PluginProbe
OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin / 1.1.11
OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin v1.1.11
1.1.11 1.1.10 1.1.9 1.1.8 1.1.7 1.1.6 1.1.5 1.1.4 1.1.3 1.1.2 1.1.1 1.1.0 1.0.1 1.0.0 0.9.8 0.9.7 0.9.6 0.9.4 0.9.5 0.9.3 0.9.2 0.9.1 0.9.0 0.8.9 0.8.8 All 35 releases
← All changes | includes/ai-copilot/search.php +799 -457 0.9.5 → 1.1.11 View file →
@@ -1,7 +1,7 @@
1 1 <?php
2 2 /**
3 - * Desktop Mode — AI Copilot content search via the provider tool use.
3 + * OpenStation — AI Copilot content search via the provider tool use.
4 4 *
5 5 * Agentic search loop: the user describes something in natural language and
6 6 * the agent calls focused tools, choosing the right one based on query
7 7 * semantics. Built-in tools: four content-search tools — search_posts,
@@ -24,25 +24,25 @@
24 24 * - "Our About page mentions…" → agent calls search_pages.
25 25 * - Ambiguous queries → agent tries in priority order (posts → pages →
26 26 * comments) following the system-prompt guidance.
27 27 *
28 - * Budget: max DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS (10) tool-call rounds per
29 - * request × DESKTOP_MODE_AI_SEARCH_BATCH_SIZE (10) items = up to 100 entities.
28 + * Budget: max OPENSTATION_AI_SEARCH_MAX_ITERATIONS (10) tool-call rounds per
29 + * request × OPENSTATION_AI_SEARCH_BATCH_SIZE (10) items = up to 100 entities.
30 30 * When the budget is exhausted the response includes a `continue` object
31 31 * the client uses to resume from the exact offset that was last searched.
32 32 *
33 33 * REST endpoint: POST /desktop-mode/v1/ai/search
34 34 *
35 - * @package WPDesktopMode
35 + * @package OpenStation
36 36 */
37 37
38 38 defined( 'ABSPATH' ) || exit;
39 39
40 40 /** Maximum agentic tool-call iterations per search request. */
41 -const DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS = 10;
41 +const OPENSTATION_AI_SEARCH_MAX_ITERATIONS = 10;
42 42
43 43 /** Entities fetched per tool-call round. */
44 -const DESKTOP_MODE_AI_SEARCH_BATCH_SIZE = 10;
44 +const OPENSTATION_AI_SEARCH_BATCH_SIZE = 10;
45 45
46 46 /**
47 47 * Returns the catalog of common WordPress admin destinations.
48 48 *
@@ -50,58 +50,204 @@
50 50 * wp-admin URL (rendered through admin_url() so it respects the site's
51 51 * real admin path), a short description, and a Dashicons icon class the
52 52 * UI can use when opening the URL in a legacy iframe window.
53 53 *
54 - * Filterable via `desktop_mode_ai_admin_page_catalog` so third-party
54 + * Filterable via `openstation_ai_admin_page_catalog` so third-party
55 55 * plugins can contribute their own admin destinations (e.g. a plugin
56 56 * adding a top-level menu can surface its settings page here).
57 57 *
58 - * @since 0.5.0
59 - *
60 58 * @return array[]
61 59 */
62 -function desktop_mode_ai_get_admin_page_catalog() {
60 +function openstation_ai_get_admin_page_catalog() {
63 61 $catalog = array(
64 - array( 'title' => 'Dashboard', 'url' => admin_url( 'index.php' ), 'icon' => 'dashicons-dashboard', 'description' => 'The main admin dashboard — activity, drafts, site overview.' ),
65 - array( 'title' => 'All Posts', 'url' => admin_url( 'edit.php' ), 'icon' => 'dashicons-admin-post', 'description' => 'List, edit, bulk-manage blog posts.' ),
66 - array( 'title' => 'Add New Post', 'url' => admin_url( 'post-new.php' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new blog post.' ),
67 - array( 'title' => 'Categories', 'url' => admin_url( 'edit-tags.php?taxonomy=category' ), 'icon' => 'dashicons-category', 'description' => 'Manage post categories — add, rename, merge.' ),
68 - array( 'title' => 'Tags', 'url' => admin_url( 'edit-tags.php?taxonomy=post_tag' ), 'icon' => 'dashicons-tag', 'description' => 'Manage post tags.' ),
69 - array( 'title' => 'All Pages', 'url' => admin_url( 'edit.php?post_type=page' ), 'icon' => 'dashicons-admin-page', 'description' => 'List and edit static pages (About, Contact, etc.).' ),
70 - array( 'title' => 'Add New Page', 'url' => admin_url( 'post-new.php?post_type=page' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new page.' ),
71 - array( 'title' => 'Media Library', 'url' => admin_url( 'upload.php' ), 'icon' => 'dashicons-admin-media', 'description' => 'Browse, upload, and manage images, files, videos.' ),
72 - array( 'title' => 'Comments', 'url' => admin_url( 'edit-comments.php' ), 'icon' => 'dashicons-admin-comments', 'description' => 'Moderate and reply to comments on posts and pages.' ),
73 - array( 'title' => 'Themes', 'url' => admin_url( 'themes.php' ), 'icon' => 'dashicons-admin-appearance', 'description' => 'Change, install, or customize the active theme.' ),
74 - array( 'title' => 'Customize', 'url' => admin_url( 'customize.php' ), 'icon' => 'dashicons-admin-customizer', 'description' => 'Live-preview theme customisation — colors, fonts, layout.' ),
75 - array( 'title' => 'Widgets', 'url' => admin_url( 'widgets.php' ), 'icon' => 'dashicons-screenoptions', 'description' => 'Manage sidebar and footer widgets.' ),
76 - array( 'title' => 'Menus', 'url' => admin_url( 'nav-menus.php' ), 'icon' => 'dashicons-menu', 'description' => 'Create and edit navigation menus.' ),
77 - array( 'title' => 'Plugins', 'url' => admin_url( 'plugins.php' ), 'icon' => 'dashicons-admin-plugins', 'description' => 'Activate, deactivate, update or delete plugins.' ),
78 - array( 'title' => 'Add New Plugin', 'url' => admin_url( 'plugin-install.php' ), 'icon' => 'dashicons-plus', 'description' => 'Search and install new plugins from the directory.' ),
79 - array( 'title' => 'Users', 'url' => admin_url( 'users.php' ), 'icon' => 'dashicons-admin-users', 'description' => 'Manage user accounts and roles.' ),
80 - array( 'title' => 'Add New User', 'url' => admin_url( 'user-new.php' ), 'icon' => 'dashicons-plus', 'description' => 'Create a new user account.' ),
81 - array( 'title' => 'Your Profile', 'url' => admin_url( 'profile.php' ), 'icon' => 'dashicons-id', 'description' => 'Edit your own profile, password, admin colour scheme.' ),
82 - array( 'title' => 'General Settings', 'url' => admin_url( 'options-general.php' ), 'icon' => 'dashicons-admin-settings', 'description' => 'Site title, tagline, URL, timezone, language.' ),
83 - array( 'title' => 'Writing Settings', 'url' => admin_url( 'options-writing.php' ), 'icon' => 'dashicons-edit', 'description' => 'Default post category, post format, remote publishing.' ),
84 - array( 'title' => 'Reading Settings', 'url' => admin_url( 'options-reading.php' ), 'icon' => 'dashicons-book', 'description' => 'Homepage, blog posts per page, search-engine visibility.' ),
85 - array( 'title' => 'Discussion Settings','url' => admin_url( 'options-discussion.php' ), 'icon' => 'dashicons-format-chat', 'description' => 'Comment moderation, avatars, email notifications.' ),
86 - array( 'title' => 'Media Settings', 'url' => admin_url( 'options-media.php' ), 'icon' => 'dashicons-format-image', 'description' => 'Image size settings for thumbnail / medium / large.' ),
87 - array( 'title' => 'Permalinks', 'url' => admin_url( 'options-permalink.php' ), 'icon' => 'dashicons-admin-links', 'description' => 'URL structure for posts, pages, categories, tags.' ),
88 - array( 'title' => 'Privacy', 'url' => admin_url( 'options-privacy.php' ), 'icon' => 'dashicons-privacy', 'description' => 'Privacy policy page selection and preview.' ),
89 - array( 'title' => 'Tools', 'url' => admin_url( 'tools.php' ), 'icon' => 'dashicons-admin-tools', 'description' => 'Built-in site tools.' ),
90 - array( 'title' => 'Import', 'url' => admin_url( 'import.php' ), 'icon' => 'dashicons-download', 'description' => 'Import content from other platforms (WP, Tumblr, RSS, etc.).' ),
91 - array( 'title' => 'Export', 'url' => admin_url( 'export.php' ), 'icon' => 'dashicons-upload', 'description' => 'Export all site content as XML.' ),
92 - array( 'title' => 'Site Health', 'url' => admin_url( 'site-health.php' ), 'icon' => 'dashicons-heart', 'description' => 'Performance and security recommendations for the site.' ),
93 - array( 'title' => 'Updates', 'url' => admin_url( 'update-core.php' ), 'icon' => 'dashicons-update', 'description' => 'WordPress, theme, and plugin updates.' ),
62 + array(
63 + 'title' => __( 'Dashboard', 'desktop-mode' ),
64 + 'url' => admin_url( 'index.php' ),
65 + 'icon' => 'dashicons-dashboard',
66 + 'description' => __( 'The main admin dashboard: activity, drafts, site overview.', 'desktop-mode' ),
67 + ),
68 + array(
69 + 'title' => __( 'All Posts', 'desktop-mode' ),
70 + 'url' => admin_url( 'edit.php' ),
71 + 'icon' => 'dashicons-admin-post',
72 + 'description' => __( 'List, edit, bulk-manage blog posts.', 'desktop-mode' ),
73 + ),
74 + array(
75 + 'title' => __( 'Add New Post', 'desktop-mode' ),
76 + 'url' => admin_url( 'post-new.php' ),
77 + 'icon' => 'dashicons-plus',
78 + 'description' => __( 'Create a new blog post.', 'desktop-mode' ),
79 + ),
80 + array(
81 + 'title' => __( 'Categories', 'desktop-mode' ),
82 + 'url' => admin_url( 'edit-tags.php?taxonomy=category' ),
83 + 'icon' => 'dashicons-category',
84 + 'description' => __( 'Manage post categories: add, rename, merge.', 'desktop-mode' ),
85 + ),
86 + array(
87 + 'title' => __( 'Tags', 'desktop-mode' ),
88 + 'url' => admin_url( 'edit-tags.php?taxonomy=post_tag' ),
89 + 'icon' => 'dashicons-tag',
90 + 'description' => __( 'Manage post tags.', 'desktop-mode' ),
91 + ),
92 + array(
93 + 'title' => __( 'All Pages', 'desktop-mode' ),
94 + 'url' => admin_url( 'edit.php?post_type=page' ),
95 + 'icon' => 'dashicons-admin-page',
96 + 'description' => __( 'List and edit static pages (About, Contact, etc.).', 'desktop-mode' ),
97 + ),
98 + array(
99 + 'title' => __( 'Add New Page', 'desktop-mode' ),
100 + 'url' => admin_url( 'post-new.php?post_type=page' ),
101 + 'icon' => 'dashicons-plus',
102 + 'description' => __( 'Create a new page.', 'desktop-mode' ),
103 + ),
104 + array(
105 + 'title' => __( 'Media Library', 'desktop-mode' ),
106 + 'url' => admin_url( 'upload.php' ),
107 + 'icon' => 'dashicons-admin-media',
108 + 'description' => __( 'Browse, upload, and manage images, files, videos.', 'desktop-mode' ),
109 + ),
110 + array(
111 + 'title' => __( 'Comments', 'desktop-mode' ),
112 + 'url' => admin_url( 'edit-comments.php' ),
113 + 'icon' => 'dashicons-admin-comments',
114 + 'description' => __( 'Moderate and reply to comments on posts and pages.', 'desktop-mode' ),
115 + ),
116 + array(
117 + 'title' => __( 'Themes', 'desktop-mode' ),
118 + 'url' => admin_url( 'themes.php' ),
119 + 'icon' => 'dashicons-admin-appearance',
120 + 'description' => __( 'Change, install, or customize the active theme.', 'desktop-mode' ),
121 + ),
122 + array(
123 + 'title' => __( 'Customize', 'desktop-mode' ),
124 + 'url' => admin_url( 'customize.php' ),
125 + 'icon' => 'dashicons-admin-customizer',
126 + 'description' => __( 'Live-preview theme customisation: colors, fonts, layout.', 'desktop-mode' ),
127 + ),
128 + array(
129 + 'title' => __( 'Widgets', 'desktop-mode' ),
130 + 'url' => admin_url( 'widgets.php' ),
131 + 'icon' => 'dashicons-screenoptions',
132 + 'description' => __( 'Manage sidebar and footer widgets.', 'desktop-mode' ),
133 + ),
134 + array(
135 + 'title' => __( 'Menus', 'desktop-mode' ),
136 + 'url' => admin_url( 'nav-menus.php' ),
137 + 'icon' => 'dashicons-menu',
138 + 'description' => __( 'Create and edit navigation menus.', 'desktop-mode' ),
139 + ),
140 + array(
141 + 'title' => __( 'Plugins', 'desktop-mode' ),
142 + 'url' => admin_url( 'plugins.php' ),
143 + 'icon' => 'dashicons-admin-plugins',
144 + 'description' => __( 'Activate, deactivate, update or delete plugins.', 'desktop-mode' ),
145 + ),
146 + array(
147 + 'title' => __( 'Add New Plugin', 'desktop-mode' ),
148 + 'url' => admin_url( 'plugin-install.php' ),
149 + 'icon' => 'dashicons-plus',
150 + 'description' => __( 'Search and install new plugins from the directory.', 'desktop-mode' ),
151 + ),
152 + array(
153 + 'title' => __( 'Users', 'desktop-mode' ),
154 + 'url' => admin_url( 'users.php' ),
155 + 'icon' => 'dashicons-admin-users',
156 + 'description' => __( 'Manage user accounts and roles.', 'desktop-mode' ),
157 + ),
158 + array(
159 + 'title' => __( 'Add New User', 'desktop-mode' ),
160 + 'url' => admin_url( 'user-new.php' ),
161 + 'icon' => 'dashicons-plus',
162 + 'description' => __( 'Create a new user account.', 'desktop-mode' ),
163 + ),
164 + array(
165 + 'title' => __( 'Your Profile', 'desktop-mode' ),
166 + 'url' => admin_url( 'profile.php' ),
167 + 'icon' => 'dashicons-id',
168 + 'description' => __( 'Edit your own profile, password, admin colour scheme.', 'desktop-mode' ),
169 + ),
170 + array(
171 + 'title' => __( 'General Settings', 'desktop-mode' ),
172 + 'url' => admin_url( 'options-general.php' ),
173 + 'icon' => 'dashicons-admin-settings',
174 + 'description' => __( 'Site title, tagline, URL, timezone, language.', 'desktop-mode' ),
175 + ),
176 + array(
177 + 'title' => __( 'Writing Settings', 'desktop-mode' ),
178 + 'url' => admin_url( 'options-writing.php' ),
179 + 'icon' => 'dashicons-edit',
180 + 'description' => __( 'Default post category, post format, remote publishing.', 'desktop-mode' ),
181 + ),
182 + array(
183 + 'title' => __( 'Reading Settings', 'desktop-mode' ),
184 + 'url' => admin_url( 'options-reading.php' ),
185 + 'icon' => 'dashicons-book',
186 + 'description' => __( 'Homepage, blog posts per page, search-engine visibility.', 'desktop-mode' ),
187 + ),
188 + array(
189 + 'title' => __( 'Discussion Settings', 'desktop-mode' ),
190 + 'url' => admin_url( 'options-discussion.php' ),
191 + 'icon' => 'dashicons-format-chat',
192 + 'description' => __( 'Comment moderation, avatars, email notifications.', 'desktop-mode' ),
193 + ),
194 + array(
195 + 'title' => __( 'Media Settings', 'desktop-mode' ),
196 + 'url' => admin_url( 'options-media.php' ),
197 + 'icon' => 'dashicons-format-image',
198 + 'description' => __( 'Image size settings for thumbnail / medium / large.', 'desktop-mode' ),
199 + ),
200 + array(
201 + 'title' => __( 'Permalinks', 'desktop-mode' ),
202 + 'url' => admin_url( 'options-permalink.php' ),
203 + 'icon' => 'dashicons-admin-links',
204 + 'description' => __( 'URL structure for posts, pages, categories, tags.', 'desktop-mode' ),
205 + ),
206 + array(
207 + 'title' => __( 'Privacy', 'desktop-mode' ),
208 + 'url' => admin_url( 'options-privacy.php' ),
209 + 'icon' => 'dashicons-privacy',
210 + 'description' => __( 'Privacy policy page selection and preview.', 'desktop-mode' ),
211 + ),
212 + array(
213 + 'title' => __( 'Tools', 'desktop-mode' ),
214 + 'url' => admin_url( 'tools.php' ),
215 + 'icon' => 'dashicons-admin-tools',
216 + 'description' => __( 'Built-in site tools.', 'desktop-mode' ),
217 + ),
218 + array(
219 + 'title' => __( 'Import', 'desktop-mode' ),
220 + 'url' => admin_url( 'import.php' ),
221 + 'icon' => 'dashicons-download',
222 + 'description' => __( 'Import content from other platforms (WP, Tumblr, RSS, etc.).', 'desktop-mode' ),
223 + ),
224 + array(
225 + 'title' => __( 'Export', 'desktop-mode' ),
226 + 'url' => admin_url( 'export.php' ),
227 + 'icon' => 'dashicons-upload',
228 + 'description' => __( 'Export all site content as XML.', 'desktop-mode' ),
229 + ),
230 + array(
231 + 'title' => __( 'Site Health', 'desktop-mode' ),
232 + 'url' => admin_url( 'site-health.php' ),
233 + 'icon' => 'dashicons-heart',
234 + 'description' => __( 'Performance and security recommendations for the site.', 'desktop-mode' ),
235 + ),
236 + array(
237 + 'title' => __( 'Updates', 'desktop-mode' ),
238 + 'url' => admin_url( 'update-core.php' ),
239 + 'icon' => 'dashicons-update',
240 + 'description' => __( 'WordPress, theme, and plugin updates.', 'desktop-mode' ),
241 + ),
94 242 );
95 243
96 244 /**
97 245 * Filters the wp-admin page catalog surfaced by the AI assistant.
