| @@ -10,8 +10,14 @@ | ||
| 10 | 10 | defined( 'ABSPATH' ) || exit; |
| 11 | 11 | |
| 12 | 12 | class Plugin { |
| 13 | 13 | |
| 14 | + /** | |
| 15 | + * Data-schema version for one-time migrations, independent of the | |
| 16 | + * plugin version header. Bump when adding a step to maybe_upgrade(). | |
| 17 | + */ | |
| 18 | + public const DATA_VERSION = '1.3.6'; | |
| 19 | + | |
| 14 | 20 | private static $instance = null; |
| 15 | 21 | |
| 16 | 22 | /** @var Usage_Tracker|null */ |
| 17 | 23 | private $usage_tracker = null; |
| @@ -32,8 +38,15 @@ | ||
| 32 | 38 | new Cache(); |
| 33 | 39 | new Rest_Cache(); |
| 34 | 40 | new Onboarding(); |
| 35 | 41 | |
| 42 | + // Optional deactivation feedback survey on the Plugins screen. Admin | |
| 43 | + // context only (its hooks are admin_enqueue_scripts / admin_footer / | |
| 44 | + // wp_ajax). Sends nothing unless the user clicks "Submit & Deactivate". | |
| 45 | + if ( is_admin() ) { | |
| 46 | + new Deactivation_Feedback(); | |
| 47 | + } | |
| 48 | + | |
| 36 | 49 | // Opt-in usage analytics. Instantiating + init() only registers the |
| 37 | 50 | // cron callback; NOTHING is collected or sent until the admin opts in |
| 38 | 51 | // from the setup wizard (Onboarding wires the consent toggle to |
| 39 | 52 | // Usage_Tracker::opt_in()). See class-usage-tracker.php privacy contract. |
| @@ -46,18 +59,57 @@ | ||
| 46 | 59 | // this is a consistency check, not a new install path. First |
| 47 | 60 | // admin page load after a plugin upgrade restores the state; |
| 48 | 61 | // front-end then serves from cache on the next request. |
| 49 | 62 | add_action( 'admin_init', array( Cache::class, 'auto_heal' ) ); |
| 63 | + // Cheap: returns immediately unless the stored schema version is | |
| 64 | + // behind. Covers updates and multisite, where activate() never runs. | |
| 65 | + add_action( 'admin_init', array( Score_Store::class, 'maybe_install' ) ); | |
| 50 | 66 | |
| 67 | + // Secondary net: restore as soon as an update completes, for the | |
| 68 | + // cases where activate() does not re-run (bulk updates, auto-updates, | |
| 69 | + // some host updaters). Best-effort by nature — this callback is only | |
| 70 | + // registered when we were loaded in the request performing the | |
| 71 | + // update, which is not guaranteed while WE are the plugin being | |
| 72 | + // replaced. The restore in activate() is the primary guarantee; | |
| 73 | + // auto_heal() on admin_init remains the backstop. | |
| 74 | + add_action( 'upgrader_process_complete', array( $this, 'maybe_restore_after_update' ), 10, 2 ); | |
| 75 | + | |
| 51 | 76 | // Per-post cache rules (Phase 3.4) — registers postmeta with |
| 52 | 77 | // REST + meta box on edit screens. |
| 53 | 78 | Cache_Meta_Box::boot(); |
| 54 | 79 | |
| 80 | + // Single-URL purge entry points — row actions, the edit-screen | |
| 81 | + // button and the admin-post handler the admin-bar item also uses. | |
| 82 | + Purge_Ui::boot(); | |
| 83 | + | |
| 55 | 84 | // Phase 0 architecture — managers + Free modules. v1 services |
| 56 | 85 | // (Cache/Minifier/Gzip) are NOT yet Modules; they'll be refactored |
| 57 | 86 | // in a follow-up PR with parity tests. |
| 58 | 87 | Conflict_Registry::boot(); |
| 59 | 88 | |
| 89 | + // Read-only page-cache ownership evidence, behind the same | |
| 90 | + // activation/deactivation invalidation as the conflict matrix. | |
| 91 | + Page_Cache_Detector::boot(); | |
| 92 | + | |
| 93 | + // Integrations that clear OTHER plugins' caches of rendered output | |
| 94 | + // (Elementor's element cache + generated CSS). Registers a listener | |
