ai_can_read_post( $post_id ) ) { | |
| 659 | + return array( | |
| 660 | + 'tool' => 'search_comments_by_post', | |
| 661 | + 'post_id' => $post_id, | |
| 662 | + 'offset' => $offset, | |
| 663 | + 'items' => array(), | |
| 664 | + 'count' => 0, | |
| 665 | + 'total' => 0, | |
| 666 | + 'has_more' => false, | |
| 667 | + 'error' => 'Post not found or not readable.', | |
| 668 | + ); | |
| 669 | + } | |
| 670 | + | |
| 533 | 671 | $base_args = array( |
| 534 | 672 | 'post_id' => $post_id, |
| 535 | 673 | 'status' => 'approve', |
| 536 | 674 | 'type' => 'comment', |
| @@ -536,18 +674,24 @@ | ||
| 536 | 674 | 'type' => 'comment', |
| 537 | 675 | 'search' => (string) $query, |
| 538 | 676 | ); |
| 539 | 677 | |
| 540 | - $comments = get_comments( array_merge( $base_args, array( | |
| 541 | - 'number' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 542 | - 'offset' => $offset, | |
| 543 | - 'count' => false, | |
| 544 | - ) ) ); | |
| 678 | + $comments = get_comments( | |
| 679 | + array_merge( | |
| 680 | + $base_args, | |
| 681 | + array( | |
| 682 | + 'number' => OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 683 | + 'offset' => $offset, | |
| 684 | + 'count' => false, | |
| 685 | + ) | |
| 686 | + ) | |
| 687 | + ); | |
| 545 | 688 | |
| 546 | 689 | $total = (int) get_comments( array_merge( $base_args, array( 'count' => true ) ) ); |
| 547 | 690 | |
| 691 | + // Readable, per the gate above. | |
| 548 | 692 | $parent_post = get_post( $post_id ); |
| 549 | - $parent_title = $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : ''; | |
| 693 | + $parent_title = wp_strip_all_tags( $parent_post->post_title ); | |
| 550 | 694 | |
| 551 | 695 | $items = array(); |
| 552 | 696 | foreach ( $comments as $comment ) { |
| 553 | 697 | $items[] = array( |
| @@ -554,9 +698,9 @@ | ||
| 554 | 698 | 'id' => (int) $comment->comment_ID, |
| 555 | 699 | 'type' => 'comment', |
| 556 | 700 | 'post_id' => $post_id, |
| 557 | 701 | 'post_title' => $parent_title, |
| 558 | - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ), | |
| 702 | + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ), | |
| 559 | 703 | 'url' => (string) get_comment_link( $comment ), |
| 560 | 704 | 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . (int) $comment->comment_ID ), |
| 561 | 705 | ); |
| 562 | 706 | } |
| @@ -569,10 +713,10 @@ | ||
| 569 | 713 | 'offset' => $offset, |
| 570 | 714 | 'items' => $items, |
| 571 | 715 | 'count' => count( $items ), |
| 572 | 716 | 'total' => $total, |
| 573 | - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 574 | - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE, | |
| 717 | + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total, | |
| 718 | + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE, | |
| 575 | 719 | ); |
| 576 | 720 | } |
| 577 | 721 | |
| 578 | 722 | // --------------------------------------------------------------------------- |
| @@ -587,22 +731,45 @@ | ||
| 587 | 731 | * required. Comments opportunistically surface the `spam` / `harmful` |
| 588 | 732 | * verdict when the comment-moderation analysis happens to have run, but |
| 589 | 733 | * its absence never blocks the entity from being returned. |
| 590 | 734 | * |
| 591 | - * @since 0.14.0 | |
| 735 | + * The id arrives from the MODEL's final answer, and model output is | |
| 736 | + * untrusted — a search turn can be driven by attacker-controlled content, so | |
| 737 | + * an injected instruction could name an entity the search tools never | |
| 738 | + * surfaced. Hydration therefore re-checks readability itself instead of | |
| 739 | + * trusting that the id came out of a filtered tool result: posts/pages go | |
| 740 | + * through {@see openstation_ai_can_read_post()}, and so does a comment's | |
| 741 | + * PARENT, because the comment record carries that post's title and permalink | |
| 742 | + * — approval is a moderation decision, not a visibility one, and an approved | |
| 743 | + * comment outlives its post being switched to private or back to draft. | |
| 744 | + * Reading an unapproved comment needs `edit_comment`, mirroring Core's | |
| 745 | + * `WP_REST_Comments_Controller::check_read_permission()`; the AI moderation | |
| 746 | + * verdicts and the wp-admin edit link are narrower still. Unreadable ids | |
| 747 | + * resolve to null, indistinguishable from nonexistent ones. | |
| 592 | 748 | * |
| 593 | 749 | * @param string $entity_type 'post' | 'page' | 'comment'. |
| 594 | 750 | * @param int $entity_id |
| 595 | 751 | * @return array|null |
| 596 | 752 | */ |
| 597 | -function desktop_mode_ai_search_build_entity( $entity_type, $entity_id ) { | |
| 753 | +function openstation_ai_search_build_entity( $entity_type, $entity_id ) { | |
| 598 | 754 | $entity_id = (int) $entity_id; |
| 599 | 755 | |
| 600 | 756 | if ( in_array( $entity_type, array( 'post', 'page' ), true ) ) { |
| 601 | 757 | $post = get_post( $entity_id ); |
| 602 | - if ( ! $post instanceof WP_Post ) { | |
| 758 | + | |
| 759 | + // The id must resolve to an actual post or page. The gate below answers | |
| 760 | + // type visibility on its own, so this is the contract rather than the | |
| 761 | + // lock: the record's `type` is what the client renders the card from, | |
| 762 | + // and post/page is what the search tools surface. A viewable CPT row | |
| 763 | + // would pass the gate and still have no card to land in. | |
| 764 | + if ( ! $post instanceof WP_Post || ! in_array( $post->post_type, array( 'post', 'page' ), true ) ) { | |
| 603 | 765 | return null; |
| 604 | 766 | } |
| 767 | + | |
| 768 | + if ( ! openstation_ai_can_read_post( $post ) ) { | |
| 769 | + return null; | |
| 770 | + } | |
| 771 | + | |
| 605 | 772 | return array( |
| 606 | 773 | 'id' => $entity_id, |
| 607 | 774 | 'type' => $post->post_type, |
| 608 | 775 | 'title' => wp_strip_all_tags( $post->post_title ), |
| @@ -609,31 +776,55 @@ | ||
| 609 | 776 | 'status' => $post->post_status, |
| 610 | 777 | 'date' => $post->post_date ? substr( $post->post_date, 0, 10 ) : '', |
| 611 | 778 | 'url' => (string) get_permalink( $post ), |
| 612 | 779 | 'edit_url' => (string) get_edit_post_link( $entity_id, 'raw' ), |
| 613 | - 'excerpt' => desktop_mode_ai_search_excerpt( $post->post_content ), | |
| 780 | + 'excerpt' => openstation_ai_search_excerpt( $post->post_content ), | |
| 614 | 781 | ); |
| 615 | 782 | } |
| 616 | 783 | |
| 617 | 784 | if ( 'comment' === $entity_type ) { |
| 618 | 785 | $comment = get_comment( $entity_id ); |
| 619 | - if ( ! $comment instanceof WP_Comment ) { | |
| 786 | + | |
| 787 | + // The parent's reach bounds the comment's: approval is a moderation | |
| 788 | + // decision, not a visibility one, and this record carries the parent's | |
| 789 | + // title and permalink — so without this check, naming a comment id | |
| 790 | + // would walk straight around the post branch's gate above. | |
| 791 | + if ( ! $comment instanceof WP_Comment || ! openstation_ai_can_read_comment_parent( $comment ) ) { | |
| 620 | 792 | return null; |
| 621 | 793 | } |
| 622 | - $meta = desktop_mode_ai_get_meta( 'comment', $entity_id ); | |
| 623 | - $parent_post = get_post( $comment->comment_post_ID ); | |
| 624 | - return array( | |
| 794 | + | |
| 795 | + // Reading an unapproved comment is an editor's business, per Core's | |
| 796 | + // WP_REST_Comments_Controller::check_read_permission(). | |
| 797 | + if ( '1' !== (string) $comment->comment_approved && ! current_user_can( 'edit_comment', $entity_id ) ) { | |
| 798 | + return null; | |
| 799 | + } | |
| 800 | + | |
| 801 | + // The AI verdicts are the moderation queue's data, so they follow the | |
| 802 | + // moderation capability rather than the per-comment edit one. | |
| 803 | + $can_moderate = current_user_can( 'moderate_comments' ); | |
| 804 | + $parent_post = get_post( (int) $comment->comment_post_ID ); | |
| 805 | + | |
| 806 | + $meta = $can_moderate ? openstation_ai_get_meta( 'comment', $entity_id ) : null; | |
| 807 | + $entity = array( | |
| 625 | 808 | 'id' => $entity_id, |
| 626 | 809 | 'type' => 'comment', |
| 627 | - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ), | |
| 810 | + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ), | |
| 628 | 811 | 'post_id' => (int) $comment->comment_post_ID, |
| 629 | - 'post_title' => $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : '', | |
| 630 | - 'post_url' => $parent_post ? (string) get_permalink( $parent_post ) : '', | |
| 812 | + 'post_title' => wp_strip_all_tags( $parent_post->post_title ), | |
| 813 | + 'post_url' => (string) get_permalink( $parent_post ), | |
| 631 | 814 | 'url' => (string) get_comment_link( $comment ), |
| 632 | - 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . $entity_id ), | |
| 633 | - 'harmful' => $meta ? (bool) ( $meta['harmful'] ?? false ) : false, | |
| 634 | - 'spam' => $meta ? (bool) ( $meta['spam'] ?? false ) : false, | |
| 815 | + 'edit_url' => current_user_can( 'edit_comment', $entity_id ) | |
| 816 | + ? admin_url( 'comment.php?action=editcomment&c=' . $entity_id ) | |
| 817 | + : '', | |
| 635 | 818 | ); |
| 819 | + | |
| 820 | + // Moderation verdicts are for moderators only. | |
| 821 | + if ( $can_moderate ) { | |
| 822 | + $entity['harmful'] = $meta ? (bool) ( $meta['harmful'] ?? false ) : false; | |
| 823 | + $entity['spam'] = $meta ? (bool) ( $meta['spam'] ?? false ) : false; | |
| 824 | + } | |
| 825 | + | |
| 826 | + return $entity; | |
| 636 | 827 | } |
| 637 | 828 | |
| 638 | 829 | return null; |
| 639 | 830 | } |
| @@ -642,31 +833,173 @@ | ||
| 642 | 833 | // Agentic search loop |
| 643 | 834 | // --------------------------------------------------------------------------- |
| 644 | 835 | |
| 645 | 836 | /** |
| 646 | - * Returns a friendly progress message for a tool name — surfaced to the | |
| 647 | - * client via SSE so the user sees "Looking through your posts…" rather | |
| 648 | - * than the raw tool call. | |
| 837 | + * Returns the label for the "keep looking" button on an exhausted search. | |
| 649 | 838 | * |
| 650 | - * @since 0.14.0 | |
| 839 | + * One full sentence per resumable tool: a noun interpolated into a shared | |
| 840 | + * template cannot be translated. | |
| 651 | 841 | * |
| 652 | - * @param string $tool_name | |
| 842 | + * @param string $resume_tool Tool the client would resume from. | |
| 843 | + * @param int $from_item 1-based index of the next item to search. | |
| 653 | 844 | * @return string |
| 654 | 845 | */ |
| 655 | -function desktop_mode_ai_progress_message( $tool_name ) { | |
| 656 | - switch ( $tool_name ) { | |
| 657 | - case 'search_posts': return 'Looking through your posts…'; | |
| 658 | - case 'search_pages': return 'Checking your pages…'; | |
| 659 | - case 'search_comments': return 'Reading through comments…'; | |
| 660 | - case 'search_comments_by_post': return 'Scanning comments on that post…'; | |
| 661 | - case 'list_admin_pages': return 'Finding the right admin page…'; | |
| 662 | - case 'search_wporg_plugins': return 'Searching the WordPress.org plugin directory…'; | |
| 663 | - case 'get_php_error_log': return 'Tailing the PHP error log…'; | |
| 846 | +function openstation_ai_continue_label( $resume_tool, $from_item ) { | |
| 847 | + switch ( $resume_tool ) { | |
| 848 | + case 'search_pages': | |
| 849 | + /* translators: %d: 1-based index of the next page to search. */ | |
| 850 | + return sprintf( __( 'Continue searching in pages (from item %d)', 'desktop-mode' ), $from_item ); | |
| 851 | + case 'search_comments': | |
| 852 | + /* translators: %d: 1-based index of the next comment to search. */ | |
| 853 | + return sprintf( __( 'Continue searching in comments (from item %d)', 'desktop-mode' ), $from_item ); | |
| 854 | + default: | |
| 855 | + /* translators: %d: 1-based index of the next post to search. */ | |
| 856 | + return sprintf( __( 'Continue searching in posts (from item %d)', 'desktop-mode' ), $from_item ); | |
| 664 | 857 | } |
| 665 | - return 'Thinking…'; | |
| 666 | 858 | } |
| 667 | 859 | |
| 668 | 860 | /** |
| 861 | + * Returns the tools a client may resume an exhausted search from. | |
| 862 | + * | |
| 863 | + * Single source of truth for every `resume_tool` allowlist: the REST | |
| 864 | + * arg sanitizer and the `$initial_tool` validation inside | |
| 865 | + * `openstation_ai_run_search()`. `search_comments_by_post` is | |
| 866 | + * deliberately absent: the `continue` payload carries no `post_id`, so | |
| 867 | + * it cannot truly resume — exhausted runs map it to `search_comments` | |
| 868 | + * when building the `continue` object. | |
| 869 | + * | |
| 870 | + * @return string[] Tool names. | |
| 871 | + */ | |
| 872 | +function openstation_ai_search_resumable_tools() { | |
| 873 | + return array( 'search_posts', 'search_pages', 'search_comments' ); | |
| 874 | +} | |
| 875 | + | |
| 876 | +/** | |
| 877 | + * Projects a tool's `parameters` schema onto the provider-supported subset. | |
| 878 | + * | |
| 879 | + * The Abilities API (and plugin-supplied tools) may use the full breadth of JSON | |
| 880 | + * Schema, but the provider's tool-schema validator does not — and it rejects the | |
| 881 | + * whole request, not just the offending tool, so ONE tool with a | |
| 882 | + * legal-but-unsupported schema makes the entire assistant return a 400 before the | |
| 883 | + * model runs. Three shapes that are valid JSON Schema, but rejected here, have | |
| 884 | + * been seen in the wild (see the linked issue): | |
| 885 | + * | |
| 886 | + * 1. `type` as an array, e.g. ['object','null'] — an ability's GET/null | |
| 887 | + * run-path. The provider wants the literal string "object" at the top level. | |