98 246 *
99 - * @since 0.5.0
100 - *
101 247 * @param array[] $catalog Array of entries, each with title/url/icon/description.
102 248 */
103 - return (array) apply_filters( 'desktop_mode_ai_admin_page_catalog', $catalog );
249 + return (array) apply_filters( 'openstation_ai_admin_page_catalog', $catalog );
104 250 }
105 251
106 252 // ---------------------------------------------------------------------------
107 253 // Final-answer JSON Schema
@@ -109,13 +255,11 @@
109 255
110 256 /**
111 257 * JSON Schema for the agent's final structured answer.
112 258 *
113 - * @since 0.5.0
114 - *
115 259 * @return array
116 260 */
117 -function desktop_mode_ai_search_answer_schema() {
261 +function openstation_ai_search_answer_schema() {
118 262 return array(
119 263 'type' => 'object',
120 264 'additionalProperties' => false,
121 265 'required' => array( 'answer_type', 'message', 'entity_id', 'entity_type', 'admin_links' ),
@@ -137,9 +281,12 @@
137 281 'description' => 'The WordPress ID of the matching entity. Required when answer_type is "entity"; set to null otherwise.',
138 282 ),
139 283 'entity_type' => array(
140 284 'anyOf' => array(
141 - array( 'type' => 'string', 'enum' => array( 'post', 'page', 'comment' ) ),
285 + array(
286 + 'type' => 'string',
287 + 'enum' => array( 'post', 'page', 'comment' ),
288 + ),
142 289 array( 'type' => 'null' ),
143 290 ),
144 291 'description' => 'Type of the matching entity. Required when answer_type is "entity"; set to null otherwise.',
145 292 ),
@@ -179,36 +326,34 @@
179 326 * matched with WordPress's native search; `search_comments_by_post`
180 327 * needs an additional `post_id`. The caller passes the full decoded
181 328 * arguments array so this function can extract whatever it needs.
182 329 *
183 - * @since 0.5.0
184 - *
185 330 * @param string $tool_name Tool function name.
186 331 * @param array $args Decoded arguments from the model's tool call.
187 332 * @return array Tool result payload.
188 333 */
189 -function desktop_mode_ai_search_dispatch_tool( $tool_name, array $args ) {
334 +function openstation_ai_search_dispatch_tool( $tool_name, array $args ) {
190 335 $offset = max( 0, (int) ( $args['offset'] ?? 0 ) );
191 336 $query = isset( $args['query'] ) ? sanitize_text_field( (string) $args['query'] ) : '';
192 337
193 338 switch ( $tool_name ) {
194 339 case 'search_posts':
195 - return desktop_mode_ai_search_fetch_posts( 'post', $query, $offset );
340 + return openstation_ai_search_fetch_posts( 'post', $query, $offset );
196 341 case 'search_pages':
197 - return desktop_mode_ai_search_fetch_posts( 'page', $query, $offset );
342 + return openstation_ai_search_fetch_posts( 'page', $query, $offset );
198 343 case 'search_comments':
199 - return desktop_mode_ai_search_fetch_comments( $query, $offset );
344 + return openstation_ai_search_fetch_comments( $query, $offset );
200 345 case 'search_comments_by_post':
201 346 $post_id = max( 0, (int) ( $args['post_id'] ?? 0 ) );
202 - return desktop_mode_ai_search_fetch_comments_by_post( $post_id, $query, $offset );
347 + return openstation_ai_search_fetch_comments_by_post( $post_id, $query, $offset );
203 348 case 'list_admin_pages':
204 349 return array(
205 350 'tool' => 'list_admin_pages',
206 - 'pages' => desktop_mode_ai_get_admin_page_catalog(),
351 + 'pages' => openstation_ai_get_admin_page_catalog(),
207 352 );
208 353 case 'search_wporg_plugins':
209 354 $q = isset( $args['query'] ) ? sanitize_text_field( (string) $args['query'] ) : '';
210 - return desktop_mode_ai_fetch_wporg_plugins( $q );
355 + return openstation_ai_fetch_wporg_plugins( $q );
211 356 case 'get_php_error_log':
212 357 if ( ! current_user_can( 'manage_options' ) ) {
213 358 return array(
214 359 'tool' => 'get_php_error_log',
@@ -217,9 +362,9 @@
217 362 'entries' => array(),
218 363 );
219 364 }
220 365 $lines = isset( $args['lines'] ) ? max( 1, min( 500, (int) $args['lines'] ) ) : 50;
221 - return desktop_mode_ai_fetch_error_log( $lines );
366 + return openstation_ai_fetch_error_log( $lines );
222 367 }
223 368
224 369 return array(
225 370 'tool' => $tool_name,
@@ -236,11 +381,15 @@
236 381 * Keyword-searches published posts or pages with WordPress's native search
237 382 * (`WP_Query` `s=`), returning data rich enough for the agent to compare
238 383 * AND for the UI to render links.
239 384 *
240 - * No AI analysis is required — every published post/page is searchable.
385 + * No AI analysis is required — every published, non-password-protected post/page is searchable.
241 386 *
242 - * @since 0.5.0
387 + * Password-protected posts are excluded (`has_password => false`): `publish`
388 + * is also the status of a password-protected post, and this tool emits the
389 + * stored body as an excerpt without ever passing through `post_password_required()`.
390 + * Filtering at the query level keeps them out of both `items` and `found_posts`,
391 + * so the `total` counter cannot become an oracle for their contents either.
243 392 *
244 393 * @param string $post_type 'post' | 'page'.
245 394 * @param string $query Keyword search terms (may be empty to list newest).
246 395 * @param int $offset
@@ -245,15 +394,16 @@
245 394 * @param string $query Keyword search terms (may be empty to list newest).
246 395 * @param int $offset
247 396 * @return array
248 397 */
249 -function desktop_mode_ai_search_fetch_posts( $post_type, $query, $offset ) {
398 +function openstation_ai_search_fetch_posts( $post_type, $query, $offset ) {
250 399 $wp_query = new WP_Query(
251 400 array(
252 401 'post_type' => $post_type,
253 402 'post_status' => 'publish',
403 + 'has_password' => false,
254 404 's' => (string) $query,
255 - 'posts_per_page' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
405 + 'posts_per_page' => OPENSTATION_AI_SEARCH_BATCH_SIZE,
256 406 'offset' => $offset,
257 407 'no_found_rows' => false,
258 408 'update_post_term_cache' => false,
259 409 'update_post_meta_cache' => false,
@@ -267,9 +417,9 @@
267 417 'id' => $post->ID,
268 418 'type' => $post->post_type,
269 419 // Comparison data for the model — real title + content excerpt.
270 420 'title' => wp_strip_all_tags( $post->post_title ),
271 - 'excerpt' => desktop_mode_ai_search_excerpt( $post->post_content ),
421 + 'excerpt' => openstation_ai_search_excerpt( $post->post_content ),
272 422 'date' => $post->post_date ? substr( $post->post_date, 0, 10 ) : '',
273 423 // Links — passed through so the UI can link to the entity
274 424 // once the agent identifies a match.
275 425 'url' => (string) get_permalink( $post ),
@@ -285,10 +435,10 @@
285 435 'offset' => $offset,
286 436 'items' => $items,
287 437 'count' => count( $items ),
288 438 'total' => $total,
289 - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total,
290 - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
439 + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total,
440 + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE,
291 441 );
292 442 }
293 443
294 444 /**
@@ -293,14 +443,12 @@
293 443
294 444 /**
295 445 * Trims raw post/comment content into a plain-text excerpt for the model.
296 446 *
297 - * @since 0.9.1
298 - *
299 447 * @param string $content Raw post/comment content.
300 448 * @return string
301 449 */
302 -function desktop_mode_ai_search_excerpt( $content ) {
450 +function openstation_ai_search_excerpt( $content ) {
303 451 $text = wp_strip_all_tags( (string) $content );
304 452 $text = preg_replace( '/\s+/', ' ', trim( $text ) );
305 453 return (string) mb_substr( $text, 0, 300 );
306 454 }
@@ -305,20 +453,92 @@
305 453 return (string) mb_substr( $text, 0, 300 );
306 454 }
307 455
308 456 /**
457 + * Whether the current user may read a post the comment tools are about to
458 + * surface.
459 + *
460 + * A comment being `approved` is a moderation decision — it says nothing about
461 + * who may see the discussion. An approved comment can hang on a private,
462 + * draft, or password-protected post the caller cannot reach, so the comment
463 + * search tools must gate on the PARENT POST's visibility before returning the
464 + * comment text or the parent title. Mirrors Core's
465 + * `WP_REST_Comments_Controller::check_read_post_permission()`:
466 + *
467 + * - a password-protected parent needs the password satisfied or `edit_post`.
468 + * `post_password_required()` honours the `wp-postpass` cookie Core's
469 + * password form sets, and that is deliberate Core parity, not a gap: the
470 + * cookie only exists because the caller already entered the correct
471 + * password, and Core's comments controller reads the same cookie. The
472 + * ability itself has no password input, so a caller who never unlocked
473 + * the post front-end is refused;
474 + * - a publicly viewable parent (public status AND viewable post type) is
475 + * readable by anyone the ability admits;
476 + * - a parent whose post TYPE is not viewable (an internal/admin-only CPT)
477 + * needs `edit_post` — `read_post` cannot stand in, because a public status
478 + * resolves it to plain `read` whatever the type's visibility, which is how
479 + * Core's REST layer needs its own post-type gate too;
480 + * - any other parent (private, draft, pending, …) needs `read_post`.
481 + *
482 + * @param int|WP_Post $post Post ID or object.
483 + * @return bool
484 + */
485 +function openstation_ai_can_read_post( $post ) {
486 + // An id of 0 must stay unreadable: get_post( 0 ) falls back to the global
487 + // $post, which would judge an orphaned comment against an unrelated post.
488 + if ( is_numeric( $post ) && (int) $post <= 0 ) {
489 + return false;
490 + }
491 +
492 + $post = get_post( $post );
493 + if ( ! $post instanceof WP_Post ) {
494 + return false;
495 + }
496 +
497 + if ( post_password_required( $post ) && ! current_user_can( 'edit_post', $post->ID ) ) {
498 + return false;
499 + }
500 +
501 + if ( is_post_publicly_viewable( $post ) ) {
502 + return true;
503 + }
504 +
505 + $post_type = get_post_type_object( $post->post_type );
506 + if ( ! $post_type || ! is_post_type_viewable( $post_type ) ) {
507 + return current_user_can( 'edit_post', $post->ID );
508 + }
509 +
510 + return current_user_can( 'read_post', $post->ID );
511 +}
512 +
513 +/**
514 + * Whether the current user may read the post a comment is attached to.
515 + *
516 + * Used to drop comments on posts the caller cannot see from the comment
517 + * search results. See {@see openstation_ai_can_read_post()}.
518 + *
519 + * @param int|WP_Comment $comment Comment ID or object.
520 + * @return bool
521 + */
522 +function openstation_ai_can_read_comment_parent( $comment ) {
523 + $comment = get_comment( $comment );
524 + if ( ! $comment instanceof WP_Comment ) {
525 + return false;
526 + }
527 + return openstation_ai_can_read_post( (int) $comment->comment_post_ID );
528 +}
529 +
530 +/**
309 531 * Keyword-searches approved comments across all posts with WordPress's
310 532 * native comment search (`get_comments` `search=`).
311 533 *
312 534 * No AI analysis is required — every approved comment is searchable.
313 535 *
314 - * @since 0.5.0
315 - *
316 536 * @param string $query Keyword search terms (may be empty to list newest).
