Commit Graph

62 Commits

Author SHA1 Message Date
Vladimir Bryzgalov 3ec9b488dd feat(updates): add wp-plugin-info.json skeleton for PUC Generic JSON source 2026-04-21 21:06:02 +05:00
Vladimir Bryzgalov a5082da0da test(update-checker): invariants for vendored PUC loader and factory class 2026-04-21 21:05:45 +05:00
Vladimir Bryzgalov 05aa819608 chore(deps): vendor plugin-update-checker v5.6
Source: https://github.com/YahnisElsts/plugin-update-checker/releases/tag/v5.6
Used in 1.2.0 for self-hosted updates from Gitea (Generic JSON mode).
2026-04-21 21:03:37 +05:00
Vladimir Bryzgalov c0ff5a9227 docs: finalize self-hosted updates spec + implementation plan (1.2.0)
Spec finalized after brainstorm + pre-impl verification: PUC v5.6 pinned,
Gitea raw URL cache headers verified, release.sh uses browser_download_url
from API response (not guessed format), changelog-to-HTML conversion via awk,
two fast-forward commits per release (no force-push).

Plan decomposes into 19 tasks: vendor PUC → tests → JSON skeleton → boot
wiring → gitignore/gitattributes → release.sh incrementally (validate, bump,
commit+push, zip, Gitea release, upload, regenerate JSON, JSON commit) →
changelog body → actual release run → deploy to домработница.рус.
2026-04-21 20:59:52 +05:00
Vladimir Bryzgalov 995131371d chore: ignore .worktrees/ (feature worktree workspaces) 2026-04-21 20:59:33 +05:00
Vladimir Bryzgalov f7d81a4517 docs(spec): DRAFT design for self-hosted updates from Gitea (1.2.0)
Brainstorm session ran out of context — saving fully-formed design as
DRAFT so the next session can resume from spec self-review + finalize +
writing-plans without redoing the brainstorm.

Beads epic: cf7stg-5wy.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 18:46:35 +05:00
Vladimir Bryzgalov 4dbf3a6ded Merge feat/silent-drop: silent drop label + dry-run + counters (1.1.0)
Adds Classifier label 'drop' via hard-rule (no positive signals + short
latin name OR ≥3 placeholder fields) or score ≤ -5. Drop submissions are
silently skipped from the TG queue (or marked [БЫЛО БЫ DROPPED] when
dry-run mode is on, default after install). Settings page block + dashboard
widget counter. New filters: cf7stg_should_enqueue, cf7stg_hard_drop_rules.