| 888 | + * 2. A top-level `oneOf` / `anyOf` / `allOf`, e.g. "post_id OR slug". Rejected | |
| 889 | + * with "does not support oneOf, allOf, or anyOf at the top level". | |
| 890 | + * 3. `properties` as an empty PHP array, which encodes to JSON as `[]` where an | |
| 891 | + * object schema needs `{}`. | |
| 892 | + * | |
| 893 | + * This reshapes only the copy advertised to the model. The ability itself is | |
| 894 | + * untouched: `WP_Ability::execute()` still validates arguments against the real | |
| 895 | + * schema and `permission_callback` still gates execution, so nothing loses | |
| 896 | + * enforcement — the model is simply told the constraint in prose (the tool | |
| 897 | + * description) instead of in a schema construct the provider can't parse. Only | |
| 898 | + * the TOP level is constrained; a combinator nested inside a property is a real | |
| 899 | + * constraint the provider accepts, so it is left intact. | |
| 900 | + * | |
| 901 | + * @param mixed $schema A tool parameters schema (array), or empty/non-array. | |
| 902 | + * @return array A provider-safe object schema for a tool `parameters` block. | |
| 903 | + */ | |
| 904 | +function openstation_ai_normalize_tool_schema( $schema ) { | |
| 905 | + if ( ! is_array( $schema ) || empty( $schema ) ) { | |
| 906 | + return array( | |
| 907 | + 'type' => 'object', | |
| 908 | + 'properties' => (object) array(), | |
| 909 | + ); | |
| 910 | + } | |
| 911 | + | |
| 912 | + // Recursively drop the WordPress-only arg-schema keys | |
| 913 | + // (`sanitize_callback` / `validate_callback` / `arg_options`) — | |
| 914 | + // see the helper's docblock for why this must run at every depth. | |
| 915 | + $schema = openstation_ai_strip_wp_schema_keys( $schema ); | |
| 916 | + | |
| 917 | + // Top-level tool parameters must be the literal "object", never a union. | |
| 918 | + $schema['type'] = 'object'; | |
| 919 | + | |
| 920 | + // Strip top-level combinators — the provider rejects them outright, and one | |
| 921 | + // such tool 400s the whole request. Nested combinators are left alone. | |
| 922 | + unset( $schema['oneOf'], $schema['allOf'], $schema['anyOf'] ); | |
| 923 | + | |
| 924 | + // An empty PHP array encodes as `[]`; an object schema's properties need `{}`. | |
| 925 | + // A schema with no `properties` at all (e.g. one whose only content was a | |
| 926 | + // stripped top-level combinator) gets an empty object for the same reason. | |
| 927 | + if ( ! isset( $schema['properties'] ) || array() === $schema['properties'] ) { | |
| 928 | + $schema['properties'] = (object) array(); | |
| 929 | + } | |
| 930 | + | |
| 931 | + return $schema; | |
| 932 | +} | |
| 933 | + | |
| 934 | +/** | |
| 935 | + * Recursively removes the WordPress-only arg-schema keys from a tool schema. | |
| 936 | + * | |
| 937 | + * WordPress arg schemas legally extend JSON Schema with PHP-callable keys — | |
| 938 | + * `sanitize_callback`, `validate_callback`, and (on meta args) `arg_options`. | |
| 939 | + * Abilities registered from REST arg definitions carry them at every property | |
| 940 | + * level, and providers that validate tool schemas strictly reject any unknown | |
| 941 | + * field ("Invalid JSON payload received. Unknown name \"sanitize_callback\""), | |
| 942 | + * 400-ing the whole request over one property. | |
| 943 | + * | |
| 944 | + * The walk is structure-aware, not a blind key sweep: maps under `properties` / | |
| 945 | + * `patternProperties` are keyed by PROPERTY NAME, so a property that happens to | |
| 946 | + * be called `sanitize_callback` is preserved — only its schema value is | |
| 947 | + * cleaned. Recursion covers every position a subschema can occupy: property | |
| 948 | + * values, `items` (single schema or tuple list), array-shaped | |
| 949 | + * `additionalProperties`, and nested `oneOf` / `allOf` / `anyOf` branches | |
| 950 | + * (which are kept — only the TOP level of the tool schema strips combinators). | |
| 951 | + * | |
| 952 | + * @param array $schema A tool parameters (sub)schema. | |
| 953 | + * @return array The schema without WP-only keys, at any depth. | |
| 954 | + */ | |
| 955 | +function openstation_ai_strip_wp_schema_keys( array $schema ) { | |
| 956 | + unset( $schema['sanitize_callback'], $schema['validate_callback'], $schema['arg_options'] ); | |
| 957 | + | |
| 958 | + foreach ( array( 'properties', 'patternProperties' ) as $map_key ) { | |
| 959 | + if ( isset( $schema[ $map_key ] ) && is_array( $schema[ $map_key ] ) ) { | |
| 960 | + foreach ( $schema[ $map_key ] as $name => $sub ) { | |
| 961 | + if ( is_array( $sub ) ) { | |
| 962 | + $schema[ $map_key ][ $name ] = openstation_ai_strip_wp_schema_keys( $sub ); | |
| 963 | + } | |
| 964 | + } | |
| 965 | + } | |
| 966 | + } | |
| 967 | + | |
| 968 | + if ( isset( $schema['items'] ) && is_array( $schema['items'] ) ) { | |
| 969 | + $items = $schema['items']; | |
| 970 | + $is_list = array_keys( $items ) === range( 0, count( $items ) - 1 ); | |
| 971 | + if ( $is_list && array() !== $items ) { | |
| 972 | + // Tuple form — a list of schemas. | |
| 973 | + foreach ( $items as $i => $sub ) { | |
| 974 | + if ( is_array( $sub ) ) { | |
| 975 | + $items[ $i ] = openstation_ai_strip_wp_schema_keys( $sub ); | |
| 976 | + } | |
| 977 | + } | |
| 978 | + $schema['items'] = $items; | |
| 979 | + } else { | |
| 980 | + $schema['items'] = openstation_ai_strip_wp_schema_keys( $items ); | |
| 981 | + } | |
| 982 | + } | |
| 983 | + | |
| 984 | + if ( isset( $schema['additionalProperties'] ) && is_array( $schema['additionalProperties'] ) ) { | |
| 985 | + $schema['additionalProperties'] = openstation_ai_strip_wp_schema_keys( $schema['additionalProperties'] ); | |
| 986 | + } | |
| 987 | + | |
| 988 | + foreach ( array( 'oneOf', 'allOf', 'anyOf' ) as $combinator ) { | |
| 989 | + if ( isset( $schema[ $combinator ] ) && is_array( $schema[ $combinator ] ) ) { | |
| 990 | + foreach ( $schema[ $combinator ] as $i => $sub ) { | |
| 991 | + if ( is_array( $sub ) ) { | |
| 992 | + $schema[ $combinator ][ $i ] = openstation_ai_strip_wp_schema_keys( $sub ); | |
| 993 | + } | |
| 994 | + } | |
| 995 | + } | |
| 996 | + } | |
| 997 | + | |
| 998 | + return $schema; | |
| 999 | +} | |
| 1000 | + | |
| 1001 | +/** | |
| 669 | 1002 | * Runs the agentic content-search loop. |
| 670 | 1003 | * |
| 671 | 1004 | * The model receives focused tools — search_posts, search_pages, |
| 672 | 1005 | * search_comments, search_comments_by_post — and a system prompt that |
| @@ -678,29 +1011,15 @@ | ||
| 678 | 1011 | * For continuation runs ($initial_tool + $start_offset > 0), the system |
| 679 | 1012 | * message primes the agent to resume from the last searched position with |
| 680 | 1013 | * the same keywords. |
| 681 | 1014 | * |
| 682 | - * @since 0.14.0 | |
| 683 | - * | |
| 684 | - * @param string $api_key OpenAI API key. | |
| 685 | 1015 | * @param string $query User's natural-language search. |
| 686 | 1016 | * @param string|null $initial_tool Tool name to resume from, or null for fresh search. |
| 687 | 1017 | * @param int $start_offset Offset to resume from (0 for fresh). |
| 688 | - * @param callable|null $on_progress Optional progress emitter for SSE ticks. | |
| 689 | 1018 | * @param array $extra Extensibility context (command tools, prompt overrides, …). |
| 690 | 1019 | * @return array|WP_Error |
| 691 | 1020 | */ |
| 692 | -function desktop_mode_ai_run_search( $api_key, $query, $initial_tool = null, $start_offset = 0, $on_progress = null, array $extra = array() ) { | |
| 693 | - /** | |
| 694 | - * Progress emitter — sends a tick to the caller if they provided a | |
| 695 | - * callable; no-op otherwise. Callers use this to render real-time | |
| 696 | - * status to the user via SSE. | |
| 697 | - */ | |
| 698 | - $emit = static function ( array $event ) use ( $on_progress ) { | |
| 699 | - if ( is_callable( $on_progress ) ) { | |
| 700 | - $on_progress( $event ); | |
| 701 | - } | |
| 702 | - }; | |
| 1021 | +function openstation_ai_run_search( $query, $initial_tool = null, $start_offset = 0, array $extra = array() ) { | |
| 703 | 1022 | $start_offset = max( 0, (int) $start_offset ); |
| 704 | 1023 | $search_tools = array( 'search_posts', 'search_pages', 'search_comments', 'search_comments_by_post' ); |
| 705 | 1024 | $valid_tools = array_merge( |
| 706 | 1025 | $search_tools, |
| @@ -712,11 +1031,11 @@ | ||
| 712 | 1031 | // tools from the server-side registry, system-prompt overrides, and a |
| 713 | 1032 | // per-call request_id for observability fanout. |
| 714 | 1033 | // ----------------------------------------------------------------------- |
| 715 | 1034 | $user_id = isset( $extra['user_id'] ) ? (int) $extra['user_id'] : get_current_user_id(); |
| 716 | - $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && $extra['request_id'] !== '' | |
| 1035 | + $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && '' !== $extra['request_id'] | |
| 717 | 1036 | ? (string) $extra['request_id'] |
| 718 | - : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ) ); | |
| 1037 | + : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ) ); | |
| 719 | 1038 | $command_tools_raw = isset( $extra['command_tools'] ) && is_array( $extra['command_tools'] ) ? $extra['command_tools'] : array(); |
| 720 | 1039 | $system_prompt_text = isset( $extra['system_prompt_text'] ) && is_string( $extra['system_prompt_text'] ) ? $extra['system_prompt_text'] : ''; |
| 721 | 1040 | $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true ) |
| 722 | 1041 | ? (string) $extra['system_prompt_mode'] |
| @@ -723,14 +1042,12 @@ | ||
| 723 | 1042 | : 'append'; |
| 724 | 1043 | |
| 725 | 1044 | /** |
| 726 | 1045 | * Fires once per `/ai/search` invocation, after validation and |
| 727 | - * before any OpenAI call. First anchor in the observability trio | |
| 728 | - * (`desktop_mode_ai_search_started` / `desktop_mode_ai_tool_called` | |
| 729 | - * / `desktop_mode_ai_search_completed`). | |
| 1046 | + * before any the provider call. First anchor in the observability trio | |
| 1047 | + * (`openstation_ai_search_started` / `openstation_ai_tool_called` | |
| 1048 | + * / `openstation_ai_search_completed`). | |
| 730 | 1049 | * |
| 731 | - * @since 0.17.0 | |
| 732 | - * | |
| 733 | 1050 | * @param array $context { |
| 734 | 1051 | * @type string $query User query. |
| 735 | 1052 | * @type int $user_id |
| 736 | 1053 | * @type string $request_id UUID correlating the whole run. |
| @@ -736,9 +1053,9 @@ | ||
| 736 | 1053 | * @type string $request_id UUID correlating the whole run. |
| 737 | 1054 | * } |
| 738 | 1055 | */ |
| 739 | 1056 | do_action( |
| 740 | - 'desktop_mode_ai_search_started', | |
| 1057 | + 'openstation_ai_search_started', | |
| 741 | 1058 | array( |
| 742 | 1059 | 'query' => $query, |
| 743 | 1060 | 'user_id' => $user_id, |
| 744 | 1061 | 'request_id' => $request_id, |
| @@ -744,9 +1061,9 @@ | ||
| 744 | 1061 | 'request_id' => $request_id, |
| 745 | 1062 | ) |
| 746 | 1063 | ); |
| 747 | 1064 | |
| 748 | - if ( $initial_tool !== null && ! in_array( $initial_tool, $search_tools, true ) ) { | |
| 1065 | + if ( null !== $initial_tool && ! in_array( $initial_tool, openstation_ai_search_resumable_tools(), true ) ) { | |
| 749 | 1066 | $initial_tool = null; |
| 750 | 1067 | } |
| 751 | 1068 | |
| 752 | 1069 | // When resuming a previous exhausted run, prime the model with the |
| @@ -752,9 +1069,9 @@ | ||
| 752 | 1069 | // When resuming a previous exhausted run, prime the model with the |
| 753 | 1070 | // starting position so it doesn't waste iterations on already-searched |
| 754 | 1071 | // content. |
| 755 | 1072 | $continuation_note = ''; |
| 756 | - if ( $initial_tool !== null && ( $start_offset > 0 || $initial_tool !== 'search_posts' ) ) { | |
| 1073 | + if ( null !== $initial_tool && ( $start_offset > 0 || 'search_posts' !== $initial_tool ) ) { | |
| 757 | 1074 | $continuation_note = sprintf( |
| 758 | 1075 | "\n\nNote: This is a continuation of a previous search. Begin with %s using the same search keywords at offset=%d and work forward.", |
| 759 | 1076 | $initial_tool, |
| 760 | 1077 | $start_offset |
| @@ -767,13 +1084,14 @@ | ||
| 767 | 1084 | 1. **Find content** they've written (posts, pages, comments) by describing it in natural language. |
| 768 | 1085 | 2. **Navigate wp-admin** when they ask where to find something (\"where are the categories?\", \"how do I manage users?\"). |
| 769 | 1086 | 3. **Recommend plugins** from the official WordPress.org directory when they need extra functionality. |
| 770 | 1087 | 4. **Check the site's error log** when they're troubleshooting something. |
| 771 | -5. **Chat** — if the request doesn't fit the above, just answer conversationally. | |
| 1088 | +5. **Answer anything else your tools can** — you may have more tools than the ones described below (WordPress and other plugins register their own, e.g. site / user / environment / version info). Your actual tool list is authoritative: whenever a tool can answer the request, call it and summarise the result, even if it isn't in the list below. | |
| 1089 | +6. **Chat** — only when no tool fits, answer conversationally. | |
| 772 | 1090 | |
| 773 | 1091 | Tone: warm, concise, helpful. First person (\"I found this post…\", \"Here's where you'll find that…\"). Not a search engine tone — no \"Match found\" or robot phrasing. |
| 774 | 1092 | |
| 775 | -Tools: | |
| 1093 | +Tools (your actual tool list may include more than these — use any that fit the request): | |