317 537 * @param int $offset
318 538 * @return array
319 539 */
320 -function desktop_mode_ai_search_fetch_comments( $query, $offset ) {
540 +function openstation_ai_search_fetch_comments( $query, $offset ) {
321 541 $base_args = array(
322 542 'status' => 'approve',
323 543 'type' => 'comment',
324 544 'search' => (string) $query,
@@ -323,32 +543,55 @@
323 543 'type' => 'comment',
324 544 'search' => (string) $query,
325 545 );
326 546
327 - $comments = get_comments( array_merge( $base_args, array(
328 - 'number' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
329 - 'offset' => $offset,
330 - 'count' => false,
331 - ) ) );
547 + $comments = get_comments(
548 + array_merge(
549 + $base_args,
550 + array(
551 + 'number' => OPENSTATION_AI_SEARCH_BATCH_SIZE,
552 + 'offset' => $offset,
553 + 'count' => false,
554 + )
555 + )
556 + );
332 557
333 558 $total = (int) get_comments( array_merge( $base_args, array( 'count' => true ) ) );
334 559
335 560 // Prime the parent posts in a single query so the per-comment
336 561 // get_post() calls below are cache hits, not N+1 round-trips.
337 - $parent_ids = array_unique( array_map(
338 - static function ( $c ) {
339 - return (int) $c->comment_post_ID;
340 - },
341 - $comments
342 - ) );
562 + $parent_ids = array_unique(
563 + array_map(
564 + static function ( $c ) {
565 + return (int) $c->comment_post_ID;
566 + },
567 + $comments
568 + )
569 + );
343 570 if ( $parent_ids ) {
344 571 _prime_post_caches( $parent_ids, false, false );
345 572 }
346 573
574 + // "Approved" is a moderation decision, not a visibility one: drop comments
575 + // whose parent post the caller cannot read (private / draft / password /
576 + // internal CPT), so the comment text and the parent title never leak. See
577 + // openstation_ai_can_read_comment_parent().
578 + //
579 + // This runs per row, after the batch, and that is the price of gating on
580 + // per-caller readability: an Administrator reads comments on private
581 + // posts and a reader who entered a post password reads that post's
582 + // discussion, neither of which a single `post_status` or `has_password`
583 + // query var can express. `total` therefore counts rows this caller does
584 + // not get, and a batch can come back short. The alternative — a blanket
585 + // publish-only, no-password query — would be exact and would also hide
586 + // those discussions from the people entitled to them.
587 + $comments = array_values( array_filter( $comments, 'openstation_ai_can_read_comment_parent' ) );
588 +
347 589 $items = array();
348 590 foreach ( $comments as $comment ) {
591 + // Readable, per the filter above.
349 592 $parent_post = get_post( $comment->comment_post_ID );
350 - $parent_title = $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : '';
593 + $parent_title = wp_strip_all_tags( $parent_post->post_title );
351 594
352 595 $items[] = array(
353 596 'id' => (int) $comment->comment_ID,
354 597 'type' => 'comment',
@@ -353,14 +596,14 @@
353 596 'id' => (int) $comment->comment_ID,
354 597 'type' => 'comment',
355 598 // Comparison data — real comment text + parent post title.
356 599 'post_title' => $parent_title,
357 - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ),
600 + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ),
358 601 // Links.
359 602 'url' => (string) get_comment_link( $comment ),
360 603 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . (int) $comment->comment_ID ),
361 604 'post_id' => (int) $comment->comment_post_ID,
362 - 'post_url' => $parent_post ? (string) get_permalink( $parent_post ) : '',
605 + 'post_url' => (string) get_permalink( $parent_post ),
363 606 );
364 607 }
365 608
366 609 return array(
@@ -369,10 +612,10 @@
369 612 'offset' => $offset,
370 613 'items' => $items,
371 614 'count' => count( $items ),
372 615 'total' => $total,
373 - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total,
374 - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
616 + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total,
617 + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE,
375 618 );
376 619 }
377 620
378 621 // ---------------------------------------------------------------------------
@@ -386,16 +629,14 @@
386 629 * identifying a post via `search_posts`, giving it a scoped, precise set of
387 630 * comments to compare against the user's description. An empty `$query`
388 631 * lists the post's comments without keyword filtering.
389 632 *
390 - * @since 0.5.0
391 - *
392 633 * @param int $post_id The WordPress post ID.
393 634 * @param string $query Keyword search terms (may be empty).
394 635 * @param int $offset
395 636 * @return array Tool result payload.
396 637 */
397 -function desktop_mode_ai_search_fetch_comments_by_post( $post_id, $query, $offset ) {
638 +function openstation_ai_search_fetch_comments_by_post( $post_id, $query, $offset ) {
398 639 $post_id = (int) $post_id;
399 640
400 641 if ( $post_id <= 0 ) {
401 642 return array(
@@ -409,8 +650,25 @@
409 650 'error' => 'post_id must be a positive integer.',
410 651 );
411 652 }
412 653
654 + // The model picks the post id, so it is untrusted the same way an entity
655 + // id is. Comments inherit their parent's reach: a thread on a private,
656 + // draft, password-protected or internal-CPT post is not this user's to
657 + // read, and the envelope below would otherwise echo its title back.
658 + if ( ! openstation_ai_can_read_post( $post_id ) ) {
659 + return array(
660 + 'tool' => 'search_comments_by_post',
661 + 'post_id' => $post_id,
662 + 'offset' => $offset,
663 + 'items' => array(),
664 + 'count' => 0,
665 + 'total' => 0,
666 + 'has_more' => false,
667 + 'error' => 'Post not found or not readable.',
668 + );
669 + }
670 +
413 671 $base_args = array(
414 672 'post_id' => $post_id,
415 673 'status' => 'approve',
416 674 'type' => 'comment',
@@ -416,18 +674,24 @@
416 674 'type' => 'comment',
417 675 'search' => (string) $query,
418 676 );
419 677
420 - $comments = get_comments( array_merge( $base_args, array(
421 - 'number' => DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
422 - 'offset' => $offset,
423 - 'count' => false,
424 - ) ) );
678 + $comments = get_comments(
679 + array_merge(
680 + $base_args,
681 + array(
682 + 'number' => OPENSTATION_AI_SEARCH_BATCH_SIZE,
683 + 'offset' => $offset,
684 + 'count' => false,
685 + )
686 + )
687 + );
425 688
426 689 $total = (int) get_comments( array_merge( $base_args, array( 'count' => true ) ) );
427 690
691 + // Readable, per the gate above.
428 692 $parent_post = get_post( $post_id );
429 - $parent_title = $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : '';
693 + $parent_title = wp_strip_all_tags( $parent_post->post_title );
430 694
431 695 $items = array();
432 696 foreach ( $comments as $comment ) {
433 697 $items[] = array(
@@ -434,9 +698,9 @@
434 698 'id' => (int) $comment->comment_ID,
435 699 'type' => 'comment',
436 700 'post_id' => $post_id,
437 701 'post_title' => $parent_title,
438 - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ),
702 + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ),
439 703 'url' => (string) get_comment_link( $comment ),
440 704 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . (int) $comment->comment_ID ),
441 705 );
442 706 }
@@ -449,10 +713,10 @@
449 713 'offset' => $offset,
450 714 'items' => $items,
451 715 'count' => count( $items ),
452 716 'total' => $total,
453 - 'has_more' => ( $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE ) < $total,
454 - 'next_offset' => $offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE,
717 + 'has_more' => ( $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE ) < $total,
718 + 'next_offset' => $offset + OPENSTATION_AI_SEARCH_BATCH_SIZE,
455 719 );
456 720 }
457 721
458 722 // ---------------------------------------------------------------------------
@@ -467,22 +731,45 @@
467 731 * required. Comments opportunistically surface the `spam` / `harmful`
468 732 * verdict when the comment-moderation analysis happens to have run, but
469 733 * its absence never blocks the entity from being returned.
470 734 *
471 - * @since 0.5.0
735 + * The id arrives from the MODEL's final answer, and model output is
736 + * untrusted — a search turn can be driven by attacker-controlled content, so
737 + * an injected instruction could name an entity the search tools never
738 + * surfaced. Hydration therefore re-checks readability itself instead of
739 + * trusting that the id came out of a filtered tool result: posts/pages go
740 + * through {@see openstation_ai_can_read_post()}, and so does a comment's
741 + * PARENT, because the comment record carries that post's title and permalink
742 + * — approval is a moderation decision, not a visibility one, and an approved
743 + * comment outlives its post being switched to private or back to draft.
744 + * Reading an unapproved comment needs `edit_comment`, mirroring Core's
745 + * `WP_REST_Comments_Controller::check_read_permission()`; the AI moderation
746 + * verdicts and the wp-admin edit link are narrower still. Unreadable ids
747 + * resolve to null, indistinguishable from nonexistent ones.
472 748 *
473 749 * @param string $entity_type 'post' | 'page' | 'comment'.
474 750 * @param int $entity_id
475 751 * @return array|null
476 752 */
477 -function desktop_mode_ai_search_build_entity( $entity_type, $entity_id ) {
753 +function openstation_ai_search_build_entity( $entity_type, $entity_id ) {
478 754 $entity_id = (int) $entity_id;
479 755
480 756 if ( in_array( $entity_type, array( 'post', 'page' ), true ) ) {
481 757 $post = get_post( $entity_id );
482 - if ( ! $post instanceof WP_Post ) {
758 +
759 + // The id must resolve to an actual post or page. The gate below answers
760 + // type visibility on its own, so this is the contract rather than the
761 + // lock: the record's `type` is what the client renders the card from,
762 + // and post/page is what the search tools surface. A viewable CPT row
763 + // would pass the gate and still have no card to land in.
764 + if ( ! $post instanceof WP_Post || ! in_array( $post->post_type, array( 'post', 'page' ), true ) ) {
483 765 return null;
484 766 }
767 +
768 + if ( ! openstation_ai_can_read_post( $post ) ) {
769 + return null;
770 + }
771 +
485 772 return array(
486 773 'id' => $entity_id,
487 774 'type' => $post->post_type,
488 775 'title' => wp_strip_all_tags( $post->post_title ),
@@ -489,31 +776,55 @@
489 776 'status' => $post->post_status,
490 777 'date' => $post->post_date ? substr( $post->post_date, 0, 10 ) : '',
491 778 'url' => (string) get_permalink( $post ),
492 779 'edit_url' => (string) get_edit_post_link( $entity_id, 'raw' ),
493 - 'excerpt' => desktop_mode_ai_search_excerpt( $post->post_content ),
780 + 'excerpt' => openstation_ai_search_excerpt( $post->post_content ),
494 781 );
495 782 }
496 783
497 784 if ( 'comment' === $entity_type ) {
498 785 $comment = get_comment( $entity_id );
499 - if ( ! $comment instanceof WP_Comment ) {
786 +
787 + // The parent's reach bounds the comment's: approval is a moderation
788 + // decision, not a visibility one, and this record carries the parent's
789 + // title and permalink — so without this check, naming a comment id
790 + // would walk straight around the post branch's gate above.
791 + if ( ! $comment instanceof WP_Comment || ! openstation_ai_can_read_comment_parent( $comment ) ) {
500 792 return null;
501 793 }
502 - $meta = desktop_mode_ai_get_meta( 'comment', $entity_id );
503 - $parent_post = get_post( $comment->comment_post_ID );
504 - return array(
794 +
795 + // Reading an unapproved comment is an editor's business, per Core's
796 + // WP_REST_Comments_Controller::check_read_permission().
797 + if ( '1' !== (string) $comment->comment_approved && ! current_user_can( 'edit_comment', $entity_id ) ) {
798 + return null;
799 + }
800 +
801 + // The AI verdicts are the moderation queue's data, so they follow the
802 + // moderation capability rather than the per-comment edit one.
803 + $can_moderate = current_user_can( 'moderate_comments' );
804 + $parent_post = get_post( (int) $comment->comment_post_ID );
805 +
806 + $meta = $can_moderate ? openstation_ai_get_meta( 'comment', $entity_id ) : null;
807 + $entity = array(
505 808 'id' => $entity_id,
506 809 'type' => 'comment',
507 - 'excerpt' => desktop_mode_ai_search_excerpt( $comment->comment_content ),
810 + 'excerpt' => openstation_ai_search_excerpt( $comment->comment_content ),
508 811 'post_id' => (int) $comment->comment_post_ID,
509 - 'post_title' => $parent_post ? wp_strip_all_tags( $parent_post->post_title ) : '',
510 - 'post_url' => $parent_post ? (string) get_permalink( $parent_post ) : '',
812 + 'post_title' => wp_strip_all_tags( $parent_post->post_title ),
813 + 'post_url' => (string) get_permalink( $parent_post ),
511 814 'url' => (string) get_comment_link( $comment ),
512 - 'edit_url' => admin_url( 'comment.php?action=editcomment&c=' . $entity_id ),
513 - 'harmful' => $meta ? (bool) ( $meta['harmful'] ?? false ) : false,
514 - 'spam' => $meta ? (bool) ( $meta['spam'] ?? false ) : false,
815 + 'edit_url' => current_user_can( 'edit_comment', $entity_id )
816 + ? admin_url( 'comment.php?action=editcomment&c=' . $entity_id )
817 + : '',
515 818 );
819 +
820 + // Moderation verdicts are for moderators only.
821 + if ( $can_moderate ) {
822 + $entity['harmful'] = $meta ? (bool) ( $meta['harmful'] ?? false ) : false;
823 + $entity['spam'] = $meta ? (bool) ( $meta['spam'] ?? false ) : false;
824 + }
825 +
826 + return $entity;
516 827 }
517 828
518 829 return null;
519 830 }
@@ -522,49 +833,173 @@
522 833 // Agentic search loop
523 834 // ---------------------------------------------------------------------------
524 835
525 836 /**
526 - * Returns a friendly progress message for a tool name — surfaced to the
527 - * client via SSE so the user sees "Looking through your posts…" rather
528 - * than the raw tool call.
837 + * Returns the label for the "keep looking" button on an exhausted search.
529 838 *
530 - * @since 0.5.0
839 + * One full sentence per resumable tool: a noun interpolated into a shared
840 + * template cannot be translated.
531 841 *
532 - * @param string $tool_name
842 + * @param string $resume_tool Tool the client would resume from.
843 + * @param int $from_item 1-based index of the next item to search.
533 844 * @return string
534 845 */
535 -function desktop_mode_ai_progress_message( $tool_name ) {
536 - switch ( $tool_name ) {
537 - case 'search_posts': return 'Looking through your posts…';
538 - case 'search_pages': return 'Checking your pages…';
539 - case 'search_comments': return 'Reading through comments…';
540 - case 'search_comments_by_post': return 'Scanning comments on that post…';
541 - case 'list_admin_pages': return 'Finding the right admin page…';
542 - case 'search_wporg_plugins': return 'Searching the WordPress.org plugin directory…';
543 - case 'get_php_error_log': return 'Tailing the PHP error log…';
846 +function openstation_ai_continue_label( $resume_tool, $from_item ) {
847 + switch ( $resume_tool ) {
848 + case 'search_pages':
849 + /* translators: %d: 1-based index of the next page to search. */
850 + return sprintf( __( 'Continue searching in pages (from item %d)', 'desktop-mode' ), $from_item );
851 + case 'search_comments':
852 + /* translators: %d: 1-based index of the next comment to search. */
853 + return sprintf( __( 'Continue searching in comments (from item %d)', 'desktop-mode' ), $from_item );
854 + default:
855 + /* translators: %d: 1-based index of the next post to search. */
856 + return sprintf( __( 'Continue searching in posts (from item %d)', 'desktop-mode' ), $from_item );
544 857 }
545 - return 'Thinking…';
546 858 }
547 859
548 860 /**
549 861 * Returns the tools a client may resume an exhausted search from.