| 95 | + // only; nothing runs until Cache::purge_render_caches() asks. | |
| 96 | + Render_Caches::boot(); | |
| 97 | + // Forwarding needs no boot(): Cache::dispatch_purge_event() calls | |
| 98 | + // Server_Caches::forward() directly so a throwing third-party listener | |
| 99 | + // cannot skip it. Both built-in server-cache adapters live behind it — | |
| 100 | + // LiteSpeed, and the nginx FastCGI cache reached through the host's | |
| 101 | + // Nginx Helper install (Host_Page_Caches), which is why neither is | |
| 102 | + // booted here. This boot() registers one listener only: the single | |
| 103 | + // purge that runs after an import, which the nginx adapter's import | |
| 104 | + // gate stands down in favour of. | |
| 105 | + Server_Caches::boot(); | |
| 106 | + | |
| 107 | + // Tell WP Statistics and Slimstat not to count the warmer, the | |
| 108 | + // benchmark and the verifier as visitors. Record-time filters only; | |
| 109 | + // see the class for why the tracking snippet itself is left alone. | |
| 110 | + Self_Traffic::boot(); | |
| 111 | + | |
| 60 | 112 | // Register Free modules via the same action xspeed-pro uses, so |
| 61 | 113 | // the bootstrap path is symmetric across tiers. |
| 62 | 114 | add_action( 'xspeed_register_modules', array( $this, 'register_free_modules' ) ); |
| 63 | 115 | |
| @@ -73,11 +125,99 @@ | ||
| 73 | 125 | // its register_pro_modules callback AFTER the action had |
| 74 | 126 | // already fired — Pro modules never appeared in the registry. |
| 75 | 127 | // Caught by the ProStatus sentinel module's integration test. |
| 76 | 128 | add_action( 'plugins_loaded', array( $this, 'fire_module_lifecycle' ), 20 ); |
| 129 | + | |
| 130 | + // One-time data migrations keyed on the stored version. Runs in | |
| 131 | + // admin only — nothing here needs to touch a front-end request. | |
| 132 | + if ( is_admin() ) { | |
| 133 | + add_action( 'plugins_loaded', array( $this, 'maybe_upgrade' ), 21 ); | |
| 134 | + } | |
| 77 | 135 | } |
| 78 | 136 | |
| 79 | 137 | /** |
| 138 | + * Add the 1.3.6 tracking params to a saved ignored-params list. | |
| 139 | + * | |
| 140 | + * Only those names, and only when missing: anything else the site | |
| 141 | + * removed stays removed. A site with no saved list already reads the new | |
| 142 | + * defaults. | |
| 143 | + */ | |
| 144 | + public static function add_new_ignored_params(): void { | |
| 145 | + $option = Settings_Manager::OPTION_PREFIX . 'cache'; | |
| 146 | + $stored = get_option( $option, array() ); | |
| 147 | + if ( ! is_array( $stored ) || ! is_array( $stored['ignored_query_params'] ?? null ) ) { | |
| 148 | + return; | |
| 149 | + } | |
| 150 | + $list = $stored['ignored_query_params']; | |
| 151 | + // An empty list is a choice: every query string bypasses the cache. | |
| 152 | + if ( empty( $list ) ) { | |
| 153 | + return; | |
| 154 | + } | |
| 155 | + $missing = array_values( array_diff( \XSpeed\Modules\Cache\CacheModule::TRACKING_PARAMS_1_3_6, $list ) ); | |
| 156 | + if ( empty( $missing ) ) { | |
| 157 | + return; | |
| 158 | + } | |
| 159 | + $stored['ignored_query_params'] = array_merge( $list, $missing ); | |
| 160 | + update_option( $option, $stored ); | |
| 161 | + // The drop-in keeps its own copy of the list next to the cache. | |
| 162 | + if ( defined( 'XSPEED_CACHE_DIR' ) ) { | |
| 163 | + Cache::sync_query_allowlist(); | |
| 164 | + } | |
| 165 | + } | |
| 166 | + | |
| 167 | + /** | |
| 168 | + * Run version-gated data migrations exactly once per upgrade. | |
| 169 | + * | |