| 776 | 1094 | - search_posts / search_pages / search_comments / search_comments_by_post(post_id, query, offset): keyword content-lookup tools backed by WordPress's native search. Distil the user's description into the essential search keywords and pass them as `query` (e.g. \"that long post about making paella\" → query \"paella\"). Inspect the returned title + excerpt and stop once you find a good match. If has_more is true and nothing matched, call the same tool with next_offset (reuse the same query), or try different keywords. When the query mentions BOTH a post and a comment on that post, call search_posts first to identify the post, THEN search_comments_by_post with the ID. If keyword search returns nothing, broaden or simplify the keywords before giving up. |
| 777 | 1095 | - list_admin_pages: returns the full catalog of wp-admin destinations. Call once per navigation query, then select the 1-3 most relevant entries. |
| 778 | 1096 | - search_wporg_plugins(query): searches the official WordPress.org plugin directory. Use when the user asks for a plugin recommendation (\"a plugin for X\", \"is there a plugin that does Y?\"). Returns up to 10 plugins with ratings, install counts, and admin install URLs. Present the best 3-5 as admin_links with titles like \"Plugin Name · 5M+ installs · 4.8★\" (rating is 0-100, divide by 20 to get stars). |
| 779 | 1097 | - get_php_error_log(lines): reads the tail of the site's PHP error log. Admin-only (the tool itself checks). Use when the user asks \"any errors?\", \"check the logs\", \"what's broken?\", troubleshooting. Each entry has { timestamp, level, message }. Summarise the most important errors (Fatal > Warning > Notice) in your message; don't copy-paste everything. |
| @@ -779,17 +1097,18 @@ | ||
| 779 | 1097 | - get_php_error_log(lines): reads the tail of the site's PHP error log. Admin-only (the tool itself checks). Use when the user asks \"any errors?\", \"check the logs\", \"what's broken?\", troubleshooting. Each entry has { timestamp, level, message }. Summarise the most important errors (Fatal > Warning > Notice) in your message; don't copy-paste everything. |
| 780 | 1098 | |
| 781 | 1099 | Choosing which track: |
| 782 | 1100 | - \"I remember a post/page/comment about X\" → the corresponding search_* tool. |
| 783 | -- \"where can I find X?\" / \"how do I manage Y?\" → list_admin_pages. | |
| 1101 | +- \"where can I find X?\", \"how do I manage Y?\", \"create/add/new …\", \"take me to …\", \"open …\", \"switch/activate …\", or any navigate/do intent → list_admin_pages, then suggest the 1-3 best destinations as admin_links (answer_type \"navigation\"). You suggest the link; the user opens it — never assume it's opened. | |
| 784 | 1102 | - \"plugin for X\" / \"recommend a plugin\" → search_wporg_plugins → present as admin_links. |
| 785 | 1103 | - \"any errors?\" / \"check logs\" / troubleshooting → get_php_error_log → summarise in chat. |
| 1104 | +- Any other factual question about the site (its version, PHP/environment, the current user, or anything one of your other tools covers) → call that tool, then summarise its result with answer_type \"chat\". | |
| 786 | 1105 | - Greeting, unclear, or chit-chat → answer_type \"chat\" with a brief helpful message (no tools needed). |
| 787 | 1106 | |
| 788 | 1107 | Always return one of three answer_type values in the structured output: |
| 789 | 1108 | - \"entity\": you identified a single post/page/comment. Fill entity_id + entity_type. admin_links = null. |
| 790 | 1109 | - \"navigation\": you're recommending admin pages OR plugin install links. Fill admin_links. entity_id + entity_type = null. |
| 791 | -- \"chat\": you're answering conversationally — including log summaries, greetings, \"nothing found\" answers. entity_id + entity_type + admin_links all null. | |
| 1110 | +- \"chat\": you're answering conversationally — including results summarised from any tool (error logs, environment/version info, other plugins' tools), greetings, and \"nothing found\" answers. entity_id + entity_type + admin_links all null. | |
| 792 | 1111 | |
| 793 | 1112 | The message field is always a friendly sentence or two shown directly to the user. Make it sound like a person, not a log line. |
| 794 | 1113 | "; |
| 795 | 1114 | |
| @@ -799,12 +1118,13 @@ | ||
| 799 | 1118 | |
| 800 | 1119 | // ----------------------------------------------------------------------- |
| 801 | 1120 | // System-prompt extensibility. All three layers — appendix filter, |
| 802 | 1121 | // client override (append/replace with capability gate), and final |
| 803 | - // transform — live in `desktop_mode_ai_compose_instructions()` so the | |
| 1122 | + // transform — live in `openstation_ai_compose_instructions()` so the | |
| 804 | 1123 | // primary run and the follow-up leg stay in lockstep. See the |
| 805 | - // helper for the order of application; see the filter docblocks | |
| 806 | - // below for the public contract on each extension point. | |
| 1124 | + // helper for the order of application; the filter docblocks at its | |
| 1125 | + // `apply_filters()` call sites carry the public contract on each | |
| 1126 | + // extension point. | |
| 807 | 1127 | // ----------------------------------------------------------------------- |
| 808 | 1128 | $prompt_context = array( |
| 809 | 1129 | 'query' => $query, |
| 810 | 1130 | 'user_id' => $user_id, |
| @@ -810,68 +1130,54 @@ | ||
| 810 | 1130 | 'user_id' => $user_id, |
| 811 | 1131 | 'request_id' => $request_id, |
| 812 | 1132 | ); |
| 813 | 1133 | |
| 814 | - /** | |
| 815 | - * Short-circuit extension — appended to the built-in instructions | |
| 816 | - * verbatim. Use this when a plugin just wants to add domain | |
| 817 | - * context (room list, product catalogue, company jargon) without | |
| 818 | - * restructuring the core rules. Fires for both the primary | |
| 819 | - * `/ai/search` run and the follow-up composed-reply leg. | |
| 820 | - * | |
| 821 | - * @since 0.17.0 | |
| 822 | - * | |
| 823 | - * @param string $appendix Accumulated appendix. Default empty. | |
| 824 | - * @param array $context { query, user_id, request_id, client_override, phase? }. | |
| 825 | - */ | |
| 826 | - | |
| 827 | - /** | |
| 828 | - * Capability required for a client to send | |
| 829 | - * `system_prompt: { mode: 'replace' }`. Defaults to `manage_options` | |
| 830 | - * — replacing the whole prompt can effectively hijack the | |
| 831 | - * assistant, so it's admin-only out of the box. | |
| 832 | - * | |
| 833 | - * @since 0.17.0 | |
| 834 | - * | |
| 835 | - * @param string $capability Default `manage_options`. | |
| 836 | - * @param array $context | |
| 837 | - */ | |
| 838 | - | |
| 839 | - /** | |
| 840 | - * Final transform pass. Fires after the built-in instructions, | |
| 841 | - * server appendix, and client override have all been composed. | |
| 842 | - * | |
| 843 | - * @since 0.17.0 | |
| 844 | - * | |
| 845 | - * @param string $instructions Composed system prompt. | |
| 846 | - * @param array $context | |
| 847 | - */ | |
| 848 | - $instructions = desktop_mode_ai_compose_instructions( | |
| 1134 | + $instructions = openstation_ai_compose_instructions( | |
| 849 | 1135 | $instructions, |
| 850 | 1136 | $prompt_context, |
| 851 | - array( 'text' => $system_prompt_text, 'mode' => $system_prompt_mode ) | |
| 1137 | + array( | |
| 1138 | + 'text' => $system_prompt_text, | |
| 1139 | + 'mode' => $system_prompt_mode, | |
| 1140 | + ) | |
| 852 | 1141 | ); |
| 853 | 1142 | |
| 854 | 1143 | // ----------------------------------------------------------------------- |
| 855 | - // Tool assembly — built-in search/navigation + PHP-registered + | |
| 856 | - // client-supplied command tools. | |
| 1144 | + // Tool assembly — built-in search/navigation abilities + client-supplied | |
| 1145 | + // command tools. | |
| 1146 | + // | |
| 1147 | + // Built-in tools are WordPress Abilities API abilities. Each is advertised | |
| 1148 | + // to the model as a function declaration named after the ability (namespace | |
| 1149 | + // stripped), and $ability_by_tool maps that name back to the ability so the | |
| 1150 | + // agent loop can resolve + execute() it (permission + input/output | |
| 1151 | + // validation happen inside execute()). | |
| 857 | 1152 | // ----------------------------------------------------------------------- |
| 858 | - $builtin_tools = desktop_mode_ai_search_tool_definitions(); | |
| 1153 | + $ability_by_tool = array(); | |
| 1154 | + $builtin_tools = array(); | |
| 859 | 1155 | |
| 860 | - // PHP-registered tools (capability-filtered for the current user). | |
| 861 | - $registered_entries = function_exists( 'desktop_mode_get_registered_ai_tools_for_user' ) | |
| 862 | - ? desktop_mode_get_registered_ai_tools_for_user( $user_id ) | |
| 863 | - : array(); | |
| 1156 | + foreach ( openstation_ai_search_ability_names() as $ability_name ) { | |
| 1157 | + $ability = function_exists( 'wp_get_ability' ) ? wp_get_ability( $ability_name ) : null; | |
| 1158 | + if ( ! $ability instanceof WP_Ability ) { | |
| 1159 | + continue; | |
| 1160 | + } | |
| 864 | 1161 | |
| 865 | - // Track registered + command tool maps so the agent loop can | |
| 866 | - // dispatch without re-walking the registry on every iteration. | |
| 867 | - $registered_by_name = array(); | |
| 868 | - foreach ( $registered_entries as $entry ) { | |
| 869 | - $registered_by_name[ (string) $entry['name'] ] = $entry; | |
| 1162 | + $tool_name = openstation_ai_ability_tool_name( $ability_name ); | |
| 1163 | + $ability_by_tool[ $tool_name ] = $ability_name; | |
| 1164 | + $valid_tools[] = $tool_name; | |
| 1165 | + | |
| 1166 | + $input_schema = $ability->get_input_schema(); | |
| 1167 | + $builtin_tools[] = array( | |
| 1168 | + 'type' => 'function', | |
| 1169 | + 'name' => $tool_name, | |
| 1170 | + 'description' => (string) $ability->get_description(), | |
| 1171 | + 'parameters' => ! empty( $input_schema ) | |
| 1172 | + ? $input_schema | |
| 1173 | + : array( | |
| 1174 | + 'type' => 'object', | |
| 1175 | + 'properties' => (object) array(), | |
| 1176 | + ), | |
| 1177 | + ); | |
| 870 | 1178 | } |
| 871 | 1179 | |
| 872 | - $registered_defs = array_map( 'desktop_mode_ai_tool_entry_to_definition', $registered_entries ); | |
| 873 | - | |
| 874 | 1180 | // Command tools — namespaced as `command_<slug>` on the server so |
| 875 | 1181 | // they can't collide with built-in tool names. Each takes a single |
| 876 | 1182 | // optional `args` string arg (matches the slash-command contract |
| 877 | 1183 | // where args are a single string the plugin's `run()` parses). |
| @@ -882,9 +1188,9 @@ | ||
| 882 | 1188 | if ( ! is_array( $cmd ) ) { |
| 883 | 1189 | continue; |
| 884 | 1190 | } |
| 885 | 1191 | $slug = isset( $cmd['slug'] ) ? (string) $cmd['slug'] : ''; |
| 886 | - if ( $slug === '' || ! preg_match( '/^[a-z0-9_\-]+$/', $slug ) ) { | |
| 1192 | + if ( '' === $slug || ! preg_match( '/^[a-z0-9_\-]+$/', $slug ) ) { | |
| 887 | 1193 | continue; |
| 888 | 1194 | } |
| 889 | 1195 | /** |
| 890 | 1196 | * Per-tool filter on the client-supplied command list. Return |
| @@ -890,10 +1196,8 @@ | ||
| 890 | 1196 | * Per-tool filter on the client-supplied command list. Return |
| 891 | 1197 | * `false` to drop a command entirely before it reaches the |
| 892 | 1198 | * model — the right hook for per-role / per-command gating. |
| 893 | 1199 | * |
| 894 | - * @since 0.17.0 | |
| 895 | - * | |
| 896 | 1200 | * @param bool|array $allowed Either the (possibly mutated) command |
| 897 | 1201 | * tool entry, or `false` to drop it. |
| 898 | 1202 | * @param string $slug Command slug. |
| 899 | 1203 | * @param array $context { user_id, request_id }. |
| @@ -898,12 +1202,15 @@ | ||
| 898 | 1202 | * @param string $slug Command slug. |
| 899 | 1203 | * @param array $context { user_id, request_id }. |
| 900 | 1204 | */ |
| 901 | 1205 | $allowed = apply_filters( |
| 902 | - 'desktop_mode_ai_command_allowed', | |
| 1206 | + 'openstation_ai_command_allowed', | |
| 903 | 1207 | $cmd, |
| 904 | 1208 | $slug, |
| 905 | - array( 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1209 | + array( | |
| 1210 | + 'user_id' => $user_id, | |
| 1211 | + 'request_id' => $request_id, | |
| 1212 | + ) | |
| 906 | 1213 | ); |
| 907 | 1214 | if ( false === $allowed || ! is_array( $allowed ) ) { |
| 908 | 1215 | continue; |
| 909 | 1216 | } |
| @@ -917,13 +1224,13 @@ | ||
| 917 | 1224 | 'type' => 'function', |
| 918 | 1225 | 'name' => $tool_name, |
| 919 | 1226 | 'description' => trim( $label . ( '' !== $description ? ' — ' . $description : '' ) ), |
| 920 | 1227 | 'parameters' => array( |
| 921 | - 'type' => 'object', | |
| 922 | - 'properties' => array( | |
| 1228 | + 'type' => 'object', | |
| 1229 | + 'properties' => array( | |
| 923 | 1230 | 'args' => array( |
| 924 | 1231 | 'type' => 'string', |
| 925 | - 'description' => $hint !== '' | |
| 1232 | + 'description' => '' !== $hint | |
| 926 | 1233 | ? sprintf( 'Arguments for this command. Hint: %s', $hint ) |
| 927 | 1234 | : 'Arguments for this command. Leave empty when the command takes none.', |
| 928 | 1235 | ), |
| 929 | 1236 | ), |
| @@ -937,45 +1244,56 @@ | ||
| 937 | 1244 | * Transform the command-tool subset before merging with the |
| 938 | 1245 | * built-in + registered tools. Useful for bulk gating, renaming, |
| 939 | 1246 | * or injecting synthetic command tools. |
| 940 | 1247 | * |
| 941 | - * @since 0.17.0 | |
| 942 | - * | |
| 943 | 1248 | * @param array $command_defs Command tool definitions. |
| 944 | 1249 | * @param array $context { user_id, request_id }. |
| 945 | 1250 | */ |
| 946 | 1251 | $command_defs = (array) apply_filters( |
| 947 | - 'desktop_mode_ai_command_tools', | |
| 1252 | + 'openstation_ai_command_tools', | |
