NV Digital Open Operator System (NVoOS)

Version: 1.1.71 Release Date: 2026-09-05

See § Previous Releases for all version history.

🆕 v1.1.71 Highlights: A rate-limit, model-catalog & ecosystem release. REST rate-limit blocks are now liftable — the general request limiter uses fixed-window accounting (honest retry_after, no infinite slide) and flags the restriction registry via a new wp_mcp_ai_rest_request_rate_limit_exceeded action, so blocked users appear in the Command Center Restrictions tab with the existing Lift button. wake_up_context enforces wing/room scope (Graphify graph anchors no longer leak cross-wing memories into a wing-scoped block). The September 2026 model catalog refresh ships — 228 models (gpt-5.6 family, gpt-6-astra preview, gpt-image-2, claude-opus-5, gemini-3.6/3.7/3.8-flash, kimi-k3), retired DeepSeek/gemini-3.1-flash/imagen-4 IDs with migration-map successors, pricing drift fixes, and new defaults (gemini-3.6-flash, gpt-image-2, kimi-k3). The checkout-api addon joins the standard build + test pipeline and its token/crypto classes now derive salts from wp_salt() (no more latent fatal on installs without salt constants). The Content Graph ecosystem advances: the standalone plugin ships its 1.0.4 visual experience system, Content Graph AI gains the assistant-builder block set + settings shell, and the platform completes its Wave E2 queue layer (async job queue → queue manager → job queue manager → dead-letter queue). Connectors links point at the real core screen. Coding-time agent skills: 54 (new mcp-ai-wpoos-updates skill). Tool count: ~303 base + ~1,263 Pro (~1,566 total).

MCP Specification: 2026-07-28 (Stateless Core, Full Compliance)
Maintained by NV Digital
License: GPLv3 or later
Requires: WordPress 6.0+, PHP 7.4+
Patent Status: Patent Pending (Application #19/410,504)
Documentation: Grade A (95/100) — 1,617 files across 12 directories, 108 admin screenshots, 100% feature coverage

🔍 For Reviewers & Auditors

New to this repo? Start here → docs/project/FOR_REVIEWERS.md

That document answers every common question in one place: what the project is, current security posture, what's production vs experimental, PHP version requirements, AI development methodology, compliance status, and scoping advice for a limited-budget review.

Quick links for reviewers:

• Addon Inventory — what each of 27 addons does and its status
• Security Posture — current state of all 50 audit findings
• Compliance Traceability — every .org rejection reason → commit → verification command
• AI-Assisted Development — methodology, transparency, and what to scrutinize
• Architecture Overview — component diagram and data flow

📑 Table of Contents

Getting Started

• 🧩 Overview
• 🎯 Our Mission
• 🛡️ Active Security Monitoring
• ⚠️ Warranty & Safe Use
• 🏗 System Architecture
• 🚀 Features
• 📦 Installation
  • 🌱 Beginner 3-Step Install (Try it on Your PC)
• 🔌 What You Lose Without Third-Party Plugins
• ⚙️ Configuration Checklist
• 📚 Documentation

Core Functionality

• 🧠 Memory & Tool Stack Overview
• 🛠 Built-in tools & automations
• 🗨️ Front-end chat surfaces
• 💬 Frontend Shortcode

Addons & Extensions

• 🏗 System Architecture (covers addon ecosystem)

Orchestration & AI Features

• 🏗 System Architecture (covers orchestration, harnessing, MCP servers, memory bridge)

AI Providers & Integration

• 🧠 Language Model Providers
• 🧱 ChatKit Integration
• 🌐 Crawl4AI Integration
• 📡 Job Notification System
• 🧊 Elementor Widgets

Performance & Optimization

• ⚡ Message Bundling
• 🎯 Agentic Loop Token Management
• 🔄 Chat Performance Optimizations
• 🌐 Mesh Compute Routing
• 🔗 Federation & Discovery System

Remote MCP Setup

• 🔒 MCP Server Authentication
• 🌐 Connecting Remote MCP Clients
• 🛰 REST API Endpoints
• 🌊 SSE Streaming Support
• 📝 MCP JSON-RPC 2.0 Endpoint
• 🔑 Assistant API Credentials
• 🎫 Token Management UI