| 170 | + * Keyed on `xspeed_data_version` rather than the plugin version header | |
| 171 | + * so a migration can be added without forcing a release bump. | |
| 172 | + */ | |
| 173 | + public function maybe_upgrade(): void { | |
| 174 | + $current = (string) get_option( 'xspeed_data_version', '0' ); | |
| 175 | + if ( version_compare( $current, self::DATA_VERSION, '>=' ) ) { | |
| 176 | + return; | |
| 177 | + } | |
| 178 | + | |
| 179 | + // Each step runs once, for the version that needs it. They used to | |
| 180 | + // run on every bump, which would purge every site's static tree again | |
| 181 | + // for a migration that has nothing to do with it. | |
| 182 | + | |
| 183 | + // 1.1.2 — strip credential values recorded by earlier versions' | |
| 184 | + // settings change annotations (they're served by the trend endpoints). | |
| 185 | + if ( version_compare( $current, '1.1.2', '<' ) ) { | |
| 186 | + Activity_Log::redact_legacy_secrets(); | |
| 187 | + } | |
| 188 | + | |
| 189 | + // 1.1.4 — earlier versions cached a failed loopback as "gzip is not | |
| 190 | + // active" for an hour, which showed up as a bogus server-config | |
| 191 | + // warning. Drop the stale answer so the fixed probe re-runs instead | |
| 192 | + // of the wrong verdict living on past the update (issue #18). | |
| 193 | + if ( version_compare( $current, '1.1.4', '<' ) ) { | |
| 194 | + delete_transient( 'xspeed_gzip_active' ); | |
| 195 | + } | |
| 196 | + | |
| 197 | + // 1.1.6 — a `/?s=<term>` request used to write its results page into | |
| 198 | + // the static tree under the *searched-from* path, which for the usual | |
| 199 | + // query-form search is `/`. The web server then served that results | |
| 200 | + // page as the homepage to every visitor. The write is fixed in | |
| 201 | + // Cache::store_static(), but an entry poisoned before the update | |
| 202 | + // outlives it: nothing purges on upgrade, and the static serve path | |
| 203 | + // never revalidates. Clear the tree once. The flat cache is keyed | |
| 204 | + // correctly and is deliberately left alone. (issue #191) | |
| 205 | + if ( version_compare( $current, '1.1.6', '<' ) ) { | |
| 206 | + Cache::purge_static_tree(); | |
| 207 | + } | |
| 208 | + | |
| 209 | + // 1.3.6 — new click and campaign IDs in the default ignored list. | |
| 210 | + // A site that ever saved the Cache panel has its own copy of the list, | |
| 211 | + // which the new defaults never reach, so add them to it. | |
| 212 | + if ( version_compare( $current, '1.3.6', '<' ) ) { | |
| 213 | + self::add_new_ignored_params(); | |
| 214 | + } | |
| 215 | + | |
| 216 | + update_option( 'xspeed_data_version', self::DATA_VERSION, false ); | |
| 217 | + } | |
| 218 | + | |
| 219 | + /** | |
| 80 | 220 | * Phase 2 of plugin init: fire the registration action (collecting |
| 81 | 221 | * Free + Pro + any third-party modules hooked into |
| 82 | 222 | * `xspeed_register_modules`) and boot the registry. |
| 83 | 223 | * |
| @@ -84,8 +224,63 @@ | ||
| 84 | 224 | * Runs at plugins_loaded(20) so every add-on that hooks at any |
| 85 | 225 | * priority < 20 has time to register first. |
| 86 | 226 | */ |
| 87 | 227 | public function fire_module_lifecycle(): void { |
| 228 | + $this->ensure_modules_registered(); | |
| 229 | + | |
| 230 | + Module_Registry::boot_all(); | |
| 231 | + } | |
| 232 | + | |
| 233 | + /** | |
| 234 | + * Fire `xspeed_register_modules` if this request has not yet, hooking | |
| 235 | + * Free's own registration first when init() never got the chance. | |
| 236 | + * | |
| 237 | + * The activation request is the case that matters. activate_plugin() | |
