John SmithandClaude d8b6c458c6 fix(migrate): confine archive paths to the backups dir (S2083 path-traversal taints) ...

push_packets()/finalize() now refuse any archive outside this site's backups
dir (Packager::archive_path()/create_archive() already enforce this; the guard
is defense-in-depth at the sink). The packager's directory walk keeps its
NOSONAR with the confinement rationale on the flagged line. Clears the three
phpsecurity:S2083 blockers that regressed the Sonar security rating to 5.

Co-Authored-By: Claude <[email protected]>

2026-09-03 12:37:59 -04:00

..

abilities

fix(migrate): address CodeRabbit review — replay protection, prefix guard, poll deadline

2026-09-03 12:32:13 -04:00

admin

fix(migrate): address CodeRabbit review — replay protection, prefix guard, poll deadline

2026-09-03 12:32:13 -04:00

ai-chat

feat(migrate): real backup/restore/sync engine + HMAC connector, AI Chat hygiene

2026-09-03 01:09:03 -04:00

blocks-catalog

fix(admin): implement Memory Store singleton and guidance methods, and add is_active to GenerateBlocks and Blocksy catalogs

2026-09-02 12:38:41 -04:00

cloud

feat(dashboard): remove video guides clutter and EMCP Cloud marketing banners

2026-09-02 22:16:55 -04:00

memory

fix(admin): implement Memory Store singleton and guidance methods, and add is_active to GenerateBlocks and Blocksy catalogs

2026-09-02 12:38:41 -04:00

migrate

fix(migrate): confine archive paths to the backups dir (S2083 path-traversal taints)

2026-09-03 12:37:59 -04:00

modules

fix(migrate): cut duplication — shared archive + verify helpers

2026-09-03 12:20:31 -04:00

oauth

release: prepare 3.14.2

2026-09-02 11:35:42 +05:00

performance

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

redirects

feat(redirects): template_redirect handler with query forwarding + skip guards

2026-08-11 04:51:46 +05:00

sandbox

fix(admin): implement Memory Store singleton and guidance methods, and add is_active to GenerateBlocks and Blocksy catalogs

2026-09-02 12:38:41 -04:00

schemas

feat(tools): leaner widget schemas + complete get-widget-schema; fix atomic #56 + global-classes #57

2026-06-05 23:41:17 +05:00

security

refactor(sandbox): consolidate artifact storage into wp-content/emcp-sandbox

2026-08-03 21:45:23 +05:00

sql

docs(sql): state the mode-dependent refusal rule instead of implying an absolute

2026-08-18 22:58:25 +05:00

themer

feat(branding): overhaul visual identity to Heretek Blood & Steel theme

2026-09-02 21:57:40 -04:00

validators

feat(tools): leaner widget schemas + complete get-widget-schema; fix atomic #56 + global-classes #57

2026-06-05 23:41:17 +05:00

vendors/fremius

fix(freemius): disarm update hijacking and rebrand to Heretek Control Core

2026-09-03 00:07:33 -04:00

widgets

feat(widgets): harvest 62 convenience tools into catalog data (Task 2)

2026-06-24 22:51:46 +05:00

wpcli

feat(wp-cli): run wp-cli commands over MCP, with background jobs

2026-07-15 01:01:37 +05:00

class-admin-bar.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-atomic-props.php

release: 3.13.2 - atomic rich-text children, and readable snippet warnings

2026-08-21 00:07:58 +05:00

class-atomic-styles.php

feat(atomic): add global variables and harden style writes

2026-08-30 00:25:35 +05:00

class-atomic-widget-map.php

feat(atomic): build-page builds atomic widgets via the shared convenience mapper

2026-07-23 22:51:07 +05:00

class-block-generator.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-block-loader.php

fix: implement register_hooks and block category in EMCP_Tools_Block_Loader

2026-09-02 12:33:35 -04:00

class-block-repair.php

feat(kadence): auto-repair AI-inserted static-save blocks in the editor (3.12.2)

2026-08-16 23:30:38 +05:00

class-block-store.php

fix(sandbox): complete EMCP_Tools_Block_Store API to stop the page=emcp-tools-widgets fatal

2026-09-02 14:34:34 -04:00

class-block-tree.php

fix(blocks): fail loudly instead of silently dropping a block on a bad position path