550 862 *
551 - * Single source of truth for every `resume_tool` allowlist — the REST
552 - * arg sanitizer, the SSE handler, and the `$initial_tool` validation
553 - * inside `desktop_mode_ai_run_search()`. `search_comments_by_post` is
863 + * Single source of truth for every `resume_tool` allowlist: the REST
864 + * arg sanitizer and the `$initial_tool` validation inside
865 + * `openstation_ai_run_search()`. `search_comments_by_post` is
554 866 * deliberately absent: the `continue` payload carries no `post_id`, so
555 867 * it cannot truly resume — exhausted runs map it to `search_comments`
556 868 * when building the `continue` object.
557 869 *
558 - * @since 0.5.0
559 - *
560 870 * @return string[] Tool names.
561 871 */
562 -function desktop_mode_ai_search_resumable_tools() {
872 +function openstation_ai_search_resumable_tools() {
563 873 return array( 'search_posts', 'search_pages', 'search_comments' );
564 874 }
565 875
566 876 /**
877 + * Projects a tool's `parameters` schema onto the provider-supported subset.
878 + *
879 + * The Abilities API (and plugin-supplied tools) may use the full breadth of JSON
880 + * Schema, but the provider's tool-schema validator does not — and it rejects the
881 + * whole request, not just the offending tool, so ONE tool with a
882 + * legal-but-unsupported schema makes the entire assistant return a 400 before the
883 + * model runs. Three shapes that are valid JSON Schema, but rejected here, have
884 + * been seen in the wild (see the linked issue):
885 + *
886 + * 1. `type` as an array, e.g. ['object','null'] — an ability's GET/null
887 + * run-path. The provider wants the literal string "object" at the top level.
888 + * 2. A top-level `oneOf` / `anyOf` / `allOf`, e.g. "post_id OR slug". Rejected
889 + * with "does not support oneOf, allOf, or anyOf at the top level".
890 + * 3. `properties` as an empty PHP array, which encodes to JSON as `[]` where an
891 + * object schema needs `{}`.
892 + *
893 + * This reshapes only the copy advertised to the model. The ability itself is
894 + * untouched: `WP_Ability::execute()` still validates arguments against the real
895 + * schema and `permission_callback` still gates execution, so nothing loses
896 + * enforcement — the model is simply told the constraint in prose (the tool
897 + * description) instead of in a schema construct the provider can't parse. Only
898 + * the TOP level is constrained; a combinator nested inside a property is a real
899 + * constraint the provider accepts, so it is left intact.
900 + *
901 + * @param mixed $schema A tool parameters schema (array), or empty/non-array.
902 + * @return array A provider-safe object schema for a tool `parameters` block.
903 + */
904 +function openstation_ai_normalize_tool_schema( $schema ) {
905 + if ( ! is_array( $schema ) || empty( $schema ) ) {
906 + return array(
907 + 'type' => 'object',
908 + 'properties' => (object) array(),
909 + );
910 + }
911 +
912 + // Recursively drop the WordPress-only arg-schema keys
913 + // (`sanitize_callback` / `validate_callback` / `arg_options`) —
914 + // see the helper's docblock for why this must run at every depth.
915 + $schema = openstation_ai_strip_wp_schema_keys( $schema );
916 +
917 + // Top-level tool parameters must be the literal "object", never a union.
918 + $schema['type'] = 'object';
919 +
920 + // Strip top-level combinators — the provider rejects them outright, and one
921 + // such tool 400s the whole request. Nested combinators are left alone.
922 + unset( $schema['oneOf'], $schema['allOf'], $schema['anyOf'] );
923 +
924 + // An empty PHP array encodes as `[]`; an object schema's properties need `{}`.
925 + // A schema with no `properties` at all (e.g. one whose only content was a
926 + // stripped top-level combinator) gets an empty object for the same reason.
927 + if ( ! isset( $schema['properties'] ) || array() === $schema['properties'] ) {
928 + $schema['properties'] = (object) array();
929 + }
930 +
931 + return $schema;
932 +}
933 +
934 +/**
935 + * Recursively removes the WordPress-only arg-schema keys from a tool schema.
936 + *
937 + * WordPress arg schemas legally extend JSON Schema with PHP-callable keys —
938 + * `sanitize_callback`, `validate_callback`, and (on meta args) `arg_options`.
939 + * Abilities registered from REST arg definitions carry them at every property
940 + * level, and providers that validate tool schemas strictly reject any unknown
941 + * field ("Invalid JSON payload received. Unknown name \"sanitize_callback\""),
942 + * 400-ing the whole request over one property.
943 + *
944 + * The walk is structure-aware, not a blind key sweep: maps under `properties` /
945 + * `patternProperties` are keyed by PROPERTY NAME, so a property that happens to
946 + * be called `sanitize_callback` is preserved — only its schema value is
947 + * cleaned. Recursion covers every position a subschema can occupy: property
948 + * values, `items` (single schema or tuple list), array-shaped
949 + * `additionalProperties`, and nested `oneOf` / `allOf` / `anyOf` branches
950 + * (which are kept — only the TOP level of the tool schema strips combinators).
951 + *
952 + * @param array $schema A tool parameters (sub)schema.
953 + * @return array The schema without WP-only keys, at any depth.
954 + */
955 +function openstation_ai_strip_wp_schema_keys( array $schema ) {
956 + unset( $schema['sanitize_callback'], $schema['validate_callback'], $schema['arg_options'] );
957 +
958 + foreach ( array( 'properties', 'patternProperties' ) as $map_key ) {
959 + if ( isset( $schema[ $map_key ] ) && is_array( $schema[ $map_key ] ) ) {
960 + foreach ( $schema[ $map_key ] as $name => $sub ) {
961 + if ( is_array( $sub ) ) {
962 + $schema[ $map_key ][ $name ] = openstation_ai_strip_wp_schema_keys( $sub );
963 + }
964 + }
965 + }
966 + }
967 +
968 + if ( isset( $schema['items'] ) && is_array( $schema['items'] ) ) {
969 + $items = $schema['items'];
970 + $is_list = array_keys( $items ) === range( 0, count( $items ) - 1 );
971 + if ( $is_list && array() !== $items ) {
972 + // Tuple form — a list of schemas.
973 + foreach ( $items as $i => $sub ) {
974 + if ( is_array( $sub ) ) {
975 + $items[ $i ] = openstation_ai_strip_wp_schema_keys( $sub );
976 + }
977 + }
978 + $schema['items'] = $items;
979 + } else {
980 + $schema['items'] = openstation_ai_strip_wp_schema_keys( $items );
981 + }
982 + }
983 +
984 + if ( isset( $schema['additionalProperties'] ) && is_array( $schema['additionalProperties'] ) ) {
985 + $schema['additionalProperties'] = openstation_ai_strip_wp_schema_keys( $schema['additionalProperties'] );
986 + }
987 +
988 + foreach ( array( 'oneOf', 'allOf', 'anyOf' ) as $combinator ) {
989 + if ( isset( $schema[ $combinator ] ) && is_array( $schema[ $combinator ] ) ) {
990 + foreach ( $schema[ $combinator ] as $i => $sub ) {
991 + if ( is_array( $sub ) ) {
992 + $schema[ $combinator ][ $i ] = openstation_ai_strip_wp_schema_keys( $sub );
993 + }
994 + }
995 + }
996 + }
997 +
998 + return $schema;
999 +}
1000 +
1001 +/**
567 1002 * Runs the agentic content-search loop.
568 1003 *
569 1004 * The model receives focused tools — search_posts, search_pages,
570 1005 * search_comments, search_comments_by_post — and a system prompt that
@@ -576,28 +1011,15 @@
576 1011 * For continuation runs ($initial_tool + $start_offset > 0), the system
577 1012 * message primes the agent to resume from the last searched position with
578 1013 * the same keywords.
579 1014 *
580 - * @since 0.5.0
581 - *
582 1015 * @param string $query User's natural-language search.
583 1016 * @param string|null $initial_tool Tool name to resume from, or null for fresh search.
584 1017 * @param int $start_offset Offset to resume from (0 for fresh).
585 - * @param callable|null $on_progress Optional progress emitter for SSE ticks.
586 1018 * @param array $extra Extensibility context (command tools, prompt overrides, …).
587 1019 * @return array|WP_Error
588 1020 */
589 -function desktop_mode_ai_run_search( $query, $initial_tool = null, $start_offset = 0, $on_progress = null, array $extra = array() ) {
590 - /**
591 - * Progress emitter — sends a tick to the caller if they provided a
592 - * callable; no-op otherwise. Callers use this to render real-time
593 - * status to the user via SSE.
594 - */
595 - $emit = static function ( array $event ) use ( $on_progress ) {
596 - if ( is_callable( $on_progress ) ) {
597 - $on_progress( $event );
598 - }
599 - };
1021 +function openstation_ai_run_search( $query, $initial_tool = null, $start_offset = 0, array $extra = array() ) {
600 1022 $start_offset = max( 0, (int) $start_offset );
601 1023 $search_tools = array( 'search_posts', 'search_pages', 'search_comments', 'search_comments_by_post' );
602 1024 $valid_tools = array_merge(
603 1025 $search_tools,
@@ -609,11 +1031,11 @@
609 1031 // tools from the server-side registry, system-prompt overrides, and a
610 1032 // per-call request_id for observability fanout.
611 1033 // -----------------------------------------------------------------------
612 1034 $user_id = isset( $extra['user_id'] ) ? (int) $extra['user_id'] : get_current_user_id();
613 - $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && $extra['request_id'] !== ''
1035 + $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && '' !== $extra['request_id']
614 1036 ? (string) $extra['request_id']
615 - : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ) );
1037 + : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ) );
616 1038 $command_tools_raw = isset( $extra['command_tools'] ) && is_array( $extra['command_tools'] ) ? $extra['command_tools'] : array();
617 1039 $system_prompt_text = isset( $extra['system_prompt_text'] ) && is_string( $extra['system_prompt_text'] ) ? $extra['system_prompt_text'] : '';
618 1040 $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true )
619 1041 ? (string) $extra['system_prompt_mode']
@@ -621,13 +1043,11 @@
621 1043
622 1044 /**
623 1045 * Fires once per `/ai/search` invocation, after validation and
624 1046 * before any the provider call. First anchor in the observability trio
625 - * (`desktop_mode_ai_search_started` / `desktop_mode_ai_tool_called`
626 - * / `desktop_mode_ai_search_completed`).
1047 + * (`openstation_ai_search_started` / `openstation_ai_tool_called`
1048 + * / `openstation_ai_search_completed`).
627 1049 *
628 - * @since 0.5.1
629 - *
630 1050 * @param array $context {
631 1051 * @type string $query User query.
632 1052 * @type int $user_id
633 1053 * @type string $request_id UUID correlating the whole run.
@@ -633,9 +1053,9 @@
633 1053 * @type string $request_id UUID correlating the whole run.
634 1054 * }
635 1055 */
636 1056 do_action(
637 - 'desktop_mode_ai_search_started',
1057 + 'openstation_ai_search_started',
638 1058 array(
639 1059 'query' => $query,
640 1060 'user_id' => $user_id,
641 1061 'request_id' => $request_id,
@@ -641,9 +1061,9 @@
641 1061 'request_id' => $request_id,
642 1062 )
643 1063 );
644 1064
645 - if ( $initial_tool !== null && ! in_array( $initial_tool, desktop_mode_ai_search_resumable_tools(), true ) ) {
1065 + if ( null !== $initial_tool && ! in_array( $initial_tool, openstation_ai_search_resumable_tools(), true ) ) {
646 1066 $initial_tool = null;
647 1067 }
648 1068
649 1069 // When resuming a previous exhausted run, prime the model with the
@@ -649,9 +1069,9 @@
649 1069 // When resuming a previous exhausted run, prime the model with the
650 1070 // starting position so it doesn't waste iterations on already-searched
651 1071 // content.
652 1072 $continuation_note = '';
653 - if ( $initial_tool !== null && ( $start_offset > 0 || $initial_tool !== 'search_posts' ) ) {
1073 + if ( null !== $initial_tool && ( $start_offset > 0 || 'search_posts' !== $initial_tool ) ) {
654 1074 $continuation_note = sprintf(
655 1075 "\n\nNote: This is a continuation of a previous search. Begin with %s using the same search keywords at offset=%d and work forward.",
656 1076 $initial_tool,
657 1077 $start_offset
@@ -677,9 +1097,9 @@
677 1097 - get_php_error_log(lines): reads the tail of the site's PHP error log. Admin-only (the tool itself checks). Use when the user asks \"any errors?\", \"check the logs\", \"what's broken?\", troubleshooting. Each entry has { timestamp, level, message }. Summarise the most important errors (Fatal > Warning > Notice) in your message; don't copy-paste everything.
678 1098
679 1099 Choosing which track:
680 1100 - \"I remember a post/page/comment about X\" → the corresponding search_* tool.
681 -- \"where can I find X?\" / \"how do I manage Y?\" → list_admin_pages.
1101 +- \"where can I find X?\", \"how do I manage Y?\", \"create/add/new …\", \"take me to …\", \"open …\", \"switch/activate …\", or any navigate/do intent → list_admin_pages, then suggest the 1-3 best destinations as admin_links (answer_type \"navigation\"). You suggest the link; the user opens it — never assume it's opened.
682 1102 - \"plugin for X\" / \"recommend a plugin\" → search_wporg_plugins → present as admin_links.
683 1103 - \"any errors?\" / \"check logs\" / troubleshooting → get_php_error_log → summarise in chat.
684 1104 - Any other factual question about the site (its version, PHP/environment, the current user, or anything one of your other tools covers) → call that tool, then summarise its result with answer_type \"chat\".
685 1105 - Greeting, unclear, or chit-chat → answer_type \"chat\" with a brief helpful message (no tools needed).
@@ -698,9 +1118,9 @@
698 1118
699 1119 // -----------------------------------------------------------------------
700 1120 // System-prompt extensibility. All three layers — appendix filter,
701 1121 // client override (append/replace with capability gate), and final
702 - // transform — live in `desktop_mode_ai_compose_instructions()` so the
1122 + // transform — live in `openstation_ai_compose_instructions()` so the
703 1123 // primary run and the follow-up leg stay in lockstep. See the
704 1124 // helper for the order of application; the filter docblocks at its
705 1125 // `apply_filters()` call sites carry the public contract on each
706 1126 // extension point.