| 238 | + * includes the plugin file long after `plugins_loaded` has fired, so the | |
| 239 | + * `plugins_loaded` callback init() would have added never runs, and | |
| 240 | + * neither does the add_action() inside it that puts register_free_modules | |
| 241 | + * on the action. Firing the action from activate() then registered | |
| 242 | + * nothing: Settings::conflict_safe_profile() composed from an empty | |
| 243 | + * registry, and a site with WP Super Cache came up with lazy-load, | |
| 244 | + * resource hints, font swapping and preloading switched on — only the | |
| 245 | + * four settings the registry-independent fallback names were held down | |
| 246 | + * (PR #295 review). Module_Registry::activate_all() has been a no-op on | |
| 247 | + * the same request for the same reason. | |
| 248 | + * | |
| 249 | + * On the activation request that means Free only: an add-on cannot have | |
| 250 | + * hooked yet, because xspeed-pro bails when Free's classes are absent and | |
| 251 | + * only hooks the action (at priority 20, from plugins_loaded(15)) once | |
| 252 | + * Free is active. On an ordinary request fire_module_lifecycle() reaches | |
| 253 | + * this at plugins_loaded(20) with every add-on already hooked. Do not | |
| 254 | + * call this from anything that can run in between: the action fires | |
| 255 | + * once, and an add-on that has not hooked yet stays unregistered for the | |
| 256 | + * whole request. | |
| 257 | + * did_action() keeps the action to one firing per request, so an | |
| 258 | + * activation that ran first does not make plugins_loaded(20) register | |
| 259 | + * every module a second time. | |
| 260 | + */ | |
| 261 | + public function ensure_modules_registered(): void { | |
| 262 | + if ( did_action( 'xspeed_register_modules' ) ) { | |
| 263 | + return; | |
| 264 | + } | |
| 265 | + | |
| 266 | + /* | |
| 267 | + * register_free_modules() does an unconditional `new` on every module | |
| 268 | + * class. On an ordinary request xspeed.php's integrity check refuses | |
| 269 | + * to boot before that can fatal and explains itself in an admin | |
| 270 | + * notice; the activation hook is registered outside that check, so | |
| 271 | + * an install missing a module file (truncated zip, a security | |
| 272 | + * plugin's quarantine, a half-applied update) would fatal here with | |
| 273 | + * no notice and no active plugin. Same answer as boot: do nothing. | |
| 274 | + */ | |
| 275 | + if ( function_exists( 'xspeed_missing_core_classes' ) && ! empty( xspeed_missing_core_classes() ) ) { | |
| 276 | + return; | |
| 277 | + } | |
| 278 | + | |
| 279 | + if ( ! has_action( 'xspeed_register_modules', array( $this, 'register_free_modules' ) ) ) { | |
| 280 | + add_action( 'xspeed_register_modules', array( $this, 'register_free_modules' ) ); | |
| 281 | + } | |
| 282 | + | |
| 88 | 283 | /** |
| 89 | 284 | * Action: xspeed_register_modules |
| 90 | 285 | * |
| 91 | 286 | * Free modules register at priority 10; xspeed-pro at priority |
| @@ -92,10 +287,8 @@ | ||
| 92 | 287 | * 20; site code can hook in between to inject custom modules. |
| 93 | 288 | * Fires exactly once per request. |
| 94 | 289 | */ |
| 95 | 290 | do_action( 'xspeed_register_modules' ); |
| 96 | - | |
| 97 | - Module_Registry::boot_all(); | |
| 98 | 291 | } |
| 99 | 292 | |
| 100 | 293 | /** |
| 101 | 294 | * Register the Free Modules shipped in this plugin. Add new module |
| @@ -103,8 +296,17 @@ | ||
| 103 | 296 | */ |
| 104 | 297 | public function register_free_modules(): void { |