2026-08-16 23:30:38 +05:00

class-bootstrap.php

feat(atomic): add global variables and harden style writes

2026-08-30 00:25:35 +05:00

class-change-blobs.php

feat(ledger): universal change ledger + durable, version-guarded rollback

2026-08-09 23:19:43 +05:00

class-change-log.php

feat(redirects): ledger-reversible writes via redirect-row rollback type

2026-08-11 04:51:07 +05:00

class-change-recorder.php

feat(redirects): ledger-reversible writes via redirect-row rollback type

2026-08-11 04:51:07 +05:00

class-child-theme-builder.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-color-contrast.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-content-extractor.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-content-mirror.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-database-guard.php

security(3.13.0): rebuild the read-only SQL guard on a real tokenizer

2026-08-18 07:22:11 +05:00

class-element-factory.php

fix(elementor): coerce nested/array background shorthand to flat Elementor keys

2026-07-21 03:57:16 +05:00

class-elementor-data.php

fix(#111,#112): container-experiment guard + atomic dynamic-prop save fallback

2026-08-13 12:57:45 +05:00

class-filesystem-guard.php

fix(security): act on the repository security scan

2026-08-22 14:43:27 +05:00

class-free-brand-kits.php

chore: migrate Pro library + upgrade-notice endpoints to emcptools.com

2026-06-30 06:14:20 +05:00

class-github-updater.php

docs: overhaul README and update repo references to heretek-control-core

2026-09-03 00:25:52 -04:00

class-id-generator.php

Rename plugin slug/folder to emcp-tools (v2.0.0)

2026-06-03 17:02:55 +05:00

class-kit-backup-store.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-library-refresher.php

Release v2.1.0 — PHP Snippets sandbox, Global Classes reader, atomic/theme-template fixes

2026-06-05 04:14:24 +05:00

class-mcp-adapter-bootstrap.php

fix(adapter): serve the whole WP\MCP namespace from our bundled copy (#99)

2026-07-20 23:58:58 +05:00

class-mcp-host-guard.php

release: prepare 3.14.2

2026-09-02 11:35:42 +05:00

class-mcp-request-log.php

feat(mcp): request log + MCP Log admin tab (Issue 5)

2026-08-01 04:51:53 +05:00

class-migration.php

feat(admin): move Compact tool mode to Tools tab; retire Low-tools mode

2026-07-09 08:01:21 +05:00

class-nav-menu-shortcode.php

feat(nav-menu): menu-read/menu-write dispatchers + [emcp_menu] shortcode

2026-07-11 17:54:30 +00:00

class-notifications.php

feat(admin): header notifications center (Cloud-fed) + cloud/avatar button

2026-08-11 02:39:21 +05:00

class-package-guard.php

fix(security): harden v3.0.0 surface from security review

2026-06-27 00:16:28 +05:00

class-page-snapshot-pro.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-page-snapshot.php

fix(snapshot): read SEO meta from all postmeta plugins + add override seam

2026-08-09 23:35:01 +05:00

class-pexels-client.php

feat(security): encrypt stock-image API keys at rest + mask in UI

2026-07-04 03:51:14 +05:00

class-php-snippet-loader.php

fix(security): act on the repository security scan

2026-08-22 14:43:27 +05:00

class-php-snippet-store.php

feat(sandbox): page the Blocks, Widgets and PHP Snippets tables

2026-08-23 21:32:41 +05:00

class-php-snippet-validator.php

fix(security): act on the repository security scan

2026-08-22 14:43:27 +05:00

class-pixabay-client.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-plugin.php

perf: defer the MCP tool surface off the front-end boot path (3.12.2)

2026-08-16 23:30:38 +05:00

class-pro-loader.php

feat(migrate): paired targets, scoped sync, push/sync admin, url-search-replace tool

2026-09-03 11:57:20 -04:00

class-sandbox-template-compiler.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-schema-compat.php

feat(abilities): emcp_tools_before_write veto seam for write abilities

2026-08-10 01:53:41 +05:00

class-search-index.php

fix(search-index): guard on_save_post against infinite recursion (#119)

2026-08-20 00:56:53 +05:00

class-search-ranker.php

feat(search): rerank seam + index drafts and global-settings changes

2026-08-09 23:44:14 +05:00

class-secret.php

fix(security): prevent + self-heal double-encrypted API keys

2026-07-04 12:02:27 +05:00

class-seo-meta.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-site-context.php

release: prepare 3.14.2

2026-09-02 11:35:42 +05:00

class-skill-catalog.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-stock-image-providers.php

chore: baseline prior-session WIP before EMCP Themer

2026-07-06 02:02:31 +05:00

class-system-kit-writer.php

style(copy): remove em dashes from plugin copy, fix mcpb display name

2026-07-21 08:03:19 +05:00

class-uninstaller.php

feat: Cloud module + Connection-tab card + REST client + bootstrap/uninstall wiring

2026-07-29 16:24:14 +05:00

class-unsplash-client.php

fix(stock): sideload-image resolves Unsplash download URLs + actionable errors

2026-07-21 03:39:13 +05:00

class-url-guard.php

fix(security): act on the repository security scan

2026-08-22 14:43:27 +05:00

class-widget-generator.php

feat(unlocked): restore and unlock all Pro features, bypass Freemius licensing, add full integrations suite, custom blocks, agent runtime, and AI chat

2026-09-02 12:15:49 -04:00

class-widget-loader.php

Rename plugin slug/folder to emcp-tools (v2.0.0)

2026-06-03 17:02:55 +05:00

class-widget-store.php

feat(sandbox): page the Blocks, Widgets and PHP Snippets tables

2026-08-23 21:32:41 +05:00