| 948 | 1253 | $command_defs, |
| 949 | - array( 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1254 | + array( | |
| 1255 | + 'user_id' => $user_id, | |
| 1256 | + 'request_id' => $request_id, | |
| 1257 | + ) | |
| 950 | 1258 | ); |
| 951 | 1259 | |
| 952 | - $tools = array_merge( $builtin_tools, $registered_defs, $command_defs ); | |
| 1260 | + $tools = array_merge( $builtin_tools, $command_defs ); | |
| 953 | 1261 | |
| 954 | 1262 | /** |
| 955 | - * Transform the full tool list (built-in + PHP-registered + command) | |
| 956 | - * just before it goes to OpenAI. Fires once per run — changes apply | |
| 957 | - * to every iteration in the agent loop. | |
| 1263 | + * Transform the full tool list (built-in abilities + command tools) just | |
| 1264 | + * before it goes to the provider. Fires once per run — changes apply to | |
| 1265 | + * every iteration in the agent loop. | |
| 958 | 1266 | * |
| 959 | - * @since 0.17.0 | |
| 960 | - * | |
| 961 | - * @param array $tools Full OpenAI tool definitions array. | |
| 1267 | + * @param array $tools Full the provider tool definitions array. | |
| 962 | 1268 | * @param array $context { user_id, request_id, query }. |
| 963 | 1269 | */ |
| 964 | 1270 | $tools = (array) apply_filters( |
| 965 | - 'desktop_mode_ai_tools', | |
| 1271 | + 'openstation_ai_tools', | |
| 966 | 1272 | $tools, |
| 967 | - array( 'user_id' => $user_id, 'request_id' => $request_id, 'query' => $query ) | |
| 1273 | + array( | |
| 1274 | + 'user_id' => $user_id, | |
| 1275 | + 'request_id' => $request_id, | |
| 1276 | + 'query' => $query, | |
| 1277 | + ) | |
| 968 | 1278 | ); |
| 969 | 1279 | |
| 970 | - // Widen the permitted-tools list to include everything we just | |
| 971 | - // assembled — the agent loop rejects any `function_call` whose | |
| 972 | - // name isn't in here. | |
| 973 | - foreach ( $registered_defs as $def ) { | |
| 974 | - if ( isset( $def['name'] ) ) { | |
| 975 | - $valid_tools[] = (string) $def['name']; | |
| 1280 | + // Normalize every tool's schema onto the provider-supported subset, AFTER the | |
| 1281 | + // filter so it covers the complete list the provider will receive — built-in | |
| 1282 | + // abilities, command tools, and anything a plugin injected. One tool with a | |
| 1283 | + // legal-but-unsupported schema otherwise 400s the entire request, not just its | |
| 1284 | + // own tool. Only the model-facing copy is reshaped; abilities still validate | |
| 1285 | + // arguments against their real schema in execute(). Idempotent, so a plugin | |
| 1286 | + // that already normalizes on the filter above is unaffected. | |
| 1287 | + foreach ( $tools as $ti => $tool ) { | |
| 1288 | + if ( is_array( $tool ) && isset( $tool['parameters'] ) ) { | |
| 1289 | + $tools[ $ti ]['parameters'] = openstation_ai_normalize_tool_schema( $tool['parameters'] ); | |
| 976 | 1290 | } |
| 977 | 1291 | } |
| 1292 | + | |
| 1293 | + // Widen the permitted-tools list with the command tools — the agent loop | |
| 1294 | + // rejects any `function_call` whose name isn't in here (built-in ability | |
| 1295 | + // names were added above). | |
| 978 | 1296 | foreach ( $command_defs as $def ) { |
| 979 | 1297 | if ( isset( $def['name'] ) ) { |
| 980 | 1298 | $valid_tools[] = (string) $def['name']; |
| 981 | 1299 | } |
| @@ -980,76 +1298,76 @@ | ||
| 980 | 1298 | $valid_tools[] = (string) $def['name']; |
| 981 | 1299 | } |
| 982 | 1300 | } |
| 983 | 1301 | |
| 984 | - $text_format = array( | |
| 985 | - 'type' => 'json_schema', | |
| 986 | - 'name' => 'search_answer', | |
| 987 | - 'strict' => true, | |
| 988 | - 'schema' => desktop_mode_ai_search_answer_schema(), | |
| 989 | - ); | |
| 1302 | + $answer_schema = openstation_ai_search_answer_schema(); | |
| 990 | 1303 | |
| 991 | - $emit( array( 'phase' => 'start', 'message' => 'Thinking about your question…' ) ); | |
| 992 | - | |
| 993 | 1304 | // ----------------------------------------------------------------------- |
| 994 | - // First call — user query as input, instructions as system guidance. | |
| 995 | - // Dispatched through the active provider (default: OpenAI). State is | |
| 996 | - // opaque to the loop — providers stash whatever continuation token | |
| 997 | - // they need (OpenAI: previous_response_id; others may use nothing). | |
| 1305 | + // First call — user query as the sole message, instructions as system | |
| 1306 | + // guidance. Generation routes through the WordPress AI Client; the tools | |
| 1307 | + // are advertised as function declarations and dispatched by this loop. | |
| 1308 | + // The full ordered conversation is rebuilt and re-sent each turn. | |
| 998 | 1309 | // ----------------------------------------------------------------------- |
| 999 | - $turn_input = desktop_mode_ai_provider_make_turn_input( $user_id, 'user_message', $query ); | |
| 1000 | - if ( is_wp_error( $turn_input ) ) { | |
| 1001 | - return $turn_input; | |
| 1002 | - } | |
| 1310 | + $messages = array( openstation_ai_user_text_message( $query ) ); | |
| 1003 | 1311 | |
| 1004 | - $turn = desktop_mode_ai_provider_agentic_call( | |
| 1005 | - $user_id, | |
| 1006 | - $api_key, | |
| 1007 | - $turn_input, | |
| 1008 | - $tools, | |
| 1009 | - $text_format, | |
| 1010 | - $instructions, | |
| 1011 | - null | |
| 1312 | + $generation_context = array( | |
| 1313 | + 'source' => 'ai-copilot/search', | |
| 1314 | + 'request_id' => $request_id, | |
| 1012 | 1315 | ); |
| 1013 | 1316 | |
| 1317 | + $turn = openstation_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions, $generation_context ); | |
| 1318 | + | |
| 1014 | 1319 | if ( is_wp_error( $turn ) ) { |
| 1015 | 1320 | return $turn; |
| 1016 | 1321 | } |
| 1017 | 1322 | |
| 1018 | - $state = $turn['next_state']; | |
| 1019 | 1323 | $last_tool = $initial_tool ?? 'search_posts'; |
| 1020 | 1324 | $last_offset = $start_offset; |
| 1021 | 1325 | $last_has_more = true; |
| 1022 | 1326 | $iterations = 0; |
| 1023 | 1327 | |
| 1328 | + // Accumulate token usage across every turn and remember the last model the | |
| 1329 | + // AI Client resolved, for the `openstation_ai_search_completed` payload. | |
| 1330 | + $total_usage = array( | |
| 1331 | + 'prompt' => 0, | |
| 1332 | + 'completion' => 0, | |
| 1333 | + 'total' => 0, | |
| 1334 | + ); | |
| 1335 | + $last_model = null; | |
| 1336 | + $accrue_usage = static function ( $turn ) use ( &$total_usage, &$last_model ) { | |
| 1337 | + if ( ! is_array( $turn ) ) { | |
| 1338 | + return; | |
| 1339 | + } | |
| 1340 | + if ( isset( $turn['usage'] ) && is_array( $turn['usage'] ) ) { | |
| 1341 | + $total_usage['prompt'] += (int) ( $turn['usage']['prompt'] ?? 0 ); | |
| 1342 | + $total_usage['completion'] += (int) ( $turn['usage']['completion'] ?? 0 ); | |
| 1343 | + $total_usage['total'] += (int) ( $turn['usage']['total'] ?? 0 ); | |
| 1344 | + } | |
| 1345 | + if ( isset( $turn['model'] ) && is_array( $turn['model'] ) ) { | |
| 1346 | + $last_model = $turn['model']; | |
| 1347 | + } | |
| 1348 | + }; | |
| 1349 | + $accrue_usage( $turn ); | |
| 1350 | + | |
| 1024 | 1351 | // ----------------------------------------------------------------------- |
| 1025 | 1352 | // Agentic loop — each iteration either executes tool calls or returns |
| 1026 | - // the final answer. We use `previous_response_id` so OpenAI manages the | |
| 1027 | - // conversation state; we only send what's new each turn. | |
| 1353 | + // the final answer. The full ordered conversation (user query, assistant | |
| 1354 | + // turns, tool results) is accumulated in $messages and re-sent each turn. | |
| 1028 | 1355 | // ----------------------------------------------------------------------- |
| 1029 | - for ( $i = 0; $i < DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS; $i++ ) { | |
| 1356 | + for ( $i = 0; $i < OPENSTATION_AI_SEARCH_MAX_ITERATIONS; $i++ ) { | |
| 1030 | 1357 | $function_calls = is_array( $turn['function_calls'] ?? null ) ? $turn['function_calls'] : array(); |
| 1031 | 1358 | |
| 1032 | 1359 | // No tool calls in this response → final answer. |
| 1033 | 1360 | if ( empty( $function_calls ) ) { |
| 1034 | - $emit( array( 'phase' => 'composing', 'message' => 'Putting together your answer…' ) ); | |
| 1035 | - $text = $turn['text'] ?? null; | |
| 1036 | - if ( ! is_string( $text ) ) { | |
| 1037 | - // Log the raw output so mismatches in the provider response | |
| 1038 | - // shape are visible without having to re-run with a debugger. | |
| 1039 | - $raw = is_array( $turn['raw'] ?? null ) ? $turn['raw'] : array(); | |
| 1040 | - // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log | |
| 1041 | - error_log( '[WP Desktop Mode AI] Unexpected output shape: ' . wp_json_encode( $raw ) ); | |
| 1042 | - return new WP_Error( | |
| 1043 | - 'desktop_mode_ai_empty', | |
| 1044 | - 'AI provider returned no text in the final turn.', | |
| 1045 | - array( 'raw' => $raw ) | |
| 1046 | - ); | |
| 1047 | - } | |
| 1361 | + // A toolless turn with no extractable text never reaches here: | |
| 1362 | + // openstation_ai_client_generate() returns | |
| 1363 | + // `openstation_ai_empty_answer` for that case, handled with the | |
| 1364 | + // other generation errors above. | |
| 1365 | + $text = (string) ( $turn['text'] ?? '' ); | |
| 1048 | 1366 | |
| 1049 | 1367 | $answer = json_decode( $text, true ); |
| 1050 | 1368 | if ( ! is_array( $answer ) ) { |
| 1051 | - return new WP_Error( 'desktop_mode_ai_result_parse', 'Could not parse structured search answer.' ); | |
| 1369 | + return new WP_Error( 'openstation_ai_result_parse', __( 'Could not parse structured search answer.', 'desktop-mode' ) ); | |
| 1052 | 1370 | } |
| 1053 | 1371 | |
| 1054 | 1372 | $answer_type = isset( $answer['answer_type'] ) && in_array( $answer['answer_type'], array( 'entity', 'navigation', 'chat' ), true ) |
| 1055 | 1373 | ? (string) $answer['answer_type'] |
| @@ -1063,9 +1381,9 @@ | ||
| 1063 | 1381 | ? $answer['admin_links'] : null; |
| 1064 | 1382 | |
| 1065 | 1383 | $entity = null; |
| 1066 | 1384 | if ( 'entity' === $answer_type && $entity_id && $entity_type ) { |
| 1067 | - $entity = desktop_mode_ai_search_build_entity( $entity_type, $entity_id ); | |
| 1385 | + $entity = openstation_ai_search_build_entity( $entity_type, $entity_id ); | |
| 1068 | 1386 | } |
| 1069 | 1387 | |
| 1070 | 1388 | $final = array( |
| 1071 | 1389 | 'answer_type' => $answer_type, |
| @@ -1082,21 +1400,23 @@ | ||
| 1082 | 1400 | * Final transform hook — fires right before the HTTP |
| 1083 | 1401 | * response is returned. Plugins can rewrite `message`, |
| 1084 | 1402 | * inject `admin_links`, coerce `answer_type`, etc. |
| 1085 | 1403 | * |
| 1086 | - * @since 0.17.0 | |
| 1087 | - * | |
| 1088 | 1404 | * @param array $answer Final answer payload. |
| 1089 | 1405 | * @param array $context { query, user_id, request_id }. |
| 1090 | 1406 | */ |
| 1091 | 1407 | $final = (array) apply_filters( |
| 1092 | - 'desktop_mode_ai_answer', | |
| 1408 | + 'openstation_ai_answer', | |
| 1093 | 1409 | $final, |
| 1094 | - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1410 | + array( | |
| 1411 | + 'query' => $query, | |
| 1412 | + 'user_id' => $user_id, | |
| 1413 | + 'request_id' => $request_id, | |
| 1414 | + ) | |
| 1095 | 1415 | ); |
| 1096 | 1416 | |
| 1097 | 1417 | do_action( |
| 1098 | - 'desktop_mode_ai_search_completed', | |
| 1418 | + 'openstation_ai_search_completed', | |
| 1099 | 1419 | array( |
| 1100 | 1420 | 'query' => $query, |
| 1101 | 1421 | 'user_id' => $user_id, |
| 1102 | 1422 | 'request_id' => $request_id, |
| @@ -1101,8 +1421,10 @@ | ||
| 1101 | 1421 | 'user_id' => $user_id, |
| 1102 | 1422 | 'request_id' => $request_id, |
| 1103 | 1423 | 'answer_type' => $final['answer_type'] ?? 'chat', |
| 1104 | 1424 | 'iterations' => $final['iterations'] ?? 0, |
| 1425 | + 'usage' => $total_usage, | |
| 1426 | + 'model' => $last_model, | |
| 1105 | 1427 | ) |
| 1106 | 1428 | ); |
| 1107 | 1429 | |
| 1108 | 1430 | return $final; |
| @@ -1113,9 +1435,9 @@ | ||
| 1113 | 1435 | // |
| 1114 | 1436 | // If the model emitted `command_<slug>`, we return immediately with |
| 1115 | 1437 | // `answer_type: 'tool_call'` — the client owns the command's `run()` |
| 1116 | 1438 | // function (lives in plugin JS) and executes it locally. We do NOT |
| 1117 | - // send anything else back to OpenAI this turn — would burn tokens | |
| 1439 | + // send anything else back to the provider this turn — would burn tokens | |
| 1118 | 1440 | // for a no-op second response. |
| 1119 | 1441 | // ------------------------------------------------------------------- |
| 1120 | 1442 | $command_tool_call = null; |
| 1121 | 1443 | foreach ( $function_calls as $fc ) { |
| @@ -1120,11 +1442,10 @@ | ||
| 1120 | 1442 | $command_tool_call = null; |
| 1121 | 1443 | foreach ( $function_calls as $fc ) { |
| 1122 | 1444 | $name = (string) ( $fc['name'] ?? '' ); |
| 1123 | 1445 | if ( isset( $command_tools_by_name[ $name ] ) ) { |
| 1124 | - $decoded = is_array( json_decode( $fc['arguments'] ?? '{}', true ) ) | |
| 1125 | - ? json_decode( $fc['arguments'], true ) | |
| 1126 | - : array(); | |
| 1446 | + $raw = json_decode( $fc['arguments'] ?? '{}', true ); | |
| 1447 | + $decoded = is_array( $raw ) ? $raw : array(); | |
| 1127 | 1448 | $command_tool_call = array( |
| 1128 | 1449 | 'slug' => $command_tools_by_name[ $name ]['slug'], |
| 1129 | 1450 | 'args' => isset( $decoded['args'] ) ? (string) $decoded['args'] : '', |
| 1130 | 1451 | ); |
| @@ -1130,11 +1451,11 @@ | ||
| 1130 | 1451 | ); |
| 1131 | 1452 | break; |
| 1132 | 1453 | } |
| 1133 | 1454 | } |
| 1134 | - if ( $command_tool_call !== null ) { | |
| 1455 | + if ( null !== $command_tool_call ) { | |