| 105 | 298 | Module_Registry::register( new \XSpeed\Modules\Cache\CacheModule() ); |
| 106 | 299 | Module_Registry::register( new \XSpeed\Modules\Health\HealthModule() ); |
| 300 | + // Settings — owns no settings itself; it's the CLI/MCP surface over | |
| 301 | + // Settings_Manager. Registering it is what makes `xspeed settings` | |
| 302 | + // exist, which is what keeps the curated get_settings/update_settings | |
| 303 | + // tools in the MCP catalog. (#149/#153) | |
| 304 | + Module_Registry::register( new \XSpeed\Modules\Settings\SettingsModule() ); | |
| 305 | + // External performance scores (PSI / GTmetrix) — Free, off by | |
| 306 | + // default. Rendered inside the Health host page's PageSpeed tab, so | |
| 307 | + // it has no sidebar row of its own. | |
| 308 | + Module_Registry::register( new \XSpeed\Modules\Score\ScoreModule() ); | |
| 107 | 309 | Module_Registry::register( new \XSpeed\Modules\Preloader\PreloaderModule() ); |
| 108 | 310 | Module_Registry::register( new \XSpeed\Modules\Heartbeat\HeartbeatModule() ); |
| 109 | 311 | Module_Registry::register( new \XSpeed\Modules\Minify\MinifyModule() ); |
| 110 | 312 | Module_Registry::register( new \XSpeed\Modules\Gzip\GzipModule() ); |
| @@ -114,10 +316,22 @@ | ||
| 114 | 316 | Module_Registry::register( new \XSpeed\Modules\Cdn\CdnModule() ); |
| 115 | 317 | Module_Registry::register( new \XSpeed\Modules\Cloudflare\CloudflareModule() ); |
| 116 | 318 | Module_Registry::register( new \XSpeed\Modules\ObjectCache\ObjectCacheModule() ); |
| 117 | 319 | Module_Registry::register( new \XSpeed\Modules\BrowserCache\BrowserCacheModule() ); |
| 320 | + // Advanced Cache — a Free container row that gathers the Pro | |
| 321 | + // cache-coverage features (404 / search / feed / REST / rules / | |
| 322 | + // maintenance) into one sidebar sub-item (FBS-83633). | |
| 323 | + Module_Registry::register( new \XSpeed\Modules\CacheCoverage\CacheCoverageModule() ); | |
| 118 | 324 | Module_Registry::register( new \XSpeed\Modules\Fonts\FontsModule() ); |
| 325 | + Module_Registry::register( new \XSpeed\Modules\TurboRender\TurboRenderModule() ); | |
| 119 | 326 | Module_Registry::register( new \XSpeed\Modules\ResourceHints\ResourceHintsModule() ); |
| 327 | + // AI Privacy (GDPR off-switch) ships in Free even though every AI | |
| 328 | + // *feature* is Pro — privacy is a right, not a paid tier. FEATURES.md | |
| 329 | + // §AI row 6 mandates it. Without this registration the module was dead | |
| 330 | + // code: no REST/settings surface, the promised off-switch unreachable | |
| 331 | + // (FBS-83633 Bug 1). It carries its own cli_commands() so it satisfies | |
| 332 | + // the CLI/MCP coverage guard once registered. | |
| 333 | + Module_Registry::register( new \XSpeed\Modules\AIPrivacy\AIPrivacyModule() ); | |
| 120 | 334 | // Migration moved Pro → Free: it's an acquisition/onboarding feature |
| 121 | 335 | // (detect a competing caching plugin, import its settings, switch over), |
| 122 | 336 | // so it must work without a Pro license. Agency-scale extras (profiles, |
| 123 | 337 | // bulk multisite, host presets) remain Pro. |
| @@ -126,8 +340,12 @@ | ||
| 126 | 340 | // snapshot is onboarding/diagnostics, not a paid value-add, so every |
| 127 | 341 | // user gets it. The snapshot degrades gracefully without Pro (Pro |
| 128 | 342 | // version/license fields fall back to defaults via defined()/get_option). |
| 129 | 343 | Module_Registry::register( new \XSpeed\Modules\Support\SupportModule() ); |
| 344 | + // The dashboard control for usage-analytics consent. Consent used to | |