Assistant Management

• 🛠 Assistant Editor Overview
• 📊 Assistant Storage: CPT vs CCT
• ⚡ Assistant Tool Shortcuts
• 🧠 Agent Skills
• 👔 Professional & Team Layers
• 🧵 REST Chat Payloads & Attachments

Development

• 🐳 Local Development with Docker
• 🧑‍💻 Development Tooling
• 📦 NPM Packages
• 🧪 Testing & QA
• 🧩 Hooks & Filters
• 🧰 WP-CLI Commands

Reference

• 🔐 JetEngine Capability Reference
• 🛰 JetEngine REST API Reference
• 🧮 Usage Tracking
• 🧷 Attachment MIME Controls
• 🧾 Logging
• 🧾 JetEngine REST Endpoint Report Helper
• 🔌 Optional Tools & Dependencies
• ✅ Manual QA Scenarios

🗺 Repository Map

🧩 Overview

Real-time AI Orchestration Toolkit for Wordpress - NV oOS is a modular AI framework (Object-Oriented System) for WordPress that connects your site's data with 15 language-model providers: OpenAI, Gemini, Anthropic, DeepSeek, OpenRouter, Baseten, Kimi (Moonshot), Z.AI (GLM), DigitalOcean, NVIDIA NIM, Cloudflare Worker AI, Ollama, LM Studio, Hugging Face, and Flowhub. It allows you to create and manage AI Assistants that can interact with users, access WordPress data, and perform custom tool functions.

✨ What's New at a Glance (v1.1.71)

• 🔓 REST Rate-Limit Unlock & Fixed-Window Timer (PR #6322). Users blocked by the general request limiter never appeared in the Command Center Restrictions tab, so admins couldn't lift the block. Two bugs: the limiter never flagged the restriction registry, and the window was sliding (every request rewrote the transient with a fresh full-window TTL, so steady traffic kept the block alive and retry_after always reported the full window). check_rate_limit() now uses fixed-window accounting ({count, first_seen}, TTL never extended past window end) with honest remaining-time retry_after; a new wp_mcp_ai_rest_request_rate_limit_exceeded action makes WP_MCP_AI_Restriction_Registry flag a rate_limit restriction (auto-release at window end) — the block shows in the Restrictions tab + Token Manager with the Lift button, and lifting clears the request window. Guest (IP-keyed) blocks expire on their own.
• 🧠 MemPalace Wing-Scope Enforcement (PR #6327). WP_MCP_AI_Tool_Wake_Up_Context::matches_wake_filters() now enforces wing/room exclusions — the Graphify graph anchors only boost scores and never excluded out-of-scope memories, so wake_up_context in auto mode leaked cross-wing memories into a wing-scoped block once the Graphify addon loaded. The PR also ships four test-isolation fixes (transcript mock restore, shared registry teardown, provider-key isolation, logging cache reset).
• 🛒 Checkout API Into the Addon Pipeline (PR #6315). bin/build-addon-zips.sh now produces build/nvoos-checkout-api-v<version>.zip, the addon's 6 suites join phpunit.xml.dist, and the build workflow gains a tests job. The new suite exposed a latent production fatal: the token/crypto classes read AUTH_KEY . SECURE_AUTH_KEY directly — now wp_salt( 'auth' ) . wp_salt( 'secure_auth' ) (identical on normal installs, stable fallback otherwise).
• 🧭 September 2026 Model Catalog Refresh (PR #6328). 217 → 228 models: new gpt-5.6-sol/-terra/-luna, gpt-6-astra preview, gpt-image-2, claude-opus-5, claude-fable-5.1, claude-mythos-5, gemini-3.6/3.7/3.8-flash, gemini-3.5-flash-lite, deepseek-v4-flash-vision-exp, kimi-k3, kimi-k2.7-code; retired DeepSeek chat/reasoner/coder + gemini-3.1-flash + imagen-4 with migration-map successors; pricing drift fixes (DeepSeek v4-flash input 10×, Claude Opus inputs $15 → $5); new defaults (gemini-3.6-flash, gpt-image-2, kimi-k3); ~45 derived files updated; 517 model tests / 8,290 assertions green.
• 🌐 Content Graph Ecosystem (PRs #6316–#6321, #6325). The standalone nvoos-content-graph plugin ships its 1.0.4 visual experience system — theme engine (PHP/JS byte-identical, WCAG 2.2 SC 1.4.11 ≥3:1 palettes), appearance settings tab, 24 SVG type glyphs, legend/minimap/zoom/keyboard explorer chrome, GET /edges route, export at 1–3×, block/shortcode attribute parity, and a checkout fallback redirect (#6318). Content Graph AI gains the assistant-builder block set (selector, tools grid, knowledge base, builder) and a validate-then-sanitize settings shell (#6316, #6317). The platform completes its Wave E2 queue layer: AsyncJobQueue → QueueManager → JobQueueManager (atomic SELECT … FOR UPDATE SKIP LOCKED) → DeadLetterQueue, byte-identical to the base stack (#6319–#6321, #6325).
• 🔗 Connectors Links Fixed (PR #6314). The "Settings → Connectors" links now use admin_url( 'options-connectors.php' ) — the old admin.php?page=connectors target isn't a registered page.
• 🧪 Post-K16 Singles (PR #6327, CI run 91942465749). Order-dependent singles closed: transcript session-key mock restore, shared tool-registry teardown (Pro OKF tools were wiped by clear_tools()), Site Health provider-key isolation, transcript-mining logging cache reset. The mcp-ai-wpoos-test-suite skill grew to 40 patterns.
• 📚 New Coding-Time Skill (PRs #6323, #6324). .agents/skills/mcp-ai-wpoos-updates/ codifies the two maintenance tracks — docs & release catch-up (Track A) and model catalog & config updates (Track B). Coding-time agent skills: 53 → 54.