| 1135 | 1456 | do_action( |
| 1136 | - 'desktop_mode_ai_tool_called', | |
| 1457 | + 'openstation_ai_tool_called', | |
| 1137 | 1458 | array( |
| 1138 | 1459 | 'tool_name' => 'command_' . $command_tool_call['slug'], |
| 1139 | 1460 | 'args' => array( 'args' => $command_tool_call['args'] ), |
| 1140 | 1461 | 'user_id' => $user_id, |
| @@ -1154,15 +1475,19 @@ | ||
| 1154 | 1475 | 'request_id' => $request_id, |
| 1155 | 1476 | ); |
| 1156 | 1477 | |
| 1157 | 1478 | $final = (array) apply_filters( |
| 1158 | - 'desktop_mode_ai_answer', | |
| 1479 | + 'openstation_ai_answer', | |
| 1159 | 1480 | $final, |
| 1160 | - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1481 | + array( | |
| 1482 | + 'query' => $query, | |
| 1483 | + 'user_id' => $user_id, | |
| 1484 | + 'request_id' => $request_id, | |
| 1485 | + ) | |
| 1161 | 1486 | ); |
| 1162 | 1487 | |
| 1163 | 1488 | do_action( |
| 1164 | - 'desktop_mode_ai_search_completed', | |
| 1489 | + 'openstation_ai_search_completed', | |
| 1165 | 1490 | array( |
| 1166 | 1491 | 'query' => $query, |
| 1167 | 1492 | 'user_id' => $user_id, |
| 1168 | 1493 | 'request_id' => $request_id, |
| @@ -1167,8 +1492,10 @@ | ||
| 1167 | 1492 | 'user_id' => $user_id, |
| 1168 | 1493 | 'request_id' => $request_id, |
| 1169 | 1494 | 'answer_type' => 'tool_call', |
| 1170 | 1495 | 'iterations' => $final['iterations'] ?? 0, |
| 1496 | + 'usage' => $total_usage, | |
| 1497 | + 'model' => $last_model, | |
| 1171 | 1498 | ) |
| 1172 | 1499 | ); |
| 1173 | 1500 | |
| 1174 | 1501 | return $final; |
| @@ -1173,12 +1500,11 @@ | ||
| 1173 | 1500 | |
| 1174 | 1501 | return $final; |
| 1175 | 1502 | } |
| 1176 | 1503 | |
| 1177 | - // Execute each tool call and collect results in the registry's | |
| 1178 | - // normalized shape — `{ call_id, output (json string) }`. The | |
| 1179 | - // provider's `make_turn_input('tool_results', …)` reshapes them | |
| 1180 | - // for the underlying API. | |
| 1504 | + // Execute each tool call and collect results as | |
| 1505 | + // `{ call_id, name, response }` — turned into FunctionResponse parts | |
| 1506 | + // for the next turn by openstation_ai_tool_result_message(). | |
| 1181 | 1507 | $tool_outputs = array(); |
| 1182 | 1508 | foreach ( $function_calls as $fc ) { |
| 1183 | 1509 | $tool_name = $fc['name'] ?? ''; |
| 1184 | 1510 | $call_id = $fc['call_id'] ?? ''; |
| @@ -1184,36 +1510,21 @@ | ||
| 1184 | 1510 | $call_id = $fc['call_id'] ?? ''; |
| 1185 | 1511 | |
| 1186 | 1512 | if ( ! in_array( $tool_name, $valid_tools, true ) ) { |
| 1187 | 1513 | $tool_outputs[] = array( |
| 1188 | - 'call_id' => $call_id, | |
| 1189 | - 'output' => wp_json_encode( array( 'error' => "Unknown tool '{$tool_name}'." ) ), | |
| 1514 | + 'call_id' => $call_id, | |
| 1515 | + 'name' => $tool_name, | |
| 1516 | + 'response' => array( 'error' => "Unknown tool '{$tool_name}'." ), | |
| 1190 | 1517 | ); |
| 1191 | 1518 | continue; |
| 1192 | 1519 | } |
| 1193 | 1520 | |
| 1194 | - $args = is_array( json_decode( $fc['arguments'] ?? '{}', true ) ) | |
| 1195 | - ? json_decode( $fc['arguments'], true ) | |
| 1196 | - : array(); | |
| 1521 | + $raw = json_decode( $fc['arguments'] ?? '{}', true ); | |
| 1522 | + $args = is_array( $raw ) ? $raw : array(); | |
| 1197 | 1523 | $offset = max( 0, (int) ( $args['offset'] ?? 0 ) ); |
| 1198 | 1524 | |
| 1199 | - // Registered PHP-dispatched tool — handler lives in the | |
| 1200 | - // plugin's `desktop_mode_register_ai_tool()` entry. Capability | |
| 1201 | - // was already checked at list-assembly time. | |
| 1202 | - $is_registered = isset( $registered_by_name[ $tool_name ] ); | |
| 1203 | - | |
| 1204 | - $progress_msg = $is_registered | |
| 1205 | - ? ( (string) ( $registered_by_name[ $tool_name ]['progress_message'] ?? '' ) ?: 'Working…' ) | |
| 1206 | - : desktop_mode_ai_progress_message( $tool_name ); | |
| 1207 | - | |
| 1208 | - $emit( array( | |
| 1209 | - 'phase' => 'tool_call', | |
| 1210 | - 'tool' => $tool_name, | |
| 1211 | - 'message' => $progress_msg, | |
| 1212 | - ) ); | |
| 1213 | - | |
| 1214 | 1525 | do_action( |
| 1215 | - 'desktop_mode_ai_tool_called', | |
| 1526 | + 'openstation_ai_tool_called', | |
| 1216 | 1527 | array( |
| 1217 | 1528 | 'tool_name' => $tool_name, |
| 1218 | 1529 | 'args' => $args, |
| 1219 | 1530 | 'user_id' => $user_id, |
| @@ -1220,27 +1531,52 @@ | ||
| 1220 | 1531 | 'request_id' => $request_id, |
| 1221 | 1532 | ) |
| 1222 | 1533 | ); |
| 1223 | 1534 | |
| 1224 | - if ( $is_registered ) { | |
| 1225 | - $batch = desktop_mode_ai_invoke_registered_tool( | |
| 1226 | - $registered_by_name[ $tool_name ], | |
| 1227 | - $args, | |
| 1228 | - $user_id | |
| 1535 | + // Resolve + run the ability. execute() runs the permission_callback | |
| 1536 | + // and validates input/output; a denial or bad input comes back as a | |
| 1537 | + // WP_Error, which we surface to the model as a clean tool error | |
| 1538 | + // (never a fatal) and report on the observability channel. | |
| 1539 | + $ability = isset( $ability_by_tool[ $tool_name ] ) ? wp_get_ability( $ability_by_tool[ $tool_name ] ) : null; | |
| 1540 | + if ( $ability instanceof WP_Ability ) { | |
| 1541 | + // Abilities that declare no input schema (e.g. Core's | |
| 1542 | + // get-*-info) reject any non-null input, so pass null when | |
| 1543 | + // there's no schema; otherwise hand over the decoded args. | |
| 1544 | + $input = empty( $ability->get_input_schema() ) ? null : $args; | |
| 1545 | + $result = $ability->execute( $input ); | |
| 1546 | + } else { | |
| 1547 | + $result = new WP_Error( 'openstation_ai_unknown_ability', sprintf( 'Ability for tool "%s" is unavailable.', $tool_name ) ); | |
| 1548 | + } | |
| 1549 | + | |
| 1550 | + if ( is_wp_error( $result ) ) { | |
| 1551 | + do_action( | |
| 1552 | + 'openstation_ai_search_error', | |
| 1553 | + array( | |
| 1554 | + 'stage' => 'tool_execute', | |
| 1555 | + 'tool_name' => $tool_name, | |
| 1556 | + 'error' => $result->get_error_code(), | |
| 1557 | + 'message' => $result->get_error_message(), | |
| 1558 | + 'user_id' => $user_id, | |
| 1559 | + 'request_id' => $request_id, | |
| 1560 | + ) | |
| 1229 | 1561 | ); |
| 1562 | + $batch = array( | |
| 1563 | + 'error' => $result->get_error_message(), | |
| 1564 | + 'error_code' => $result->get_error_code(), | |
| 1565 | + ); | |
| 1230 | 1566 | } else { |
| 1231 | - $batch = desktop_mode_ai_search_dispatch_tool( $tool_name, $args ); | |
| 1232 | - $last_tool = $tool_name; | |
| 1233 | - $last_offset = $offset; | |
| 1234 | - $last_has_more = (bool) ( $batch['has_more'] ?? false ); | |
| 1567 | + $batch = is_array( $result ) ? $result : array( 'result' => $result ); | |
| 1235 | 1568 | } |
| 1236 | 1569 | |
| 1570 | + $last_tool = $tool_name; | |
| 1571 | + $last_offset = $offset; | |
| 1572 | + $last_has_more = (bool) ( $batch['has_more'] ?? false ); | |
| 1573 | + | |
| 1237 | 1574 | /** |
| 1238 | - * Transform a tool result before it goes back to the | |
| 1239 | - * model. Fires for every tool, built-in and registered. | |
| 1575 | + * Transform a tool result before it goes back to the model. | |
| 1576 | + * Fires for every ability-dispatched tool (including error | |
| 1577 | + * envelopes from a failed execute()). | |
| 1240 | 1578 | * |
| 1241 | - * @since 0.17.0 | |
| 1242 | - * | |
| 1243 | 1579 | * @param array $batch Tool result payload. |
| 1244 | 1580 | * @param string $tool_name Tool function name. |
| 1245 | 1581 | * @param array $args Decoded args from the call. |
| 1246 | 1582 | * @param array $context { user_id, request_id }. |
| @@ -1245,47 +1581,38 @@ | ||
| 1245 | 1581 | * @param array $args Decoded args from the call. |
| 1246 | 1582 | * @param array $context { user_id, request_id }. |
| 1247 | 1583 | */ |
| 1248 | 1584 | $batch = (array) apply_filters( |
| 1249 | - 'desktop_mode_ai_tool_result', | |
| 1585 | + 'openstation_ai_tool_result', | |
| 1250 | 1586 | $batch, |
| 1251 | 1587 | $tool_name, |
| 1252 | 1588 | $args, |
| 1253 | - array( 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1589 | + array( | |
| 1590 | + 'user_id' => $user_id, | |
| 1591 | + 'request_id' => $request_id, | |
| 1592 | + ) | |
| 1254 | 1593 | ); |
| 1255 | 1594 | |
| 1256 | 1595 | $tool_outputs[] = array( |
| 1257 | - 'call_id' => $call_id, | |
| 1258 | - 'output' => wp_json_encode( $batch ), | |
| 1596 | + 'call_id' => $call_id, | |
| 1597 | + 'name' => $tool_name, | |
| 1598 | + 'response' => $batch, | |
| 1259 | 1599 | ); |
| 1260 | 1600 | } |
| 1261 | 1601 | |
| 1262 | - $iterations++; | |
| 1602 | + ++$iterations; | |
| 1263 | 1603 | |
| 1264 | - // Next turn — only send the tool results. Providers that support | |
| 1265 | - // server-side context chaining (OpenAI's previous_response_id) | |
| 1266 | - // use the opaque $state we threaded through; others can read | |
| 1267 | - // the tool results and append them to whatever history they keep. | |
| 1268 | - $turn_input = desktop_mode_ai_provider_make_turn_input( $user_id, 'tool_results', $tool_outputs ); | |
| 1269 | - if ( is_wp_error( $turn_input ) ) { | |
| 1270 | - return $turn_input; | |
| 1271 | - } | |
| 1604 | + // Next turn — append the assistant's tool-call turn and our tool | |
| 1605 | + // results to the conversation, then regenerate with the full history. | |
| 1606 | + $messages[] = $turn['message']; | |
| 1607 | + $messages[] = openstation_ai_tool_result_message( $tool_outputs ); | |
| 1272 | 1608 | |
| 1273 | - $turn = desktop_mode_ai_provider_agentic_call( | |
| 1274 | - $user_id, | |
| 1275 | - $api_key, | |
| 1276 | - $turn_input, | |
| 1277 | - $tools, | |
| 1278 | - $text_format, | |
| 1279 | - '', | |
| 1280 | - $state | |
| 1281 | - ); | |
| 1609 | + $turn = openstation_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions, $generation_context ); | |
| 1282 | 1610 | |
| 1283 | 1611 | if ( is_wp_error( $turn ) ) { |
| 1284 | 1612 | return $turn; |
| 1285 | 1613 | } |
| 1286 | - | |
| 1287 | - $state = $turn['next_state'] ?? $state; | |
| 1614 | + $accrue_usage( $turn ); | |
| 1288 | 1615 | } |
| 1289 | 1616 | |
| 1290 | 1617 | // ----------------------------------------------------------------------- |
| 1291 | 1618 | // Budget exhausted before a final answer. |
| @@ -1291,24 +1618,27 @@ | ||
| 1291 | 1618 | // Budget exhausted before a final answer. |
| 1292 | 1619 | // ----------------------------------------------------------------------- |
| 1293 | 1620 | $continue = null; |
| 1294 | 1621 | if ( $last_has_more ) { |
| 1295 | - $next_offset = $last_offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE; | |
| 1296 | - $type_label = str_replace( 'search_', '', $last_tool ) . 's'; | |
| 1622 | + $next_offset = $last_offset + OPENSTATION_AI_SEARCH_BATCH_SIZE; | |
| 1623 | + // `search_comments_by_post` cannot resume — the continue payload | |
| 1624 | + // carries no post_id — so fall back to plain comment search, | |
| 1625 | + // keeping `tool` inside openstation_ai_search_resumable_tools(). | |
| 1626 | + $resume_tool = 'search_comments_by_post' === $last_tool ? 'search_comments' : $last_tool; | |
| 1297 | 1627 | $continue = array( |
| 1298 | - 'tool' => $last_tool, | |
| 1299 | - 'entity_type' => rtrim( str_replace( 'search_', '', $last_tool ), 's' ), | |
| 1628 | + 'tool' => $resume_tool, | |
| 1629 | + 'entity_type' => rtrim( str_replace( 'search_', '', $resume_tool ), 's' ), | |
| 1300 | 1630 | 'offset' => $next_offset, |
| 1301 | - 'label' => sprintf( 'Continue searching in %s (from item %d)', $type_label, $next_offset + 1 ), | |
| 1631 | + 'label' => openstation_ai_continue_label( $resume_tool, $next_offset + 1 ), | |
| 1302 | 1632 | ); |
| 1303 | 1633 | } |
| 1304 | 1634 | |
| 1305 | 1635 | $final = array( |
| 1306 | 1636 | 'answer_type' => 'chat', |
| 1307 | - 'message' => 'I searched 100 items without finding a clear match. Want me to keep looking further?', | |
| 1637 | + 'message' => __( 'I searched 100 items without finding a clear match. Want me to keep looking further?', 'desktop-mode' ), | |
| 1308 | 1638 | 'entity' => null, |
| 1309 | 1639 | 'admin_links' => null, |
| 1310 | - 'iterations' => DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS, | |
| 1640 | + 'iterations' => OPENSTATION_AI_SEARCH_MAX_ITERATIONS, | |
| 1311 | 1641 | 'exhausted' => ! $last_has_more, |
| 1312 | 1642 | 'continue' => $continue, |
| 1313 | 1643 | 'request_id' => $request_id, |
| 1314 | 1644 | ); |
| @@ -1313,21 +1643,27 @@ | ||
| 1313 | 1643 | 'request_id' => $request_id, |
| 1314 | 1644 | ); |
| 1315 | 1645 | |
| 1316 | 1646 | $final = (array) apply_filters( |
| 1317 | - 'desktop_mode_ai_answer', | |
| 1647 | + 'openstation_ai_answer', | |
| 1318 | 1648 | $final, |
| 1319 | - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id ) | |
| 1649 | + array( | |
| 1650 | + 'query' => $query, | |
| 1651 | + 'user_id' => $user_id, | |
| 1652 | + 'request_id' => $request_id, | |
| 1653 | + ) | |
| 1320 | 1654 | ); |
| 1321 | 1655 | |
| 1322 | 1656 | do_action( |
| 1323 | - 'desktop_mode_ai_search_completed', | |
| 1657 | + 'openstation_ai_search_completed', | |
| 1324 | 1658 | array( |
| 1325 | 1659 | 'query' => $query, |
| 1326 | 1660 | 'user_id' => $user_id, |
| 1327 | 1661 | 'request_id' => $request_id, |
| 1328 | 1662 | 'answer_type' => 'chat', |
| 1329 | - 'iterations' => DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS, | |
| 1663 | + 'iterations' => OPENSTATION_AI_SEARCH_MAX_ITERATIONS, | |
| 1664 | + 'usage' => $total_usage, | |
| 1665 | + 'model' => $last_model, | |
| 1330 | 1666 | ) |
| 1331 | 1667 | ); |
| 1332 | 1668 | |
| 1333 | 1669 | return $final; |
| @@ -1340,18 +1676,17 @@ | ||
| 1340 | 1676 | * keeps the voice consistent across legs and removes a class of drift |