| 345 | + // be collectable only in the wizard and withdrawable nowhere, while | |
| 346 | + // the wizard and readme both promised a dashboard switch. (#437) | |
| 347 | + Module_Registry::register( new \XSpeed\Modules\Privacy\PrivacyModule() ); | |
| 130 | 348 | // MCP remote control (AI assistants) — Free. The plugin serves the |
| 131 | 349 | // MCP protocol at the site's own /xspeed/mcp URL; the only gate is |
| 132 | 350 | // the per-site connection token an admin mints via Connect. No |
| 133 | 351 | // license, no hosted infra. See IMPLEMENTATION.md §17. |
| @@ -142,10 +360,11 @@ | ||
| 142 | 360 | public function start_plugin_tracking(): void { |
| 143 | 361 | $this->usage_tracker = Usage_Tracker::get_instance( |
| 144 | 362 | XSPEED_FILE, |
| 145 | 363 | array( |
| 146 | - 'opt_in' => true, | |
| 147 | - 'item_id' => defined( 'XSPEED_INSIGHTS_ITEM_ID' ) ? XSPEED_INSIGHTS_ITEM_ID : false, | |
| 364 | + 'opt_in' => true, | |
| 365 | + 'email_marketing' => true, | |
| 366 | + 'item_id' => defined( 'XSPEED_INSIGHTS_ITEM_ID' ) ? XSPEED_INSIGHTS_ITEM_ID : false, | |
| 148 | 367 | ) |
| 149 | 368 | ); |
| 150 | 369 | $this->usage_tracker->init(); |
| 151 | 370 | } |
| @@ -158,28 +377,163 @@ | ||
| 158 | 377 | return $this->usage_tracker; |
| 159 | 378 | } |
| 160 | 379 | |
| 161 | 380 | public static function activate() { |
| 162 | - Settings::set_defaults(); | |
| 381 | + // Nothing below can see a module the registry does not hold — the | |
| 382 | + // conflict-safe profile Settings::set_defaults() may pick is composed | |
| 383 | + // from it, and activate_all() walks it. See ensure_modules_registered() | |
| 384 | + // for why the registry is empty on this request without this call. | |
| 385 | + self::instance()->ensure_modules_registered(); | |
| 163 | 386 | |
| 387 | + $profile = Settings::set_defaults(); | |
| 388 | + | |
| 389 | + // Score history table. Also called on admin_init (see init()) because | |
| 390 | + // activation does not fire for a site added to a multisite network | |
| 391 | + // later, nor after an update that ships a new schema version. | |
| 392 | + Score_Store::maybe_install(); | |
| 393 | + | |
| 164 | 394 | if ( ! file_exists( XSPEED_CACHE_DIR ) ) { |
| 165 | 395 | wp_mkdir_p( XSPEED_CACHE_DIR ); |
| 166 | 396 | } |
| 167 | 397 | Cache::write_silence( XSPEED_CACHE_DIR ); |
| 168 | 398 | |
| 169 | - // Drop-in installation (advanced-cache.php) and the WP_CACHE constant | |
| 170 | - // edit happen only when the user explicitly enables caching from the | |
| 171 | - // admin UI — never on activation. See Cache::toggle() and | |
| 172 | - // Rest_Api::toggle_cache(). This is a WordPress.org review requirement. | |
| 399 | + /* | |
| 400 | + * One exception to "caching is only ever enabled from the admin UI": | |
| 401 | + * a fresh install another plugin performed on the user's behalf. | |
| 402 | + * | |
| 403 | + * That plugin asked the user for site performance and installed us to | |
| 404 | + * provide it; making them go and find a second switch afterwards is | |
| 405 | + * a step nobody wants. It is also what the copy-vendored Setup::finish() | |
| 406 | + * did, so hosts migrating off it keep the behaviour they have. | |
| 407 | + * | |
| 408 | + * PROFILE_HOST_PAGE_CACHE is the whole condition, and it means three | |
| 409 | + * things at once: the install was genuinely fresh, nothing else owns | |
| 410 | + * the page cache, and another plugin claimed the install. Every other | |
| 411 | + * fresh install — including a user's own on a clear site — waits for | |
| 412 | + * the wizard. Every OTHER feature is off in this profile; the cache is | |