@@ -710,12 +1130,15 @@
710 1130 'user_id' => $user_id,
711 1131 'request_id' => $request_id,
712 1132 );
713 1133
714 - $instructions = desktop_mode_ai_compose_instructions(
1134 + $instructions = openstation_ai_compose_instructions(
715 1135 $instructions,
716 1136 $prompt_context,
717 - array( 'text' => $system_prompt_text, 'mode' => $system_prompt_mode )
1137 + array(
1138 + 'text' => $system_prompt_text,
1139 + 'mode' => $system_prompt_mode,
1140 + )
718 1141 );
719 1142
720 1143 // -----------------------------------------------------------------------
721 1144 // Tool assembly — built-in search/navigation abilities + client-supplied
@@ -729,15 +1152,15 @@
729 1152 // -----------------------------------------------------------------------
730 1153 $ability_by_tool = array();
731 1154 $builtin_tools = array();
732 1155
733 - foreach ( desktop_mode_ai_search_ability_names() as $ability_name ) {
1156 + foreach ( openstation_ai_search_ability_names() as $ability_name ) {
734 1157 $ability = function_exists( 'wp_get_ability' ) ? wp_get_ability( $ability_name ) : null;
735 1158 if ( ! $ability instanceof WP_Ability ) {
736 1159 continue;
737 1160 }
738 1161
739 - $tool_name = desktop_mode_ai_ability_tool_name( $ability_name );
1162 + $tool_name = openstation_ai_ability_tool_name( $ability_name );
740 1163 $ability_by_tool[ $tool_name ] = $ability_name;
741 1164 $valid_tools[] = $tool_name;
742 1165
743 1166 $input_schema = $ability->get_input_schema();
@@ -746,9 +1169,12 @@
746 1169 'name' => $tool_name,
747 1170 'description' => (string) $ability->get_description(),
748 1171 'parameters' => ! empty( $input_schema )
749 1172 ? $input_schema
750 - : array( 'type' => 'object', 'properties' => (object) array() ),
1173 + : array(
1174 + 'type' => 'object',
1175 + 'properties' => (object) array(),
1176 + ),
751 1177 );
752 1178 }
753 1179
754 1180 // Command tools — namespaced as `command_<slug>` on the server so
@@ -762,9 +1188,9 @@
762 1188 if ( ! is_array( $cmd ) ) {
763 1189 continue;
764 1190 }
765 1191 $slug = isset( $cmd['slug'] ) ? (string) $cmd['slug'] : '';
766 - if ( $slug === '' || ! preg_match( '/^[a-z0-9_\-]+$/', $slug ) ) {
1192 + if ( '' === $slug || ! preg_match( '/^[a-z0-9_\-]+$/', $slug ) ) {
767 1193 continue;
768 1194 }
769 1195 /**
770 1196 * Per-tool filter on the client-supplied command list. Return
@@ -770,10 +1196,8 @@
770 1196 * Per-tool filter on the client-supplied command list. Return
771 1197 * `false` to drop a command entirely before it reaches the
772 1198 * model — the right hook for per-role / per-command gating.
773 1199 *
774 - * @since 0.5.1
775 - *
776 1200 * @param bool|array $allowed Either the (possibly mutated) command
777 1201 * tool entry, or `false` to drop it.
778 1202 * @param string $slug Command slug.
779 1203 * @param array $context { user_id, request_id }.
@@ -778,12 +1202,15 @@
778 1202 * @param string $slug Command slug.
779 1203 * @param array $context { user_id, request_id }.
780 1204 */
781 1205 $allowed = apply_filters(
782 - 'desktop_mode_ai_command_allowed',
1206 + 'openstation_ai_command_allowed',
783 1207 $cmd,
784 1208 $slug,
785 - array( 'user_id' => $user_id, 'request_id' => $request_id )
1209 + array(
1210 + 'user_id' => $user_id,
1211 + 'request_id' => $request_id,
1212 + )
786 1213 );
787 1214 if ( false === $allowed || ! is_array( $allowed ) ) {
788 1215 continue;
789 1216 }
@@ -797,13 +1224,13 @@
797 1224 'type' => 'function',
798 1225 'name' => $tool_name,
799 1226 'description' => trim( $label . ( '' !== $description ? ' — ' . $description : '' ) ),
800 1227 'parameters' => array(
801 - 'type' => 'object',
802 - 'properties' => array(
1228 + 'type' => 'object',
1229 + 'properties' => array(
803 1230 'args' => array(
804 1231 'type' => 'string',
805 - 'description' => $hint !== ''
1232 + 'description' => '' !== $hint
806 1233 ? sprintf( 'Arguments for this command. Hint: %s', $hint )
807 1234 : 'Arguments for this command. Leave empty when the command takes none.',
808 1235 ),
809 1236 ),
@@ -817,17 +1244,18 @@
817 1244 * Transform the command-tool subset before merging with the
818 1245 * built-in + registered tools. Useful for bulk gating, renaming,
819 1246 * or injecting synthetic command tools.
820 1247 *
821 - * @since 0.5.1
822 - *
823 1248 * @param array $command_defs Command tool definitions.
824 1249 * @param array $context { user_id, request_id }.
825 1250 */
826 1251 $command_defs = (array) apply_filters(
827 - 'desktop_mode_ai_command_tools',
1252 + 'openstation_ai_command_tools',
828 1253 $command_defs,
829 - array( 'user_id' => $user_id, 'request_id' => $request_id )
1254 + array(
1255 + 'user_id' => $user_id,
1256 + 'request_id' => $request_id,
1257 + )
830 1258 );
831 1259
832 1260 $tools = array_merge( $builtin_tools, $command_defs );
833 1261
@@ -835,19 +1263,34 @@
835 1263 * Transform the full tool list (built-in abilities + command tools) just
836 1264 * before it goes to the provider. Fires once per run — changes apply to
837 1265 * every iteration in the agent loop.
838 1266 *
839 - * @since 0.5.1
840 - *
841 1267 * @param array $tools Full the provider tool definitions array.
842 1268 * @param array $context { user_id, request_id, query }.
843 1269 */
844 1270 $tools = (array) apply_filters(
845 - 'desktop_mode_ai_tools',
1271 + 'openstation_ai_tools',
846 1272 $tools,
847 - array( 'user_id' => $user_id, 'request_id' => $request_id, 'query' => $query )
1273 + array(
1274 + 'user_id' => $user_id,
1275 + 'request_id' => $request_id,
1276 + 'query' => $query,
1277 + )
848 1278 );
849 1279
1280 + // Normalize every tool's schema onto the provider-supported subset, AFTER the
1281 + // filter so it covers the complete list the provider will receive — built-in
1282 + // abilities, command tools, and anything a plugin injected. One tool with a
1283 + // legal-but-unsupported schema otherwise 400s the entire request, not just its
1284 + // own tool. Only the model-facing copy is reshaped; abilities still validate
1285 + // arguments against their real schema in execute(). Idempotent, so a plugin
1286 + // that already normalizes on the filter above is unaffected.
1287 + foreach ( $tools as $ti => $tool ) {
1288 + if ( is_array( $tool ) && isset( $tool['parameters'] ) ) {
1289 + $tools[ $ti ]['parameters'] = openstation_ai_normalize_tool_schema( $tool['parameters'] );
1290 + }
1291 + }
1292 +
850 1293 // Widen the permitted-tools list with the command tools — the agent loop
851 1294 // rejects any `function_call` whose name isn't in here (built-in ability
852 1295 // names were added above).
853 1296 foreach ( $command_defs as $def ) {
@@ -855,12 +1298,10 @@
855 1298 $valid_tools[] = (string) $def['name'];
856 1299 }
857 1300 }
858 1301
859 - $answer_schema = desktop_mode_ai_search_answer_schema();
1302 + $answer_schema = openstation_ai_search_answer_schema();
860 1303
861 - $emit( array( 'phase' => 'start', 'message' => 'Thinking about your question…' ) );
862 -
863 1304 // -----------------------------------------------------------------------
864 1305 // First call — user query as the sole message, instructions as system
865 1306 // guidance. Generation routes through the WordPress AI Client; the tools
866 1307 // are advertised as function declarations and dispatched by this loop.
@@ -865,12 +1306,17 @@
865 1306 // guidance. Generation routes through the WordPress AI Client; the tools
866 1307 // are advertised as function declarations and dispatched by this loop.
867 1308 // The full ordered conversation is rebuilt and re-sent each turn.
868 1309 // -----------------------------------------------------------------------
869 - $messages = array( desktop_mode_ai_user_text_message( $query ) );
1310 + $messages = array( openstation_ai_user_text_message( $query ) );
870 1311
871 - $turn = desktop_mode_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions );
1312 + $generation_context = array(
1313 + 'source' => 'ai-copilot/search',
1314 + 'request_id' => $request_id,
1315 + );
872 1316
1317 + $turn = openstation_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions, $generation_context );
1318 +
873 1319 if ( is_wp_error( $turn ) ) {
874 1320 return $turn;
875 1321 }
876 1322
@@ -879,10 +1325,14 @@
879 1325 $last_has_more = true;
880 1326 $iterations = 0;
881 1327
882 1328 // Accumulate token usage across every turn and remember the last model the
883 - // AI Client resolved, for the `desktop_mode_ai_search_completed` payload.
884 - $total_usage = array( 'prompt' => 0, 'completion' => 0, 'total' => 0 );
1329 + // AI Client resolved, for the `openstation_ai_search_completed` payload.
1330 + $total_usage = array(
1331 + 'prompt' => 0,
1332 + 'completion' => 0,
1333 + 'total' => 0,
1334 + );
885 1335 $last_model = null;
886 1336 $accrue_usage = static function ( $turn ) use ( &$total_usage, &$last_model ) {
887 1337 if ( ! is_array( $turn ) ) {
888 1338 return;
@@ -902,27 +1352,22 @@
902 1352 // Agentic loop — each iteration either executes tool calls or returns
903 1353 // the final answer. The full ordered conversation (user query, assistant
904 1354 // turns, tool results) is accumulated in $messages and re-sent each turn.
905 1355 // -----------------------------------------------------------------------
906 - for ( $i = 0; $i < DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS; $i++ ) {
1356 + for ( $i = 0; $i < OPENSTATION_AI_SEARCH_MAX_ITERATIONS; $i++ ) {
907 1357 $function_calls = is_array( $turn['function_calls'] ?? null ) ? $turn['function_calls'] : array();
908 1358
909 1359 // No tool calls in this response → final answer.
910 1360 if ( empty( $function_calls ) ) {
911 - $emit( array( 'phase' => 'composing', 'message' => 'Putting together your answer…' ) );
912 - $text = $turn['text'] ?? null;
913 - if ( ! is_string( $text ) ) {
914 - // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log
915 - error_log( '[WP Desktop Mode AI] AI Client returned no text in the final turn.' );
916 - return new WP_Error(
917 - 'desktop_mode_ai_empty',
918 - 'The AI provider returned no text in the final turn.'
919 - );
920 - }
1361 + // A toolless turn with no extractable text never reaches here:
1362 + // openstation_ai_client_generate() returns
1363 + // `openstation_ai_empty_answer` for that case, handled with the
1364 + // other generation errors above.
1365 + $text = (string) ( $turn['text'] ?? '' );
921 1366
922 1367 $answer = json_decode( $text, true );
923 1368 if ( ! is_array( $answer ) ) {
924 - return new WP_Error( 'desktop_mode_ai_result_parse', 'Could not parse structured search answer.' );
1369 + return new WP_Error( 'openstation_ai_result_parse', __( 'Could not parse structured search answer.', 'desktop-mode' ) );
925 1370 }
926 1371
927 1372 $answer_type = isset( $answer['answer_type'] ) && in_array( $answer['answer_type'], array( 'entity', 'navigation', 'chat' ), true )
928 1373 ? (string) $answer['answer_type']
@@ -936,9 +1381,9 @@
936 1381 ? $answer['admin_links'] : null;
937 1382
938 1383 $entity = null;
939 1384 if ( 'entity' === $answer_type && $entity_id && $entity_type ) {
940 - $entity = desktop_mode_ai_search_build_entity( $entity_type, $entity_id );
1385 + $entity = openstation_ai_search_build_entity( $entity_type, $entity_id );
941 1386 }
942 1387
943 1388 $final = array(
944 1389 'answer_type' => $answer_type,
@@ -955,21 +1400,23 @@
955 1400 * Final transform hook — fires right before the HTTP
956 1401 * response is returned. Plugins can rewrite `message`,
957 1402 * inject `admin_links`, coerce `answer_type`, etc.
958 1403 *
959 - * @since 0.5.1
960 - *
961 1404 * @param array $answer Final answer payload.
962 1405 * @param array $context { query, user_id, request_id }.
963 1406 */
964 1407 $final = (array) apply_filters(
965 - 'desktop_mode_ai_answer',
1408 + 'openstation_ai_answer',
966 1409 $final,
967 - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id )
1410 + array(
1411 + 'query' => $query,
1412 + 'user_id' => $user_id,
1413 + 'request_id' => $request_id,
1414 + )
968 1415 );
969 1416
970 1417 do_action(
971 - 'desktop_mode_ai_search_completed',
1418 + 'openstation_ai_search_completed',
972 1419 array(
973 1420 'query' => $query,
974 1421 'user_id' => $user_id,
975 1422 'request_id' => $request_id,
@@ -995,10 +1442,10 @@
995 1442 $command_tool_call = null;
996 1443 foreach ( $function_calls as $fc ) {
997 1444 $name = (string) ( $fc['name'] ?? '' );
998 1445 if ( isset( $command_tools_by_name[ $name ] ) ) {
999 - $raw = json_decode( $fc['arguments'] ?? '{}', true );
1000 - $decoded = is_array( $raw ) ? $raw : array();
1446 + $raw = json_decode( $fc['arguments'] ?? '{}', true );
1447 + $decoded = is_array( $raw ) ? $raw : array();
1001 1448 $command_tool_call = array(
1002 1449 'slug' => $command_tools_by_name[ $name ]['slug'],
1003 1450 'args' => isset( $decoded['args'] ) ? (string) $decoded['args'] : '',
1004 1451 );
@@ -1004,11 +1451,11 @@
1004 1451 );
1005 1452 break;
1006 1453 }
1007 1454 }
1008 - if ( $command_tool_call !== null ) {
1455 + if ( null !== $command_tool_call ) {
1009 1456 do_action(
1010 - 'desktop_mode_ai_tool_called',
1457 + 'openstation_ai_tool_called',
1011 1458 array(
1012 1459 'tool_name' => 'command_' . $command_tool_call['slug'],
1013 1460 'args' => array( 'args' => $command_tool_call['args'] ),
1014 1461 'user_id' => $user_id,
@@ -1028,15 +1475,19 @@
1028 1475 'request_id' => $request_id,
1029 1476 );
1030 1477
1031 1478 $final = (array) apply_filters(
1032 - 'desktop_mode_ai_answer',
1479 + 'openstation_ai_answer',
1033 1480 $final,
1034 - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id )
1481 + array(
1482 + 'query' => $query,
1483 + 'user_id' => $user_id,
1484 + 'request_id' => $request_id,
1485 + )
1035 1486 );
1036 1487
1037 1488 do_action(
1038 - 'desktop_mode_ai_search_completed',
1489 + 'openstation_ai_search_completed',
1039 1490 array(
1040 1491 'query' => $query,
1041 1492 'user_id' => $user_id,
1042 1493 'request_id' => $request_id,
@@ -1051,9 +1502,9 @@
1051 1502 }
1052 1503
1053 1504 // Execute each tool call and collect results as
1054 1505 // `{ call_id, name, response }` — turned into FunctionResponse parts
1055 - // for the next turn by desktop_mode_ai_tool_result_message().