| 1341 | 1677 | * bug where the two paths's prompt-assembly drifts apart. |
| 1342 | 1678 | * |
| 1343 | 1679 | * Applies three layers in order: |
| 1344 | - * 1. `desktop_mode_ai_system_prompt_appendix` — stacking filter; | |
| 1680 | + * 1. `openstation_ai_system_prompt_appendix` — stacking filter; | |
| 1345 | 1681 | * every plugin's return is concatenated. |
| 1346 | 1682 | * 2. Client override — `system_prompt_text` + `system_prompt_mode`. |
| 1347 | 1683 | * `append` always allowed; `replace` gated on |
| 1348 | - * `desktop_mode_ai_system_prompt_replace_capability`. Non-permitted | |
| 1684 | + * `openstation_ai_system_prompt_replace_capability`. Non-permitted | |
| 1349 | 1685 | * `replace` downgrades to `append` so the caller's text is |
| 1350 | 1686 | * preserved rather than dropped. |
| 1351 | - * 3. `desktop_mode_ai_system_prompt` — final transform pass. | |
| 1687 | + * 3. `openstation_ai_system_prompt` — final transform pass. | |
| 1352 | 1688 | * |
| 1353 | - * @since 0.17.0 | |
| 1354 | 1689 | * @internal |
| 1355 | 1690 | * |
| 1356 | 1691 | * @param string $core Built-in instructions for this phase |
| 1357 | 1692 | * (agent loop / follow-up summariser). |
| @@ -1359,9 +1694,9 @@ | ||
| 1359 | 1694 | * @param array $client { text, mode } client override; either field |
| 1360 | 1695 | * empty means no override. |
| 1361 | 1696 | * @return string Composed system prompt. |
| 1362 | 1697 | */ |
| 1363 | -function desktop_mode_ai_compose_instructions( $core, array $context, array $client = array() ) { | |
| 1698 | +function openstation_ai_compose_instructions( $core, array $context, array $client = array() ) { | |
| 1364 | 1699 | $instructions = (string) $core; |
| 1365 | 1700 | $user_id = isset( $context['user_id'] ) ? (int) $context['user_id'] : 0; |
| 1366 | 1701 | |
| 1367 | 1702 | $client_text = isset( $client['text'] ) && is_string( $client['text'] ) ? $client['text'] : ''; |
| @@ -1368,13 +1703,22 @@ | ||
| 1368 | 1703 | $client_mode = isset( $client['mode'] ) && in_array( $client['mode'], array( 'append', 'replace' ), true ) |
| 1369 | 1704 | ? (string) $client['mode'] |
| 1370 | 1705 | : 'append'; |
| 1371 | 1706 | |
| 1372 | - $ctx_for_filter = $context; | |
| 1707 | + $ctx_for_filter = $context; | |
| 1373 | 1708 | $ctx_for_filter['client_override'] = '' !== $client_text ? $client_mode : null; |
| 1374 | 1709 | |
| 1375 | - /** @see desktop_mode_ai_system_prompt_appendix — documented at primary call site. */ | |
| 1376 | - $server_appendix = (string) apply_filters( 'desktop_mode_ai_system_prompt_appendix', '', $ctx_for_filter ); | |
| 1710 | + /** | |
| 1711 | + * Short-circuit extension — appended to the built-in instructions | |
| 1712 | + * verbatim. Use this when a plugin just wants to add domain | |
| 1713 | + * context (room list, product catalogue, company jargon) without | |
| 1714 | + * restructuring the core rules. Fires for both the primary | |
| 1715 | + * `/ai/search` run and the follow-up composed-reply leg. | |
| 1716 | + * | |
| 1717 | + * @param string $appendix Accumulated appendix. Default empty. | |
| 1718 | + * @param array $context { query, user_id, request_id, client_override, phase? }. | |
| 1719 | + */ | |
| 1720 | + $server_appendix = (string) apply_filters( 'openstation_ai_system_prompt_appendix', '', $ctx_for_filter ); | |
| 1377 | 1721 | if ( '' !== $server_appendix ) { |
| 1378 | 1722 | $instructions .= "\n\n" . $server_appendix; |
| 1379 | 1723 | } |
| 1380 | 1724 | |
| @@ -1379,11 +1723,19 @@ | ||
| 1379 | 1723 | } |
| 1380 | 1724 | |
| 1381 | 1725 | if ( '' !== $client_text ) { |
| 1382 | 1726 | if ( 'replace' === $client_mode ) { |
| 1383 | - /** @see desktop_mode_ai_system_prompt_replace_capability — documented at primary call site. */ | |
| 1727 | + /** | |
| 1728 | + * Capability required for a client to send | |
| 1729 | + * `system_prompt: { mode: 'replace' }`. Defaults to `manage_options` | |
| 1730 | + * — replacing the whole prompt can effectively hijack the | |
| 1731 | + * assistant, so it's admin-only out of the box. | |
| 1732 | + * | |
| 1733 | + * @param string $capability Default `manage_options`. | |
| 1734 | + * @param array $context | |
| 1735 | + */ | |
| 1384 | 1736 | $required_cap = (string) apply_filters( |
| 1385 | - 'desktop_mode_ai_system_prompt_replace_capability', | |
| 1737 | + 'openstation_ai_system_prompt_replace_capability', | |
| 1386 | 1738 | 'manage_options', |
| 1387 | 1739 | $ctx_for_filter |
| 1388 | 1740 | ); |
| 1389 | 1741 | if ( '' === $required_cap || ( $user_id > 0 && user_can( $user_id, $required_cap ) ) ) { |
| @@ -1397,10 +1749,16 @@ | ||
| 1397 | 1749 | $instructions .= "\n\n" . $client_text; |
| 1398 | 1750 | } |
| 1399 | 1751 | } |
| 1400 | 1752 | |
| 1401 | - /** @see desktop_mode_ai_system_prompt — documented at primary call site. */ | |
| 1402 | - return (string) apply_filters( 'desktop_mode_ai_system_prompt', $instructions, $ctx_for_filter ); | |
| 1753 | + /** | |
| 1754 | + * Final transform pass. Fires after the built-in instructions, | |
| 1755 | + * server appendix, and client override have all been composed. | |
| 1756 | + * | |
| 1757 | + * @param string $instructions Composed system prompt. | |
| 1758 | + * @param array $context | |
| 1759 | + */ | |
| 1760 | + return (string) apply_filters( 'openstation_ai_system_prompt', $instructions, $ctx_for_filter ); | |
| 1403 | 1761 | } |
| 1404 | 1762 | |
| 1405 | 1763 | /** |
| 1406 | 1764 | * Compose a natural-language reply describing the outcome of a |
| @@ -1407,38 +1765,35 @@ | ||
| 1407 | 1765 | * client-dispatched command invocation. |
| 1408 | 1766 | * |
| 1409 | 1767 | * Called by the REST endpoint when the client sends `follow_up` — |
| 1410 | 1768 | * the second leg of the opt-in agentic flow triggered by |
| 1411 | - * `wp.desktop.ai.ask( q, { tools: 'aiCallable', followUp: true } )`. | |
| 1769 | + * `wp.os.ai.ask( q, { tools: 'aiCallable', followUp: true } )`. | |
| 1412 | 1770 | * |
| 1413 | 1771 | * Single-turn, no tools, no structured-output schema — the model |
| 1414 | 1772 | * sees the original query + a summary of what happened and writes a |
| 1415 | 1773 | * one/two-sentence reply in the voice of the system prompt. We reuse |
| 1416 | 1774 | * the same system-prompt pipeline as the main search so plugins |
| 1417 | - * appending instructions via `desktop_mode_ai_system_prompt_appendix` | |
| 1775 | + * appending instructions via `openstation_ai_system_prompt_appendix` | |
| 1418 | 1776 | * see consistent voice across the two legs. |
| 1419 | 1777 | * |
| 1420 | - * @since 0.17.0 | |
| 1421 | - * | |
| 1422 | - * @param string $api_key OpenAI API key. | |
| 1423 | 1778 | * @param string $query Original user query. |
| 1424 | 1779 | * @param array $tool { slug, args } — what ran. |
| 1425 | 1780 | * @param array $outcome Tool result payload. Opaque — JSON-encoded |
| 1426 | 1781 | * into the model's context so it can reason |
| 1427 | 1782 | * about whatever shape the plugin returned. |
| 1428 | - * @param array $extra Same shape as `desktop_mode_ai_run_search`'s | |
| 1783 | + * @param array $extra Same shape as `openstation_ai_run_search`'s | |
| 1429 | 1784 | * `$extra` — carries user_id, request_id, |
| 1430 | 1785 | * system-prompt overrides. |
| 1431 | 1786 | * @return array|WP_Error `{ answer_type: 'chat', message, … }` or error. |
| 1432 | 1787 | */ |
| 1433 | -function desktop_mode_ai_run_followup( $api_key, $query, array $tool, array $outcome, array $extra = array() ) { | |
| 1788 | +function openstation_ai_run_followup( $query, array $tool, array $outcome, array $extra = array() ) { | |
| 1434 | 1789 | $user_id = isset( $extra['user_id'] ) ? (int) $extra['user_id'] : get_current_user_id(); |
| 1435 | - $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && $extra['request_id'] !== '' | |
| 1790 | + $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && '' !== $extra['request_id'] | |
| 1436 | 1791 | ? (string) $extra['request_id'] |
| 1437 | - : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ) ); | |
| 1792 | + : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ) ); | |
| 1438 | 1793 | |
| 1439 | 1794 | do_action( |
| 1440 | - 'desktop_mode_ai_search_started', | |
| 1795 | + 'openstation_ai_search_started', | |
| 1441 | 1796 | array( |
| 1442 | 1797 | 'query' => $query, |
| 1443 | 1798 | 'user_id' => $user_id, |
| 1444 | 1799 | 'request_id' => $request_id, |
| @@ -1448,19 +1803,19 @@ | ||
| 1448 | 1803 | |
| 1449 | 1804 | // Mirror the main search's system-prompt layering so voice stays |
| 1450 | 1805 | // consistent between the two legs. We build a simpler core- |
| 1451 | 1806 | // instructions block — no tool guidance, since this run has none. |
| 1452 | - $instructions = " | |
| 1807 | + $instructions = ' | |
| 1453 | 1808 | You are the same friendly WordPress assistant that just dispatched a command on behalf of the user. You now have the result of that command. |
| 1454 | 1809 | |
| 1455 | 1810 | Write a SHORT reply (one or two sentences, first person, warm and conversational) describing what happened. Match the voice the site owner set in their system prompt — do not restart small talk, just confirm what you did. |
| 1456 | 1811 | |
| 1457 | 1812 | Rules: |
| 1458 | -- If the outcome looks successful, confirm plainly. Example: \"Done — your office light is on now.\" | |
| 1813 | +- If the outcome looks successful, confirm plainly. Example: "Done — your office light is on now." | |
| 1459 | 1814 | - If the outcome looks like an error (has an `error` field, a failure message, or obviously negative content), apologise briefly and paraphrase what went wrong. Do not invent details the outcome did not include. |
| 1460 | 1815 | - Do NOT recommend the user try something else unless the outcome explicitly suggests it. |
| 1461 | -- Do NOT describe the tool mechanism (\"I called command_turn_light\") — the user only cares about the real-world effect. | |
| 1462 | -"; | |
| 1816 | +- Do NOT describe the tool mechanism ("I called command_turn_light") — the user only cares about the real-world effect. | |
| 1817 | +'; | |
| 1463 | 1818 | |
| 1464 | 1819 | $system_prompt_text = isset( $extra['system_prompt_text'] ) && is_string( $extra['system_prompt_text'] ) ? $extra['system_prompt_text'] : ''; |
| 1465 | 1820 | $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true ) |
| 1466 | 1821 | ? (string) $extra['system_prompt_mode'] |
| @@ -1465,9 +1820,9 @@ | ||
| 1465 | 1820 | $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true ) |
| 1466 | 1821 | ? (string) $extra['system_prompt_mode'] |
| 1467 | 1822 | : 'append'; |
| 1468 | 1823 | |
| 1469 | - $instructions = desktop_mode_ai_compose_instructions( | |
| 1824 | + $instructions = openstation_ai_compose_instructions( | |
| 1470 | 1825 | $instructions, |
| 1471 | 1826 | array( |
| 1472 | 1827 | 'query' => $query, |
| 1473 | 1828 | 'user_id' => $user_id, |
| @@ -1473,9 +1828,12 @@ | ||
| 1473 | 1828 | 'user_id' => $user_id, |
| 1474 | 1829 | 'request_id' => $request_id, |
| 1475 | 1830 | 'phase' => 'follow_up', |
| 1476 | 1831 | ), |
| 1477 | - array( 'text' => $system_prompt_text, 'mode' => $system_prompt_mode ) | |
| 1832 | + array( | |
| 1833 | + 'text' => $system_prompt_text, | |
| 1834 | + 'mode' => $system_prompt_mode, | |
| 1835 | + ) | |
| 1478 | 1836 | ); |
| 1479 | 1837 | |
| 1480 | 1838 | $slug = isset( $tool['slug'] ) ? (string) $tool['slug'] : ''; |
| 1481 | 1839 | $tool_args = isset( $tool['args'] ) ? (string) $tool['args'] : ''; |
| @@ -1484,9 +1842,9 @@ | ||
| 1484 | 1842 | $outcome_json = '""'; |
| 1485 | 1843 | } |
| 1486 | 1844 | |
| 1487 | 1845 | // Bound the outcome payload so a malicious or buggy plugin that |
| 1488 | - // returns a 5MB blob can't inflate OpenAI token usage without | |
| 1846 | + // returns a 5MB blob can't inflate the provider token usage without | |
| 1489 | 1847 | // bound. 4 KB is enough for a status string, a small result list, |
| 1490 | 1848 | // or a short error envelope — anything bigger gets truncated with |
| 1491 | 1849 | // a marker so the model knows the tail was dropped. |
| 1492 | 1850 | // |
| @@ -1491,12 +1849,12 @@ | ||
| 1491 | 1849 | // a marker so the model knows the tail was dropped. |
| 1492 | 1850 | // |
| 1493 | 1851 | // `mb_*` variants so truncation on a multibyte boundary |
| 1494 | 1852 | // (Japanese / emoji / accented UTF-8) can't produce invalid JSON |
| 1495 | - // that OpenAI would reject. Falls back to byte-level substr when | |
| 1853 | + // that the provider would reject. Falls back to byte-level substr when | |
| 1496 | 1854 | // mbstring is unavailable (rare but possible on minimal PHP |
| 1497 | 1855 | // builds). |
| 1498 | - $max_outcome_len = (int) apply_filters( 'desktop_mode_ai_followup_outcome_max_chars', 4000 ); | |
| 1856 | + $max_outcome_len = (int) apply_filters( 'openstation_ai_followup_outcome_max_chars', 4000 ); | |
| 1499 | 1857 | if ( $max_outcome_len > 0 ) { |
| 1500 | 1858 | $has_mbstring = function_exists( 'mb_strlen' ) && function_exists( 'mb_substr' ); |
| 1501 | 1859 | $current_len = $has_mbstring |
| 1502 | 1860 | ? mb_strlen( $outcome_json, 'UTF-8' ) |
| @@ -1501,9 +1859,9 @@ | ||
| 1501 | 1859 | $current_len = $has_mbstring |
| 1502 | 1860 | ? mb_strlen( $outcome_json, 'UTF-8' ) |
| 1503 | 1861 | : strlen( $outcome_json ); |
| 1504 | 1862 | if ( $current_len > $max_outcome_len ) { |
| 1505 | - $outcome_json = $has_mbstring | |
| 1863 | + $outcome_json = $has_mbstring | |
| 1506 | 1864 | ? mb_substr( $outcome_json, 0, $max_outcome_len, 'UTF-8' ) |
| 1507 | 1865 | : substr( $outcome_json, 0, $max_outcome_len ); |
