Title: Chimy's AI Coding Lab Author: chimy Published: August 29, 2026 Last modified: August 29, 2026 --- Search plugins ![](https://ps.w.org/chimys-ai-coding-lab/assets/banner-772x250.png?rev=3671064) ![](https://ps.w.org/chimys-ai-coding-lab/assets/icon-128x128.png?rev=3671064) # Chimy's AI Coding Lab By [chimy](https://profiles.wordpress.org/chimy/) [Download](https://downloads.wordpress.org/plugin/chimys-ai-coding-lab.1.7.13.zip) * [Details](https://wordpress.org/plugins/chimys-ai-coding-lab/#description) * [Reviews](https://wordpress.org/plugins/chimys-ai-coding-lab/#reviews) * [Installation](https://wordpress.org/plugins/chimys-ai-coding-lab/#installation) * [Development](https://wordpress.org/plugins/chimys-ai-coding-lab/#developers) [Support](https://wordpress.org/support/plugin/chimys-ai-coding-lab/) ## Description Chimy’s AI Coding Lab is the showcase portal of the WP Maker plugin series: it presents the open-source plugins, themes, and apps developed by Chimy’s AI Coding Lab, with documentation links. It also serves as the platform core framework — modular management, SPA admin customization, REST API security, and app support. Advanced capabilities( image/media optimization, data synchronization, batch processing, etc.) are provided by dedicated standalone plugins in the wp-maker-* series. Working together with WP Maker Admin, it can fully replace the native WordPress admin with a modern SPA management interface. Some features have been split into standalone plugins (wp-maker-* series) that can be installed on demand. #### Core Capabilities * **Modular platform** — manifest.json-driven module discovery, registration, and enablement management; both built-in modules and external plugins can register * **SPA admin support** — platform-level REST API (`wpmaker/v1/admin/*`), JSON- driven settings pages and field groups * **Admin customization** — platform-level REST API covers SPA management; post editor (wpautop, featured images), general options (site icon), and media upload enhancements (SVG/JSON, WebP, renaming) are provided by the wp-maker-site plugin( site & optimization module) * **Application support** — private-site APIs, CORS support; WatermelonDB sync is provided by the standalone wp-maker-system plugin * **Case Portal** — a top-level admin menu (works without WP Maker Admin) that lists the catalog of plugins/themes/Apps developed by Chimy’s AI Coding Lab, with documentation links, helping admins discover more components of the ecosystem * **Case Guide** — a “recommended for this site” section in the Case Portal that suggests missing core companion plugins based on the current site state * **Security** — malicious request blocking, SQL injection protection, XSS protection, directory traversal protection, login rate limiting, XML-RPC disabling; one-click temporary shutdown from the SPA dashboard #### Modular Architecture All modules are described by manifest.json with metadata and SPA menu configuration, managed by ModuleManager: Each plugin ships its own `acf-json/` field groups registered via `acf/settings/ load_json`; configuration is managed via ACF Options Page + Local JSON. When ACF is not installed, the OptionsController fallback reads and writes configuration directly. External plugins can register via ModuleManager: ``` \WPMaker\Core\ModuleManager::registerModulePath( __DIR__ ); ``` #### REST API Namespaces * `wpmaker/v1/admin/*` — platform administration (options, modules, system, network, categories, comments, users, etc.) * `wpmaker/v1/sync/*` — WatermelonDB data sync (pull/push, provided by the standalone wp-maker-system plugin) * `wpmaker/v1/sites/*` — private-site APIs #### Dependencies * **Advanced Custom Fields PRO** — optional; enables visual settings pages when active * Batch queue — provided by the standalone wp-maker-system plugin (with Action Scheduler), not distributed with this plugin The core works without ACF; the SPA settings pages fall back to the OptionsController when ACF is not present. #### Technical Requirements * PHP 7.4 or higher * WordPress 6.0 or higher ### External services When an administrator first opens the Case Portal page, the plugin fetches the WP Maker component catalog, and the response is cached locally for 12 hours; an administrator can force a refresh anytime via the “Refresh catalog” button. The catalog is hosted on Gitee (https://gitee.com), an open-source code hosting service. Only the extension catalog data is downloaded; no personal data is sent. Gitee terms of service: https:// gitee.com/terms Gitee privacy policy: https://gitee.com/privacy ### Privacy This plugin does not collect user data, does not perform remote telemetry, and does not send any information to the author’s server. * **Feishu notifications** — when Feishu visitor