Features

Features

53 abilities across eight families. Each write is grouped under an operation_id, each snapshot counts toward a capped budget.

Eight ability families

Content

Pages, posts, Gutenberg blocks. Create, update, delete with snapshot and rollback.

wpab/create-post, wpab/update-post, wpab/delete-post, wpab/update-block

Taxonomies

Categories, tags, menus. Create, update, assign.

wpab/create-term, wpab/update-term, wpab/assign-terms, wpab/create-menu

Media

List, read, delete with file backup copy.

wpab/list-media, wpab/upload-media, wpab/update-media, wpab/delete-media

Options

Allow-list of 37 authorized options. User preferences.

wpab/get-option, wpab/update-option, wpab/preferences-get, wpab/preferences-set

SEO

Technical audit, per-page audit, meta/OG/JSON-LD fixes, hreflang.

wpab/seo-audit, wpab/seo-posts, wpab/apply-seo-fixes, wpab/write-llms

Diagnostics

Mode, ping, security audit, site info, stats.

wpab/mode-status, wpab/ping, wpab/security-audit, wpab/get-site-info

Snapshots / rollback

List operations, list snapshots, rollback by operation_id.

wpab/list-operations, wpab/list-snapshots, wpab/rollback-operation

GEO / AEO

Audit for generative engines (ChatGPT, Perplexity, Google AI Overviews).

wpab/geo-audit, wpab/write-llms

Grouping and ceiling

Snapshot grouping and 700 ceiling Vertical bars representing grouped operations. The ceiling bar at 700 is in orange. Operations below the ceiling are in blue. Above 700, the zone is hatched in orange. Snapshots Op 1 Op 2 Op 3 Op 4 Op 5 Op 6 Op 7 Op 8 Op 9 Ceiling 700 Alert Danger

Text equivalent: Each write operation generates one or more snapshots. Operations are grouped under an operation_id. The recommended ceiling is 700 accumulated snapshots. An alert is issued at 500 snapshots. Beyond 1000 snapshots, a known defect (fix planned in 1.9.1) may cause partial restoration without warning.

Design principles

Systematic dry-run

Every write ability accepts dry_run=true. The dry-run returns a diff and a confirmation_token. No write occurs until dry_run=false with the token.

Loopback verification

After each write, the plugin verifies the site responds with HTTP 200. If the site is broken, the operation is rolled back and the snapshot restored.

Options allow-list

Only 37 WordPress options are editable. Sensitive options (API keys, passwords, SSL config) are excluded.

File sandbox

File reading is limited to wp-content/themes/, wp-content/plugins/, wp-content/mu-plugins/ and wp-content/uploads/. Sensitive files are excluded.