| 1508 | 1866 | $outcome_json .= '…[truncated]'; |
| 1509 | 1867 | } |
| @@ -1517,35 +1875,41 @@ | ||
| 1517 | 1875 | $outcome_json |
| 1518 | 1876 | ); |
| 1519 | 1877 | |
| 1520 | 1878 | do_action( |
| 1521 | - 'desktop_mode_ai_tool_called', | |
| 1879 | + 'openstation_ai_tool_called', | |
| 1522 | 1880 | array( |
| 1523 | 1881 | 'tool_name' => 'followup_summarise', |
| 1524 | - 'args' => array( 'slug' => $slug, 'tool_args' => $tool_args ), | |
| 1882 | + 'args' => array( | |
| 1883 | + 'slug' => $slug, | |
| 1884 | + 'tool_args' => $tool_args, | |
| 1885 | + ), | |
| 1525 | 1886 | 'user_id' => $user_id, |
| 1526 | 1887 | 'request_id' => $request_id, |
| 1527 | 1888 | ) |
| 1528 | 1889 | ); |
| 1529 | 1890 | |
| 1530 | - $turn_input = desktop_mode_ai_provider_make_turn_input( $user_id, 'user_message', $user_message ); | |
| 1531 | - if ( is_wp_error( $turn_input ) ) { | |
| 1532 | - return $turn_input; | |
| 1533 | - } | |
| 1534 | - | |
| 1535 | - $turn = desktop_mode_ai_provider_agentic_call( | |
| 1891 | + $turn = openstation_ai_client_generate( | |
| 1536 | 1892 | $user_id, |
| 1537 | - $api_key, | |
| 1538 | - $turn_input, | |
| 1539 | - array(), // no tools — we want a plain reply | |
| 1540 | - null, // no JSON schema — free-form text | |
| 1893 | + array( openstation_ai_user_text_message( $user_message ) ), | |
| 1894 | + array(), // no tools — we want a plain reply | |
| 1895 | + null, // no JSON schema — free-form text | |
| 1541 | 1896 | $instructions, |
| 1542 | - null | |
| 1897 | + array( | |
| 1898 | + 'source' => 'ai-copilot/followup', | |
| 1899 | + 'request_id' => $request_id, | |
| 1900 | + ) | |
| 1543 | 1901 | ); |
| 1544 | 1902 | |
| 1545 | - if ( is_wp_error( $turn ) ) { | |
| 1903 | + // `openstation_ai_empty_answer` is the one generation error this path | |
| 1904 | + // deliberately absorbs: the command DID run, so a text-less summary turn | |
| 1905 | + // degrades to the generic confirmation below instead of surfacing as a | |
| 1906 | + // failure of the command itself. | |
| 1907 | + $empty_answer = is_wp_error( $turn ) && 'openstation_ai_empty_answer' === $turn->get_error_code(); | |
| 1908 | + | |
| 1909 | + if ( is_wp_error( $turn ) && ! $empty_answer ) { | |
| 1546 | 1910 | do_action( |
| 1547 | - 'desktop_mode_ai_search_error', | |
| 1911 | + 'openstation_ai_search_error', | |
| 1548 | 1912 | array( |
| 1549 | 1913 | 'code' => $turn->get_error_code(), |
| 1550 | 1914 | 'message' => $turn->get_error_message(), |
| 1551 | 1915 | 'data' => $turn->get_error_data(), |
| @@ -1556,12 +1920,12 @@ | ||
| 1556 | 1920 | ); |
| 1557 | 1921 | return $turn; |
| 1558 | 1922 | } |
| 1559 | 1923 | |
| 1560 | - $text = $turn['text'] ?? null; | |
| 1924 | + $text = $empty_answer ? null : ( $turn['text'] ?? null ); | |
| 1561 | 1925 | $fallback = false; |
| 1562 | 1926 | if ( ! is_string( $text ) || '' === trim( $text ) ) { |
| 1563 | - // Graceful degrade — if OpenAI returned nothing usable, fall | |
| 1927 | + // Graceful degrade — if the provider returned nothing usable, fall | |
| 1564 | 1928 | // back to a generic confirmation so the caller always has a |
| 1565 | 1929 | // message to show. Better than returning an error and losing |
| 1566 | 1930 | // the fact that the command *did* run. We flag the degrade so |
| 1567 | 1931 | // observability subscribers can distinguish a deliberate |
| @@ -1578,14 +1942,17 @@ | ||
| 1578 | 1942 | 'iterations' => 1, |
| 1579 | 1943 | 'exhausted' => false, |
| 1580 | 1944 | 'continue' => null, |
| 1581 | 1945 | 'request_id' => $request_id, |
| 1582 | - 'tool' => array( 'slug' => $slug, 'args' => $tool_args ), | |
| 1946 | + 'tool' => array( | |
| 1947 | + 'slug' => $slug, | |
| 1948 | + 'args' => $tool_args, | |
| 1949 | + ), | |
| 1583 | 1950 | 'fallback' => $fallback, |
| 1584 | 1951 | ); |
| 1585 | 1952 | |
| 1586 | 1953 | $final = (array) apply_filters( |
| 1587 | - 'desktop_mode_ai_answer', | |
| 1954 | + 'openstation_ai_answer', | |
| 1588 | 1955 | $final, |
| 1589 | 1956 | array( |
| 1590 | 1957 | 'query' => $query, |
| 1591 | 1958 | 'user_id' => $user_id, |
| @@ -1594,9 +1961,9 @@ | ||
| 1594 | 1961 | ) |
| 1595 | 1962 | ); |
| 1596 | 1963 | |
| 1597 | 1964 | do_action( |
| 1598 | - 'desktop_mode_ai_search_completed', | |
| 1965 | + 'openstation_ai_search_completed', | |
| 1599 | 1966 | array( |
| 1600 | 1967 | 'query' => $query, |
| 1601 | 1968 | 'user_id' => $user_id, |
| 1602 | 1969 | 'request_id' => $request_id, |
| @@ -1615,21 +1982,19 @@ | ||
| 1615 | 1982 | // --------------------------------------------------------------------------- |
| 1616 | 1983 | |
| 1617 | 1984 | /** |
| 1618 | 1985 | * Registers the AI search REST route. |
| 1619 | - * | |
| 1620 | - * @since 0.14.0 | |
| 1621 | 1986 | */ |
| 1622 | -function desktop_mode_register_ai_search_rest_route() { | |
| 1987 | +function openstation_register_ai_search_rest_route() { | |
| 1623 | 1988 | register_rest_route( |
| 1624 | 1989 | 'desktop-mode/v1', |
| 1625 | 1990 | '/ai/search', |
| 1626 | 1991 | array( |
| 1627 | 1992 | 'methods' => WP_REST_Server::CREATABLE, |
| 1628 | - 'callback' => 'desktop_mode_rest_ai_search', | |
| 1629 | - 'permission_callback' => 'desktop_mode_rest_ai_search_permission', | |
| 1993 | + 'callback' => 'openstation_rest_ai_search', | |
| 1994 | + 'permission_callback' => 'openstation_rest_ai_search_permission', | |
| 1630 | 1995 | 'args' => array( |
| 1631 | - 'query' => array( | |
| 1996 | + 'query' => array( | |
| 1632 | 1997 | 'required' => true, |
| 1633 | 1998 | 'type' => 'string', |
| 1634 | 1999 | 'sanitize_callback' => 'sanitize_text_field', |
| 1635 | 2000 | 'validate_callback' => static function ( $v ) { |
| @@ -1639,18 +2004,18 @@ | ||
| 1639 | 2004 | // `resume_tool` + `start_offset` are only set when the |
| 1640 | 2005 | // client is continuing a previous search from the `continue` |
| 1641 | 2006 | // object returned by an exhausted run. Fresh searches leave |
| 1642 | 2007 | // both unset — the agent picks tools from query semantics. |
| 1643 | - 'resume_tool' => array( | |
| 2008 | + 'resume_tool' => array( | |
| 1644 | 2009 | 'required' => false, |
| 1645 | 2010 | 'type' => array( 'string', 'null' ), |
| 1646 | 2011 | 'default' => null, |
| 1647 | 2012 | 'sanitize_callback' => static function ( $v ) { |
| 1648 | - return in_array( $v, array( 'search_posts', 'search_pages', 'search_comments' ), true ) | |
| 2013 | + return in_array( $v, openstation_ai_search_resumable_tools(), true ) | |
| 1649 | 2014 | ? $v : null; |
| 1650 | - }, | |
| 2015 | + }, | |
| 1651 | 2016 | ), |
| 1652 | - 'start_offset' => array( | |
| 2017 | + 'start_offset' => array( | |
| 1653 | 2018 | 'required' => false, |
| 1654 | 2019 | 'type' => 'integer', |
| 1655 | 2020 | 'default' => 0, |
| 1656 | 2021 | 'sanitize_callback' => 'absint', |
| @@ -1659,9 +2024,9 @@ | ||
| 1659 | 2024 | // opted in as AI tools. Each entry: { slug, label, description?, hint? }. |
| 1660 | 2025 | // The slug is namespaced server-side as `command_<slug>` |
| 1661 | 2026 | // and any tool_call the model emits with that name short- |
| 1662 | 2027 | // circuits back to the client for local dispatch. |
| 1663 | - 'command_tools' => array( | |
| 2028 | + 'command_tools' => array( | |
| 1664 | 2029 | 'required' => false, |
| 1665 | 2030 | 'type' => 'array', |
| 1666 | 2031 | 'default' => array(), |
| 1667 | 2032 | 'items' => array( |
| @@ -1674,12 +2039,12 @@ | ||
| 1674 | 2039 | ), |
| 1675 | 2040 | ), |
| 1676 | 2041 | ), |
| 1677 | 2042 | // Free-form system-prompt override. |
| 1678 | - // mode: 'append' → concatenated onto the built-in prompt (safe for everyone) | |
| 1679 | - // mode: 'replace' → replaces the built-in prompt entirely, gated on | |
| 1680 | - // `desktop_mode_ai_system_prompt_replace_capability` | |
| 1681 | - // (default `manage_options`). | |
| 2043 | + // mode: 'append' → concatenated onto the built-in prompt (safe for everyone) | |
| 2044 | + // mode: 'replace' → replaces the built-in prompt entirely, gated on | |
| 2045 | + // `openstation_ai_system_prompt_replace_capability` | |
| 2046 | + // (default `manage_options`). | |
| 1682 | 2047 | 'system_prompt_text' => array( |
| 1683 | 2048 | 'required' => false, |
| 1684 | 2049 | 'type' => 'string', |
| 1685 | 2050 | 'default' => '', |
| @@ -1694,11 +2059,11 @@ | ||
| 1694 | 2059 | ), |
| 1695 | 2060 | // Follow-up leg of the agentic command-dispatch flow. |
| 1696 | 2061 | // When present, the endpoint SKIPS the agent loop entirely |
| 1697 | 2062 | // and runs a single-turn "summarise this outcome" call |
| 1698 | - // through OpenAI instead. The client sends this on the | |
| 2063 | + // through the provider instead. The client sends this on the | |
| 1699 | 2064 | // second leg of `ask( q, { tools: 'aiCallable', followUp: true } )`. |
| 1700 | - 'follow_up' => array( | |
| 2065 | + 'follow_up' => array( | |
| 1701 | 2066 | 'required' => false, |
| 1702 | 2067 | 'type' => array( 'object', 'null' ), |
| 1703 | 2068 | 'default' => null, |
| 1704 | 2069 | ), |
| @@ -1705,32 +2070,46 @@ | ||
| 1705 | 2070 | ), |
| 1706 | 2071 | ) |
| 1707 | 2072 | ); |
| 1708 | 2073 | } |
| 1709 | -add_action( 'rest_api_init', 'desktop_mode_register_ai_search_rest_route' ); | |
| 2074 | +add_action( 'rest_api_init', 'openstation_register_ai_search_rest_route' ); | |
| 1710 | 2075 | |
| 1711 | 2076 | /** |
| 1712 | 2077 | * Permission callback. |
| 1713 | 2078 | * |
| 1714 | - * @since 0.14.0 | |
| 1715 | - * | |
| 1716 | 2079 | * @return bool|WP_Error |
| 1717 | 2080 | */ |
| 1718 | -function desktop_mode_rest_ai_search_permission() { | |
| 2081 | +function openstation_rest_ai_search_permission() { | |
| 1719 | 2082 | if ( ! is_user_logged_in() || ! current_user_can( 'read' ) ) { |
| 1720 | 2083 | return new WP_Error( |
| 1721 | - 'desktop_mode_ai_forbidden', | |
| 1722 | - 'You must be logged in to use the AI search.', | |
| 2084 | + 'openstation_ai_forbidden', | |
| 2085 | + __( 'You must be logged in to use the AI assistant.', 'desktop-mode' ), | |
| 1723 | 2086 | array( 'status' => 403 ) |
| 1724 | 2087 | ); |
| 1725 | 2088 | } |
| 1726 | - if ( ! desktop_mode_ai_is_enabled( get_current_user_id() ) ) { | |
| 2089 | + if ( ! openstation_ai_is_available() ) { | |
| 1727 | 2090 | return new WP_Error( |
| 1728 | - 'desktop_mode_ai_disabled', | |
| 1729 | - 'AI features are not enabled. Enable them in OS Settings → AI Settings.', | |
| 1730 | - array( 'status' => 403 ) | |
| 2091 | + 'openstation_ai_unavailable', | |
| 2092 | + __( 'The AI assistant is unavailable on this site.', 'desktop-mode' ), | |
| 2093 | + array( 'status' => 503 ) | |
| 1731 | 2094 | ); |
| 1732 | 2095 | } |
| 2096 | + if ( ! openstation_ai_is_enabled( get_current_user_id() ) ) { | |
| 2097 | + // The message names the tab for consumers that only get text (a REST | |
| 2098 | + // client, `wp.os.ai.ask()`). `settings_tab` names it again as data, | |
| 2099 | + // so the overlay can offer a one-click link without parsing prose. | |
| 2100 | + return new WP_Error( | |
| 2101 | + 'openstation_ai_disabled', | |
| 2102 | + __( | |
| 2103 | + 'The AI assistant is turned off. Enable it in OpenStation Preferences → Features.', | |
| 2104 | + 'desktop-mode' | |
| 2105 | + ), | |
| 2106 | + array( | |
| 2107 | + 'status' => 403, | |
| 2108 | + 'settings_tab' => 'features', | |
| 2109 | + ) | |
| 2110 | + ); | |
| 2111 | + } | |
| 1733 | 2112 | return true; |
| 1734 | 2113 | } |
| 1735 | 2114 | |
| 1736 | 2115 | /** |
| @@ -1735,16 +2114,19 @@ | ||
| 1735 | 2114 | |
| 1736 | 2115 | /** |
| 1737 | 2116 | * POST /desktop-mode/v1/ai/search |
| 1738 | 2117 | * |
| 1739 | - * @since 0.14.0 | |
| 1740 | - * | |
| 1741 | 2118 | * @param WP_REST_Request $request |
| 1742 | 2119 | * @return WP_REST_Response|WP_Error |
| 1743 | 2120 | */ |
| 1744 | -function desktop_mode_rest_ai_search( WP_REST_Request $request ) { | |
| 2121 | +function openstation_rest_ai_search( WP_REST_Request $request ) { | |
| 2122 | + // The agent loop runs up to OPENSTATION_AI_SEARCH_MAX_ITERATIONS model | |
| 2123 | + // round-trips, each with a tool call, which overruns a default 30s | |
| 2124 | + // max_execution_time. The streaming endpoint used to raise this; it is | |
| 2125 | + // the only path now, so it carries the limit. | |
| 2126 | + @set_time_limit( 120 ); // phpcs:ignore | |
| 2127 | + | |
| 1745 | 2128 | $user_id = get_current_user_id(); |
| 1746 | - $api_key = desktop_mode_ai_get_api_key( $user_id ); | |
| 1747 | 2129 | $query = $request->get_param( 'query' ); |
| 1748 | 2130 | $resume_tool = $request->get_param( 'resume_tool' ); |
| 1749 | 2131 | $start_offset = $request->get_param( 'start_offset' ); |
| 1750 | 2132 | |
| @@ -1754,9 +2136,9 @@ | ||
| 1754 | 2136 | } |
| 1755 | 2137 | |
| 1756 | 2138 | $extra = array( |
| 1757 | 2139 | 'user_id' => $user_id, |
| 1758 | - 'request_id' => function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ), | |
| 2140 | + 'request_id' => function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ), | |
| 1759 | 2141 | 'command_tools' => $command_tools, |
| 1760 | 2142 | 'system_prompt_text' => (string) $request->get_param( 'system_prompt_text' ), |
| 1761 | 2143 | 'system_prompt_mode' => (string) $request->get_param( 'system_prompt_mode' ), |
| 1762 | 2144 | ); |
| @@ -1765,15 +2147,13 @@ | ||
| 1765 | 2147 | * Last-mile filter on the whole `/ai/search` request bundle. |
| 1766 | 2148 | * Plugins get one hook to rewrite query, swap tools, or inject |
| 1767 | 2149 | * metadata before the agent loop starts. |
| 1768 | 2150 | * |
| 1769 | - * @since 0.17.0 | |
| 1770 | - * | |
| 1771 | 2151 | * @param array $extra Extended context (mutable). |
