PluginProbe
OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin / 1.1.4
OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin v1.1.4
1.1.10 1.1.9 1.1.8 1.1.7 1.1.6 1.1.5 1.1.4 1.1.3 1.1.2 1.1.1 1.1.0 1.0.1 1.0.0 0.9.8 0.9.7 0.9.6 0.9.4 0.9.5 0.9.3 0.9.2 0.9.1 0.9.0 0.8.9 0.8.8 0.8.7 All 34 releases
desktop-mode / includes / render / assets.php

assets.php in OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin 1.1.4, at includes/render/assets.php

1,236 lines 59.5 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 <?php
2 /**
3 * OpenStation — Asset enqueue.
4 *
5 * Loads the desktop shell CSS + JS bundles when OpenStation is
6 * active and the request isn't chromeless / classic-overridden.
7 * Owns the entire `openstation_enqueue_assets()` body — the
8 * largest hook in the original render.php and the natural seam
9 * for "what does the shell ship to the browser today?".
10 *
11 * Extracted from `render.php` during the architecture-0.8.1 PHP
12 * slicing (phase 6).
13 *
14 * @package OpenStation
15 */
16
17 defined( 'ABSPATH' ) || exit;
18
19 /**
20 * Enqueues the OpenStation shell assets (CSS + JS) when OpenStation is active.
21 *
22 * Only loads the full desktop shell scripts and styles when the user has
23 * OpenStation enabled and the request is not a chromeless iframe load.
24 */
25 function openstation_enqueue_assets() {
26 if ( ! is_admin() ) {
27 return;
28 }
29
30 // Auto-enqueue the iframe bridge anywhere a openstation user
31 // might land. The bundle self-bails when not inside an iframe
32 // (`window.parent === window`), so it's a no-op on the parent
33 // shell — but cheap insurance against the failure mode the
34 // developer hit: an internal admin navigation drops the
35 // `?openstation_chromeless=1` flag, the chromeless inline bridge doesn't
36 // run, and `wp.os.iframe` silently disappears. With this
37 // auto-enqueue, the API is universally present for any same-
38 // origin admin page a openstation user opens — chromeless or
39 // accidentally classic.
40 if ( openstation_is_enabled() ) {
41 wp_enqueue_script( 'os-iframe-bridge' );
42
43 // Block Editor cross-window drop receiver. Listens for
44 // `os-drop` postMessages from the parent shell and
45 // inserts the matching block. Only enqueue inside the
46 // post-edit Block Editor screens — every other admin page
47 // would be paying for a bundle it never uses.
48 //
49 // `site-editor.php` (full-site editor) deliberately omitted:
50 // the FSE doesn't expose `wp.data.dispatch('core/block-editor')`
51 // until the user opens a template in the canvas iframe, so
52 // drops arriving before that point would silently time out
53 // after the receiver's 5 s `waitForEditor()` poll. Re-enable
54 // once we have a reliable readiness signal in that context.
55 global $hook_suffix;
56 if ( 'post.php' === $hook_suffix || 'post-new.php' === $hook_suffix ) {
57 wp_enqueue_script( 'os-gutenberg-drop-receiver' );
58 }
59 }
60
61 // Chromeless requests (iframes) need chromeless styles and overrides.
62 if ( openstation_is_chromeless_request() ) {
63 wp_enqueue_style( 'openstation' );
64 wp_enqueue_style( 'os-chromeless' );
65
66 /**
67 * Fires when chromeless styles are enqueued inside a OpenStation iframe.
68 *
69 * Plugin and theme authors can hook here to enqueue their own CSS
70 * overrides for legacy pages rendered in chromeless mode. Use the
71 * `.os-chromeless` body class to scope your rules.
72 */
73 do_action( 'openstation_chromeless_styles' );
74 return;
75 }
76
77 if ( ! openstation_is_enabled() || openstation_is_classic_request() ) {
78 return;
79 }
80
81 // CSS. Only the sheets that paint surfaces present at boot — the
82 // shell chrome, the dock, desktop tiles and pinned notes. Sheets
83 // for on-demand surfaces (Preferences panel, AI assistant, bug
84 // report) ship as `deferredStyles` in the config blob below and
85 // inject on first open; a native window's sheet rides its
86 // registration's `styles` companion list the same way.
87 wp_enqueue_style( 'openstation' );
88 wp_enqueue_style( 'os-windows' );
89 wp_enqueue_style( 'os-window-overview' );
90 wp_enqueue_style( 'os-dock' );
91 wp_enqueue_style( 'os-dock-peek' );
92 wp_enqueue_style( 'os-notch' );
93 wp_enqueue_style( 'os-shortcuts' );
94 wp_enqueue_style( 'os-openstation-layout' );
95 wp_enqueue_style( 'os-files' );
96 wp_enqueue_style( 'os-notes' );
97
98 // Solo mode — a single window freed into a native OS window by the
99 // desktop host. Same shell, everything but that one window hidden.
100 $solo_window = openstation_solo_window_id();
101 if ( '' !== $solo_window ) {
102 wp_enqueue_style( 'os-solo' );
103
104 /*
105 * Hide every window that is not the one this surface was booted
106 * to paint — from the first frame, before any of them exist.
107 *
108 * Solo mode promises one window. Anything that opens a second
109 * (a game launched from a freed Games hub, a plugin calling
110 * `openWindow`) would otherwise land on top of the first, and
111 * solo's CSS stretches every window to fill the viewport, so it
112 * covers what the user was using.
113 *
114 * This has to be CSS rather than JavaScript, and it has to be
115 * inline. A JS rule can only run once the window exists, which
116 * is a frame too late — the user sees the newcomer flash before
117 * it is dealt with. A static stylesheet cannot express it
118 * either, because the selector depends on which window this is.
119 * So the rule is emitted with the id baked in, and no window but
120 * that one is ever painted.
121 *
122 * `visibility` rather than `display`: a hidden-but-laid-out
123 * window still has a size, which canvas-based windows need in
124 * order to initialise without dividing by zero on the way to
125 * being closed.
126 *
127 * The id is `sanitize_key()`-clean (see `openstation_solo_window_id()`),
128 * so it is safe in a selector; it is escaped again here because
129 * the distance between those two facts is exactly where this
130 * kind of bug lives.
131 */
132 wp_add_inline_style(
133 'os-solo',
134 sprintf(
135 'body.os-solo .os-window:not(#wp-window-%1$s){visibility:hidden !important;pointer-events:none !important;}',
136 esc_attr( $solo_window )
137 )
138 );
139 }
140
141 // The rebrand announcement paints on one visit per user and never
142 // again, so its stylesheet is only worth sending to the users who
143 // are actually going to see it. Computed once here and reused for
144 // the `rebrandNotice` config key below, which reads the same answer.
145 $show_rebrand_notice = openstation_should_show_rebrand_notice();
146 if ( $show_rebrand_notice ) {
147 wp_enqueue_style( 'os-announce' );
148 }
149
150 // JS.
151 wp_enqueue_script( 'openstation' );
152
153 // `wp_enqueue_command_palette_assets()` (WP 6.9+) enqueues the
154 // `wp-commands` store package, the `wp-core-commands` script that
155 // registers the WordPress-wide baseline (Add new post, Manage
156 // plugins, Switch theme, Browse patterns, …) AND — critically —
157 // the inline `wp.coreCommands.initializeCommandPalette( … )` call
158 // that actually populates the `core/commands` data store with the
159 // admin-menu commands. Without that inline init, the script loads
160 // but the store stays empty and `src/commands/shell-harvester.ts`
161 // finds nothing to publish.
162 //
163 // WP normally only calls this on screens that opt in to the native
164 // palette; the shell needs it on every admin URL it might wrap.
165 // `function_exists` guard for pre-6.9 sites — the harvester gracefully
166 // no-ops when the store is missing.
167 // See `openstation_defer_core_command_palette()` below for why
168 // Core's own boot-time enqueue is unhooked on shell pages.
169 //
170 // The Core command-palette runtime is NOT enqueued here any more.