✨ What's New at a Glance (v1.1.70)

• 🛡️ Shell-Call Hardening on exec-Disabled Hosts (PR #6295). The Pro Packages page (and five other Pro admin pages + the OCR service) fataled on hosts with exec in disable_functions — on PHP 8+ @ cannot suppress the disabled-function Error. Canonical wp_mcp_ai_check_nodejs_available() / wp_mcp_ai_get_nodejs_version() helpers probe exec-first and fall back to WP_MCP_AI_Process_Service (proc_open); the OCR service gains is_cli_tool_available() / run_cli_command() (Windows-aware) and guarded proc_* calls; seven CPT/settings pages clamp negative inputs with max( 0, … ) instead of absint() (absint('-5') → 5).
• 🐛 Wave-5 Production Fixes (PRs #6280–#6312). Transcript attachments display metadata preserved on save + default max_tokens capped by the model's window (#6280); Pro dashboard event stats accept underscore and dashed slugs (#6281); validated web_search profession_tags aligned (#6282); schedule presets drop a phantom validate_contact_data step and put the hook in schedule_data (#6283); mesh peer URLs validated before esc_url_raw() (#6285); opt-in guest memory capture writes under a shared guest bucket (#6286); JetEngine gates require JET_ENGINE_VERSION + a physical CCT-table probe, the JFB submissions tool restores id/flat params, and the token manager uses the cached Pro tool map (#6296, #6300); complexity routing restored — the default model no longer short-circuits select_model() (#6298); Auth0 audience validation is structural, image tools check read_post against the acting user, and user IDs validate as positive ints (#6301, #6305); markup REST errors return 400, the legacy SSE handshake is filterable, skill packs reject numeric-keyed entries and always fire their installed action (#6302); clamp sanitizers + plugins-integration terminate seam (#6303); Elementor is_elementor_editor_init() + static::is_available() (#6304); provider-prefixed model-slug token limits, Ollama native tool-calls fix, published_date preservation, wp_mcp_ai_missing_image (#6306); agentic events reach the recent-activity feed + millisecond trace durations (#6308); K16 bundle — sanitize_key-stable webhook IDs, settings-repository blob fallback for runtime gates, acting-user chart unfiltered_html, social-publish date reset, PSO inflections, site-builder h1–h6, schema-verifier required (#6311); curriculum exporter skips empty structures (#6293).
• 🧪 PHPUnit Repair Campaign, Wave 5 (~29 test PRs, #6280–#6312). Two CI triage runs (CI-TRIAGE-91006542428.md + CI-TRIAGE-91771001271.md) drove the clusters closed: transcripts, charts/dashboards, professions, presets, Cloudflare, mesh, memory, CPT management, PayHere, Mubert, OpenAI Images, composer drift, Content Graph AI, pro schedule AJAX, model routing, Gemini, JetEngine/Graphify stubs, OAuth, REST/skill packs, admin settings, Elementor, permission gates, HTTP clients, orchestration budget, logging, K16 misc singles. The mcp-ai-wpoos-test-suite skill's cluster board is compacted to one completed wave-5 block (37 patterns unchanged).