Tests: 53 → 118 (+65). Spec: docs/superpowers/specs/2026-04-21-cf7stg-silent-drop-design.md.
Plan: docs/superpowers/plans/2026-04-21-cf7stg-silent-drop.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 18:14:40 +05:00
Vladimir Bryzgalov 714b4712ad fix: wire is_hard_drop_enabled + drop_score_threshold settings into Classifier filter chain
Settings::register_classifier_filters() registers priority-5 callbacks on
cf7stg_classifier_thresholds and cf7stg_hard_drop_rules so the UI options
actually influence Classifier behaviour. Called from Plugin::boot(). User
filters at priority 10 override these defaults as expected. Adds 4 tests
covering the wired behaviour and override priority. Also adds dry_run_drop?
to MessageFormatter::build() @param docblock.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 17:25:20 +05:00
Vladimir Bryzgalov 030eaca408 chore: bump version to 1.1.0 with silent-drop changelog 2026-04-21 17:18:14 +05:00
Vladimir Bryzgalov 22722ae9e9 feat(admin): silent-drop counter line in dashboard widget 2026-04-21 17:16:34 +05:00
Vladimir Bryzgalov ea5666318b feat(admin): silent-drop block in settings page (dry-run, hard-rule, threshold, stats, reset) 2026-04-21 17:14:56 +05:00
Vladimir Bryzgalov 2fcebcc756 feat(formatter): [БЫЛО БЫ DROPPED] header + triggered-rule line in dry-run mode 2026-04-21 17:12:16 +05:00
Vladimir Bryzgalov 42e311c05a feat(source): drop label → skip enqueue (or marked enqueue in dry-run); cf7stg_should_enqueue filter
Also extends test bootstrap autoloader to resolve classes in includes/sources/ and admin/ subdirectories.
2026-04-21 16:30:07 +05:00
Vladimir Bryzgalov 24367c1ccb feat(activator): seed silent-drop options (dry-run on by default) on activate 2026-04-21 16:26:38 +05:00
Vladimir Bryzgalov 0034531a3a fix(settings): wp_date() respects WP timezone; clarify counter is not atomic
- Replace date('Y-m-d') with wp_date('Y-m-d') in increment_drop_counter and
  default_drop_counters to respect WordPress timezone settings.
- Update corresponding test assertions to use wp_date() for consistency.
- Clarify in docblock that increment_drop_counter is not atomic under concurrent
  submissions; read-modify-write pattern via update_option is acceptable for
  low-volume dashboard counters.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 16:25:30 +05:00
Vladimir Bryzgalov ae70b42dcb feat(settings): silent-drop options + counter with rolling today→yesterday
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 16:22:57 +05:00
Vladimir Bryzgalov f415f429ed refactor(classifier): single-pass hard-drop trigger; cleaner drop reason rendering
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 16:20:28 +05:00
Vladimir Bryzgalov a70785beca feat(classifier): label 'drop' via hard-rule + score threshold (-5 default)
- Add DEFAULT_THRESHOLDS['drop'] = -5 and DEFAULT_HARD_DROP_RULES const
- Add evaluate_hard_drop(): fires when no positive signals + short latin name OR ≥3 placeholder fields
- Wire into classify(): drop overrides all other labels; synthetic reason explains trigger
- Add drop_reason_label() and 'drop' => ' авто-дроп' to MessageFormatter::LABEL_MAP
- Update ClassifierTest/MessageFormatterTest to extend Cf7stgTestCase (filter isolation)
- Adjust pre-existing assertions that now correctly yield 'drop' instead of 'spam'
2026-04-21 16:14:49 +05:00
Vladimir Bryzgalov 18a07c9b1b test(classifier): exact-count assertions for placeholder fixture; document SERVICE_FIELD_KEYS prefix semantics
Fixes issues from code review in commit 249f195:

1. Tighten fixture assertions to exact counts (assertSame instead of assertGreaterThanOrEqual):
   - test_count_placeholder_fields_screenshot_1_exact_count: expect 5 placeholders
   - test_count_placeholder_fields_screenshot_2_exact_count: expect 5 placeholders
   - test_count_placeholder_fields_screenshot_3_exact_count: expect 1 placeholder

2. Document SERVICE_FIELD_KEYS prefix-matching semantics in comment:
   clarify that keys starting with _wpcf7 are skipped via strpos prefix match,
   so explicit enumeration of every _wpcf7_* variant is unnecessary.

Test results: 75/75 green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 16:08:57 +05:00
Vladimir Bryzgalov 249f195257 feat(classifier): count_placeholder_fields() helper for drop-logic
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 16:06:32 +05:00
Vladimir Bryzgalov 1168a733a4 test(classifier): boundary + array-value tests for has_short_latin_name; @return tags
- Add @return bool to has_valid_email_anywhere docblock
- Add @return bool to has_short_latin_name docblock
- Add Cyrillic note to has_short_latin_name docblock
- Add test_has_short_latin_name_true_for_single_letter_boundary (lower bound)
- Add test_has_short_latin_name_false_for_four_letters_boundary (upper bound)
- Add test_has_short_latin_name_false_for_array_value_with_space_join (regression)

Addresses code review feedback from commit 660a0d2.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 16:04:18 +05:00
Vladimir Bryzgalov 660a0d2b7c feat(classifier): has_short_latin_name() helper for drop-logic 2026-04-21 16:01:58 +05:00
Vladimir Bryzgalov b5c939e9e4 fix(classifier): iterate all email candidates per field; document method contract
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 15:59:12 +05:00
Vladimir Bryzgalov eae8fafb32 feat(classifier): has_valid_email_anywhere() helper for drop-logic 2026-04-21 15:56:14 +05:00
Vladimir Bryzgalov 1d2586e290 test(fixtures): real spam submissions from TG screenshots (3 cases) 2026-04-21 15:53:54 +05:00
Vladimir Bryzgalov bd45e84634 test: stable filter ordering, base TestCase reset, priority-aware remove_all_filters
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 15:51:46 +05:00
Vladimir Bryzgalov 40d5a2c23d test: stateful WP shims (add_filter/get_option/is_email) for upcoming silent-drop tests 2026-04-21 15:48:07 +05:00
Vladimir Bryzgalov 9a55404918 docs: implementation plan for silent drop (1.1.0) — 14 tasks, TDD
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 15:37:42 +05:00
Vladimir Bryzgalov 287d313f1b docs(spec): drop skull emoji, clarify dry-run default on fresh install + upgrade
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 15:30:38 +05:00
Vladimir Bryzgalov ee6a791867 docs: design for silent drop (1.1.0) — hard-rule, score threshold, dry-run, counters
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-21 15:27:15 +05:00
Vladimir Bryzgalov 0cdfde9529 chore: bump version to 1.0.4 with changelog of pilot fixes
Header 'Version: 1.0.0' in the main plugin file was never bumped
while pilot fixes piled up (1.0.1 → 1.0.4 existed only in zip file
names). wp-admin → Plugins screen therefore kept showing 1.0.0
regardless of what was deployed.

