Adds opt-in read-only AI diagnostics and authenticated self-service comment tools, fixes module activation contracts, bounds search-statistics storage, and strengthens release security gates. Review the documented external-service and HTTPS requirements before enabling the new features.<\/p>","3.2.0":"
Requires WordPress 6.3 or later and adds editor-native patterns, a live site-statistics block, and a GitHub project block.<\/p>","3.1.1":"
Fixes configured compliance notices and makes restricted-content output more reliable.<\/p>","3.1.0":"
Public identity is now Npcink Site Toolbox. Existing settings keys are unchanged; no reset or data migration is required.<\/p>","3.0.1":"
This release aligns public WordPress.org metadata and documentation. It does not reset existing settings or change runtime option keys.<\/p>","3.0.0":"
\u8fd9\u662f Pre-GA clean-break \u57fa\u7ebf\uff0c\u4e0d\u63d0\u4f9b\u65e7\u540e\u53f0\u6216\u5df2\u6e05\u9000\u529f\u80fd\u7684\u517c\u5bb9\u5165\u53e3\u3002\u5347\u7ea7\u540e\u8bf7\u91cd\u65b0\u6838\u5bf9\u8bbe\u7f6e\uff0c\u5e76\u5728\u542f\u7528\u9ad8\u98ce\u9669\u7ef4\u62a4\u80fd\u529b\u524d\u5b8c\u6210\u9884\u89c8\u548c\u786e\u8ba4\u3002<\/p>","2.6.1":"
\u4fee\u590d\u641c\u7d22\u5065\u5eb7\u91c7\u96c6\u94fe\u8def\u3001REST \u6743\u9650\u6a21\u578b\u3001\u7248\u672c\u4e00\u81f4\u6027\u3002\u5efa\u8bae\u6240\u6709\u7528\u6237\u5347\u7ea7\u3002<\/p>","2.6.0":"
\u5efa\u8bae\u6240\u6709\u7528\u6237\u5347\u7ea7\u3002\u672c\u6b21\u66f4\u65b0\u4fee\u590d\u767e\u5ea6\u63a8\u9001\u548c\u641c\u7d22\u589e\u5f3a\u6a21\u5757\u8bed\u6cd5\u9519\u8bef\uff0c\u65b0\u589e\u9996\u6b21\u914d\u7f6e\u5411\u5bfc\u548c\u56fd\u5185\u73af\u5883\u9002\u914d\uff0c\u52a0\u5f3a\u9ad8\u98ce\u9669\u529f\u80fd\u6cbb\u7406\u3002<\/p>","2.5.0":"
\u5efa\u8bae\u6240\u6709\u7528\u6237\u5347\u7ea7\u3002\u672c\u6b21\u66f4\u65b0\u65b0\u589e\u7ad9\u70b9\u4f53\u68c0\u4e2d\u5fc3\u3001\u4fdd\u5b58\u524d\u53d8\u66f4\u786e\u8ba4\u3001\u6a21\u5757\u7ea7\u6062\u590d\u7b49\u529f\u80fd\uff0c\u5347\u7ea7\u540e\u5efa\u8bae\u8fdb\u5165 Dashboard \u67e5\u770b\u4f53\u68c0\u7ed3\u679c\u5e76\u91cd\u65b0\u4fdd\u5b58\u4e00\u6b21\u8bbe\u7f6e\u3002<\/p>","2.4.0":"
\u5efa\u8bae\u6240\u6709\u7528\u6237\u5347\u7ea7\u3002\u672c\u6b21\u66f4\u65b0\u5305\u542b\u5b89\u5168\u52a0\u56fa\u548c\u67b6\u6784\u4f18\u5316\uff0c\u5efa\u8bae\u5347\u7ea7\u540e\u91cd\u65b0\u4fdd\u5b58\u4e00\u6b21\u8bbe\u7f6e\u3002<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":{"npcink\/site-stats":{"$schema":"https:\/\/schemas.wp.org\/trunk\/block.json","apiVersion":3,"name":"npcink\/site-stats","version":"3.3.2","title":"\u7ad9\u70b9\u6570\u636e","category":"npcink-site-toolbox","icon":"chart-bar","description":"\u5c55\u793a\u6587\u7ae0\u3001\u8bc4\u8bba\u3001\u5206\u7c7b\u548c\u7528\u6237\u6570\u91cf\uff0c\u5e76\u59cb\u7ec8\u8bfb\u53d6\u5f53\u524d\u7ad9\u70b9\u6570\u636e\u3002","keywords":["\u7edf\u8ba1","\u6570\u636e","\u7ad9\u70b9"],"textdomain":"npcink-site-toolbox","attributes":{"title":{"type":"string","default":"\u7ad9\u70b9\u6570\u636e"},"showPosts":{"type":"boolean","default":true},"showComments":{"type":"boolean","default":true},"showCategories":{"type":"boolean","default":true},"showUsers":{"type":"boolean","default":true}},"supports":{"html":false,"align":["wide","full"],"anchor":true,"color":{"background":true,"text":true},"spacing":{"margin":true,"padding":true}},"editorScript":"file:.\/index.js","style":"file:.