✨ What's New at a Glance (v1.1.69)

• 👁️ Vision Analysis Toolkit (Pro, PR #6267). analyze_image_objects detects and counts objects per category — detection (HuggingFace OWLv2 / Ollama vision), vlm (OpenAI / Anthropic / Gemini JSON-enforced counting), and hybrid (detector owns counts, VLM only renames mislabeled categories) — with annotate=true returning a GD box-annotated copy as a media attachment. Gated by a new NV oOS → Vision Analysis settings page (enable_vision_analysis_toolkit, off by default) with SSRF URL-guards. See docs/toolkits/vision-analysis-toolkit.md + docs/proposals/vision-analysis-object-counting-tool.md. Pro tool count +1.
• 🐛 tagDiv Admin Compat & Metabox Crash Fix (PRs #6266, #6278). The four SiteKit tools no longer return the non-existent CAPABILITY_CAN_USE_IF_ADMIN constant (string flag arrays; the assistant tools metabox crashed exactly at sitekit_get_adsense on nugl.com). The sortable shim prints a bundled jQuery UI 1.14.2 Sortable inline whenever td_wp_admin is enqueued (print-queue detection); the WordPress media chain is forced as direct head tags from core-registered handles; tools metabox CSS is enqueued in the head.
• 🔧 DeepSeek Empty-Schema 400 Fix (PR #6272). Argument-less tools now emit properties: {} (never []) across 29 files; LegacyToolAdapter preserves object maps and upgrades empty arrays; the AI Tool Builder scaffold emits new stdClass() for parameterless tools.
• 🔒 ZipSlip Guard Revived (PR #6270). ZipArchive::$num_files doesn't exist on PHP 8.x, so the guard loop never ran — unsafe archives imported successfully. count( $zip ) now drives all five entry loops (OKF bundle manager + four Pro admin pages), restoring path-traversal rejection.
• 🐛 Fixes. Rate limiter classified by the dispatching request's real HTTP verb with a separate nefarious-monitor counter and dual-shape chat hook tolerance (#6265); one broken tool's shortcut tasks can't fatal the assistant edit screen (#6271); model catalog: gpt-4o 128k context, gemini-2.0-flash video-capable typo, claude-sonnet-4-6/gpt-4o active status, two Qwen entries (#6274); settings save no longer leaves object-cache additions suspended (WP 7.1 inline-async tick locks, #6277).
• 🧪 PHPUnit Repair Campaign Continuation (~9 test PRs, #6260–#6276). Fourth wave: count-tokens params, continuation seam, SSE handler, deterministic cache tests, coverage manifest, incorrect-usage notices, admin registration, subtab sanitizers, 14 Veo suites. The mcp-ai-wpoos-test-suite skill now distills 37 root-cause patterns.

✨ What's New at a Glance (v1.1.68)