1506 + // for the next turn by openstation_ai_tool_result_message().
1056 1507 $tool_outputs = array();
1057 1508 foreach ( $function_calls as $fc ) {
1058 1509 $tool_name = $fc['name'] ?? '';
1059 1510 $call_id = $fc['call_id'] ?? '';
@@ -1070,16 +1521,10 @@
1070 1521 $raw = json_decode( $fc['arguments'] ?? '{}', true );
1071 1522 $args = is_array( $raw ) ? $raw : array();
1072 1523 $offset = max( 0, (int) ( $args['offset'] ?? 0 ) );
1073 1524
1074 - $emit( array(
1075 - 'phase' => 'tool_call',
1076 - 'tool' => $tool_name,
1077 - 'message' => desktop_mode_ai_progress_message( $tool_name ),
1078 - ) );
1079 -
1080 1525 do_action(
1081 - 'desktop_mode_ai_tool_called',
1526 + 'openstation_ai_tool_called',
1082 1527 array(
1083 1528 'tool_name' => $tool_name,
1084 1529 'args' => $args,
1085 1530 'user_id' => $user_id,
@@ -1098,14 +1543,14 @@
1098 1543 // there's no schema; otherwise hand over the decoded args.
1099 1544 $input = empty( $ability->get_input_schema() ) ? null : $args;
1100 1545 $result = $ability->execute( $input );
1101 1546 } else {
1102 - $result = new WP_Error( 'desktop_mode_ai_unknown_ability', sprintf( 'Ability for tool "%s" is unavailable.', $tool_name ) );
1547 + $result = new WP_Error( 'openstation_ai_unknown_ability', sprintf( 'Ability for tool "%s" is unavailable.', $tool_name ) );
1103 1548 }
1104 1549
1105 1550 if ( is_wp_error( $result ) ) {
1106 1551 do_action(
1107 - 'desktop_mode_ai_search_error',
1552 + 'openstation_ai_search_error',
1108 1553 array(
1109 1554 'stage' => 'tool_execute',
1110 1555 'tool_name' => $tool_name,
1111 1556 'error' => $result->get_error_code(),
@@ -1130,10 +1575,8 @@
1130 1575 * Transform a tool result before it goes back to the model.
1131 1576 * Fires for every ability-dispatched tool (including error
1132 1577 * envelopes from a failed execute()).
1133 1578 *
1134 - * @since 0.5.1
1135 - *
1136 1579 * @param array $batch Tool result payload.
1137 1580 * @param string $tool_name Tool function name.
1138 1581 * @param array $args Decoded args from the call.
1139 1582 * @param array $context { user_id, request_id }.
@@ -1138,13 +1581,16 @@
1138 1581 * @param array $args Decoded args from the call.
1139 1582 * @param array $context { user_id, request_id }.
1140 1583 */
1141 1584 $batch = (array) apply_filters(
1142 - 'desktop_mode_ai_tool_result',
1585 + 'openstation_ai_tool_result',
1143 1586 $batch,
1144 1587 $tool_name,
1145 1588 $args,
1146 - array( 'user_id' => $user_id, 'request_id' => $request_id )
1589 + array(
1590 + 'user_id' => $user_id,
1591 + 'request_id' => $request_id,
1592 + )
1147 1593 );
1148 1594
1149 1595 $tool_outputs[] = array(
1150 1596 'call_id' => $call_id,
@@ -1152,16 +1598,16 @@
1152 1598 'response' => $batch,
1153 1599 );
1154 1600 }
1155 1601
1156 - $iterations++;
1602 + ++$iterations;
1157 1603
1158 1604 // Next turn — append the assistant's tool-call turn and our tool
1159 1605 // results to the conversation, then regenerate with the full history.
1160 1606 $messages[] = $turn['message'];
1161 - $messages[] = desktop_mode_ai_tool_result_message( $tool_outputs );
1607 + $messages[] = openstation_ai_tool_result_message( $tool_outputs );
1162 1608
1163 - $turn = desktop_mode_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions );
1609 + $turn = openstation_ai_client_generate( $user_id, $messages, $tools, $answer_schema, $instructions, $generation_context );
1164 1610
1165 1611 if ( is_wp_error( $turn ) ) {
1166 1612 return $turn;
1167 1613 }
@@ -1172,28 +1618,27 @@
1172 1618 // Budget exhausted before a final answer.
1173 1619 // -----------------------------------------------------------------------
1174 1620 $continue = null;
1175 1621 if ( $last_has_more ) {
1176 - $next_offset = $last_offset + DESKTOP_MODE_AI_SEARCH_BATCH_SIZE;
1622 + $next_offset = $last_offset + OPENSTATION_AI_SEARCH_BATCH_SIZE;
1177 1623 // `search_comments_by_post` cannot resume — the continue payload
1178 1624 // carries no post_id — so fall back to plain comment search,
1179 - // keeping `tool` inside desktop_mode_ai_search_resumable_tools().
1625 + // keeping `tool` inside openstation_ai_search_resumable_tools().
1180 1626 $resume_tool = 'search_comments_by_post' === $last_tool ? 'search_comments' : $last_tool;
1181 - $type_label = str_replace( 'search_', '', $resume_tool ) . 's';
1182 1627 $continue = array(
1183 1628 'tool' => $resume_tool,
1184 1629 'entity_type' => rtrim( str_replace( 'search_', '', $resume_tool ), 's' ),
1185 1630 'offset' => $next_offset,
1186 - 'label' => sprintf( 'Continue searching in %s (from item %d)', $type_label, $next_offset + 1 ),
1631 + 'label' => openstation_ai_continue_label( $resume_tool, $next_offset + 1 ),
1187 1632 );
1188 1633 }
1189 1634
1190 1635 $final = array(
1191 1636 'answer_type' => 'chat',
1192 - 'message' => 'I searched 100 items without finding a clear match. Want me to keep looking further?',
1637 + 'message' => __( 'I searched 100 items without finding a clear match. Want me to keep looking further?', 'desktop-mode' ),
1193 1638 'entity' => null,
1194 1639 'admin_links' => null,
1195 - 'iterations' => DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS,
1640 + 'iterations' => OPENSTATION_AI_SEARCH_MAX_ITERATIONS,
1196 1641 'exhausted' => ! $last_has_more,
1197 1642 'continue' => $continue,
1198 1643 'request_id' => $request_id,
1199 1644 );
@@ -1198,21 +1643,25 @@
1198 1643 'request_id' => $request_id,
1199 1644 );
1200 1645
1201 1646 $final = (array) apply_filters(
1202 - 'desktop_mode_ai_answer',
1647 + 'openstation_ai_answer',
1203 1648 $final,
1204 - array( 'query' => $query, 'user_id' => $user_id, 'request_id' => $request_id )
1649 + array(
1650 + 'query' => $query,
1651 + 'user_id' => $user_id,
1652 + 'request_id' => $request_id,
1653 + )
1205 1654 );
1206 1655
1207 1656 do_action(
1208 - 'desktop_mode_ai_search_completed',
1657 + 'openstation_ai_search_completed',
1209 1658 array(
1210 1659 'query' => $query,
1211 1660 'user_id' => $user_id,
1212 1661 'request_id' => $request_id,
1213 1662 'answer_type' => 'chat',
1214 - 'iterations' => DESKTOP_MODE_AI_SEARCH_MAX_ITERATIONS,
1663 + 'iterations' => OPENSTATION_AI_SEARCH_MAX_ITERATIONS,
1215 1664 'usage' => $total_usage,
1216 1665 'model' => $last_model,
1217 1666 )
1218 1667 );
@@ -1227,18 +1676,17 @@
1227 1676 * keeps the voice consistent across legs and removes a class of drift
1228 1677 * bug where the two paths's prompt-assembly drifts apart.
1229 1678 *
1230 1679 * Applies three layers in order:
1231 - * 1. `desktop_mode_ai_system_prompt_appendix` — stacking filter;
1680 + * 1. `openstation_ai_system_prompt_appendix` — stacking filter;
1232 1681 * every plugin's return is concatenated.
1233 1682 * 2. Client override — `system_prompt_text` + `system_prompt_mode`.
1234 1683 * `append` always allowed; `replace` gated on
1235 - * `desktop_mode_ai_system_prompt_replace_capability`. Non-permitted
1684 + * `openstation_ai_system_prompt_replace_capability`. Non-permitted
1236 1685 * `replace` downgrades to `append` so the caller's text is
1237 1686 * preserved rather than dropped.
1238 - * 3. `desktop_mode_ai_system_prompt` — final transform pass.
1687 + * 3. `openstation_ai_system_prompt` — final transform pass.
1239 1688 *
1240 - * @since 0.5.1
1241 1689 * @internal
1242 1690 *
1243 1691 * @param string $core Built-in instructions for this phase
1244 1692 * (agent loop / follow-up summariser).
@@ -1246,9 +1694,9 @@
1246 1694 * @param array $client { text, mode } client override; either field
1247 1695 * empty means no override.
1248 1696 * @return string Composed system prompt.
1249 1697 */
1250 -function desktop_mode_ai_compose_instructions( $core, array $context, array $client = array() ) {
1698 +function openstation_ai_compose_instructions( $core, array $context, array $client = array() ) {
1251 1699 $instructions = (string) $core;
1252 1700 $user_id = isset( $context['user_id'] ) ? (int) $context['user_id'] : 0;
1253 1701
1254 1702 $client_text = isset( $client['text'] ) && is_string( $client['text'] ) ? $client['text'] : '';
@@ -1255,9 +1703,9 @@
1255 1703 $client_mode = isset( $client['mode'] ) && in_array( $client['mode'], array( 'append', 'replace' ), true )
1256 1704 ? (string) $client['mode']
1257 1705 : 'append';
1258 1706
1259 - $ctx_for_filter = $context;
1707 + $ctx_for_filter = $context;
1260 1708 $ctx_for_filter['client_override'] = '' !== $client_text ? $client_mode : null;
1261 1709
1262 1710 /**
1263 1711 * Short-circuit extension — appended to the built-in instructions
@@ -1265,14 +1713,12 @@
1265 1713 * context (room list, product catalogue, company jargon) without
1266 1714 * restructuring the core rules. Fires for both the primary
1267 1715 * `/ai/search` run and the follow-up composed-reply leg.
1268 1716 *
1269 - * @since 0.5.1
1270 - *
1271 1717 * @param string $appendix Accumulated appendix. Default empty.
1272 1718 * @param array $context { query, user_id, request_id, client_override, phase? }.
1273 1719 */
1274 - $server_appendix = (string) apply_filters( 'desktop_mode_ai_system_prompt_appendix', '', $ctx_for_filter );
1720 + $server_appendix = (string) apply_filters( 'openstation_ai_system_prompt_appendix', '', $ctx_for_filter );
1275 1721 if ( '' !== $server_appendix ) {
1276 1722 $instructions .= "\n\n" . $server_appendix;
1277 1723 }
1278 1724
@@ -1283,15 +1729,13 @@
1283 1729 * `system_prompt: { mode: 'replace' }`. Defaults to `manage_options`
1284 1730 * — replacing the whole prompt can effectively hijack the
1285 1731 * assistant, so it's admin-only out of the box.
1286 1732 *
1287 - * @since 0.5.1
1288 - *
1289 1733 * @param string $capability Default `manage_options`.
1290 1734 * @param array $context
1291 1735 */
1292 1736 $required_cap = (string) apply_filters(
1293 - 'desktop_mode_ai_system_prompt_replace_capability',
1737 + 'openstation_ai_system_prompt_replace_capability',
1294 1738 'manage_options',
1295 1739 $ctx_for_filter
1296 1740 );
1297 1741 if ( '' === $required_cap || ( $user_id > 0 && user_can( $user_id, $required_cap ) ) ) {
@@ -1309,14 +1753,12 @@
1309 1753 /**
1310 1754 * Final transform pass. Fires after the built-in instructions,
1311 1755 * server appendix, and client override have all been composed.
1312 1756 *
1313 - * @since 0.5.1
1314 - *
1315 1757 * @param string $instructions Composed system prompt.
1316 1758 * @param array $context
1317 1759 */
1318 - return (string) apply_filters( 'desktop_mode_ai_system_prompt', $instructions, $ctx_for_filter );
1760 + return (string) apply_filters( 'openstation_ai_system_prompt', $instructions, $ctx_for_filter );
1319 1761 }
1320 1762
1321 1763 /**
1322 1764 * Compose a natural-language reply describing the outcome of a
@@ -1323,37 +1765,35 @@
1323 1765 * client-dispatched command invocation.
1324 1766 *
1325 1767 * Called by the REST endpoint when the client sends `follow_up` —
1326 1768 * the second leg of the opt-in agentic flow triggered by
1327 - * `wp.desktop.ai.ask( q, { tools: 'aiCallable', followUp: true } )`.
1769 + * `wp.os.ai.ask( q, { tools: 'aiCallable', followUp: true } )`.
1328 1770 *
1329 1771 * Single-turn, no tools, no structured-output schema — the model
1330 1772 * sees the original query + a summary of what happened and writes a
1331 1773 * one/two-sentence reply in the voice of the system prompt. We reuse
1332 1774 * the same system-prompt pipeline as the main search so plugins
1333 - * appending instructions via `desktop_mode_ai_system_prompt_appendix`
1775 + * appending instructions via `openstation_ai_system_prompt_appendix`
1334 1776 * see consistent voice across the two legs.
1335 1777 *
1336 - * @since 0.5.1
1337 - *
1338 1778 * @param string $query Original user query.
1339 1779 * @param array $tool { slug, args } — what ran.
1340 1780 * @param array $outcome Tool result payload. Opaque — JSON-encoded
1341 1781 * into the model's context so it can reason
1342 1782 * about whatever shape the plugin returned.
1343 - * @param array $extra Same shape as `desktop_mode_ai_run_search`'s
1783 + * @param array $extra Same shape as `openstation_ai_run_search`'s
1344 1784 * `$extra` — carries user_id, request_id,
1345 1785 * system-prompt overrides.
1346 1786 * @return array|WP_Error `{ answer_type: 'chat', message, … }` or error.
1347 1787 */
1348 -function desktop_mode_ai_run_followup( $query, array $tool, array $outcome, array $extra = array() ) {
1788 +function openstation_ai_run_followup( $query, array $tool, array $outcome, array $extra = array() ) {
1349 1789 $user_id = isset( $extra['user_id'] ) ? (int) $extra['user_id'] : get_current_user_id();
1350 - $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && $extra['request_id'] !== ''
1790 + $request_id = isset( $extra['request_id'] ) && is_string( $extra['request_id'] ) && '' !== $extra['request_id']
1351 1791 ? (string) $extra['request_id']
1352 - : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ) );
1792 + : ( function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ) );
1353 1793
1354 1794 do_action(
1355 - 'desktop_mode_ai_search_started',
1795 + 'openstation_ai_search_started',
1356 1796 array(
1357 1797 'query' => $query,
1358 1798 'user_id' => $user_id,
1359 1799 'request_id' => $request_id,
@@ -1363,19 +1803,19 @@
1363 1803
1364 1804 // Mirror the main search's system-prompt layering so voice stays
1365 1805 // consistent between the two legs. We build a simpler core-
1366 1806 // instructions block — no tool guidance, since this run has none.
