NV oOS Docs Hub

[nvoos_docs section="base" theme="light" search="1" sidebar="1"]

wp nvoos-docs rebuild            # Chunked rebuild (default, runs across WP-Cron ticks)
wp nvoos-docs rebuild --sync     # Inline rebuild in a single request (legacy)
wp nvoos-docs sync               # Back-compat alias for --sync
wp nvoos-docs rebuild --resume   # Resume a stalled or failed rebuild
wp nvoos-docs rebuild --cancel   # Cancel an in-flight rebuild
wp nvoos-docs clear              # Clear all cached data
wp nvoos-docs status             # Show index statistics and rebuild phase<h3>Source Code</h3>

Changelog

0.5.1

• Changed: the uploads content folder moved from wp-content/uploads/docs/ to wp-content/uploads/nvoos-docs-hub/content/ — nested inside the plugin’s slug-named uploads directory, per the WordPress.org plugin guidelines. Existing content is migrated automatically on activation or first admin visit.
• Added: automatic one-time migration of the pre-0.5.1 wp-content/uploads/docs/ folder (best-effort, never overwrites existing files, symlinks are never followed).

0.5.0

• Added: local-first default — the plugin now publishes Markdown files dropped into wp-content/uploads/docs/ out of the box, with zero remote calls.
• Added: “Enable Remote Repositories” opt-in setting (off by default). Remote GitHub import now requires enabling the setting, configuring a repository, and triggering a rebuild. Existing installs that already use remote repositories keep them enabled automatically.
• Security: the local-source scanner now resolves symlinks before its containment check, so a symlinked subfolder cannot leak files from outside the docs folder.
• Changed: remote import is gated server-side (scanner and file-picker endpoint) whenever the setting is off.

0.4.8

• Changed: the readme Description now explains the documentation-import service up front — the servers contacted (api.github.com, raw.githubusercontent.com), that no account is required, that requests happen only on administrator-configured rebuilds, and that no plugin assets are loaded remotely.
• Changed: the remote-repository fetcher’s host allowlist and fetch code now reference the readme’s External Services disclosure.

0.4.7

• Fixed: removed the “Tested up to” line from the plugin headers — it is declared only in the readme.
• Fixed: the daily rebuild cron is now scheduled on init instead of plugins_loaded, which prevented “translation loading triggered too early” notices on WordPress 6.7+ when other plugins register translated cron schedules.
• Changed: rebuild cron events are cleared when the plugin is deactivated, and deactivating the plugin no longer enqueues a rebuild that could never run.
• Changed: the readme now discloses the bundled third-party libraries and their licenses and lists every automatic rebuild trigger in the External Services section.

0.4.6

• Added: bundled GPLv3 license file (LICENSE) at the plugin root.

0.4.5

• Security: a symlinked cache directory can no longer redirect deletion — the uninstall routine removes only the link and leaves the external target untouched, and the cache class replaces a symlinked cache directory with a real one before writing.
• Changed: the External Services section now explains the documentation-import service, the servers it contacts, and that no account is required for public repositories.

0.4.4

• Security: search results and the WordPress sitemap no longer expose context-source (.context/) content to non-admin users.
• Security: GitHub personal access tokens are no longer localized into the settings-page scripts (they were stripped only on export before).
• Security: staged rebuilds no longer read or write live page transients, page transients are invalidated when the cache is promoted or cleared, and recursive cache deletion is hardened against symlink traversal.
• Changed: the base-plugin notice is scoped to the Docs Hub settings page, and the redundant load_plugin_textdomain() call was removed.
• Changed: readme now documents the public source repository and the frontend build steps; the bundled docs-hub.js and docs-hub.css carry source banners.

0.4.3

• Added: WordPress.org listing screenshots and a Playwright capture script (bin/capture-nvoos-docs-hub-screenshots.js).
• Added: WordPress.org submission preparation — External Services section in the readme, a translation template (languages/nvoos-docs-hub.pot), and a WordPress.org Plugin Check gate in CI.
• Changed: settings-page scripts moved to a static asset (no inline blocks), text-domain consistency fix, dev files excluded from distribution ZIPs.
• Changed: readme tags trimmed to directory-standard tags.