• 🧩 Pro SPA v2 Shortcode & Embedded Mode (Pro, PR #6256). New [nvoos_pro_spa] shortcode mounts the Pro SPA v2 in chat-first embedded mode — AgentPanel + drawers, tool shortcuts, OKF drawer, router-free, no admin routes — with per-instance data-config attributes and optional guest mode via the base guest-token machinery. New WP_MCP_AI_Pro_SPA_Shortcode + Pro_SPA_Config + module-registry entry + spa-v2 block. See docs/project/proposals/033-pro-spa-v2-shortcode-proposal.md.
• 🖥️ Hermes Dashboard Fleet Extensions (PR #6249). New top-level extensions/ tree: a fleet monitoring + control plane extension (nv-oos-fleet — Python plugin API over ~35 sites), plus backup-download, external-app-tab, and mcp-tool-shortcuts WebUI extensions with installer + smoke tests. Plans: docs/developer/integration/hermes-dashboard-extensions-plan.md.
• 🔄 Chat-Bubble Stale-Nonce Self-Heal (PR #6225). GET /mcp-ai/v1/session/nonce returns a fresh session-bound wp_rest nonce minted from the request's own auth cookie (no-cache); the chat client silently retries 403 rest_cookie_invalid_nonce failures from full-page caching or session-token rotation on long-lived SPA pages.
• 📚 Docs Hub 0.4.2 (PRs #6246, #6253). Internal links on local pages resolve to #/slug hash routes; TOC anchors mirror github-slugger exactly; "Accept fix" suggestions are directory-relative and ../ links are validated with containment checks; skipped rows show reasons; sync failures surface "Atomic swap failed"; the emoji loader no longer crashes the React SPA. Addon bump 0.4.1 → 0.4.2.
• 🔌 Providers Disabled by Default on Fresh Installs (PR #6255). OpenAI/Anthropic/Gemini default to disabled; dropdowns list only enabled + credentialed providers; the onboarding wizard auto-enables the provider whose key you enter.
• 🐛 Fixes. Google Calendar granted-scopes %20 corruption (#6226); Tiptap mergeAttributes prototype pollution — canvas/document editor pin tiptap 3.30.4 (#6250); fast-uri >=4.1.4 across npm trees (#6244); assistant untrash restores the pre-trash status (#6239); presets gain missing Google/Gmail/Drive/OKF/git tools (#6242); wp_mcp_ai_seed_task_templates AJAX wired (#6243); jQuery UI sortable shim for post screens (#6258); agent-identity canonical-ID int cast (#6232); token-budget catalog dedup + restored wp_mcp_ai_model_tpm_limit filter seam (#6233).
• 🧪 PHPUnit Repair Campaign Continuation (~21 PRs, #6224–#6257, + #6259 merged upstream). A third wave kept the suite aligned with current contracts; the production fixes it carried are grouped above (including the late-merged wp_mcp_ai_attachment_segment_provider filter — providers without a remote file API, e.g. Ollama, resolve attachments to local references).
• 🧹 Housekeeping. Stale 1.1.67 build ZIPs removed (27 files).

✨ What's New at a Glance (v1.1.67)

• 🧩 Content Graph AI Platform v2.0.0 Standalone (PR #6123). The extracted nvoos-content-graph-ai-platform addon now carries its own business logic — Waves A–C + Blueprints deliver the namespace-bridged admin UI (PlatformDashboard, PlatformSettingsRegistry), skill/slash-command/agent bridges, harness router, a 74-skill bundled-skills pack with third-party notices, a knowledge base, and a dedicated PHPUnit matrix. See docs/project/plans/content-graph-platform-extraction-plan.md.
• 🧱 Base+Pro → Content Graph Ecosystem Port, Wave D + D-UI (PR #6142). The AI runtime lands in nvoos-content-graph-ai: chat core (optimizer, caches, rate limiter, summarizer, threads, attachments, transcripts, ChatKit), providers (Zai, Google Maps, Realtime ×3, RabbitMQ, STDIO, file services), model management + analytics/token tracking, security guards, and D-UI assistant pages + blocks/widgets/guest tokens/memory/CLI/MCP JSON-RPC. Content Graph AI bumps to 1.0.4. Tracked in docs/project/ecosystem-port-tracker.md.
• 📧 Google Workspace Gmail + Drive Read Tools (Pro, PRs #6151–#6152). Six new Pro tools — get_gmail_message, get_gmail_thread, list_gmail_connections, modify_gmail_message (destructive-ops gated) and get_drive_file, list_drive_connections — backed by new WP_MCP_AI_Pro_Gmail_Client / WP_MCP_AI_Pro_Google_Drive_Client clients on the shared includes/google/ foundation. Pro tool count +6.
• 🧪 PHPUnit Repair Campaign Continuation (~100 PRs, #6114–#6208, #6209–#6222). A second cluster wave kept the suite green through the extraction/port work and PHPUnit 11 / WP 7.1 drift; the production fixes it carried are grouped in the changelog (crawler contract hardening, REST guards, LLM sanitization delegation, URL-encoded external-API queries, Veo 5s floor, settings/cache fixes, WhatsApp webhook signature rejection, HTTP 304 cached-body re-serve, Veo async-job completion ordering, token-budget display, Shopify client-availability filter seam, Paper Store array-field queries). The mcp-ai-wpoos-test-suite skill now distills 26 root-cause patterns.
• 🧹 Housekeeping. Stale 1.1.66 build ZIPs removed; re-created 1.1.65 ZIPs re-removed.