171 // Its dependency chain is the whole Gutenberg runtime (~800 KB
172 // gzipped across forty-odd bundles), paid on every boot for a ⌘K
173 // palette most sessions never open. It now ships as an ordered
174 // manifest in the config blob (`commandPalette`, built by
175 // `openstation_build_command_palette_assets_payload()`), and
176 // `src/commands/palette-assets.ts` replays it the first time the
177 // palette is invoked. The shell harvester keeps its idle-time
178 // `install()` — a graceful no-op until the store exists — and
179 // re-installs on `os-command-palette-ready`.
180 $command_palette = openstation_build_command_palette_assets_payload();
181
182 if ( function_exists( 'wp_enqueue_command_palette_assets' ) ) {
183 // Expose the same menu-commands array WP serializes into
184 // `wp.coreCommands.initializeCommandPalette(...)` on a window
185 // slot the shell harvester can read. Built in PHP from `$menu`
186 // / `$submenu`, then injected as a `before` inline on our own
187 // bundle — that runs synchronously before `desktop.min.js`
188 // boots the shell harvester, so the lookup is guaranteed
189 // populated by the time `src/commands/shell-harvester.ts`
190 // classifies any command. Decoupled from WP's command-palette
191 // mount timing (which fires from a core-registered hook we
192 // can't reorder) — and, since the palette bundles went lazy,
193 // from whether they have loaded at all.
194 $menu_map = openstation_build_command_menu_map();
195 wp_add_inline_script(
196 'openstation',
197 'window.__openStationMenuCommands = ' . wp_json_encode( $menu_map ) . ';',
198 'before'
199 );
200 }
201
202 // Pass configuration to JavaScript.
203 global $title, $pagenow, $parent_file, $menu;
204
205 $menu_icon = 'dashicons-admin-generic';
206 if ( ! empty( $parent_file ) && ! empty( $menu ) ) {
207 foreach ( $menu as $item ) {
208 if ( ! empty( $item[2] ) && $item[2] === $parent_file && ! empty( $item[6] ) ) {
209 $menu_icon = $item[6];
210 break;
211 }
212 }
213 }
214
215 // Build dock items from the admin menu. Core pages are ordered
216 // first (Dashboard, Posts, Plugins, Users, Settings, …), then
217 // plugin-contributed top-level routes. `openstation_dock_placement`
218 // is the per-item filter escape hatch for hiding. Shared with the
219 // REST menu endpoint so live refreshes (post plugin-activation)
220 // produce the same ordering as the boot payload.
221 $menu_payload = openstation_build_menu_payload();
222 $dock_items = $menu_payload['dockItems'];
223 $native_windows = isset( $menu_payload['nativeWindows'] )
224 ? $menu_payload['nativeWindows']
225 : array();
226
227 // The BOOT page prints every registry window's template as a real
228 // `<template>` tag (`openstation_render_native_window_templates()`,
229 // admin_footer @ 20 — before footer scripts, so the tags are in
230 // the DOM before the shell boots and `ensureTemplate()` adopts
231 // them by id). The payload's `templateHtml` copy exists for the
232 // MID-SESSION path — a bridge or probe payload delivering a
233 // window whose plugin activated after the page rendered — so on
234 // the boot config it is ~27 KB of the same markup twice. Strip it
235 // here, and only here: the bridge and probe payloads keep theirs.
236 foreach ( $native_windows as &$native_window_row ) {
237 if ( is_array( $native_window_row ) ) {
238 $native_window_row['templateHtml'] = '';
239 }
240 }
241 unset( $native_window_row );
242 $native_window_script_data = isset( $menu_payload['nativeWindowScriptData'] )
243 ? $menu_payload['nativeWindowScriptData']
244 : array();
245 $server_widgets = isset( $menu_payload['serverWidgets'] )
246 ? $menu_payload['serverWidgets']
247 : array();
248 $server_wallpapers = isset( $menu_payload['serverWallpapers'] )
249 ? $menu_payload['serverWallpapers']
250 : array();
251 $server_command_scripts = isset( $menu_payload['serverCommandScripts'] )
252 ? $menu_payload['serverCommandScripts']
253 : array();
254 $server_commands = isset( $menu_payload['serverCommands'] )
255 ? $menu_payload['serverCommands']
256 : array();
257 $server_settings_tab_scripts = isset( $menu_payload['serverSettingsTabScripts'] )
258 ? $menu_payload['serverSettingsTabScripts']
259 : array();
260 $server_settings_tabs = isset( $menu_payload['serverSettingsTabs'] )
261 ? $menu_payload['serverSettingsTabs']
262 : array();
263 $server_dock_rail_renderer_scripts = isset( $menu_payload['serverDockRailRendererScripts'] )
264 ? $menu_payload['serverDockRailRendererScripts']
265 : array();
266 $server_titlebar_button_scripts = isset( $menu_payload['serverTitleBarButtonScripts'] )
267 ? $menu_payload['serverTitleBarButtonScripts']
268 : array();
269 $server_window_action_scripts = isset( $menu_payload['serverWindowActionScripts'] )
270 ? $menu_payload['serverWindowActionScripts']
271 : array();
272 $server_window_theme_scripts = isset( $menu_payload['serverWindowThemeScripts'] )
273 ? $menu_payload['serverWindowThemeScripts']
274 : array();
275 $server_window_themes = isset( $menu_payload['serverWindowThemes'] )
276 ? $menu_payload['serverWindowThemes']
277 : array();
278 $server_window_control_scripts = isset( $menu_payload['serverWindowControlScripts'] )
279 ? $menu_payload['serverWindowControlScripts']
280 : array();
281 $server_window_controls = isset( $menu_payload['serverWindowControls'] )
282 ? $menu_payload['serverWindowControls']
283 : array();
284 $server_window_slot_scripts = isset( $menu_payload['serverWindowSlotScripts'] )
285 ? $menu_payload['serverWindowSlotScripts']
286 : array();
287 $server_window_slots = isset( $menu_payload['serverWindowSlots'] )
288 ? $menu_payload['serverWindowSlots']
289 : array();
290 $server_window_chrome_scripts = isset( $menu_payload['serverWindowChromeScripts'] )
291 ? $menu_payload['serverWindowChromeScripts']
292 : array();
293 $server_window_chromes = isset( $menu_payload['serverWindowChromes'] )
294 ? $menu_payload['serverWindowChromes']
295 : array();
296 $server_window_notices = isset( $menu_payload['serverWindowNotices'] )
297 ? $menu_payload['serverWindowNotices']
298 : array();
299 $server_games = isset( $menu_payload['serverGames'] )
300 ? $menu_payload['serverGames']
301 : array();
302 // Boot-time copy of the desktop-theme library. Without it the
303 // shell's registry seeds EMPTY, and the consequences are subtle
304 // rather than obvious: PHP has already applied the user's theme
305 // server-side (stylesheet + shell attribute), but the client
306 // can't resolve the slug to an entry, so it believes nothing is
307 // active. Themed ICONS never paint, and switching back to the
308 // system default no-ops the first time — `applyDesktopTheme()`
309 // dedupes on an `activeId` that was never set.
310 $server_desktop_themes = isset( $menu_payload['serverDesktopThemes'] )
311 ? $menu_payload['serverDesktopThemes']
312 : array();
313
314 // Slim the theme library for BOOT: `cssText` and `tokens` are
315 // each ~20 KB per theme, and neither is read at boot — the ACTIVE
316 // theme's stylesheet is server-delivered (see
317 // `openstation_enqueue_desktop_theme_style()`, whose stamp
318 // `bootAlreadyApplied()` detects), and an inactive theme's CSS
319 // only matters at the moment the user picks it in the Preferences
320 // picker — which fetches the full entries from
321 // `GET desktop-mode/v1/desktop-themes` (`ensureFullDesktopThemes()`
322 // client-side). `cssDeferred` marks the gap so the shell can tell
323 // a slimmed entry from a theme that genuinely ships no CSS.
324 // Bridge and probe payloads keep full entries.