1367 - $instructions = "
1807 + $instructions = '
1368 1808 You are the same friendly WordPress assistant that just dispatched a command on behalf of the user. You now have the result of that command.
1369 1809
1370 1810 Write a SHORT reply (one or two sentences, first person, warm and conversational) describing what happened. Match the voice the site owner set in their system prompt — do not restart small talk, just confirm what you did.
1371 1811
1372 1812 Rules:
1373 -- If the outcome looks successful, confirm plainly. Example: \"Done — your office light is on now.\"
1813 +- If the outcome looks successful, confirm plainly. Example: "Done — your office light is on now."
1374 1814 - If the outcome looks like an error (has an `error` field, a failure message, or obviously negative content), apologise briefly and paraphrase what went wrong. Do not invent details the outcome did not include.
1375 1815 - Do NOT recommend the user try something else unless the outcome explicitly suggests it.
1376 -- Do NOT describe the tool mechanism (\"I called command_turn_light\") — the user only cares about the real-world effect.
1377 -";
1816 +- Do NOT describe the tool mechanism ("I called command_turn_light") — the user only cares about the real-world effect.
1817 +';
1378 1818
1379 1819 $system_prompt_text = isset( $extra['system_prompt_text'] ) && is_string( $extra['system_prompt_text'] ) ? $extra['system_prompt_text'] : '';
1380 1820 $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true )
1381 1821 ? (string) $extra['system_prompt_mode']
@@ -1380,9 +1820,9 @@
1380 1820 $system_prompt_mode = isset( $extra['system_prompt_mode'] ) && in_array( $extra['system_prompt_mode'], array( 'append', 'replace' ), true )
1381 1821 ? (string) $extra['system_prompt_mode']
1382 1822 : 'append';
1383 1823
1384 - $instructions = desktop_mode_ai_compose_instructions(
1824 + $instructions = openstation_ai_compose_instructions(
1385 1825 $instructions,
1386 1826 array(
1387 1827 'query' => $query,
1388 1828 'user_id' => $user_id,
@@ -1388,9 +1828,12 @@
1388 1828 'user_id' => $user_id,
1389 1829 'request_id' => $request_id,
1390 1830 'phase' => 'follow_up',
1391 1831 ),
1392 - array( 'text' => $system_prompt_text, 'mode' => $system_prompt_mode )
1832 + array(
1833 + 'text' => $system_prompt_text,
1834 + 'mode' => $system_prompt_mode,
1835 + )
1393 1836 );
1394 1837
1395 1838 $slug = isset( $tool['slug'] ) ? (string) $tool['slug'] : '';
1396 1839 $tool_args = isset( $tool['args'] ) ? (string) $tool['args'] : '';
@@ -1409,9 +1852,9 @@
1409 1852 // (Japanese / emoji / accented UTF-8) can't produce invalid JSON
1410 1853 // that the provider would reject. Falls back to byte-level substr when
1411 1854 // mbstring is unavailable (rare but possible on minimal PHP
1412 1855 // builds).
1413 - $max_outcome_len = (int) apply_filters( 'desktop_mode_ai_followup_outcome_max_chars', 4000 );
1856 + $max_outcome_len = (int) apply_filters( 'openstation_ai_followup_outcome_max_chars', 4000 );
1414 1857 if ( $max_outcome_len > 0 ) {
1415 1858 $has_mbstring = function_exists( 'mb_strlen' ) && function_exists( 'mb_substr' );
1416 1859 $current_len = $has_mbstring
1417 1860 ? mb_strlen( $outcome_json, 'UTF-8' )
@@ -1416,9 +1859,9 @@
1416 1859 $current_len = $has_mbstring
1417 1860 ? mb_strlen( $outcome_json, 'UTF-8' )
1418 1861 : strlen( $outcome_json );
1419 1862 if ( $current_len > $max_outcome_len ) {
1420 - $outcome_json = $has_mbstring
1863 + $outcome_json = $has_mbstring
1421 1864 ? mb_substr( $outcome_json, 0, $max_outcome_len, 'UTF-8' )
1422 1865 : substr( $outcome_json, 0, $max_outcome_len );
1423 1866 $outcome_json .= '…[truncated]';
1424 1867 }
@@ -1432,28 +1875,41 @@
1432 1875 $outcome_json
1433 1876 );
1434 1877
1435 1878 do_action(
1436 - 'desktop_mode_ai_tool_called',
1879 + 'openstation_ai_tool_called',
1437 1880 array(
1438 1881 'tool_name' => 'followup_summarise',
1439 - 'args' => array( 'slug' => $slug, 'tool_args' => $tool_args ),
1882 + 'args' => array(
1883 + 'slug' => $slug,
1884 + 'tool_args' => $tool_args,
1885 + ),
1440 1886 'user_id' => $user_id,
1441 1887 'request_id' => $request_id,
1442 1888 )
1443 1889 );
1444 1890
1445 - $turn = desktop_mode_ai_client_generate(
1891 + $turn = openstation_ai_client_generate(
1446 1892 $user_id,
1447 - array( desktop_mode_ai_user_text_message( $user_message ) ),
1893 + array( openstation_ai_user_text_message( $user_message ) ),
1448 1894 array(), // no tools — we want a plain reply
1449 1895 null, // no JSON schema — free-form text
1450 - $instructions
1896 + $instructions,
1897 + array(
1898 + 'source' => 'ai-copilot/followup',
1899 + 'request_id' => $request_id,
1900 + )
1451 1901 );
1452 1902
1453 - if ( is_wp_error( $turn ) ) {
1903 + // `openstation_ai_empty_answer` is the one generation error this path
1904 + // deliberately absorbs: the command DID run, so a text-less summary turn
1905 + // degrades to the generic confirmation below instead of surfacing as a
1906 + // failure of the command itself.
1907 + $empty_answer = is_wp_error( $turn ) && 'openstation_ai_empty_answer' === $turn->get_error_code();
1908 +
1909 + if ( is_wp_error( $turn ) && ! $empty_answer ) {
1454 1910 do_action(
1455 - 'desktop_mode_ai_search_error',
1911 + 'openstation_ai_search_error',
1456 1912 array(
1457 1913 'code' => $turn->get_error_code(),
1458 1914 'message' => $turn->get_error_message(),
1459 1915 'data' => $turn->get_error_data(),
@@ -1464,9 +1920,9 @@
1464 1920 );
1465 1921 return $turn;
1466 1922 }
1467 1923
1468 - $text = $turn['text'] ?? null;
1924 + $text = $empty_answer ? null : ( $turn['text'] ?? null );
1469 1925 $fallback = false;
1470 1926 if ( ! is_string( $text ) || '' === trim( $text ) ) {
1471 1927 // Graceful degrade — if the provider returned nothing usable, fall
1472 1928 // back to a generic confirmation so the caller always has a
@@ -1486,14 +1942,17 @@
1486 1942 'iterations' => 1,
1487 1943 'exhausted' => false,
1488 1944 'continue' => null,
1489 1945 'request_id' => $request_id,
1490 - 'tool' => array( 'slug' => $slug, 'args' => $tool_args ),
1946 + 'tool' => array(
1947 + 'slug' => $slug,
1948 + 'args' => $tool_args,
1949 + ),
1491 1950 'fallback' => $fallback,
1492 1951 );
1493 1952
1494 1953 $final = (array) apply_filters(
1495 - 'desktop_mode_ai_answer',
1954 + 'openstation_ai_answer',
1496 1955 $final,
1497 1956 array(
1498 1957 'query' => $query,
1499 1958 'user_id' => $user_id,
@@ -1502,9 +1961,9 @@
1502 1961 )
1503 1962 );
1504 1963
1505 1964 do_action(
1506 - 'desktop_mode_ai_search_completed',
1965 + 'openstation_ai_search_completed',
1507 1966 array(
1508 1967 'query' => $query,
1509 1968 'user_id' => $user_id,
1510 1969 'request_id' => $request_id,
@@ -1523,21 +1982,19 @@
1523 1982 // ---------------------------------------------------------------------------
1524 1983
1525 1984 /**
1526 1985 * Registers the AI search REST route.
1527 - *
1528 - * @since 0.5.0
1529 1986 */
1530 -function desktop_mode_register_ai_search_rest_route() {
1987 +function openstation_register_ai_search_rest_route() {
1531 1988 register_rest_route(
1532 1989 'desktop-mode/v1',
1533 1990 '/ai/search',
1534 1991 array(
1535 1992 'methods' => WP_REST_Server::CREATABLE,
1536 - 'callback' => 'desktop_mode_rest_ai_search',
1537 - 'permission_callback' => 'desktop_mode_rest_ai_search_permission',
1993 + 'callback' => 'openstation_rest_ai_search',
1994 + 'permission_callback' => 'openstation_rest_ai_search_permission',
1538 1995 'args' => array(
1539 - 'query' => array(
1996 + 'query' => array(
1540 1997 'required' => true,
1541 1998 'type' => 'string',
1542 1999 'sanitize_callback' => 'sanitize_text_field',
1543 2000 'validate_callback' => static function ( $v ) {
@@ -1547,18 +2004,18 @@
1547 2004 // `resume_tool` + `start_offset` are only set when the
1548 2005 // client is continuing a previous search from the `continue`
1549 2006 // object returned by an exhausted run. Fresh searches leave
1550 2007 // both unset — the agent picks tools from query semantics.
1551 - 'resume_tool' => array(
2008 + 'resume_tool' => array(
1552 2009 'required' => false,
1553 2010 'type' => array( 'string', 'null' ),
1554 2011 'default' => null,
1555 2012 'sanitize_callback' => static function ( $v ) {
1556 - return in_array( $v, desktop_mode_ai_search_resumable_tools(), true )
2013 + return in_array( $v, openstation_ai_search_resumable_tools(), true )
1557 2014 ? $v : null;
1558 - },
2015 + },
1559 2016 ),
1560 - 'start_offset' => array(
2017 + 'start_offset' => array(
1561 2018 'required' => false,
1562 2019 'type' => 'integer',
1563 2020 'default' => 0,
1564 2021 'sanitize_callback' => 'absint',
@@ -1567,9 +2024,9 @@
1567 2024 // opted in as AI tools. Each entry: { slug, label, description?, hint? }.
1568 2025 // The slug is namespaced server-side as `command_<slug>`
1569 2026 // and any tool_call the model emits with that name short-
1570 2027 // circuits back to the client for local dispatch.
1571 - 'command_tools' => array(
2028 + 'command_tools' => array(
1572 2029 'required' => false,
1573 2030 'type' => 'array',
1574 2031 'default' => array(),
1575 2032 'items' => array(
@@ -1582,12 +2039,12 @@
1582 2039 ),
1583 2040 ),
1584 2041 ),
1585 2042 // Free-form system-prompt override.
1586 - // mode: 'append' → concatenated onto the built-in prompt (safe for everyone)
1587 - // mode: 'replace' → replaces the built-in prompt entirely, gated on
1588 - // `desktop_mode_ai_system_prompt_replace_capability`
1589 - // (default `manage_options`).
2043 + // mode: 'append' → concatenated onto the built-in prompt (safe for everyone)
2044 + // mode: 'replace' → replaces the built-in prompt entirely, gated on
2045 + // `openstation_ai_system_prompt_replace_capability`
2046 + // (default `manage_options`).
1590 2047 'system_prompt_text' => array(
1591 2048 'required' => false,
1592 2049 'type' => 'string',
1593 2050 'default' => '',
@@ -1604,9 +2061,9 @@
1604 2061 // When present, the endpoint SKIPS the agent loop entirely
1605 2062 // and runs a single-turn "summarise this outcome" call
1606 2063 // through the provider instead. The client sends this on the
1607 2064 // second leg of `ask( q, { tools: 'aiCallable', followUp: true } )`.
1608 - 'follow_up' => array(
2065 + 'follow_up' => array(
1609 2066 'required' => false,
1610 2067 'type' => array( 'object', 'null' ),
1611 2068 'default' => null,
1612 2069 ),
@@ -1613,37 +2070,44 @@
1613 2070 ),
1614 2071 )
1615 2072 );
1616 2073 }
1617 -add_action( 'rest_api_init', 'desktop_mode_register_ai_search_rest_route' );
2074 +add_action( 'rest_api_init', 'openstation_register_ai_search_rest_route' );
1618 2075
1619 2076 /**
1620 2077 * Permission callback.
1621 2078 *
1622 - * @since 0.5.0
1623 - *
1624 2079 * @return bool|WP_Error
1625 2080 */
1626 -function desktop_mode_rest_ai_search_permission() {
2081 +function openstation_rest_ai_search_permission() {
1627 2082 if ( ! is_user_logged_in() || ! current_user_can( 'read' ) ) {
1628 2083 return new WP_Error(
1629 - 'desktop_mode_ai_forbidden',
1630 - 'You must be logged in to use the AI assistant.',
2084 + 'openstation_ai_forbidden',
2085 + __( 'You must be logged in to use the AI assistant.', 'desktop-mode' ),
1631 2086 array( 'status' => 403 )
1632 2087 );
1633 2088 }
1634 - if ( ! desktop_mode_ai_is_available() ) {
2089 + if ( ! openstation_ai_is_available() ) {
1635 2090 return new WP_Error(
1636 - 'desktop_mode_ai_unavailable',
1637 - 'The AI assistant is unavailable on this site.',
2091 + 'openstation_ai_unavailable',
2092 + __( 'The AI assistant is unavailable on this site.', 'desktop-mode' ),
1638 2093 array( 'status' => 503 )
1639 2094 );
1640 2095 }
1641 - if ( ! desktop_mode_ai_is_enabled( get_current_user_id() ) ) {
2096 + if ( ! openstation_ai_is_enabled( get_current_user_id() ) ) {
2097 + // The message names the tab for consumers that only get text (a REST
2098 + // client, `wp.os.ai.ask()`). `settings_tab` names it again as data,
2099 + // so the overlay can offer a one-click link without parsing prose.
1642 2100 return new WP_Error(
1643 - 'desktop_mode_ai_disabled',
1644 - 'The AI assistant is turned off. Enable it in OS Settings → Features.',
1645 - array( 'status' => 403 )
2101 + 'openstation_ai_disabled',
2102 + __(
2103 + 'The AI assistant is turned off. Enable it in OpenStation Preferences → Features.',
2104 + 'desktop-mode'
2105 + ),
2106 + array(
2107 + 'status' => 403,
2108 + 'settings_tab' => 'features',
2109 + )
1646 2110 );
1647 2111 }
1648 2112 return true;
1649 2113 }
@@ -1650,14 +2114,18 @@
1650 2114
1651 2115 /**
1652 2116 * POST /desktop-mode/v1/ai/search
1653 2117 *
1654 - * @since 0.5.0
1655 - *
1656 2118 * @param WP_REST_Request $request
1657 2119 * @return WP_REST_Response|WP_Error
1658 2120 */
1659 -function desktop_mode_rest_ai_search( WP_REST_Request $request ) {
2121 +function openstation_rest_ai_search( WP_REST_Request $request ) {
2122 + // The agent loop runs up to OPENSTATION_AI_SEARCH_MAX_ITERATIONS model
2123 + // round-trips, each with a tool call, which overruns a default 30s
2124 + // max_execution_time. The streaming endpoint used to raise this; it is
2125 + // the only path now, so it carries the limit.