✨ What's New at a Glance (v1.1.66)

• 🧪 PHPUnit Suite Repair Campaign (~100 PRs). The single-process suite was repaired cluster-by-cluster — REST endpoints, AJAX handlers, provider/client suites, admin pages, chat/channel integrations, CRM, professions/teams, multi-agent orchestration, cron/notifier, federation, healthcare interop, security, logger, transcripts. Most PRs are test-only; the production fixes they carried are grouped in the bullets below. (PRs #6008, #6009, #6012–#6107)
• 🔐 REST, Auth & Permissions. Assistant-access caching — new wp_mcp_ai_assistant_access_cache_enabled filter plus WP_Error caching like successful lookups (#6008); attachment-segment validation errors return explicit 400s (#6009); token-tier endpoint + tier-change audit logging (#6018); permission-callback allowlist refresh (#6019); bearer-auth context sync (#6014, #6016); REST analytics endpoints (#6015).
• ⏱️ Job Queue, Cron & Notifier. Closure serialization fixed for legacy option storage (#6020); custom-table query guards against missing schema (Graphify DB, job store, tenant DB) end the 1.5K-line CI error-log flood (#6022); restored notifier update_status() with dot-preserving job IDs + owner-scoped REST routes (#6036, #6037); job status promoted to running on progress updates (#6039); Little's-law metrics (#6038).
• 🤖 Provider, Tool & Envelope Fixes. Web-search result building restored for Exa/Perplexity (#6042); auto-categorize router/client (#6064); Cloudways analytics adapter auth check (#6062); Media Toolkit tools normalized to WP_Error (#6057); Remove Background path guard + source resolution (#6072); memory-capture failure envelope restored (#6049); A2A webhook logging + delegate tool errors (#6055).
• 🖥️ Admin, Render & Output. Output-buffer leaks fixed across render/AJAX paths (#6045); Graphic Editor Plus image access on WP 6.9+ (#6069); workflow-editor AJAX WP_Error/hook drift (#6070); quiz + document-template admin pages wired (#6089, #6090).
• 👔 Professions, Federation & Addons. Profession meta clamping + primary-role flow, team CPT sanitization (#6043, #6105); federation mesh-sync init (#6044); defensive Graphify admin loading on the PM submenu (#6106); Content Graph AI bumped to 1.0.3 with a permission-check fix (#6056).
• 📚 New Coding-Time Skill. mcp-ai-wpoos-test-suite — Docker commands, CI-log triage, 16 recurring root-cause patterns, and the cluster-PR conventions; coding-time skills now 53. (PR #6108)
• 💳 Checkout API Addon + Content Graph Paid Checkout. New addons/checkout-api/ (v0.1.0, vendor-server only) — Stripe session/verify endpoints, encrypted secrets, custom-table license store, signed expiring ZIP downloads, webhook license issuance/revocation, per-IP rate limiting — plus the paid-checkout client in the free nvoos-content-graph plugin (Stripe Payment Element, verify, license, one-flow install; no Stripe keys in the plugin). Addon count: 27. (PR #6063)

✨ What's New at a Glance (v1.1.65)