325 foreach ( $server_desktop_themes as &$desktop_theme_row ) {
326 if ( is_array( $desktop_theme_row ) ) {
327 $desktop_theme_row['cssText'] = '';
328 $desktop_theme_row['tokens'] = new stdClass();
329 $desktop_theme_row['cssDeferred'] = true;
330 }
331 }
332 unset( $desktop_theme_row );
333 $desktop_icons = isset( $menu_payload['desktopIcons'] )
334 ? $menu_payload['desktopIcons']
335 : array();
336
337 // Files-on-the-Desktop payload (Phase 0+1). Plugin-registered
338 // file types and openers ship as metadata only; the JS side
339 // holds the executable handlers and resolves on double-click.
340 $server_file_types = function_exists( 'openstation_build_file_types_payload' )
341 ? openstation_build_file_types_payload()
342 : array();
343 $server_file_openers = function_exists( 'openstation_build_file_openers_payload' )
344 ? openstation_build_file_openers_payload()
345 : array();
346 $user_file_associations = function_exists( 'openstation_get_user_file_associations' )
347 ? openstation_get_user_file_associations( get_current_user_id() )
348 : array();
349 $server_wallpaper_menu_items = function_exists( 'openstation_build_wallpaper_menu_items' )
350 ? openstation_build_wallpaper_menu_items()
351 : array();
352
353 /*
354 * OS-file drop config — what the browser drop manager will
355 * accept when the user drags a file from their native desktop
356 * onto any surface inside OpenStation (wallpaper, a folder,
357 * a window, or a chromeless iframe). The allowed-mimes list is
358 * the user-scoped `get_allowed_mime_types()` (already capability
359 * gated by WordPress); the size cap is `wp_max_upload_size()`.
360 *
361 * Both are filterable so plugins can narrow or widen the set —
362 * e.g. a media-only plugin can restrict drops to images, or a
363 * docs plugin can opt PDFs in for a specific role.
364 */
365 $drop_allowed_mimes_map = current_user_can( 'upload_files' )
366 ? get_allowed_mime_types( get_current_user_id() )
367 : array();
368 /**
369 * Filter the allowed-mime map used by the OS-file drop manager.
370 *
371 * @param array<string,string> $mimes_map `ext => mime-type` map (same shape `get_allowed_mime_types()` returns).
372 * @param int $user_id The current user id.
373 */
374 $drop_allowed_mimes_map = apply_filters( 'openstation_drop_allowed_mimes', $drop_allowed_mimes_map, get_current_user_id() );
375 $drop_allowed_mimes_map = is_array( $drop_allowed_mimes_map ) ? $drop_allowed_mimes_map : array();
376 $drop_allowed_mimes = array_values( array_unique( array_values( $drop_allowed_mimes_map ) ) );
377
378 $drop_max_size = (int) wp_max_upload_size();
379 /**
380 * Filter the per-file size cap (in bytes) used by the OS-file
381 * drop manager. Returning `0` disables the client-side cap —
382 * the server still enforces its own.
383 *
384 * @param int $max_size Default `wp_max_upload_size()`.
385 * @param int $user_id The current user id.
386 */
387 $drop_max_size = (int) apply_filters( 'openstation_drop_max_size', $drop_max_size, get_current_user_id() );
388
389 /**
390 * Filter the master OS-file drop enable gate. Lets plugins
391 * disable the drop manager by role / capability beyond the
392 * default `upload_files` check (e.g. only for admins, or
393 * only on specific multisite blogs).
394 *
395 * @param bool $enabled Default — `current_user_can( 'upload_files' )`.
396 * @param int $user_id The current user id.
397 */
398 $drop_enabled = (bool) apply_filters(
399 'openstation_drop_enabled',
400 current_user_can( 'upload_files' ),
401 get_current_user_id()
402 );
403
404 $drop_config = array(
405 'enabled' => $drop_enabled,
406 'allowedMimes' => $drop_allowed_mimes,
407 'extToMime' => $drop_allowed_mimes_map,
408 'maxSize' => $drop_max_size,
409 );
410
411 // Lazy-bundle URL builder. Each lazy-loaded bundle (AI Assistant,
412 // OS Settings panel, shell-overlays, window-system)
413 // is `<script>`-injected by the main bundle on demand — they don't
414 // go through `wp_register_script`, so they don't pick up WordPress's
415 // usual `?ver=<filemtime>` cache-buster. Without one, the browser
416 // happily serves a stale cached copy across plugin updates that
417 // don't bump `OPENSTATION_VERSION`, and the main bundle's loader
418 // fires a `<script>`-loaded event for a file that's missing the
419 // fresh `window.openStation*` factory the new code expects.
420 //
421 // Mirror the `$built_version( … )` helper in `includes/assets.php`:
422 // prefer the on-disk mtime of the actual file, fall back to the
423 // plugin version when the file is missing (dev environments where
424 // the bundle hasn't been built yet).
425 $suffix = openstation_asset_suffix();
426 $lazy_bundle_url = static function ( $base ) use ( $suffix ) {
427 $path = OPENSTATION_DIR . 'assets/js/' . $base . $suffix . '.js';
428 $ver = file_exists( $path )
429 ? (string) filemtime( $path )
430 : OPENSTATION_VERSION;
431 return esc_url_raw(
432 OPENSTATION_URL . 'assets/js/' . $base . $suffix . '.js?ver=' . $ver
433 );
434 };
435
436 // Build the current page URL from $pagenow + $_GET. Strip the portal
437 // markers so the derived window ID matches what the dock would produce
438 // for the same page — otherwise auto-opening the entry window and
439 // clicking the same dock icon would create a duplicate.
440 $current_query = $_GET; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
441 unset( $current_query[ OPENSTATION_PORTAL_FLAG ], $current_query[ OPENSTATION_PORTAL_INTENT_FLAG ] );
442 $current_page = admin_url( $pagenow ) . ( ! empty( $current_query ) ? '?' . http_build_query( $current_query ) : '' );
443
444 $from_portal = ! empty( $_GET[ OPENSTATION_PORTAL_FLAG ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
445 $from_portal_intent = ! empty( $_GET[ OPENSTATION_PORTAL_INTENT_FLAG ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
446
447 /**
448 * Filters the desktop shell configuration passed to JavaScript.
449 *
450 * @param array $config {
451 * Desktop shell configuration.
452 *
453 * @type string $currentPage The current admin page URL.
454 * @type string $currentTitle The current page title.
455 * @type string $currentIcon Dashicon class for the current page.
456 * @type string $adminUrl The base admin URL.
457 * @type string $colorScheme The active admin color scheme.
458 * @type array $dockItems Dock items derived from the admin menu. Core WordPress pages (Dashboard, Posts, Plugins, Users, Settings, CPTs…) are ordered first; plugin-contributed top-level routes (admin.php?page=*) follow. Items hidden via `openstation_dock_placement` are omitted.
459 * @type array $nativeWindows Server-declared native windows (via `openstation_register_window`). Shell registers + syncs tiles based on this list — activation/deactivation is a diff without shell reload.
460 * @type array $serverWidgets Server-declared right-column widgets (via `openstation_register_widget`). Shell syncs the widget registry + dynamically loads plugin scripts so widgets appear in the picker without a shell reload.
461 * @type array $serverWallpapers Server-declared wallpapers (via `openstation_register_wallpaper`). Same lifecycle — shell loads the plugin's JS, reads the full `WallpaperDef` from `window.openStationWallpapers[id]`, and registers / unregisters as plugins activate / deactivate.
462 * @type array $serverCommandScripts Script handles opted-in via `openstation_register_command_script`. Shell injects each URL on activation so commands registered by `wp.os.registerCommand` appear in the palette live. Deactivation unregisters any commands whose `owner` matches the departing handle.
463 * @type array $serverCommands Server-declared command metadata (via `openstation_register_command`). Advisory today — reserved for future pre-registration shims.