0.4.2

• Fixed: clicking internal links on local pages left the SPA — links now resolve to #/slug hash routes with heading anchors preserved.
• Fixed: “On this page” TOC anchors now match rendered headings exactly (github-slugger parity verified across ~63,000 headings).
• Fixed: “Accept fix” suggestions now resolve targets relative to the source page and validate the resolved destination against plugin/content roots.
• Fixed: sync rebuilds (wp nvoos-docs sync, POST /rebuild?sync=1) now report an error when the atomic staging-cache swap fails.
• Fixed: skipped broken-link rows in the settings table now show the server-provided reason; remote-sourced rows explain they must be fixed upstream.

0.4.1

• Fixed: index went stale after in-place NV oOS plugin updates — cache now invalidates on the new wp_mcp_ai_plugin_updated action plus an admin_init version-mismatch guard.
• Fixed: broken-link detection on remote-only indexes no longer flags repo-relative links; fix suggestions are case-insensitive with clamped confidence.

0.4.0

• Fixed: “Unexpected token ‘<‘” errors when page-caching plugins serve HTML for REST requests — clients now send Accept: application/json and validate the response content type.
• Fixed: non-404 page-load failures no longer masquerade as “404 Page Not Found”; they show a diagnostic error block.

0.3.9

• Fixed: fatal error during WordPress sitemap provider registration (now hooked into wp_sitemaps_init).
• Added: fnmatch() polyfill for Windows PHP environments.

0.3.8

• Added: syntax highlighting via rehype-highlight with a scoped light/dark theme.
• Added: last-modified footer date and “Edit on GitHub” links.
• Added: indexed docs pages included in the WordPress sitemap.
• Added: admin repo-picker script extracted to a static, CSP-friendly asset.

0.3.7

• Added: accessibility improvements — ARIA region for the SPA, skip-link to main content, prefers-reduced-motion support, RTL layout mirroring.

0.3.6

• Fixed: fatal error on the settings page with malformed remote_repos rows.
• Added: hardened SSRF protection for remote GitHub fetches (IPv6-aware resolution, per-record validation).
• Added: force-refresh clears the per-file remote content cache.

0.3.2

• Fixed: PHPCS compliance pass (96 errors / 38 warnings resolved).

0.3.1

• Fixed: admin rebuild panel 404 (wrong REST namespace).
• Changed: remote-repositories settings section now explains the tree-picker workflow.

0.3.0

• Changed: fresh installs default to remote-first sources (remote only); local filesystem sources moved under “Advanced — local filesystem (legacy)”.
• Added: lookup-and-select tree picker for remote repositories with per-repo selection modes (all, prefix, selected).
• Added: admin REST endpoint GET /remote/tree.

0.2.0

• Chunked, async-by-default rebuild pipeline (scan → pages → links → search → finalize) driven by self-rescheduling WP-Cron ticks. Per-tick wall-clock + memory budgets prevent the historical “single 60 s+ PHP request crashes on a large repo” failure mode.
• Atomic staging-cache swap. A failed rebuild leaves the previous index intact instead of wiping the docs and leaving the SPA blank.
• Built-in vendor / dependency exclusion (vendor/, node_modules/, bower_components/, .git/, .github/, dist/, build/, coverage/, tests/fixtures/) applied during recursive scan to prune subdirectories before recursion. New nvoos_docs_hub_force_include_globs filter allow-lists specific vendored docs.
• Plugin-root README.md / CHANGELOG.md / CONTRIBUTING.md / SECURITY.md are now indexed unconditionally when the root source is enabled (no longer gated behind WP_DEBUG). .context/*.md remains gated behind context_enabled + manage_options.
• New source-priority (root > base > addons > context > remote) ensures the plugin-root README wins the canonical readme slug; addon READMEs receive suffixed slugs.
• New REST endpoints: GET /rebuild/status, POST /rebuild/cancel, POST /rebuild/resume. POST /rebuild returns HTTP 202 by default; pass ?sync=1 for the legacy inline behaviour.
• New WP-CLI command: wp nvoos-docs rebuild [--async|--sync|--resume|--cancel].
• Admin UI: live progress panel polls /rebuild/status with start / resume / cancel buttons.
• New filters: nvoos_docs_hub_force_include_globs, nvoos_docs_hub_pruned_dir_names, nvoos_docs_hub_source_priority, nvoos_docs_hub_rebuild_chunk_size, nvoos_docs_hub_rebuild_tick_budget, nvoos_docs_hub_max_files_total. New action: nvoos_docs_hub_rebuild_phase.
• New setting: “Include per-addon README/CHANGELOG” (default on).
• Performance: build_search_index() now reuses cached page payloads instead of re-reading every file.

0.1.0

• Initial release.