| 413 | + * the one thing a host may assume, because it is what it installed us | |
| 414 | + * for. And toggle() runs its own ownership transaction, so a | |
| 415 | + * competitor appearing between the two checks loses the race rather | |
| 416 | + * than being overwritten. | |
| 417 | + */ | |
| 418 | + if ( Settings::PROFILE_HOST_PAGE_CACHE === $profile ) { | |
| 419 | + $state = Cache::toggle( true ); | |
| 420 | + if ( ! empty( $state['blocked'] ) ) { | |
| 421 | + /* | |
| 422 | + * Refused after all — a competitor that appeared between the | |
| 423 | + * profile decision and the write, or a drop-in we could not | |
| 424 | + * install. The settings are identical either way (everything | |
| 425 | + * off), so the honest record is the one that does not claim a | |
| 426 | + * cache: conflict-safe is what the site actually got. | |
| 427 | + */ | |
| 428 | + $profile = Settings::PROFILE_CONFLICT_SAFE; | |
| 429 | + update_option( 'xspeed_install_profile', $profile, false ); | |
| 430 | + } | |
| 431 | + } | |
| 173 | 432 | |
| 174 | - // First-run wizard: flag a one-time redirect for the activating user. | |
| 175 | - // Suppressed for bulk activations / already-completed sites in | |
| 176 | - // Onboarding::maybe_redirect(). | |
| 177 | - Onboarding::flag_redirect(); | |
| 433 | + /* | |
| 434 | + * Read the claim BEFORE spending it. consume_installed_by() records | |
| 435 | + * the installer only for a FRESH install — on a re-activation over | |
| 436 | + * settings that are already there it deletes the arming option and | |
| 437 | + * keeps nothing — so asking again afterwards answered "the user did | |
| 438 | + * it" about an install a host had just claimed, and the wizard opened | |
| 439 | + * over the host's own flow. The claim decides who to tell and whether | |
| 440 | + * to open the wizard; whether it is worth RECORDING is a separate | |
| 441 | + * question, and only the recording depends on the install being fresh. | |
| 442 | + */ | |
| 443 | + $installed_by = Settings::installed_by(); | |
| 178 | 444 | |
| 179 | - // Propagate activation to every registered Module. Activation | |
| 180 | - // happens after plugins_loaded → modules are already registered. | |
| 445 | + // Spend the arming option now the profile is settled. It changes what | |
| 446 | + // activation does, so it may not survive into the next one. | |
| 447 | + Settings::consume_installed_by( $profile ); | |
| 448 | + | |
| 449 | + // Caching is otherwise only ENABLED from the admin UI — see | |
| 450 | + // Cache::toggle() and Rest_Api::toggle_cache(). A fresh install | |
| 451 | + // therefore gets no drop-in and no wp-config.php edit here: | |
| 452 | + // cache_enabled is unset, so the call below is a no-op. | |
| 453 | + // | |
| 454 | + // It is NOT a no-op during an upgrade. WordPress runs an update as | |
| 455 | + // deactivate → wipe files → install → activate, which deletes | |
| 456 | + // advanced-cache.php while cache_enabled stays true. Restoring it | |
| 457 | + // here closes the window in which the site silently serves uncached | |
| 458 | + // (auto_heal() alone only fires on the next wp-admin page load). | |
| 459 | + Cache::restore_dropin_if_enabled(); | |
| 460 | + | |
| 461 | + /* | |
| 462 | + * First-run wizard: flag a one-time redirect for the activating user. | |
| 463 | + * Suppressed for bulk activations / already-completed sites in | |
| 464 | + * Onboarding::maybe_redirect() — and here for an install another plugin | |
| 465 | + * performed, which has an onboarding flow of its own. The install runs | |