464 * @type array $serverSettingsTabScripts Script handles opted-in via `openstation_register_settings_tab_script`. Shell injects each URL on activation so tabs registered by `wp.os.registerSettingsTab` appear in the OS Settings window live. Deactivation unregisters tabs attributable to the departing handle.
465 * @type array $serverSettingsTabs Server-declared settings-tab metadata (via `openstation_register_settings_tab`). Enables live unregistration on plugin deactivation without requiring JS to set `owner`.
466 * @type array $desktopIcons Server-declared desktop icons (via `openstation_register_icon`). Rendered on the wallpaper as clickable shortcut tiles.
467 * @type array $accentColors Swatch list for the OS Settings accent picker. Filterable via `openstation_accent_colors`.
468 * @type array $toastTypes Toast-notification type map. Filterable via `openstation_toast_types`.
469 * @type string $defaultWallpaper Wallpaper slug applied on first boot. Filterable via `openstation_default_wallpaper`.
470 * @type array $session Saved session (windows, focused, updated).
471 * @type string $sessionUrl REST endpoint for saving the session.
472 * @type string $mediaUrl REST endpoint for media uploads (wp/v2/media).
473 * @type string $restUrl REST API root from rest_url(), safe for pretty and plain permalink installs.
474 * @type string $defaultWindowUrl REST endpoint for saving the default-window preference.
475 * @type array $defaultWindow { enabled: bool, url: string } — current default-window preference.
476 * @type bool $canUpload Whether the user holds the `upload_files` capability.
477 * @type string $pluginUrl Plugin base URL (no trailing slash). Used by the shell to locate vendor assets and by plugins to build asset URLs.
478 * @type string $pluginVersion Plugin semver string. Surfaced in the OS Settings → About tab; plugins can read it to gate features by version.
479 * @type string $aboutFeedUrl Authenticated admin-AJAX URL that returns the cached OpenStation journal feed for the About tab.
480 * @type string $restNonce Nonce for the session REST endpoint.
481 * @type string $soloWindow Window id when the shell was asked to paint exactly one window (`?openstation_solo=<id>`); '' otherwise. No dock, taskbar, wallpaper or desk, and no session restore.
482 * @type string $portalUrl Canonical `/openstation/` URL.
483 * @type bool $fromPortal Whether the shell was reached via the portal.
484 * @type bool $fromPortalIntent Whether the portal redirect resolved from an explicit `?target=…` (user navigation intent) rather than the session's focused window or the default-window fallback. Distinguishes a bare `/openstation/` visit from a portal-redirected admin-bar click so the shell can honour the URL the user actually asked for.
485 * @type array $seenIntros Slugs of one-time announcements the user has dismissed (e.g. `['openstation-rebrand']`).
486 * @type string $seenIntrosUrl REST endpoint for the seen-intros surface — POST `/seen` to mark, DELETE the base to reset.
487 * @type bool $rebrandNotice Whether to offer this user the one-off announcement explaining the rename from Desktop Mode to OpenStation. True only when migration 5 flagged this user as a Desktop Mode user from before the rename AND they haven't dismissed the `openstation-rebrand` intro. Only ever present in the shell config, so the announcement never reaches the classic admin.
488 * }
489 */
490 $config = apply_filters(
491 'openstation_shell_config',
492 array(
493 'currentPage' => esc_url( $current_page ),
494 'currentTitle' => wp_strip_all_tags( $title ),
495 'currentIcon' => sanitize_html_class( $menu_icon ),
496 'adminUrl' => esc_url( admin_url() ),
497 'homeUrl' => esc_url( home_url( '/' ) ),
498 // Decoded: the shell assigns this to `window.location`,
499 // where `&amp;` would make `_wpnonce` arrive as
500 // `amp;_wpnonce` and fail the nonce check.
501 'logoutUrl' => esc_url_raw(
502 html_entity_decode( wp_logout_url(), ENT_QUOTES, 'UTF-8' )
503 ),
504 'colorScheme' => sanitize_html_class( get_user_option( 'admin_color' ), 'fresh' ),
505 'dockItems' => $dock_items,
506 // Baseline menu fingerprint. The shell seeds its last-known
507 // signature from this so the first off-allowlist menu change
508 // (vs. this boot state) is caught without a wasted probe. GH#325.
509 'menuSig' => isset( $menu_payload['menuSig'] ) ? (string) $menu_payload['menuSig'] : '',
510 'nativeWindows' => $native_windows,
511 // Handle-keyed script data the entries above reference —
512 // one copy per bundle, not one per window. See
513 // `openstation_collect_native_windows_payload()`.
514 'nativeWindowScriptData' => $native_window_script_data,
515 'serverWidgets' => $server_widgets,
516 'serverWallpapers' => $server_wallpapers,
517 'serverCommandScripts' => $server_command_scripts,
518 'serverCommands' => $server_commands,
519 'serverSettingsTabScripts' => $server_settings_tab_scripts,
520 'serverSettingsTabs' => $server_settings_tabs,
521 'serverDockRailRendererScripts' => $server_dock_rail_renderer_scripts,
522 'serverTitleBarButtonScripts' => $server_titlebar_button_scripts,
523 'serverWindowActionScripts' => $server_window_action_scripts,
524 'serverWindowThemeScripts' => $server_window_theme_scripts,
525 'serverWindowThemes' => $server_window_themes,
526 'serverWindowControlScripts' => $server_window_control_scripts,
527 'serverWindowControls' => $server_window_controls,
528 'serverWindowSlotScripts' => $server_window_slot_scripts,
529 'serverWindowSlots' => $server_window_slots,
530 'serverWindowChromeScripts' => $server_window_chrome_scripts,
531 'serverWindowChromes' => $server_window_chromes,
532 'serverWindowNotices' => $server_window_notices,
533 // Boot-time copy of the payload's `serverGames` — the same
534 // list the live-refresh path applies. Without it the games
535 // registry only fills after the first chromeless
536 // full-payload refresh and the Games hub boots empty.
537 'serverGames' => $server_games,
538 'serverDesktopThemes' => $server_desktop_themes,
539 'desktopIcons' => $desktop_icons,
540 'serverFileTypes' => $server_file_types,
541 'serverFileOpeners' => $server_file_openers,
542 'userFileAssociations' => $user_file_associations,
543 'filesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/files' ) ),
544 // Pinned-notes REST base (`includes/notes/rest.php`). The
545 // notes layer boots only when this is present.
546 'notesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/notes' ) ),
547 // Gates the "Convert to post" note affordance — the convert
548 // route (and its dock drop target) only make sense for users
549 // who can author posts.
550 'canCreatePosts' => current_user_can( 'edit_posts' ),
551 'serverWallpaperMenuItems' => $server_wallpaper_menu_items,
552 'accentColors' => openstation_get_accent_colors(),
553 'toastTypes' => openstation_get_toast_types(),
554 'coreUpdate' => openstation_get_core_update(),
555 'coreNotices' => openstation_get_core_notices(),
556 'pluginNotices' => openstation_get_plugin_notices(),
557 'defaultWallpaper' => openstation_get_default_wallpaper(),
558 'session' => openstation_get_session( get_current_user_id() ),
559 'sessionUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/session' ) ),
560 'restUrl' => esc_url_raw( rest_url() ),
561 'mediaUrl' => esc_url_raw( rest_url( 'wp/v2/media' ) ),
562 'dropConfig' => $drop_config,
563 'defaultWindowUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/default-window' ) ),
564 'defaultWindow' => openstation_get_default_window( get_current_user_id() ),
565 'canUpload' => current_user_can( 'upload_files' ),
566 'pluginUrl' => esc_url_raw( untrailingslashit( OPENSTATION_URL ) ),
567 'pluginVersion' => OPENSTATION_VERSION,
568 'aboutFeedUrl' => esc_url_raw(
569 add_query_arg(
570 array(
571 'action' => 'openstation_about_feed',
572 'nonce' => wp_create_nonce( 'openstation_about_feed' ),
573 ),
574 admin_url( 'admin-ajax.php' )
575 )
576 ),
577 'iframeBridgeUrl' => $lazy_bundle_url( 'iframe-bridge' ),
578 // URL of the AI Assistant lazy bundle. The main bundle
579 // ships a stub matching the public `wp.os.ai` API; the
580 // stub `<script>`-injects this URL the first time the user
581 // opens the assistant. Picking `.js` vs `.min.js` here keeps
582 // the SCRIPT_DEBUG gate server-side, matching iframeBridgeUrl.