• 🧠 OpenAI Reasoning-Model Parameter Fix. o-series and gpt-5 models reject max_tokens (and o-series temperature) — lib/core's OpenAiCompatibleClient now strips unsupported parameters per model (applyModelConstraints()) and retries 400 rejections with corrected payloads on both sync and streaming paths. (PR #5985)
• 🕷️ Media Worker Full-Crawl4AI Proxy (031 Phase 3). New env-gated POST /api/crawl/full + GET /api/crawl/full/task/:id routes forward to a CRAWL4AI_FULL_URL deployment — SSRF-validated targets before proxying, token-gated, 503 service_not_configured/502 upstream_unreachable envelopes — plus a strict-path TEMP_ROOT allowlist (proposal 028 Q5) for Docker shared-volume deployments. Worker stays v3.2.0. (PR #5983)
• 🛡️ Security-Posture Findings Closed (issue #5972). Algorave Tone.js raw eval now requires one explicit confirmation per browser session plus a visible warning banner (capability-scoped); the TMA markdown source map is removed; remaining webhook __return_true permission callbacks carry justification comments. SECURITY_POSTURE.md updated. (PR #5981)
• 💬 Chat, REST & Transcript Hardening. Legacy clients sending a top-level attachments parameter are tolerated instead of hard-400'd; custom message roles work again (wp_mcp_ai_allowed_message_roles); orphaned tool messages are silently discarded before provider dispatch; attachment prep errors propagate to the client; transcript pagination preserves negative values so clamping works; Content Graph AI embeddings stop 500ing and graph context falls back to keyword search without an index. (PRs #5991, #5993, #5994, #5985)
• 🔔 Webhook & Tool Fixes. Google Chat gains a shared-secret verification_token for OIDC-disabled webhooks; Slack link/italic conversion ordering fixed; paper-store import/export tolerate missing collection; scheduled-result block registers idempotently; Graphify treats provider-prefixed *_key fields as sensitive and returns canonical WP_Errors; remote_wp_connection errors direct callers to list_connections first. (PRs #5990, #5986, #6003)
• ⚙️ Slash Commands, Blocks & Admin. Slash-command handler staleness on init re-fire fixed; CSV list parsing accepts "1,2" and "1, 2"; assistant-builder/Pro toolkit blocks register idempotently (WP 7.1 notices); workflow AJAX double-output fix; TPM limits fall back to the bundled model catalog without JetEngine; dangling legacy admin settings removed; WP 7.0 connector registry guard. (PRs #6000, #5997, #6004, #6005, #6006)
• 📦 Content Graph wp.org Refresh. Icons (v5), main screenshot, and a generated page preview for the nvoos-content-graph listing; Contributors field fixed; Content Graph AI chat tester fixed. (PRs #5980, #5988, #5982, #5992)
• 🧪 Test-Suite Cluster Fixes. SSE stream-contract alignment, WP 7.1 bootstrap neutralisation, transcript/slash-command/remote-connection suite follow-ups. (PRs #5995–#5999, #6001, #6002)

✨ What's New at a Glance (v1.1.64)

• 📅 Google Calendar Connection & Shared Google Services. New includes/google/ foundation (OAuth service, Calendar v3 client, scope registry, credential resolver, sync + push) replaces four copy-pasted and drifted Google OAuth flows; a google_calendar connection type lands on both connection surfaces. Six new Pro tools in addons/pro/includes/tools/google-workspace/ — list_google_calendars, list_google_calendar_events, update_google_calendar_event, delete_google_calendar_event, check_google_calendar_availability (freeBusy), quick_add_google_calendar_event — plus a reworked create_google_calendar_event (scope-enforced writes, Meet links) and a sync_google_calendar that actually syncs. See docs/developer/architecture/integrations/google-calendar-connection.md. (PR #5959)
• 🔬 Composio Account Health & Hardening (Pro). A verified account-health engine probes live credentials with catalog-discovered read-only tools (no invented slugs), a new composio_manage_accounts tool handles validate/reconnect/delete/prune, and the Remote Sites Connected Apps table gains a Health column with Verify/Reconnect actions. Auth config resolution, connected-account listings, identity-bound execution, app removal, zero-argument payloads, and proxied provider failures are all fixed. See docs/composio-connect.md. (PRs #5932–#5934, #5936, #5953, #5958)
• 🕵️ Non-Loggable Result Fields. Tools whose results carry capability credentials under innocuous keys (or opaque URL path segments) can declare the exact fields via the new WP_MCP_AI_Tool_Sensitive_Result_Interface; the logger masks them before preview truncation. Logging-only — caller/model payloads are never altered. (PR #5961)
• 📉 Log Hygiene. Per-entry context budgets (fingerprinting + truncation) stop wp_mcp_ai_recent_errors/wp_mcp_ai_recent_activity from ballooning into the megabytes; Data Management gains one-click Compact/Delete for both buffers; credential-bearing URL query params are redacted from every logged string. (PRs #5952, #5954)
• 🐛 Fixes. Validated-tool argument validation restored on Symfony 5.4 (constraint loading was silently skipped — every validated tool accepted invalid input); MCP JSON-RPC -32700/-32600 error envelopes reachable and the diagnostics page re-wired; Pro SPA v2 conversation/assistant sync; vision tools accept a 5–300s timeout; WP_Error envelope drift + cron/memory/elementor tool bugs. (PRs #5957, #5960, #5962, #5964, #5965)

✨ What's New at a Glance (v1.1.63)