notifications or FluentChat Feishu notifications are enabled, related event information is sent to a Feishu bot webhook **configured by the site administrator**; recipients and content are fully controlled by the site administrator * **Baidu Analytics** — when enabled, a Baidu Analytics script is injected in the frontend footer; data is processed by the Baidu Analytics platform. Please follow Baidu’s privacy policy * **CORS** — cross-origin response headers are configured to support app requests; no data is actively sent out * **Case Portal catalog** — when an administrator opens the Case Portal page, this plugin fetches a public extension catalog (plugin/theme/App list) from the official Gitee repository to display documentation links; no site data is uploaded All external interactions are enabled explicitly by the site administrator; the plugin itself has no phone-home behavior. ## Screenshots [⌊AI Provider — configure AI service connectors (WP Maker AI integration)⌉⌊AI Provider— configure AI service connectors (WP Maker AI integration)⌉[ AI Provider — configure AI service connectors (WP Maker AI integration) [⌊Post management — manage articles from the SPA admin⌉⌊Post management — manage articles from the SPA admin⌉[ Post management — manage articles from the SPA admin [⌊Login page — modern SPA login experience (WP Maker Auth)⌉⌊Login page — modern SPA login experience (WP Maker Auth)⌉[ Login page — modern SPA login experience (WP Maker Auth) [⌊Profile page — user profile in the SPA admin⌉⌊Profile page — user profile in the SPA admin⌉[ Profile page — user profile in the SPA admin [⌊Dashboard — the SPA admin overview for your site⌉⌊Dashboard — the SPA admin overview for your site⌉[ Dashboard — the SPA admin overview for your site ## Installation 1. Upload the `chimys-ai-coding-lab` folder to the `/wp-content/plugins/` directory 2. Activate “Chimy’s AI Coding Lab” in the WordPress Plugins menu 3. (Optional) Install and activate Advanced Custom Fields Pro to enable visual settings pages 4. Configure feature modules through the WPMaker Admin entry (with WP Maker Admin) ## FAQ ### Is ACF Pro required? No. The core features work without ACF; SPA settings pages fall back to the OptionsController. Activating ACF Pro enables visual settings pages and field-group management. ### Is Multisite supported? Yes. Network-level plugin management and network admin entries are provided. ### Can the security layer block legitimate requests? The security layer provides a one-click temporary shutdown switch on the WP Maker Admin SPA dashboard (requires `manage_options` capability) for debugging. If false positives occur frequently, you can temporarily disable it via user metadata. ### How do I disable XML-RPC? XML-RPC and pingback are disabled by default. To restore them, disable the related security options in the extension settings. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Chimy's AI Coding Lab” is open source software. The following people have contributed to this plugin. Contributors * [ chimy ](https://profiles.wordpress.org/chimy/) [Translate “Chimy's AI Coding Lab” into your language.](https://translate.wordpress.org/projects/wp-plugins/chimys-ai-coding-lab) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/chimys-ai-coding-lab/), check out the [SVN repository](https://plugins.svn.wordpress.org/chimys-ai-coding-lab/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/chimys-ai-coding-lab/) by [RSS](https://plugins.trac.wordpress.org/log/chimys-ai-coding-lab/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.7.13 * Case Portal catalog refreshed: icon and type mappings updated; discontinued entries( wp-maker-chat, wp-maker-network, wp-maker-wpopt-integration, wp-maker-baidu-tongji) pruned * Case Portal now features entries for the core platform (chimys-ai-coding-lab) and the resource host (wp-maker-resource) * ContentController and CaseGuide refinements * Release pipeline automation improvements across packaging and deployment scripts * Readme updated with accurate screenshots and external-service wording for the WordPress.org directory #### 1.7.5 * Manifest path resolved via plugin_dir_path() instead of a brittle relative dirname() traversal * User deletion now requires the target-specific delete_user capability * Remote address (REMOTE_ADDR) is sanitized before use in rate-limit transients and the 404 log #### 1.7.4 * Case Portal styles/scripts now loaded via the WordPress enqueue API (admin_enqueue_scripts + wp_add_inline_style/script) * User management hardening: role validation on creation, promote_user requirement for role assignment, and target-specific edit_user checks on user updates * All global classes prefixed with CHIMAICO_ and the no-ACF fallback option keys changed to chimaico_options_ (unique naming per WordPress.org guideline) #### 1.7.3 * Refactored the codebase: core logic consolidated under includes/ (REST controllers, Case Portal showcase, module manager) #### 1.7.2 * Removed all Composer dependencies; the plugin now has zero third-party runtime dependencies * Case Portal repositioned as a pure showcase: per-card download buttons removed, documentation links only * Admin copy refined to be user-facing (catalog status, update button, no download- oriented wording) #### 1.7.1 * Added the Case Portal: a top-level admin menu (no WP Maker Admin required) listing the catalog of plugins/themes/Apps developed by Chimy’s AI Coding Lab, with documentation links * Added on-demand guidance: a dismissible admin notice and a “Current site suggestions” block in the Case Portal that only list missing core companion plugins (Admin/ Auth/App/Sync/AI); the guidance disappears once they are enabled * Case Portal menu is not registered when wp-maker-admin is active, since the SPA Plugin Center provides the entry * Case Portal catalog is fetched from Gitee only on an explicit admin action (the“ Update catalog” button), never automatically * Removed the custom plugin updater; plugin updates are handled by the official WordPress.org channel #### 1.6.6 * Removed the native Plugin Center admin page; the entry now converges into the SPA (System Management Plugin Center) when wp-maker-admin is active * Update notifications only appear when wp-maker-admin is active and redirect to the SPA Plugin Center * Reorganized and documented the bundled nginx security rules #### 1.6.5 * Added PluginUpdater: Tools WP Maker Plugin Center with version comparison against the version manifest * New REST API endpoints: GET wpmaker/v1/admin/updates, POST wpmaker/v1/admin/updates/ apply * One-click updates: download zip verify (folder name + manifest.json) backup and replace, with automatic rollback on failure * Admin notification when plugin updates are available * Packaging pipeline: OUT_DIR environment variable support; zip top-level folder now matches the plugin folder name #### 1.6.4 * Dashboard overview enhancements: content trend statistics and uploads size in ContentController * Improved WP_DEBUG toggle error handling in SystemController * Other maintenance updates #### 1.6.3 * Deployment and packaging scripts streamlined to the core plugin list (basic, admin, auth, app, ai) #### 1.6.2 * Version bump to align the plugin header; no functional changes #### 1.6.1 * Security hardening: escaped security error output; replaced unlink()/date()/mt_rand() with WordPress-native functions * WP_Filesystem-based writability check for wp-config.php (Plugin Check compliance) * Input handling: wp_unslash() for server variables with justified suppressions for security-context checks * Removed manual load_plugin_textdomain() (WordPress.org loads translations automatically) * readme.txt fully translated to English * Plugin URI updated to https://aiwp.pro #### 1.6.0 * Streamlined admin customization: removed avatar, privacy menu, site health, and other features already replaced by the SPA * Image optimization (WebP conversion, rename modes, quality) now uses ACF configuration * Security switch moved from the Admin Bar to the SPA dashboard (REST API + Switch) * Settings pages support a no-ACF fallback: OptionsController parses acf-json and reads/writes the options table directly * Batch processing queue split into the standalone wp-maker-system plugin (with Action Scheduler) * WatermelonDB data sync split into the standalone wp-maker-system plugin #### 1.5.3 * Synced manifest.json and index.php version numbers * Improved the modular loading chain and delayed registration for external modules * Optimized ACF field-group auto-loading and configuration reading #### 1.5.2 * Enhanced REST API security (IP whitelist, anonymous comment control, route blocking) * Improved the image optimization batch queue * Added Feishu visitor notifications and FluentChat Feishu notifications #### 1.5.0 * Refactored into a modular platform core framework * Introduced ModuleManager and FeatureRegistry * Added WatermelonDB sync protocol support ## Meta * Version **1.7.13** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [admin](https://wordpress.org/plugins/tags/admin/)[modules](https://wordpress.org/plugins/tags/modules/) [multisite](https://wordpress.org/plugins/tags/multisite/)[security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/chimys-ai-coding-lab/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/chimys-ai-coding-lab/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/chimys-ai-coding-lab/reviews/) ## Contributors * [ chimy ](https://profiles.wordpress.org/chimy/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/chimys-ai-coding-lab/)