\/style.css"},"npcink\/github-project":{"$schema":"https:\/\/schemas.wp.org\/trunk\/block.json","apiVersion":3,"name":"npcink\/github-project","version":"3.3.2","title":"GitHub \u9879\u76ee","category":"npcink-site-toolbox","icon":"admin-links","description":"\u5c55\u793a\u516c\u5f00 GitHub \u4ed3\u5e93\u7684\u63cf\u8ff0\u3001\u4e3b\u8981\u8bed\u8a00\u3001Stars \u548c Forks\u3002","keywords":["GitHub","\u5f00\u6e90","\u9879\u76ee","\u4ed3\u5e93"],"textdomain":"npcink-site-toolbox","attributes":{"repositoryUrl":{"type":"string","default":""},"customDescription":{"type":"string","default":""}},"supports":{"html":false,"align":["wide","full"],"anchor":true,"color":{"background":true,"text":true},"spacing":{"margin":true,"padding":true}},"editorScript":"file:.\/index.js","style":"file:.\/style.css"}},"tagged_versions":["3.3.2"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Overview with live diagnostics, search health, and task-oriented navigation.","2":"Site and Media settings with clear labels and opt-in controls.","3":"Maintenance tools with preview-first safeguards for irreversible database cleanup."}},"plugin_section":[],"plugin_tags":[187,247,600,23575],"plugin_category":[52,54],"plugin_contributors":[265919],"plugin_business_model":[],"class_list":["post-350135","plugin","type-plugin","status-publish","hentry","plugin_tags-optimization","plugin_tags-performance","plugin_tags-security","plugin_tags-toolbox","plugin_category-performance","plugin_category-security-and-spam-protection","plugin_contributors-muze233","plugin_committers-muze233"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/npcink-site-toolbox.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"\n
Npcink Site Toolbox is a utility plugin for WordPress site owners. Version 3.3.2 provides 56 registered modules: 55 opt-in modules and one always-loaded runtime module, plus three editor patterns and two dynamic blocks. Features cover site and media settings, content and SEO, login and comment safeguards, China-focused integrations, diagnostics, and maintenance.<\/p>\n\n
All modules that contact a third party are disabled by default. An administrator must explicitly enable the related module or manually run a connectivity check. The plugin does not send telemetry to its developer.<\/p>\n\n
No external service is contacted merely by activating the plugin.<\/p>\n\n
Only after a content author inserts this block and supplies a public repository URL does the server call GitHub's \"Get a repository\" API on a cache miss. The endpoint is formed from the submitted public owner and repository names. The author may also save an optional custom project summary in the article; that summary is rendered locally and is not sent to GitHub. The request sends the public owner\/repository identifier, the site server's IP address, the plugin User-Agent, and normal HTTP headers to retrieve the repository description, primary language, Stars, Forks, and archive status. Successful responses are cached locally for up to 12 hours and failures for 30 minutes. No GitHub credentials, article content, custom summary, plugin settings, visitor IP address, or visitor browser request is sent. Service and endpoint documentation<\/a>, GitHub Terms of Service<\/a>, GitHub General Privacy Statement<\/a>.<\/p>\n\n When an administrator enables WeChat JSSDK and configures an AppID and AppSecret, the server sends those credentials to the WeChat token API and later sends the access token to the ticket API. On singular content, the visitor's browser loads the remote JSSDK and supplies the current URL, title, excerpt, and thumbnail URL for sharing. Service<\/a>, terms<\/a>, privacy<\/a>.