• 🧬 Artifact Evolution Phases A–G (Base + Pro). The Continual Harness Evolver and Meta-Harness become a complete, gated, Darwinian evolution loop for skills, prompts, and roles: competing artifact populations with fitness-weighted parent selection, failure-case replay + post-mutation verification, learning-log-aware mutators, a pre-commit admission gate (structural / harmlessness / marginal-gain critics), holdout-gated deployment with shadow A/B serving and drift-triggered rollback, and a cross-cutting governor with a human approval queue and per-artifact lineage graphs. The evolve_harness ↔ Evolver contract is repaired, and every layer is opt-in (default off) with switches in Settings → Orchestration Layer. See docs/project/proposals/007-artifact-evolution.md. (PRs #5923, #5925)
• 🧩 Pro Addons Page (Pro). New registry-driven NV oOS Pro Dashboard → Addons page installs and activates standalone addons whose ZIPs ship in the plugin's build/ directory in one click — nonce + install_plugins + allowlist gated, with non-WordPress components (Media Worker, Cloud Worker, Tenant Router, Schedule Anything SPA) listed read-only. (PR #5924)
• ⚡ Chat Storage Worker Offload. Conversation saves at or above wp_mcp_ai_storage_worker_threshold (default 10,000 chars) offload the expensive JSON.stringify to a browser storage worker; small saves, unload flushes, and worker failures fall back to the synchronous main-thread write, and the threshold filter is the kill switch. See docs/project/proposals/032-chat-web-workers-wiring-implementation-plan.md. (PR #5928)
• 🐛 DeepSeek Empty-Schema Fix. Empty tool-schema property maps now encode as {} (never []) at all three payload boundaries, fixing DeepSeek 400s; legacy tools are wrapped before the first register attempt so the fail-loud registry log only fires for genuinely unregisterable classes. (PR #5926)
• 📚 OKF Skill-Knowledge Conformance. All 91 bundled SKILL.md files gained the OKF v0.2-required type: Skill frontmatter and the four missing cross-linked reference files were restored — the OKF Validate tab no longer reports missing concepts. (PR #5919)
• 🧪 Test-Suite Exit Traps. New bin/sweep-tests.php sweeps every test file in parallel to surface exit-trap and drift failures; AJAX test contracts land in the bootstrap and 24+ test files align with the catchable-die/admin-handler contracts. Minimal production fixes: bare-exit test seams, duplicate CRM workflow-rule class rename, toolkit MCP scope check + nvoos:// resource URIs, SSE/Veo polling-limit filters. (PR #5929)
• 🔧 Pro SPA v2 Slash Commands. /chat, /new, /clear, /copy, /export now insert reliably from the slash-command drawer. (PR #5920)

✨ What's New at a Glance (v1.1.62)

• 📚 OKF Bundle Management (Base). New WP_MCP_AI_OKF_Bundle_Manager gives OKF knowledge bundles a full lifecycle — create, list, rename, archive, delete, ZipSlip-safe ZIP import/export, and health statistics — with the auto-generated skill-knowledge bundle protected from writes. Three new tools (okf_list_bundles, okf_validate_bundle, okf_import_bundle) join the extended okf_write_concept provenance schema (resource/sources/usage_window/verified), and a new OKF Bundle Manager admin screen (Bundles / Browser / Editor / Import-Export / Validate) mirrors the Skill Manager UX. See docs/features/okf-integration.md.
• 🔗 OKF → Skill Bridge (Pro). load_skill now resolves bundle:concept_id names into OKF concepts as loadable skills, gated per assistant (grant metabox, fail-closed), lifecycle (drafts rejected), and an optional minimum trust tier.
• 🤖 OKF Auto-Enrichment & Hybrid Knowledge Router (Pro). The enrichment agent crawls published site content (posts, pages, taxonomy terms) into OKF concepts with cross-links — deterministic and idempotent, AI summaries opt-in via filter — while route_knowledge_query classifies questions across OKF / vector / Paper stores and performs the OKF lookup when it is the primary route.
• 🧭 OKF Skills Drawer in Pro SPA v2 (Pro). A new read-only mcp-ai-pro/v1/okf REST surface (bundles, concept browse/search, assistant skill grants) powers an in-chat OKF drawer: browse bundles and concepts and reference them from the conversation without leaving the chat surface.
• ⚡ Vector Store Tools on the Responses API. OpenAI removes the Assistants API on 2026-08-26 — all vector-store operations now run headerless on the Responses API with file_batches ingestion (bounde