| 1772 | 2152 | * @param array $core Core request params { query, resume_tool, start_offset }. |
| 1773 | 2153 | */ |
| 1774 | 2154 | $extra = (array) apply_filters( |
| 1775 | - 'desktop_mode_ai_request', | |
| 2155 | + 'openstation_ai_request', | |
| 1776 | 2156 | $extra, |
| 1777 | 2157 | array( |
| 1778 | 2158 | 'query' => $query, |
| 1779 | 2159 | 'resume_tool' => $resume_tool, |
| @@ -1787,17 +2167,17 @@ | ||
| 1787 | 2167 | $tool = $follow_up['tool']; |
| 1788 | 2168 | $outcome = isset( $follow_up['result'] ) |
| 1789 | 2169 | ? ( is_array( $follow_up['result'] ) ? $follow_up['result'] : array( 'value' => $follow_up['result'] ) ) |
| 1790 | 2170 | : array(); |
| 1791 | - $result = desktop_mode_ai_run_followup( $api_key, $query, $tool, $outcome, $extra ); | |
| 2171 | + $result = openstation_ai_run_followup( $query, $tool, $outcome, $extra ); | |
| 1792 | 2172 | } else { |
| 1793 | - $result = desktop_mode_ai_run_search( $api_key, $query, $resume_tool, $start_offset, null, $extra ); | |
| 2173 | + $result = openstation_ai_run_search( $query, $resume_tool, $start_offset, $extra ); | |
| 1794 | 2174 | } |
| 1795 | 2175 | |
| 1796 | 2176 | if ( is_wp_error( $result ) ) { |
| 1797 | 2177 | $request_id = isset( $extra['request_id'] ) ? (string) $extra['request_id'] : ''; |
| 1798 | 2178 | do_action( |
| 1799 | - 'desktop_mode_ai_search_error', | |
| 2179 | + 'openstation_ai_search_error', | |
| 1800 | 2180 | array( |
| 1801 | 2181 | 'code' => $result->get_error_code(), |
| 1802 | 2182 | 'message' => $result->get_error_message(), |
| 1803 | 2183 | 'data' => $result->get_error_data(), |
| @@ -1819,16 +2199,14 @@ | ||
| 1819 | 2199 | |
| 1820 | 2200 | /** |
| 1821 | 2201 | * Search the WordPress.org plugin directory. |
| 1822 | 2202 | * |
| 1823 | - * @since 0.14.0 | |
| 1824 | - * | |
| 1825 | 2203 | * @param string $query Search terms. |
| 1826 | 2204 | * @return array Tool result payload ready for the model. |
| 1827 | 2205 | */ |
| 1828 | -function desktop_mode_ai_fetch_wporg_plugins( $query ) { | |
| 2206 | +function openstation_ai_fetch_wporg_plugins( $query ) { | |
| 1829 | 2207 | $query = trim( (string) $query ); |
| 1830 | - if ( $query === '' ) { | |
| 2208 | + if ( '' === $query ) { | |
| 1831 | 2209 | return array( |
| 1832 | 2210 | 'tool' => 'search_wporg_plugins', |
| 1833 | 2211 | 'query' => '', |
| 1834 | 2212 | 'results' => array(), |
| @@ -1838,9 +2216,9 @@ | ||
| 1838 | 2216 | } |
| 1839 | 2217 | |
| 1840 | 2218 | // Transient cache to protect the w.org API from repeated queries |
| 1841 | 2219 | // within the same conversation. |
| 1842 | - $cache_key = 'desktop_mode_ai_plugins_' . md5( strtolower( $query ) ); | |
| 2220 | + $cache_key = 'openstation_ai_plugins_' . md5( strtolower( $query ) ); | |
| 1843 | 2221 | $cached = get_transient( $cache_key ); |
| 1844 | 2222 | if ( is_array( $cached ) ) { |
| 1845 | 2223 | return $cached; |
| 1846 | 2224 | } |
| @@ -1897,9 +2275,9 @@ | ||
| 1897 | 2275 | // Normalise — plugins_api sometimes returns arrays, sometimes objects. |
| 1898 | 2276 | $p = (array) $p; |
| 1899 | 2277 | |
| 1900 | 2278 | $slug = isset( $p['slug'] ) ? (string) $p['slug'] : ''; |
| 1901 | - if ( $slug === '' ) { | |
| 2279 | + if ( '' === $slug ) { | |
| 1902 | 2280 | continue; |
| 1903 | 2281 | } |
| 1904 | 2282 | |
| 1905 | 2283 | $icon = ''; |
| @@ -1965,20 +2343,18 @@ | ||
| 1965 | 2343 | * falls back to the PHP ini `error_log` directive. If neither points at |
| 1966 | 2344 | * a readable file the tool reports log_available=false rather than |
| 1967 | 2345 | * throwing. |
| 1968 | 2346 | * |
| 1969 | - * @since 0.14.0 | |
| 1970 | - * | |
| 1971 | 2347 | * @param int $lines Number of lines to return (clamped 1-500 by caller). |
| 1972 | 2348 | * @return array |
| 1973 | 2349 | */ |
| 1974 | -function desktop_mode_ai_fetch_error_log( $lines = 50 ) { | |
| 2350 | +function openstation_ai_fetch_error_log( $lines = 50 ) { | |
| 1975 | 2351 | $candidates = array(); |
| 1976 | 2352 | if ( defined( 'WP_CONTENT_DIR' ) ) { |
| 1977 | 2353 | $candidates[] = WP_CONTENT_DIR . '/debug.log'; |
| 1978 | 2354 | } |
| 1979 | 2355 | $ini_log = (string) ini_get( 'error_log' ); |
| 1980 | - if ( $ini_log !== '' && 'syslog' !== $ini_log ) { | |
| 2356 | + if ( '' !== $ini_log && 'syslog' !== $ini_log ) { | |
| 1981 | 2357 | $candidates[] = $ini_log; |
| 1982 | 2358 | } |
| 1983 | 2359 | |
| 1984 | 2360 | /** |
| @@ -1984,13 +2360,11 @@ | ||
| 1984 | 2360 | /** |
| 1985 | 2361 | * Filter the list of log-file paths to probe in order. Plugins that |
| 1986 | 2362 | * redirect errors somewhere non-standard can add their path here. |
| 1987 | 2363 | * |
| 1988 | - * @since 0.14.0 | |
| 1989 | - * | |
| 1990 | 2364 | * @param string[] $candidates File paths, in probe order. |
| 1991 | 2365 | */ |
| 1992 | - $candidates = (array) apply_filters( 'desktop_mode_ai_error_log_candidates', $candidates ); | |
| 2366 | + $candidates = (array) apply_filters( 'openstation_ai_error_log_candidates', $candidates ); | |
| 1993 | 2367 | |
| 1994 | 2368 | $log_path = ''; |
| 1995 | 2369 | foreach ( $candidates as $path ) { |
| 1996 | 2370 | if ( is_string( $path ) && is_file( $path ) && is_readable( $path ) ) { |
| @@ -1998,9 +2372,9 @@ | ||
| 1998 | 2372 | break; |
| 1999 | 2373 | } |
| 2000 | 2374 | } |
| 2001 | 2375 | |
| 2002 | - if ( $log_path === '' ) { | |
| 2376 | + if ( '' === $log_path ) { | |
| 2003 | 2377 | return array( |
| 2004 | 2378 | 'tool' => 'get_php_error_log', |
| 2005 | 2379 | 'log_available' => false, |
| 2006 | 2380 | 'message' => 'No readable error log found. Enable WP_DEBUG_LOG in wp-config.php or set php_value error_log.', |
| @@ -2009,17 +2383,17 @@ | ||
| 2009 | 2383 | 'count' => 0, |
| 2010 | 2384 | ); |
| 2011 | 2385 | } |
| 2012 | 2386 | |
| 2013 | - $tail = desktop_mode_ai_tail_file( $log_path, $lines ); | |
| 2387 | + $tail = openstation_ai_tail_file( $log_path, $lines ); | |
| 2014 | 2388 | |
| 2015 | 2389 | $entries = array(); |
| 2016 | 2390 | foreach ( $tail as $line ) { |
| 2017 | 2391 | $line = trim( $line ); |
| 2018 | - if ( $line === '' ) { | |
| 2392 | + if ( '' === $line ) { | |
| 2019 | 2393 | continue; |
| 2020 | 2394 | } |
| 2021 | - $entries[] = desktop_mode_ai_parse_log_line( $line ); | |
| 2395 | + $entries[] = openstation_ai_parse_log_line( $line ); | |
| 2022 | 2396 | } |
| 2023 | 2397 | |
| 2024 | 2398 | return array( |
| 2025 | 2399 | 'tool' => 'get_php_error_log', |
| @@ -2036,16 +2410,14 @@ | ||
| 2036 | 2410 | * PHP's default format is `[<date>] <prefix>: <message>` where the |
| 2037 | 2411 | * prefix is usually "PHP Fatal error", "PHP Warning", etc. Falls back |
| 2038 | 2412 | * to a raw line when the format doesn't match. |
| 2039 | 2413 | * |
| 2040 | - * @since 0.14.0 | |
| 2041 | - * | |
| 2042 | 2414 | * @param string $line |
| 2043 | 2415 | * @return array |
| 2044 | 2416 | */ |
| 2045 | -function desktop_mode_ai_parse_log_line( $line ) { | |
| 2417 | +function openstation_ai_parse_log_line( $line ) { | |
| 2046 | 2418 | // Cap individual messages so a runaway stack trace doesn't balloon |
| 2047 | - // the payload sent to OpenAI. | |
| 2419 | + // the payload sent to the provider. | |
| 2048 | 2420 | $line = mb_substr( $line, 0, 600 ); |
| 2049 | 2421 | |
| 2050 | 2422 | $entry = array( |
| 2051 | 2423 | 'timestamp' => '', |
| @@ -2073,15 +2445,13 @@ | ||
| 2073 | 2445 | * slices off the trailing N+1 entries. Realistic error logs sit |
| 2074 | 2446 | * in the kilobyte range when admins look at them; if a site routinely |
| 2075 | 2447 | * lets logs grow into tens of MB, that's the symptom, not this read. |
| 2076 | 2448 | * |
| 2077 | - * @since 0.14.0 | |
| 2078 | - * | |
| 2079 | 2449 | * @param string $path Absolute path to the file. |
| 2080 | 2450 | * @param int $lines |
| 2081 | 2451 | * @return string[] Lines in original order (oldest first). |
| 2082 | 2452 | */ |
| 2083 | -function desktop_mode_ai_tail_file( $path, $lines ) { | |
| 2453 | +function openstation_ai_tail_file( $path, $lines ) { | |
| 2084 | 2454 | if ( ! function_exists( 'WP_Filesystem' ) ) { |
| 2085 | 2455 | require_once ABSPATH . 'wp-admin/includes/file.php'; |
| 2086 | 2456 | } |
| 2087 | 2457 | WP_Filesystem(); |
| @@ -2101,117 +2471,4 @@ | ||
| 2101 | 2471 | } |
| 2102 | 2472 | |
| 2103 | 2473 | return array_slice( $all, -1 * ( $lines + 1 ) ); |
| 2104 | 2474 | } |
| 2105 | - | |
| 2106 | -// --------------------------------------------------------------------------- | |
| 2107 | -// Streaming endpoint (Server-Sent Events) | |
| 2108 | -// | |
| 2109 | -// EventSource can't send POST or custom headers, so we ride admin-ajax.php | |
| 2110 | -// which handles cookie-based auth natively. The nonce goes in the URL. | |
| 2111 | -// Output buffering is forcibly disabled and every emit is flushed so the | |
| 2112 | -// browser receives progress ticks in real time. | |
| 2113 | -// --------------------------------------------------------------------------- | |
| 2114 | - | |
| 2115 | -/** | |
| 2116 | - * admin-ajax handler for the streaming search endpoint. | |
| 2117 | - * | |
| 2118 | - * URL: /wp-admin/admin-ajax.php?action=desktop_mode_ai_search_stream | |
| 2119 | - * &nonce=<rest_nonce> | |
| 2120 | - * &query=<user question> | |
| 2121 | - * &resume_tool=<search_posts|…> (optional) | |
| 2122 | - * &start_offset=<int> (optional) | |
| 2123 | - * | |
| 2124 | - * Emits SSE events: | |
| 2125 | - * data: { "event": "progress", "phase": "tool_call", "message": "…" } | |
| 2126 | - * data: { "event": "done", "result": { … } } | |
| 2127 | - * data: { "event": "error", "message": "…" } | |
| 2128 | - * | |
| 2129 | - * @since 0.14.0 | |
| 2130 | - */ | |
| 2131 | -function desktop_mode_ai_ajax_search_stream() { | |
| 2132 | - $nonce = isset( $_GET['nonce'] ) ? sanitize_text_field( wp_unslash( $_GET['nonce'] ) ) : ''; | |
| 2133 | - if ( ! wp_verify_nonce( $nonce, 'wp_rest' ) ) { | |
| 2134 | - status_header( 403 ); | |
| 2135 | - exit; | |
| 2136 | - } | |
| 2137 | - if ( ! is_user_logged_in() || ! current_user_can( 'read' ) ) { | |
| 2138 | - status_header( 403 ); | |
| 2139 | - exit; | |
| 2140 | - } | |
| 2141 | - $user_id = get_current_user_id(); | |
| 2142 | - if ( ! desktop_mode_ai_is_enabled( $user_id ) ) { | |
| 2143 | - status_header( 403 ); | |
| 2144 | - exit; | |
| 2145 | - } | |
| 2146 | - | |
| 2147 | - $query = isset( $_GET['query'] ) ? sanitize_text_field( wp_unslash( $_GET['query'] ) ) : ''; // phpcs:ignore WordPress.Security | |
| 2148 | - if ( trim( $query ) === '' ) { | |
| 2149 | - status_header( 400 ); | |
| 2150 | - exit; | |
| 2151 | - } | |
| 2152 | - | |
| 2153 | - $resume_tool = isset( $_GET['resume_tool'] ) ? sanitize_key( wp_unslash( $_GET['resume_tool'] ) ) : null; // phpcs:ignore WordPress.Security | |
| 2154 | - $start_offset = isset( $_GET['start_offset'] ) ? absint( $_GET['start_offset'] ) : 0; // phpcs:ignore WordPress.Security | |
| 2155 | - if ( $resume_tool !== null && ! in_array( $resume_tool, array( 'search_posts', 'search_pages', 'search_comments', 'search_comments_by_post' ), true ) ) { | |
| 2156 | - $resume_tool = null; | |
| 2157 | - } | |
| 2158 | - | |
| 2159 | - // SSE headers — tell nginx to stop buffering, tell the browser this is | |
| 2160 | - // a persistent event stream. | |
| 2161 | - header( 'Content-Type: text/event-stream; charset=utf-8' ); | |
| 2162 | - header( 'Cache-Control: no-cache, no-store, must-revalidate' ); | |
| 2163 | - header( 'X-Accel-Buffering: no' ); | |
| 2164 | - header( 'Connection: keep-alive' ); | |
| 2165 | - | |
| 2166 | - // Let other requests from this user proceed (release session lock). | |
| 2167 | - if ( session_status() === PHP_SESSION_ACTIVE ) { | |
| 2168 | - session_write_close(); | |
| 2169 | - } | |
| 2170 | - | |
| 2171 | - // Kill any output buffers PHP set up, otherwise nothing flushes until | |
| 2172 | - // the request ends — which defeats the whole point of streaming. | |
| 2173 | - while ( ob_get_level() > 0 ) { | |
| 2174 | - @ob_end_flush(); // phpcs:ignore | |
| 2175 | - } | |
| 2176 | - @ini_set( 'output_buffering', 'off' ); // phpcs:ignore | |
| 2177 | - @ini_set( 'zlib.output_compression', 'off' ); // phpcs:ignore | |
| 2178 | - @set_time_limit( 120 ); // phpcs:ignore | |
| 2179 | - | |
| 2180 | - $emit = static function ( array $payload ) { | |
| 2181 | - echo 'data: ' . wp_json_encode( $payload ) . "\n\n"; | |
| 2182 | - @ob_flush(); // phpcs:ignore | |
| 2183 | - flush(); | |
| 2184 | - }; | |
| 2185 | - | |
| 2186 | - // Initial tick so the EventSource opens immediately and the JS can | |
| 2187 | - // start showing "Thinking…" without waiting for the first OpenAI call. | |
| 2188 | - $emit( array( 'event' => 'open' ) ); | |
| 2189 | - | |
| 2190 | - $api_key = desktop_mode_ai_get_api_key( $user_id ); | |
| 2191 | - | |
| 2192 | - $result = desktop_mode_ai_run_search( | |
| 2193 | - $api_key, | |
| 2194 | - $query, | |
| 2195 | - $resume_tool, | |
| 2196 | - $start_offset, | |
| 2197 | - function ( $progress ) use ( $emit ) { | |
| 2198 | - $emit( array_merge( array( 'event' => 'progress' ), $progress ) ); | |
| 2199 | - } | |
| 2200 | - ); | |
| 2201 | - | |
| 2202 | - if ( is_wp_error( $result ) ) { | |
| 2203 | - $emit( array( | |
| 2204 | - 'event' => 'error', | |
| 2205 | - 'message' => $result->get_error_message(), | |
| 2206 | - 'code' => $result->get_error_code(), | |
| 2207 | - ) ); | |
| 2208 | - } else { | |
| 2209 | - $emit( array( | |
| 2210 | - 'event' => 'done', | |
| 2211 | - 'result' => $result, | |
| 2212 | - ) ); | |
| 2213 | - } | |
| 2214 | - | |
| 2215 | - exit; | |
| 2216 | -} | |
| 2217 | -add_action( 'wp_ajax_desktop_mode_ai_search_stream', 'desktop_mode_ai_ajax_search_stream' ); | |