583 'aiAssistantBundleUrl' => $lazy_bundle_url( 'ai-assistant' ),
584 // URL of the OS Settings panel lazy bundle. Injected by
585 // the main bundle's `OsSettings.renderPanel()` stub on
586 // the user's first Settings open. Holds every section
587 // renderer + the `<os-*>` components only the panel
588 // uses, so nothing about Settings ships in
589 // `desktop.min.js` for users who never open it.
590 'osSettingsPanelBundleUrl' => $lazy_bundle_url( 'os-settings-panel' ),
591 // URL of the shell-overlays lazy bundle. Pre-loaded by
592 // the main bundle after first paint so action-triggered
593 // overlays (toast, confirm dialog, context menus) feel
594 // instant the first time they fire.
595 'shellOverlaysBundleUrl' => $lazy_bundle_url( 'shell-overlays' ),
596 // The shell-bundle diet: features whose right moment is a
597 // user gesture (or a presence signal) ride their own
598 // bundles instead of the boot-critical `desktop[.min].js`.
599 // Each sentinel in the shell loads its bundle at that
600 // moment — see the entry file each bundle names.
601 'fileDropBundleUrl' => $lazy_bundle_url( 'file-drop' ),
602 'filesOverlaysBundleUrl' => $lazy_bundle_url( 'files-overlays' ),
603 'notesBundleUrl' => $lazy_bundle_url( 'notes' ),
604 'dockConstellationBundleUrl' => $lazy_bundle_url( 'dock-constellation' ),
605 'windowLinkVisualsBundleUrl' => $lazy_bundle_url( 'window-link-visuals' ),
606 // Presence hint for the notes sentinel: a desktop with no
607 // notes skips the notes bundle AND the boot-time list
608 // request. Two id-only existence probes at most.
609 'hasNotes' => function_exists( 'openstation_notes_user_has_any' )
610 ? openstation_notes_user_has_any()
611 : false,
612 // URL of the full `<os-*>` component kit. The shell
613 // never loads this — its own bundles import the
614 // components they render. It exists for
615 // `wp.os.loadComponents()`, i.e. for plugin code that
616 // CANNOT import: a plugin shipped as a zip has no path
617 // to this repo at build time, so before this URL its
618 // only routes to a `<os-switch>` were to bundle a second
619 // copy or hand-roll one. Shipping the URL costs one
620 // string and keeps the SCRIPT_DEBUG choice server-side.
621 'componentsBundleUrl' => $lazy_bundle_url( 'os-components' ),
622 // Mio — the desk companion. `mio` carries the
623 // appearance + physics (see `openstation_mio_config()`);
624 // `mioBundleUrl` is the lazy PixiJS bundle the shell
625 // controller injects the first time a user switches the
626 // Mio on from its dock tile. Shipping the URL
627 // unconditionally costs one short string and keeps the
628 // SCRIPT_DEBUG choice server-side, matching every other
629 // lazy bundle here.
630 //
631 // Both keys ship whether or not the user has Mio on,
632 // and that is the whole of its cost to a shell that doesn't:
633 // ~470 bytes gzipped of config, plus a URL. No script, no
634 // style, no PixiJS. The config has to be here rather than
635 // fetched on first toggle, or the `openstation_mio_config`
636 // filter would silently not apply until the next reload.
637 'mio' => openstation_mio_config(),
638 'mioBundleUrl' => $lazy_bundle_url( 'mio' ),
639 // URL of the lazy window-system bundle (Stage 11).
640 // Holds the `Window` class and its DOM / pointer / tab /
641 // chrome helpers — the single largest module split out of
642 // the main bundle. Loaded on first `windowManager.open()`
643 // / `openNew()` call (both async); pre-loaded
644 // by the shell after first paint when no session is being
645 // restored and no `openCurrentPage` will fire.
646 'windowSystemBundleUrl' => $lazy_bundle_url( 'window-system' ),
647 // URL of the item-visibility-menu lazy bundle — the
648 // right-click "hide from dock / desktop" menu. Injected by
649 // the main bundle's loader shim on the first right-click.
650 'itemVisibilityMenuBundleUrl' => $lazy_bundle_url( 'item-visibility-menu' ),
651 // URL of the release-card lazy bundle — the vinyl core-
652 // update announcement. Injected by `maybeShowUpdate()` only
653 // when a core update is actually pending.
654 'releaseCardBundleUrl' => $lazy_bundle_url( 'release-card' ),
655 'restNonce' => wp_create_nonce( 'wp_rest' ),
656 // Non-empty when the shell was asked to paint exactly one
657 // window and nothing else. See `OPENSTATION_SOLO_FLAG`.
658 'soloWindow' => openstation_solo_window_id(),
659 'osSettings' => openstation_get_os_settings( get_current_user_id() ),
660 'osSettingsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/os-settings' ) ),
661 'seenIntros' => openstation_get_seen_intros( get_current_user_id() ),
662 'seenIntrosUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/intros' ) ),
663 // True only for a user migration 5 flagged as a Desktop Mode
664 // user from before the rename, who hasn't dismissed the
665 // announcement yet. Same value that gated `os-announce`
666 // above; the dialog cannot paint without that stylesheet, so
667 // the two must not diverge.
668 'rebrandNotice' => $show_rebrand_notice,
669 'aiSearchUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/search' ) ),
670 // AI assistant availability + per-user toggle. Drives whether the
671 // Cmd+K palette and admin-bar icon appear, and the setup placeholder.
672 'aiAssistant' => function_exists( 'openstation_ai_assistant_config' )
673 ? openstation_ai_assistant_config()
674 : null,
675 // Lets the Features tab re-check provider availability without a
676 // reload after a connector is configured in Settings → Connectors.
677 'aiStatusUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/status' ) ),
678 'extendedOptions' => current_user_can( 'manage_options' ) ? openstation_get_extended_options() : null,
679 'extendedOptionsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/extended-options' ) ),
680 // Site-wide games kill switch (Extended options). Exposed to
681 // every user — the shell skips the challenges Heartbeat
682 // channel when the framework is off.
683 'gamesEnabled' => openstation_games_enabled(),
684 // Comments-window AI moderation toggle — surfaced at the
685 // shell level so the OS Settings → Features tab can render
686 // the toggle without depending on the Comments window
687 // being registered for this user. URL is the same
688 // endpoint the comments-window config exposes; state is
689 // `null` for non-admins (the UI hides the row entirely).
690 'commentsAiUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/comments/ai-settings' ) ),
691 // Non-null only for admins on a site where the Core AI stack is
692 // present. Comment scoring routes through the AI Client (WP 7.0+),
693 // so on older WordPress the whole row is hidden — same as the
694 // assistant toggle — rather than shown disabled pointing at a
695 // Settings → Connectors screen that doesn't exist there.
696 'commentsAi' => (
697 current_user_can( 'manage_options' )
698 && function_exists( 'openstation_ai_is_available' )
699 && openstation_ai_is_available()
700 )
701 ? array(
702 'enabled' => function_exists( 'openstation_comments_ai_is_enabled' )
703 ? openstation_comments_ai_is_enabled()
704 : false,
705 'providerConfigured' => function_exists( 'openstation_comments_ai_provider_configured' )
706 ? openstation_comments_ai_provider_configured()
707 : false,
708 )
709 : null,
710 'currentUserIsAdmin' => current_user_can( 'manage_options' ),
711 'portalUrl' => esc_url( openstation_portal_url() ),
712 'fromPortal' => $from_portal,
713 'fromPortalIntent' => $from_portal_intent,
714 'pwa' => array(
715 'manifestUrl' => esc_url_raw( openstation_pwa_manifest_url() ),
716 'swUrl' => esc_url_raw( openstation_pwa_sw_url() ),
717 // Extensionless retry target for hosts whose nginx 404s
718 // virtual .js paths before WordPress runs (WordPress.com).