Bumped:
- cf7-spam-to-telegram.php header Version 1.0.0 → 1.0.4
- CF7STG_VERSION constant 1.0.0 → 1.0.4
- readme.txt Stable tag 1.0.0 → 1.0.4
- readme.txt Changelog: entries for 1.0.2 / 1.0.3 / 1.0.4

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-18 00:39:11 +05:00
Vladimir Bryzgalov 8efb82ca43 fix: phone leak, field-by-value detection, strict Flamingo email fallback
Three pilot-surfaced issues in one pass:

1. PhoneParser regex used '\s' in the candidate character class, so a
   digit on a following flattened line bled into the phone. '+7977
   6277470\n1' (phone + trailing checkbox value) parsed as 12 digits,
   producing '+797762774701'. Replaced '\s' with a literal space so
   newlines/tabs stop the candidate.

2. Custom-themed forms don't use 'your-name' / 'your-email' keys
   (washanyanya.ru has text-211 / text-212 / name_user). Added
   FieldDetector::find_name + find_email as fallbacks. Classifier
   and MessageFormatter now call them if no standard key matches,
   so 'Александр' in text-211 is recognised as a cyrillic name and
   scored / displayed accordingly.

3. FlamingoHelper copied '_from_email' into 'your-email' without
   validating it. Flamingo derives that meta from whatever field it
   considers "first"; on phone-first forms it ends up holding the
   phone number. Now we only copy _from_email if it contains '@',
   and dropped the _from_name shortcut entirely — FieldDetector
   handles the name via the actual field values.

Tests: +1 FieldDetectorTest (13 cases); +2 PhoneParserTest cases for
newline/tab bleeds; +1 ClassifierTest case; +1 MessageFormatterTest
case for custom field keys. Full suite 53/53 green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-18 00:22:39 +05:00
Vladimir Bryzgalov dbdfc9afa9 feat(admin): always-on dashboard widget + default retro days = 0
- Dashboard widget is now registered unconditionally. Header + content
  adapt: shows '⚠️ ошибки доставки' only when failed > 0, otherwise
  plain title with queue state (pending / sent-24h / failed).
  Pilot feedback: the conditional widget felt like the plugin was
  missing — users expect a persistent status readout.
- Retro default window changed from 7 days to 0 (no limit). Most
  pilot uses were 'dump everything since install', so 0 is the more
  useful default. User can still narrow to N days in the form.
- Spec §10 + §14 updated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-18 00:12:45 +05:00
Vladimir Bryzgalov 2de8f0be57 fix(formatter+telegram): drop tel: inline button, mark all 4xx as permanent
Pilot on washanyanya.ru exposed that Telegram Bot API rejects tel:
URLs in inline_keyboard with HTTP 400 "Wrong port number specified
in the URL". Queue was stuck on 5 items retrying the same failure
4 times each.

- MessageFormatter: always returns reply_markup = null. The phone
  number is already rendered in the '📱 ...' line, and mobile
  Telegram clients linkify it automatically.
- TelegramClient::is_permanent: treat all 4xx except 429 as permanent
  client-side errors, so future payload-shape bugs surface in the
  dashboard widget immediately instead of burning five retry cycles.
- MessageFormatterTest updated: the old test asserting tel: in
  reply_markup is replaced with one asserting reply_markup is null
  and the phone still appears in the text body.
- Spec §9 + §19 updated, §19's open question closed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 23:55:06 +05:00
Vladimir Bryzgalov 1f89052f72 fix(flamingo-helper): extract field values from _field_* meta, not _fields
Flamingo's '_fields' meta stores only the list of field NAMES with
null values; the actual values live in separate per-field meta keys
prefixed with '_field_'. The old extract_fields() returned the
null-valued '_fields' array on the first branch and never fell
through to the '_field_*' collector, so every retro Telegram message
showed '(не указан)' / '(пусто)' for every slot.