| 466 | + * over AJAX, so our redirect would fire on that admin's NEXT page load | |
| 467 | + * and pull them out of the middle of the host's wizard; finishing ours | |
| 468 | + * would then overwrite the deliberately all-off profile they never | |
| 469 | + * asked to change. | |
| 470 | + */ | |
| 471 | + if ( '' === $installed_by ) { | |
| 472 | + Onboarding::flag_redirect(); | |
| 473 | + } | |
| 474 | + | |
| 475 | + // Propagate activation to every registered Module — registered by | |
| 476 | + // ensure_modules_registered() at the top, not by plugins_loaded, | |
| 477 | + // which fired before this file was even included. | |
| 181 | 478 | Module_Registry::activate_all(); |
| 479 | + | |
| 480 | + /** | |
| 481 | + * Fires at the end of activation, once the settings profile is decided. | |
| 482 | + * | |
| 483 | + * The other half of the host-plugin contract: a plugin that installed | |
| 484 | + * xSpeed for the user writes `xspeed_installed_by` before activating | |
| 485 | + * and listens here to find out how it came up. It carries no return | |
| 486 | + * value and nothing branches on it — a host that ignores it changes | |
| 487 | + * nothing about the install. | |
| 488 | + * | |
| 489 | + * @param string $installed_by Host slug, or '' when the user did it. | |
| 490 | + * @param string $profile Settings::PROFILE_* — which profile a fresh | |
| 491 | + * install came up with, '' if not fresh. | |
| 492 | + */ | |
| 493 | + do_action( 'xspeed_activated', $installed_by, $profile ); | |
| 494 | + } | |
| 495 | + | |
| 496 | + /** | |
| 497 | + * Restore the cache drop-in right after THIS plugin is updated. | |
| 498 | + * | |
| 499 | + * Bound to upgrader_process_complete. Bulk updates, auto-updates and | |
| 500 | + * host-level updaters finish without re-running activate(), so this is | |
| 501 | + * the only hook that repairs the drop-in before the next wp-admin page | |
| 502 | + * load. Narrow by design: bails unless the completed action was a | |
| 503 | + * plugin update whose payload actually includes xspeed. | |
| 504 | + * | |
| 505 | + * @param \WP_Upgrader $upgrader Upgrader instance (unused). | |
| 506 | + * @param array $hook_extra Contextual data about the update. | |
| 507 | + * @return void | |
| 508 | + */ | |
| 509 | + public function maybe_restore_after_update( $upgrader, $hook_extra ) { | |
| 510 | + unset( $upgrader ); | |
| 511 | + | |
| 512 | + if ( ! is_array( $hook_extra ) ) { | |
| 513 | + return; | |
| 514 | + } | |
| 515 | + if ( ! isset( $hook_extra['type'], $hook_extra['action'] ) ) { | |
| 516 | + return; | |
| 517 | + } | |
| 518 | + if ( 'plugin' !== $hook_extra['type'] || 'update' !== $hook_extra['action'] ) { | |
| 519 | + return; | |
| 520 | + } | |
| 521 | + | |
| 522 | + // Single update uses 'plugin'; bulk uses 'plugins'. | |
| 523 | + $updated = array(); | |
| 524 | + if ( isset( $hook_extra['plugins'] ) && is_array( $hook_extra['plugins'] ) ) { | |
| 525 | + $updated = $hook_extra['plugins']; | |
| 526 | + } elseif ( isset( $hook_extra['plugin'] ) && is_string( $hook_extra['plugin'] ) ) { | |
| 527 | + $updated = array( $hook_extra['plugin'] ); | |
| 528 | + } | |
| 529 | + | |
| 530 | + $ours = plugin_basename( XSPEED_FILE ); | |
| 531 | + if ( ! in_array( $ours, $updated, true ) ) { | |
| 532 | + return; | |
| 533 | + } | |
| 534 | + | |
| 535 | + Cache::restore_dropin_if_enabled(); | |
| 182 | 536 | } |
| 183 | 537 | |
| 184 | 538 | public static function deactivate() { |
| 185 | 539 | // Drop-in + WP_CACHE constant are NOT touched here. WordPress |