719 'swFallbackUrl' => esc_url_raw( openstation_pwa_sw_fallback_url() ),
720 // The worker's per-user flags, computed HERE rather than
721 // baked into the served `sw.js`.
722 //
723 // A service worker is origin-wide but these are per-user
724 // preferences, so putting them in the script bytes made
725 // the body differ between an anonymous and a logged-in
726 // request — and any in-scope logged-out navigation then
727 // installed a "new" worker and tripped the shell's
728 // `controllerchange` reload. The bytes are identical for
729 // everyone now; the shell posts these to the worker at
730 // boot.
731 //
732 // Computed server-side, not read from the settings
733 // snapshot client-side, because
734 // `openstation_pwa_admin_asset_cache_enabled()` applies
735 // the `openstation_pwa_admin_asset_cache` filter — an
736 // operator's site-wide veto has to keep working.
737 'swConfig' => array(
738 'adminAssetCache' => (bool) openstation_pwa_admin_asset_cache_enabled(),
739 'windowPrewarm' => ! empty( openstation_get_os_settings( get_current_user_id() )['windowPrewarmEnabled'] ),
740 ),
741 'stateUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/pwa-state' ) ),
742 'state' => openstation_pwa_get_user_state( get_current_user_id() ),
743 // Mirrors the manifest's `name` field — used by the
744 // install pill so the button reads "Install <site>"
745 // rather than "Install <current page>" (which would
746 // be misleading: we install the whole site as an
747 // app, not the dashboard window the user happens to
748 // be viewing).
749 'appName' => get_bloginfo( 'name' ),
750 // Operators set the `openstation_pwa_force_replace_sw`
751 // filter to `true` when another root-scope service
752 // worker on the origin is blocking openstation
753 // installability (foreign-SW guard in
754 // `src/pwa/sw-register.ts`). Default `false` preserves
755 // the polite behaviour where we yield to existing PWAs.
756 'forceReplaceSw' => openstation_pwa_force_replace_sw(),
757 ),
758 // Ordered Core command-palette asset manifest, replayed on
759 // first palette invocation. `null` on pre-6.9 sites.
760 'commandPalette' => $command_palette,
761 // Stylesheets for shell surfaces that render on demand —
762 // the Preferences panel, the AI assistant, the bug-report
763 // window. None of them is a server-registered native
764 // window (they are built client-side by the shell
765 // bundle), so the `styles` companion mechanism can't
766 // carry their CSS; instead the shell injects each sheet
767 // the first time its surface opens, via
768 // `ensureDeferredStyle()` in `src/deferred-styles.ts`.
769 // Same resolved shape a native window's `styleUrl` /
770 // `styleInline` travels in.
771 // Which of the `deferredStyles` entries a game needs.
772 // `launchGame()` injects these before the window paints.
773 'gameStyleHandles' => function_exists( 'openstation_games_style_handles' )
774 ? openstation_games_style_handles()
775 : array(),
776 'deferredStyles' => openstation_build_deferred_styles(
777 array_merge(
778 array(
779 'os-settings',
780 'desktop-mode-ai-assistant',
781 'desktop-mode-bug-report',
782 // WP Explorer's sheet. It rides that window as a
783 // companion style, but the desktop FOLDER window
784 // paints its preview pane with the same
785 // `os-my-wordpress__*` classes and — being a
786 // native window opened straight from JS — carries
787 // no companion styles of its own. Without this,
788 // the pane rendered unstyled until WP Explorer
789 // had been opened once in the session.
790 'desktop-mode-my-wordpress',
791 ),
792 // The Games sheets. They also ride the hub window as
793 // companion styles, but a game is reachable without
794 // the hub — the challenge toast, solo mode, and
795 // `wp.os.games.launch()` all land in `launchGame()`
796 // with no hub window in the tab. Listing them here
797 // costs a URL each in the boot config and no CSS
798 // until `launchGame()` asks.
799 function_exists( 'openstation_games_style_handles' )
800 ? openstation_games_style_handles()
801 : array()
802 )
803 ),
804 )
805 );
806
807 wp_localize_script( 'openstation', 'openStationConfig', $config );
808
809 /**
810 * Fires when OpenStation assets are enqueued.
811 */
812 do_action( 'openstation_mode_init' );
813 }
814 add_action( 'admin_enqueue_scripts', 'openstation_enqueue_assets' );
815
816 /**
817 * Keep Core's boot-time command-palette enqueue off shell pages.
818 *
819 * WordPress 7.0 hooks `wp_enqueue_command_palette_assets()` on
820 * `admin_enqueue_scripts` by default, which puts the palette's whole
821 * dependency chain — the Gutenberg runtime, ~800 KB gzipped — on
822 * every admin page. On a SHELL page that is pure dead weight: the
823 * shell suppresses Core's palette unconditionally (the ⌘K keystroke
824 * and the admin-bar icon both route to the shell's own palette), so
825 * the runtime it powers can never be shown. Unhooking here lets the
826 * deferred manifest (`openstation_build_command_palette_assets_payload()`)
827 * capture the chain instead, and the shell loads it on the first
828 * palette invocation.
829 *
830 * Deliberately scoped: classic-mode requests keep Core's default,
831 * because a classic page is Core's own UI where Core's palette is the
832 * right one.
833 *
834 * Windows are handled separately by
835 * {@see openstation_chromeless_should_trim_command_palette()} in
836 * `includes/render/chromeless-trim.php` — same idea, but it has to
837 * drop the whole palette *family* rather than just unhook Core's
838 * callback, and it exempts block-editor screens. Unhooking alone is
839 * not enough there: a third-party palette extension that declares
840 * `wp-commands` keeps the entire chain queued as its dependency.
841 *
842 * Priority 0, ahead of Core's default 10, so the removal lands
843 * before the callback fires. On WP 6.9 (function exists, no default
844 * hook) the `remove_action()` is a harmless no-op.
845 */
846 function openstation_defer_core_command_palette() {
847 if ( ! openstation_is_enabled() || openstation_is_chromeless_request() || openstation_is_classic_request() ) {
848 return;
849 }
850 remove_action( 'admin_enqueue_scripts', 'wp_enqueue_command_palette_assets' );
851 }
852 add_action( 'admin_enqueue_scripts', 'openstation_defer_core_command_palette', 0 );
853
854 /**
855 * Emits `<link rel="preload">` hints for the shell's critical-path
856 * assets so the browser starts fetching them as soon as it parses
857 * the document `<head>`.
858 *
859 * Without this, the browser doesn't discover the main `desktop.min.js`
860 * bundle URL until it parses the footer `<script>` tag — typically
861 * ~1 RTT after the rest of the page has started loading. For a 464 KB
862 * bundle on a midrange phone that's a measurable FCP delay; on a
863 * slow connection it dominates first paint entirely.
864 *
865 * Hooked at `admin_print_styles @ 1` so the preload tags land in
866 * `<head>` BEFORE the regular `<link rel="stylesheet">` tags (which
867 * default to priority 10) and well before the footer `<script>`
868 * tag. The `wp_resource_hints` filter is frontend-only (`wp_head`-
869 * driven) and isn't invoked in admin context, so we emit our own
870 * tags.
871 *
872 * Four targets by default, split across two relationship types:
873 * - `desktop[.min].js` (preload) — the shell bundle (biggest win),
874 * consumed by the footer `<script>` on this very load.
875 * - `desktop.css` (preload) — shell base CSS, needed for first
876 * paint. Its registered handle is `filemtime`-stamped so the
877 * stylesheet URL matches this hint exactly (a `?ver=` mismatch makes
878 * the browser treat the preload as unused).
879 * - `window-system[.min].js` (prefetch) — lazy bundle `<script>`-
880 * injected by the main bundle on the first `open()`.
881 * - `shell-overlays[.min].js` (prefetch) — lazy bundle injected on the
882 * first toast / dialog / context-menu.