<\/p>\n\n Before saving or enabling object storage, an administrator may explicitly run the connection test. It sends the selected provider the current saved or draft credentials, bucket, provider-specific endpoint or region, optional object-key prefix, signed authorization data, and a short text payload. The payload writes or overwrites When an administrator enables object storage and selects a provider, each new media upload sends the file bytes, prefixed object key, bucket, provider-specific endpoint or region, access-key identifier, and signed authorization data to that provider. Local media files are retained. The configured public URL prefix is used only to replace media URLs after every generated file uploads successfully. Saved credentials and target settings remain in the local WordPress database; unsaved draft credentials are used only for the administrator-triggered connection test. Providers: Alibaba Cloud OSS<\/a> (terms<\/a>, privacy<\/a>); Tencent Cloud COS<\/a> (terms<\/a>, privacy<\/a>); Qiniu Kodo<\/a> (terms<\/a>, privacy<\/a>).<\/p>\n\n When its module is enabled and a site ID is saved, front-end pages load Baidu Analytics. The visitor's browser may send the page URL, referrer, IP address, User-Agent, and data described by Baidu. Service<\/a>, terms<\/a>, privacy<\/a>.<\/p>\n\n This optional action requires WordPress 7.0 or newer and a separately installed and connected DeepSeek Provider. The AI tab offers troubleshooting, performance analysis, maintenance-result interpretation, pending-setting risk explanation, and before\/after verification. Only after an administrator reviews the relevant allowlisted snapshot or ordinary pending-setting paths and explicitly starts analysis does the server send data through the WordPress AI Client. An administrator may ask up to three follow-up questions under the same bounded allowlisted facts; each follow-up resends the original facts, initial answer, and completed follow-up turns. This temporary history exists only in the current browser page and is cleared by switching modes or refreshing. Performance data is a one-time snapshot rather than monitoring or load testing. Maintenance analysis may include aggregate database, SEO, media, search-health, and object-storage configuration facts; raw search terms are excluded. Setting analysis excludes every credential path and summarizes non-boolean strings by empty\/configured state and length rather than content. Verification baselines remain only in the current browser page. The diagnostic allowlist excludes site URLs, file paths, database identities, users, content, comments, request logs, and credentials. DeepSeek receives the server IP, normal HTTP headers, the prompt, and the API credential managed by WordPress Connectors and the provider plugin. Npcink Site Toolbox does not read that credential and does not persist goals, snapshots, baselines, follow-up history, or AI responses. No suggested action is performed automatically. DeepSeek<\/a>, terms<\/a>, privacy<\/a>.<\/p>\n\n Google Search Console and Bing Webmaster Tools options only print administrator-supplied verification meta tags. They do not make outbound requests. Google service<\/a>, Google terms<\/a>, Google privacy<\/a>; Bing service<\/a>, Microsoft terms<\/a>, Microsoft privacy<\/a>.<\/p>\n\n The public source matching this exact plugin release is published at tag v3.3.2<\/a>. The readable sources are in vite\/admin\/src<\/a> and vite\/count\/src<\/a>, with the build manifest at vite\/package.json<\/a>.