Clockwork Renegade
Standalone plugin that connects a WordPress site to Clockwork Control — signed REST endpoints for centralized monitoring, uptime verification, updates, and security telemetry.
by Clockwork Web Dev, LLC · github.com/clockwork-web-dev-llc/clockwork-renegade · website
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/clockwork-web-dev-llc/clockwork-renegade/archive/refs/heads/main.zipClockwork Renegade is the open-source, GPL-2.0-or-later WordPress connector agent for Clockwork Control, designed for submission to the WordPress.org Plugin Directory.
It connects a WordPress site to a central Clockwork Control dashboard via HMAC-SHA256 authenticated REST endpoints under /wp-json/clockwork-renegade/v1/.
Architecture & Features
- Pairing & Authentication: Cryptographic Connection Key exchange via Clockwork → Connection. Per-site 256-bit shared secrets, HMAC-SHA256 request signing, and 5-minute replay window validation.
- Telemetry & Monitoring: Instant health checks, WP-Cron schedules, plugin/theme version inventory, and resource diagnostics.
- Safe Remote Updates: Remote triggers for WordPress core's native upgrader pipelines (
Plugin_Upgrader,Theme_Upgrader,Core_Upgrader). No arbitrary remote execution. - Backups: On-demand streaming of compressed database and file archives directly to AWS S3 Glacier Instant Retrieval.
- Clean Lifecycle: WordPress standard
register_activation_hookonboarding redirect, and zero-residual-footprintuninstall.phpcleanup.
Development & Tests
Run test suite via PHPUnit:
composer install
composer test
License
GNU General Public License v2.0 or later (GPL-2.0-or-later).
Copyright (c) 2026 Clockwork Web Dev, LLC.