883 *
884 * The lazy bundles use `prefetch` rather than `preload`: they're loaded
885 * later (often beyond the ~3s window Chrome allows a `preload` before it
886 * warns "preloaded but not used in time"), so `prefetch` keeps the early
887 * low-priority cache fill without the must-use-now contract.
888 *
889 * Plugins can extend the hint list via the `openstation_preload_hints`
890 * filter — e.g. a settings tab whose bundle the user opens on every
891 * visit can opt its own URL into the preload phase.
892 *
893 * Same-origin resources only — no `crossorigin` attribute. CDN hosts
894 * that serve `wp-content/plugins/` from a different origin should
895 * supply absolute URLs through the filter; in that case the consumer
896 * is responsible for the `crossorigin` semantics.
897 */
898 function openstation_print_preload_hints() {
899 if (
900 ! is_admin()
901 || ! openstation_is_enabled()
902 || openstation_is_chromeless_request()
903 || openstation_is_classic_request()
904 ) {
905 return;
906 }
907
908 $suffix = openstation_asset_suffix();
909
910 $build_url = static function ( $relative ) {
911 $path = OPENSTATION_DIR . $relative;
912 $ver = file_exists( $path ) ? (string) filemtime( $path ) : OPENSTATION_VERSION;
913 return OPENSTATION_URL . $relative . '?ver=' . $ver;
914 };
915
916 $hints = array(
917 // Critical path — consumed on this very page load (the footer
918 // `<script>` and the shell stylesheet), so `preload` is correct.
919 array(
920 'href' => $build_url( 'assets/js/desktop' . $suffix . '.js' ),
921 'as' => 'script',
922 'rel' => 'preload',
923 ),
924 array(
925 'href' => $build_url( 'assets/css/desktop.css' ),
926 'as' => 'style',
927 'rel' => 'preload',
928 ),
929 // Lazy bundles — `<script>`-injected by the main bundle after
930 // first paint (window-system on the first `open()`, shell-overlays
931 // on the first toast / dialog / context-menu). They are frequently
932 // NOT requested within the ~3s window Chrome allows a `preload`,
933 // which produced "resource was preloaded but not used in time"
934 // warnings. `prefetch` is the right hint: same early, low-priority
935 // fetch into the cache, but no must-use-now contract — so the
936 // injected `<script src>` is served from cache with no warning.
937 array(
938 'href' => $build_url( 'assets/js/window-system' . $suffix . '.js' ),
939 'as' => 'script',
940 'rel' => 'prefetch',
941 ),
942 array(
943 'href' => $build_url( 'assets/js/shell-overlays' . $suffix . '.js' ),
944 'as' => 'script',
945 'rel' => 'prefetch',
946 ),
947 );
948
949 /**
950 * Filters the list of resource preload hints emitted in `<head>`.
951 *
952 * Each entry is a `{ 'href' => string, 'as' => string,
953 * 'rel' => 'preload'|'prefetch' }` array rendered as
954 * `<link rel="<rel>" as="<as>" href="<href>">`. `rel` is optional and
955 * defaults to `preload`; any value other than `prefetch` is coerced
956 * back to `preload`. Unrecognized entries are silently skipped — keep
957 * the contract permissive so a misconfigured plugin can't tank first
958 * paint.
959 *
960 * @param array $hints Default hints (main bundle + base CSS as
961 * `preload`; window-system + shell-overlays as
962 * `prefetch`).
963 */
964 $hints = apply_filters( 'openstation_preload_hints', $hints );
965
966 if ( ! is_array( $hints ) ) {
967 return;
968 }
969
970 foreach ( $hints as $hint ) {
971 if ( ! is_array( $hint ) ) {
972 continue;
973 }
974 $href = isset( $hint['href'] ) ? (string) $hint['href'] : '';
975 $as = isset( $hint['as'] ) ? (string) $hint['as'] : '';
976 if ( '' === $href || '' === $as ) {
977 continue;
978 }
979 // `preload` (critical, used on this load) vs `prefetch` (lazy,
980 // used on a later interaction). Anything else falls back to
981 // `preload` so a typo can't emit an invalid relationship.
982 $rel = isset( $hint['rel'] ) ? (string) $hint['rel'] : 'preload';
983 if ( 'prefetch' !== $rel ) {
984 $rel = 'preload';
985 }
986 printf(
987 '<link rel="%s" as="%s" href="%s" />' . "\n",
988 esc_attr( $rel ),
989 esc_attr( $as ),
990 esc_url( $href )
991 );
992 }
993 }
994 add_action( 'admin_print_styles', 'openstation_print_preload_hints', 1 );
995
996 /**
997 * Defers loading of non-critical openstation stylesheets so they
998 * don't block first paint.
999 *
1000 * Three stylesheets in the default enqueue list are only needed
1001 * after a user interaction — `dock-peek` (mouseover a dock tile),
1002 * `ai-assistant` (Cmd+K palette), `bug-report` (Report-a-bug
1003 * window). With the normal `<link rel="stylesheet">` tag they sit
1004 * on the critical path and the browser blocks first paint waiting
1005 * for them, even though nothing on screen needs them yet.
1006 *
1007 * The well-known mitigation is the `media="print" onload="…"`
1008 * pattern:
1009 *
1010 * <link rel="stylesheet" media="print"
1011 * onload="this.media='all'; this.onload=null" href="…">
1012 * <noscript><link rel="stylesheet" href="…"></noscript>
1013 *
1014 * `media="print"` makes the browser treat the sheet as
1015 * non-applicable to the current display, so it downloads with
1016 * low priority and doesn't block render. The `onload` handler
1017 * swaps `media` to the original value once the bytes arrive
1018 * (within ms of page load), making the styles take effect long
1019 * before the user clicks anything that needs them. The
1020 * `<noscript>` fallback restores critical-path behavior for JS-off
1021 * browsers, so accessibility isn't degraded.
1022 *
1023 * Filterable via `openstation_deferred_styles` so plugins can opt
1024 * their own non-critical stylesheets in (or pull a built-in out).
1025 * Chromeless iframes are skipped — their CSS pipeline is separate.
1026 *
1027 * @param string $html The original <link> tag HTML.
1028 * @param string $handle The stylesheet handle WP is printing.
1029 * @param string $href The full URL of the stylesheet.
1030 * @param string $media The media attribute value WP resolved.
1031 * @return string Possibly-rewritten tag.
1032 */
1033 function openstation_defer_non_critical_styles( $html, $handle, $href, $media ) {
1034 // Cheap gates first — `style_loader_tag` fires once per enqueued
1035 // stylesheet on EVERY admin page (frontend doesn't go through
1036 // this filter, but admin does, including pages where OpenStation
1037 // is disabled). The deferred handles only ship when OpenStation
1038 // is active, so the in_array check below would always miss on
1039 // classic-only admin pages — but the `apply_filters` call still
1040 // builds an array and walks subscribers per stylesheet. Short-
1041 // circuit on the cheap helper checks (`is_admin` / enabled /
1042 // chromeless) so non-openstation users pay nothing.
1043 if ( ! openstation_is_enabled() ) {
1044 return $html;
1045 }
1046 if ( openstation_is_chromeless_request() ) {
1047 return $html;
1048 }
1049
1050 /**
1051 * Filters the list of stylesheet handles that should be loaded
1052 * deferred via the media-print-onload pattern. Plugins can add
1053 * their own non-critical stylesheets here, or pull a built-in
1054 * out (e.g. a plugin that surfaces the AI assistant on every
1055 * page might want to keep its CSS critical-path).
1056 *
1057 * @param string[] $handles Default deferred handles.