<\/p>\n\n Reproduce the Admin and Count assets with:<\/p>\n\n The generated files are written to The site-statistics and GitHub project block editor scripts are shipped as readable source in Search Health can store search terms and counters in the local WordPress database. Login protection, audit, and diagnostic features can store login failures, IP addresses, actions, and diagnostic results locally when enabled. Site administrators are responsible for an appropriate privacy notice and retention policy.<\/p>\n\n The plugin does not automatically upload this local data or telemetry to its developer. Third-party requests occur only under the triggers documented in External Services. Credentials used by this plugin are stored in WordPress options and are sent only to the administrator-selected WeChat or object-storage provider when required for authentication. DeepSeek credentials are managed by WordPress Connectors and the separately installed provider plugin; Npcink Site Toolbox does not read or store them.<\/p>\n\n\n The current release targets single-site installations. Multisite behavior is not guaranteed.<\/p><\/dd>\n No. Features that depend on theme markup are identified in the admin interface. Test them on a staging site before enabling them in production.<\/p><\/dd>\n Deactivate and delete the plugin. Its uninstall routine removes plugin options, scheduled tasks, temporary caches, comment moderation markers, and runtime-only attachment markers. It does not delete or rewrite media files, remote object-storage objects, posts, comments, or terms. WebP recovery metadata is retained so an already converted attachment does not lose the information needed to restore its original JPEG; restore converted media before uninstalling if you want the plugin to perform that rollback.<\/p><\/dd>\n Yes. Its text domain is WeChat JSSDK<\/h4>\n\n
Object storage<\/h4>\n\n
npcink-site-toolbox\/connection-test.txt<\/code>, placed below the configured prefix when one is present. The test object remains in the selected bucket; rerunning the test overwrites the same object instead of creating more objects. The test does not require a public media URL, save settings, or change the module's enabled state.<\/p>\n\nBaidu Analytics<\/h4>\n\n
DeepSeek diagnostic analysis<\/h4>\n\n
Source Code and Build<\/h3>\n\n
git clone https:\/\/github.com\/npcink\/npcink-site-toolbox.git\n\ncd npcink-site-toolbox\n\ngit checkout v3.3.2\n\ncd vite\n\ncorepack enable\n\npnpm install --frozen-lockfile\n\npnpm run build\n<\/code><\/pre>\n\nvite\/admin\/dist\/<\/code> and vite\/count\/dist\/<\/code>.<\/p>\n\nblocks\/site-stats\/index.js<\/code> and blocks\/github-project\/index.js<\/code>; they have no separate build step.<\/p>\n\nPrivacy Policy<\/h3>\n\n
\n
\/wp-content\/plugins\/<\/code>.<\/li>\n\n
Does it support multisite?<\/h3><\/dt>\n
Does it work with every theme?<\/h3><\/dt>\n
What happens on uninstall?<\/h3><\/dt>\n
Is it translation-ready?<\/h3><\/dt>\n
npcink-site-toolbox<\/code>.<\/p><\/dd>\n\n<\/dl>\n\n\n3.3.2<\/h4>\n\n
\n
3.3.1<\/h4>\n\n
\n
3.3.0<\/h4>\n\n
\n
3.2.0<\/h4>\n\n
\n
3.1.1<\/h4>\n\n
\n
3.1.0<\/h4>\n\n
\n
npcink-site-toolbox<\/code>.<\/li>\nMaBox_*<\/code> classes, MAGICK_MIXTURE_*<\/code> constant names, and existing option keys unchanged; no settings migration or reset is required.<\/li>\n<\/ul>\n\n3.0.1<\/h4>\n\n
\n
magick-toolbox<\/code>.<\/li>\n3.0.0<\/h4>\n\n
\n
2.6.1<\/h4>\n\n
\n
2.6.0<\/h4>\n\n
\n
2.5.0<\/h4>\n\n
\n
2.4.0<\/h4>\n\n
\n
2.3.0<\/h4>\n\n
\n
2.2.0<\/h4>\n\n
\n
2.1.0<\/h4>\n\n
\n
2.0.0<\/h4>\n\n
\n