2126 + @set_time_limit( 120 ); // phpcs:ignore
2127 +
1660 2128 $user_id = get_current_user_id();
1661 2129 $query = $request->get_param( 'query' );
1662 2130 $resume_tool = $request->get_param( 'resume_tool' );
1663 2131 $start_offset = $request->get_param( 'start_offset' );
@@ -1668,9 +2136,9 @@
1668 2136 }
1669 2137
1670 2138 $extra = array(
1671 2139 'user_id' => $user_id,
1672 - 'request_id' => function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'desktop_mode_ai_', true ),
2140 + 'request_id' => function_exists( 'wp_generate_uuid4' ) ? wp_generate_uuid4() : uniqid( 'openstation_ai_', true ),
1673 2141 'command_tools' => $command_tools,
1674 2142 'system_prompt_text' => (string) $request->get_param( 'system_prompt_text' ),
1675 2143 'system_prompt_mode' => (string) $request->get_param( 'system_prompt_mode' ),
1676 2144 );
@@ -1679,15 +2147,13 @@
1679 2147 * Last-mile filter on the whole `/ai/search` request bundle.
1680 2148 * Plugins get one hook to rewrite query, swap tools, or inject
1681 2149 * metadata before the agent loop starts.
1682 2150 *
1683 - * @since 0.5.1
1684 - *
1685 2151 * @param array $extra Extended context (mutable).
1686 2152 * @param array $core Core request params { query, resume_tool, start_offset }.
1687 2153 */
1688 2154 $extra = (array) apply_filters(
1689 - 'desktop_mode_ai_request',
2155 + 'openstation_ai_request',
1690 2156 $extra,
1691 2157 array(
1692 2158 'query' => $query,
1693 2159 'resume_tool' => $resume_tool,
@@ -1701,17 +2167,17 @@
1701 2167 $tool = $follow_up['tool'];
1702 2168 $outcome = isset( $follow_up['result'] )
1703 2169 ? ( is_array( $follow_up['result'] ) ? $follow_up['result'] : array( 'value' => $follow_up['result'] ) )
1704 2170 : array();
1705 - $result = desktop_mode_ai_run_followup( $query, $tool, $outcome, $extra );
2171 + $result = openstation_ai_run_followup( $query, $tool, $outcome, $extra );
1706 2172 } else {
1707 - $result = desktop_mode_ai_run_search( $query, $resume_tool, $start_offset, null, $extra );
2173 + $result = openstation_ai_run_search( $query, $resume_tool, $start_offset, $extra );
1708 2174 }
1709 2175
1710 2176 if ( is_wp_error( $result ) ) {
1711 2177 $request_id = isset( $extra['request_id'] ) ? (string) $extra['request_id'] : '';
1712 2178 do_action(
1713 - 'desktop_mode_ai_search_error',
2179 + 'openstation_ai_search_error',
1714 2180 array(
1715 2181 'code' => $result->get_error_code(),
1716 2182 'message' => $result->get_error_message(),
1717 2183 'data' => $result->get_error_data(),
@@ -1733,16 +2199,14 @@
1733 2199
1734 2200 /**
1735 2201 * Search the WordPress.org plugin directory.
1736 2202 *
1737 - * @since 0.5.0
1738 - *
1739 2203 * @param string $query Search terms.
1740 2204 * @return array Tool result payload ready for the model.
1741 2205 */
1742 -function desktop_mode_ai_fetch_wporg_plugins( $query ) {
2206 +function openstation_ai_fetch_wporg_plugins( $query ) {
1743 2207 $query = trim( (string) $query );
1744 - if ( $query === '' ) {
2208 + if ( '' === $query ) {
1745 2209 return array(
1746 2210 'tool' => 'search_wporg_plugins',
1747 2211 'query' => '',
1748 2212 'results' => array(),
@@ -1752,9 +2216,9 @@
1752 2216 }
1753 2217
1754 2218 // Transient cache to protect the w.org API from repeated queries
1755 2219 // within the same conversation.
1756 - $cache_key = 'desktop_mode_ai_plugins_' . md5( strtolower( $query ) );
2220 + $cache_key = 'openstation_ai_plugins_' . md5( strtolower( $query ) );
1757 2221 $cached = get_transient( $cache_key );
1758 2222 if ( is_array( $cached ) ) {
1759 2223 return $cached;
1760 2224 }
@@ -1811,9 +2275,9 @@
1811 2275 // Normalise — plugins_api sometimes returns arrays, sometimes objects.
1812 2276 $p = (array) $p;
1813 2277
1814 2278 $slug = isset( $p['slug'] ) ? (string) $p['slug'] : '';
1815 - if ( $slug === '' ) {
2279 + if ( '' === $slug ) {
1816 2280 continue;
1817 2281 }
1818 2282
1819 2283 $icon = '';
@@ -1879,20 +2343,18 @@
1879 2343 * falls back to the PHP ini `error_log` directive. If neither points at
1880 2344 * a readable file the tool reports log_available=false rather than
1881 2345 * throwing.
1882 2346 *
1883 - * @since 0.5.0
1884 - *
1885 2347 * @param int $lines Number of lines to return (clamped 1-500 by caller).
1886 2348 * @return array
1887 2349 */
1888 -function desktop_mode_ai_fetch_error_log( $lines = 50 ) {
2350 +function openstation_ai_fetch_error_log( $lines = 50 ) {
1889 2351 $candidates = array();
1890 2352 if ( defined( 'WP_CONTENT_DIR' ) ) {
1891 2353 $candidates[] = WP_CONTENT_DIR . '/debug.log';
1892 2354 }
1893 2355 $ini_log = (string) ini_get( 'error_log' );
1894 - if ( $ini_log !== '' && 'syslog' !== $ini_log ) {
2356 + if ( '' !== $ini_log && 'syslog' !== $ini_log ) {
1895 2357 $candidates[] = $ini_log;
1896 2358 }
1897 2359
1898 2360 /**
@@ -1898,13 +2360,11 @@
1898 2360 /**
1899 2361 * Filter the list of log-file paths to probe in order. Plugins that
1900 2362 * redirect errors somewhere non-standard can add their path here.
1901 2363 *
1902 - * @since 0.5.0
1903 - *
1904 2364 * @param string[] $candidates File paths, in probe order.
1905 2365 */
1906 - $candidates = (array) apply_filters( 'desktop_mode_ai_error_log_candidates', $candidates );
2366 + $candidates = (array) apply_filters( 'openstation_ai_error_log_candidates', $candidates );
1907 2367
1908 2368 $log_path = '';
1909 2369 foreach ( $candidates as $path ) {
1910 2370 if ( is_string( $path ) && is_file( $path ) && is_readable( $path ) ) {
@@ -1912,9 +2372,9 @@
1912 2372 break;
1913 2373 }
1914 2374 }
1915 2375
1916 - if ( $log_path === '' ) {
2376 + if ( '' === $log_path ) {
1917 2377 return array(
1918 2378 'tool' => 'get_php_error_log',
1919 2379 'log_available' => false,
1920 2380 'message' => 'No readable error log found. Enable WP_DEBUG_LOG in wp-config.php or set php_value error_log.',
@@ -1923,17 +2383,17 @@
1923 2383 'count' => 0,
1924 2384 );
1925 2385 }
1926 2386
1927 - $tail = desktop_mode_ai_tail_file( $log_path, $lines );
2387 + $tail = openstation_ai_tail_file( $log_path, $lines );
1928 2388
1929 2389 $entries = array();
1930 2390 foreach ( $tail as $line ) {
1931 2391 $line = trim( $line );
1932 - if ( $line === '' ) {
2392 + if ( '' === $line ) {
1933 2393 continue;
1934 2394 }
1935 - $entries[] = desktop_mode_ai_parse_log_line( $line );
2395 + $entries[] = openstation_ai_parse_log_line( $line );
1936 2396 }
1937 2397
1938 2398 return array(
1939 2399 'tool' => 'get_php_error_log',
@@ -1950,14 +2410,12 @@
1950 2410 * PHP's default format is `[<date>] <prefix>: <message>` where the
1951 2411 * prefix is usually "PHP Fatal error", "PHP Warning", etc. Falls back
1952 2412 * to a raw line when the format doesn't match.
1953 2413 *
1954 - * @since 0.5.0
1955 - *
1956 2414 * @param string $line
1957 2415 * @return array
1958 2416 */
1959 -function desktop_mode_ai_parse_log_line( $line ) {
2417 +function openstation_ai_parse_log_line( $line ) {
1960 2418 // Cap individual messages so a runaway stack trace doesn't balloon
1961 2419 // the payload sent to the provider.
1962 2420 $line = mb_substr( $line, 0, 600 );
1963 2421
@@ -1987,15 +2445,13 @@
1987 2445 * slices off the trailing N+1 entries. Realistic error logs sit
1988 2446 * in the kilobyte range when admins look at them; if a site routinely
1989 2447 * lets logs grow into tens of MB, that's the symptom, not this read.
1990 2448 *
1991 - * @since 0.5.0
1992 - *
1993 2449 * @param string $path Absolute path to the file.
1994 2450 * @param int $lines
1995 2451 * @return string[] Lines in original order (oldest first).
1996 2452 */
1997 -function desktop_mode_ai_tail_file( $path, $lines ) {
2453 +function openstation_ai_tail_file( $path, $lines ) {
1998 2454 if ( ! function_exists( 'WP_Filesystem' ) ) {
1999 2455 require_once ABSPATH . 'wp-admin/includes/file.php';
2000 2456 }
2001 2457 WP_Filesystem();
@@ -2015,118 +2471,4 @@
2015 2471 }
2016 2472
2017 2473 return array_slice( $all, -1 * ( $lines + 1 ) );
2018 2474 }
2019 -
2020 -// ---------------------------------------------------------------------------
2021 -// Streaming endpoint (Server-Sent Events)
2022 -//
2023 -// EventSource can't send POST or custom headers, so we ride admin-ajax.php
2024 -// which handles cookie-based auth natively. The nonce goes in the URL.
2025 -// Output buffering is forcibly disabled and every emit is flushed so the
2026 -// browser receives progress ticks in real time.
2027 -// ---------------------------------------------------------------------------
2028 -
2029 -/**
2030 - * admin-ajax handler for the streaming search endpoint.
2031 - *
2032 - * URL: /wp-admin/admin-ajax.php?action=desktop_mode_ai_search_stream
2033 - * &nonce=<rest_nonce>
2034 - * &query=<user question>
2035 - * &resume_tool=<search_posts|…> (optional)
2036 - * &start_offset=<int> (optional)
2037 - *
2038 - * Emits SSE events:
2039 - * data: { "event": "progress", "phase": "tool_call", "message": "…" }
2040 - * data: { "event": "done", "result": { … } }
2041 - * data: { "event": "error", "message": "…" }
2042 - *
2043 - * @since 0.5.0
2044 - */
2045 -function desktop_mode_ai_ajax_search_stream() {
2046 - $nonce = isset( $_GET['nonce'] ) ? sanitize_text_field( wp_unslash( $_GET['nonce'] ) ) : '';
2047 - if ( ! wp_verify_nonce( $nonce, 'wp_rest' ) ) {
2048 - status_header( 403 );
2049 - exit;
2050 - }
2051 - if ( ! is_user_logged_in() || ! current_user_can( 'read' ) ) {
2052 - status_header( 403 );
2053 - exit;
2054 - }
2055 - $user_id = get_current_user_id();
2056 - if ( ! desktop_mode_ai_is_available() ) {
2057 - status_header( 503 );
2058 - exit;
2059 - }
2060 - if ( ! desktop_mode_ai_is_enabled( $user_id ) ) {
2061 - status_header( 403 );
2062 - exit;
2063 - }
2064 -
2065 - $query = isset( $_GET['query'] ) ? sanitize_text_field( wp_unslash( $_GET['query'] ) ) : ''; // phpcs:ignore WordPress.Security
2066 - if ( trim( $query ) === '' ) {
2067 - status_header( 400 );
2068 - exit;
2069 - }
2070 -
2071 - $resume_tool = isset( $_GET['resume_tool'] ) ? sanitize_key( wp_unslash( $_GET['resume_tool'] ) ) : null; // phpcs:ignore WordPress.Security
2072 - $start_offset = isset( $_GET['start_offset'] ) ? absint( $_GET['start_offset'] ) : 0; // phpcs:ignore WordPress.Security
2073 - if ( $resume_tool !== null && ! in_array( $resume_tool, desktop_mode_ai_search_resumable_tools(), true ) ) {
2074 - $resume_tool = null;
2075 - }
2076 -
2077 - // SSE headers — tell nginx to stop buffering, tell the browser this is
2078 - // a persistent event stream.
2079 - header( 'Content-Type: text/event-stream; charset=utf-8' );
2080 - header( 'Cache-Control: no-cache, no-store, must-revalidate' );
2081 - header( 'X-Accel-Buffering: no' );
2082 - header( 'Connection: keep-alive' );
2083 -
2084 - // Let other requests from this user proceed (release session lock).
2085 - if ( session_status() === PHP_SESSION_ACTIVE ) {
2086 - session_write_close();
2087 - }
2088 -
2089 - // Kill any output buffers PHP set up, otherwise nothing flushes until
2090 - // the request ends — which defeats the whole point of streaming.
2091 - while ( ob_get_level() > 0 ) {
2092 - @ob_end_flush(); // phpcs:ignore
2093 - }
2094 - @ini_set( 'output_buffering', 'off' ); // phpcs:ignore
2095 - @ini_set( 'zlib.output_compression', 'off' ); // phpcs:ignore
2096 - @set_time_limit( 120 ); // phpcs:ignore
2097 -
2098 - $emit = static function ( array $payload ) {
2099 - echo 'data: ' . wp_json_encode( $payload ) . "\n\n";
2100 - @ob_flush(); // phpcs:ignore
2101 - flush();
2102 - };
2103 -
2104 - // Initial tick so the EventSource opens immediately and the JS can
2105 - // start showing "Thinking…" without waiting for the first model call.
2106 - $emit( array( 'event' => 'open' ) );
2107 -
2108 - $result = desktop_mode_ai_run_search(
2109 - $query,
2110 - $resume_tool,
2111 - $start_offset,
2112 - function ( $progress ) use ( $emit ) {
2113 - $emit( array_merge( array( 'event' => 'progress' ), $progress ) );
2114 - }
2115 - );
2116 -
2117 - if ( is_wp_error( $result ) ) {
2118 - $emit( array(
2119 - 'event' => 'error',
2120 - 'message' => $result->get_error_message(),
2121 - 'code' => $result->get_error_code(),
2122 - ) );
2123 - } else {
2124 - $emit( array(
2125 - 'event' => 'done',
2126 - 'result' => $result,
2127 - ) );
2128 - }
2129 -
2130 - exit;
2131 -}
2132 -add_action( 'wp_ajax_desktop_mode_ai_search_stream', 'desktop_mode_ai_ajax_search_stream' );