1058 */
1059 $deferred = apply_filters(
1060 'openstation_deferred_styles',
1061 array(
1062 'os-dock-peek',
1063 'os-openstation-layout',
1064 'desktop-mode-ai-assistant',
1065 'desktop-mode-bug-report',
1066 'os-window-overview',
1067 'os-settings',
1068 )
1069 );
1070
1071 if ( ! in_array( $handle, (array) $deferred, true ) ) {
1072 return $html;
1073 }
1074
1075 $resolved_media = $media ? $media : 'all';
1076 $id = $handle . '-css';
1077
1078 // Two contexts, two escapers for the same `$resolved_media` value:
1079 //
1080 // - `%3$s` lands inside a JS string literal inside the HTML
1081 // `onload="…"` attribute (`this.media='%3$s'`). `esc_attr`
1082 // escapes `"` and `&` but NOT single quotes, so a media
1083 // value containing `'` would break out of the JS string.
1084 // `esc_js` is the correct escaper for "string literal inside
1085 // an event-handler attribute" — escapes single quotes, double
1086 // quotes, backslashes, newlines. Today `$resolved_media`
1087 // comes from `wp_enqueue_style()`'s `$media` parameter (always
1088 // a CSS media type / query produced by WordPress core), so
1089 // this is pure defense-in-depth, but the cost is one extra
1090 // function call.
1091 //
1092 // - `%4$s` lands inside an HTML attribute in the `<noscript>`
1093 // fallback (`media='%4$s'`). That's standard `esc_attr`.
1094 //
1095 // phpcs:disable WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- This filter rewrites a tag WordPress is in the process of emitting for an already-registered+enqueued stylesheet handle; the linter doesn't trace the `style_loader_tag` filter context, so the raw <link rel="stylesheet"> output is a false-positive.
1096 $markup = sprintf(
1097 '<link rel=\'stylesheet\' id=\'%1$s\' href=\'%2$s\' media=\'print\' onload="this.media=\'%3$s\'; this.onload=null;" />' . "\n" .
1098 '<noscript><link rel=\'stylesheet\' id=\'%1$s-noscript\' href=\'%2$s\' media=\'%4$s\' /></noscript>' . "\n",
1099 esc_attr( $id ),
1100 esc_url( $href ),
1101 esc_js( $resolved_media ),
1102 esc_attr( $resolved_media )
1103 );
1104 // phpcs:enable WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet
1105
1106 return $markup;
1107 }
1108 add_filter( 'style_loader_tag', 'openstation_defer_non_critical_styles', 10, 4 );
1109
1110 /**
1111 * Build the admin-menu command map (name → URL) and expose it on
1112 * `window.__openStationMenuCommands`. The shell command harvester
1113 * (`src/commands/shell-harvester.ts`) reads this slot to resolve URLs
1114 * for "Go to: …" commands whose JS callbacks
1115 * (`document.location = menuCommand.url`) close over a variable URL
1116 * we can't extract from source. Without this map those commands
1117 * either get skipped (no URL recoverable) or — if the location
1118 * shadow misses — navigate the SHELL out of OpenStation.
1119 *
1120 * Mirrors what WordPress core's `wp_enqueue_command_palette_assets()`
1121 * builds for `wp.coreCommands.initializeCommandPalette(...)`. We
1122 * duplicate the logic here (instead of monkey-patching the JS init
1123 * which is timing-sensitive — WP registers its hook during core load,
1124 * so it always emits its inline before any plugin-added inline on the
1125 * same handle) and ship the result through `wp_add_inline_script` on
1126 * our own bundle handle. That decouples us entirely from WP's command-
1127 * palette mount timing.
1128 *
1129 * @global array $menu
1130 * @global array $submenu
1131 * @return array<int, array{label:string, url:string, name:string}>
1132 */
1133 function openstation_build_command_menu_map() {
1134 global $menu, $submenu, $_parent_pages;
1135 if ( ! is_array( $menu ) ) {
1136 return array();
1137 }
1138 $out = array();
1139
1140 $extract_root_text = static function ( $label ) {
1141 if ( '' === $label || ! is_string( $label ) ) {
1142 return '';
1143 }
1144 if ( class_exists( 'WP_HTML_Tag_Processor' ) ) {
1145 $processor = new WP_HTML_Tag_Processor( $label );
1146 $text = '';
1147 $depth = 0;
1148 while ( $processor->next_token() ) {
1149 $token_type = $processor->get_token_type();
1150 if ( '#text' === $token_type && 0 === $depth ) {
1151 $text .= $processor->get_modifiable_text();
1152 }
1153 if ( '#tag' === $token_type ) {
1154 if ( $processor->is_tag_closer() ) {
1155 if ( $depth > 0 ) {
1156 --$depth;
1157 }
1158 continue;
1159 }
1160 $name = $processor->get_tag();
1161 if ( $name && ! ( class_exists( 'WP_HTML_Processor' ) && WP_HTML_Processor::is_void( $name ) ) ) {
1162 ++$depth;
1163 }
1164 }
1165 }
1166 return trim( $text );
1167 }
1168 return trim( wp_strip_all_tags( $label ) );
1169 };
1170
1171 foreach ( $menu as $menu_item ) {
1172 if ( empty( $menu_item[0] ) || ! is_string( $menu_item[0] ) ) {
1173 continue;
1174 }
1175 if ( ! empty( $menu_item[1] ) && ! current_user_can( $menu_item[1] ) ) {
1176 continue;
1177 }
1178 $menu_label = $extract_root_text( $menu_item[0] );
1179 $menu_slug = $menu_item[2];
1180 $menu_url = '';
1181 // Registered plugin pages win over the direct-file test: a
1182 // legacy file-path slug ('wp-sweep/admin.php') matches the
1183 // `.php` regex yet must route through menu_page_url(). The
1184 // exception is URL-style slugs referencing a real admin file
1185 // (ACF's 'edit.php?post_type=acf-field-group' — also a
1186 // registered page) — those stay direct links, matching
1187 // classic admin's menu-header.php.
1188 if ( ( ! isset( $_parent_pages[ $menu_slug ] ) || openstation_is_admin_file_slug( $menu_slug ) ) && ( preg_match( '/\.php($|\?)/', $menu_slug ) || wp_http_validate_url( $menu_slug ) ) ) {
1189 $menu_url = $menu_slug;
1190 } elseif ( ! empty( menu_page_url( $menu_slug, false ) ) ) {
1191 $menu_url = menu_page_url( $menu_slug, false );
1192 }
1193 if ( '' !== $menu_url ) {
1194 $out[] = array(
1195 'label' => $menu_label,
1196 'url' => $menu_url,
1197 'name' => $menu_slug,
1198 );
1199 }
1200 if ( ! empty( $submenu ) && is_array( $submenu ) && array_key_exists( $menu_slug, $submenu ) ) {
1201 foreach ( $submenu[ $menu_slug ] as $submenu_item ) {
1202 if ( empty( $submenu_item[0] ) ) {
1203 continue;
1204 }
1205 if ( ! empty( $submenu_item[1] ) && ! current_user_can( $submenu_item[1] ) ) {
1206 continue;
1207 }
1208 $submenu_label = $extract_root_text( $submenu_item[0] );
1209 $submenu_slug = $submenu_item[2];
1210 $submenu_url = '';
1211 // Same registered-page vs admin-file rule as the
1212 // top-level loop.
1213 if ( ( ! isset( $_parent_pages[ $submenu_slug ] ) || openstation_is_admin_file_slug( $submenu_slug ) ) && ( preg_match( '/\.php($|\?)/', $submenu_slug ) || wp_http_validate_url( $submenu_slug ) ) ) {
1214 $submenu_url = $submenu_slug;
1215 } elseif ( ! empty( menu_page_url( $submenu_slug, false ) ) ) {
1216 $submenu_url = menu_page_url( $submenu_slug, false );
1217 }
1218 if ( '' === $submenu_url ) {
1219 continue;
1220 }
1221 $out[] = array(
1222 'label' => sprintf(
1223 /* translators: 1: parent menu label, 2: submenu label */
1224 __( '%1$s > %2$s', 'desktop-mode' ),
1225 $menu_label,
1226 $submenu_label
1227 ),
1228 'url' => $submenu_url,
1229 'name' => $menu_slug . '-' . $submenu_item[2],
1230 );
1231 }
1232 }
1233 }
1234 return $out;
1235 }
1236