Also collect '_from_name' / '_from_email' (set by Akismet) as
convenience mappings to 'your-name' / 'your-email' so the formatter's
standard slots are populated for most submissions even when the form
uses custom field names like text-211 / name_user.

Pilot on washanyanya.ru caught this (retro delivered empty skeletons).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 23:46:52 +05:00
Vladimir Bryzgalov 22239321d0 fix(activator): register cron_schedules filter during activation
Dispatcher::register_hooks() runs on plugins_loaded, which is AFTER
register_activation_hook fires. The custom recurrence 'cf7stg_every_minute'
was therefore unknown to wp_schedule_event during activation, and the
'cf7stg_dispatch' event silently failed to schedule — queue items never
got dispatched.

Pilot caught this on washanyanya.ru (23 items queued, 0 sent, 0 failed —
no cron hook firing at all).

Adding the filter directly inside Activator::schedule_events() makes the
custom schedule available in the same request as the wp_schedule_event
call, regardless of bootstrap order.

After updating the plugin, deactivate + reactivate is required to
re-trigger Activator::activate() so events get (re)scheduled.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 23:26:06 +05:00
Vladimir Bryzgalov 2e0a829e06 docs+tests: fix autoloader — underscores → hyphens + slug fallback
The regex '/([a-z0-9])([A-Z])/' does not split on underscores, so
Interface_Spam_Source, Settings_Page, Dashboard_Widget stayed as
'interface_spam_source', 'settings_page', 'dashboard_widget' after
strtolower — no file matched. Added str_replace('_', '-', ...).

Then Interface_Spam_Source's slug became 'interface-spam-source',
and the candidate 'includes/sources/interface-' . \$slug doubled
the prefix into 'interface-interface-spam-source.php'. Replaced
that candidate family with a slug-as-filename fallback that maps
interface-* slugs directly to their files.

Sanity check on plugin bootstrap: 17/17 classes/interfaces resolve.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 23:02:53 +05:00
Vladimir Bryzgalov 0c1be5b4cd feat: plugin bootstrap, autoloader, activation/deactivation hooks 2026-04-17 23:02:20 +05:00
Vladimir Bryzgalov a9d19a75a3 feat(admin): settings page with token/chat/site-title, test button, retro, queue state 2026-04-17 22:53:53 +05:00
Vladimir Bryzgalov 6eb2844429 chore: uninstall cleanup, WP readme 2026-04-17 22:51:33 +05:00
Vladimir Bryzgalov f5816e4648 feat(admin): dashboard widget shown only when there are failed queue items 2026-04-17 22:50:29 +05:00
Vladimir Bryzgalov fef22c1ff8 feat(activator): create queue table, schedule cron, guard PHP/WP versions 2026-04-17 22:49:25 +05:00
Vladimir Bryzgalov aa66d15eb5 feat(retro-importer): queue last-N Flamingo spam posts with dedup 2026-04-17 22:48:21 +05:00
Vladimir Bryzgalov eb199c6d40 feat(cf7-source): capture spam submissions via wpcf7_spam and submission status 2026-04-17 22:47:13 +05:00
Vladimir Bryzgalov 4ce2fac42d feat(dispatcher): WP-Cron tick with backoff and retention cleanup 2026-04-17 22:45:38 +05:00
Vladimir Bryzgalov 786a306f29 feat(telegram-client): sendMessage wrapper classifying permanent/transient errors 2026-04-17 22:44:41 +05:00
Vladimir Bryzgalov 1f85d009c4 feat(settings): options wrapper with wp-config constant override 2026-04-17 22:43:36 +05:00
Vladimir Bryzgalov f24cadc799 feat(flamingo-helper): locate flamingo_inbound posts and extract fields/reason 2026-04-17 22:42:38 +05:00
Vladimir Bryzgalov 09f2638066 feat(queue): CRUD, dedup, retention, status counters 2026-04-17 22:41:30 +05:00
Vladimir Bryzgalov cc37aa2647 feat(crypto): AES-256-CBC token encryption via AUTH_KEY 2026-04-17 22:40:08 +05:00