Chimy's AI Coding Lab

Chimy’s AI Coding Lab is the showcase portal of the WP Maker plugin series: it presents the open-source plugins, themes, and apps developed by Chimy’s AI Coding Lab, with documentation links. It also serves as the platform core framework — modular management, SPA admin customization, REST API security, and app support. Advanced capabilities (image/media optimization, data synchronization, batch processing, etc.) are provided by dedicated standalone plugins in the wp-maker-* series.

Working together with WP Maker Admin, it can fully replace the native WordPress admin with a modern SPA management interface.

Some features have been split into standalone plugins (wp-maker-* series) that can be installed on demand.

Core Capabilities

• Modular platform — manifest.json-driven module discovery, registration, and enablement management; both built-in modules and external plugins can register
• SPA admin support — platform-level REST API (wpmaker/v1/admin/*), JSON-driven settings pages and field groups
• Admin customization — platform-level REST API covers SPA management; post editor (wpautop, featured images), general options (site icon), and media upload enhancements (SVG/JSON, WebP, renaming) are provided by the wp-maker-site plugin (site & optimization module)
• Application support — private-site APIs, CORS support; WatermelonDB sync is provided by the standalone wp-maker-sync plugin
• Case Portal — a top-level admin menu (works without WP Maker Admin) that lists the catalog of plugins/themes/Apps developed by Chimy’s AI Coding Lab, with documentation links, helping admins discover more components of the ecosystem
• Case Guide — a “recommended for this site” section in the Case Portal that suggests missing core companion plugins based on the current site state
• Security — malicious request blocking, SQL injection protection, XSS protection, directory traversal protection, login rate limiting, XML-RPC disabling; one-click temporary shutdown from the SPA dashboard

Modular Architecture

All modules are described by manifest.json with metadata and SPA menu configuration, managed by ModuleManager:

Each plugin ships its own acf-json/ field groups registered via acf/settings/load_json; configuration is managed via ACF Options Page + Local JSON. When ACF is not installed, the OptionsController fallback reads and writes configuration directly.

External plugins can register via ModuleManager:

\WPMaker\Core\ModuleManager::registerModulePath( __DIR__ );

REST API Namespaces

• wpmaker/v1/admin/* — platform administration (options, modules, system, network, categories, comments, users, etc.)
• wpmaker/v1/sync/* — WatermelonDB data sync (pull/push, provided by the standalone wp-maker-sync plugin)
• wpmaker/v1/sites/* — private-site APIs

Dependencies

• Advanced Custom Fields PRO — optional; enables visual settings pages when active
• 批量队列由独立插件 wp-maker-batch 提供（内置 Action Scheduler），不随本插件分发

The core works without ACF; the SPA settings pages fall back to the OptionsController when ACF is not present.

Technical Requirements

• PHP 7.4 or higher
• WordPress 6.0 or higher

External services

The Case Portal page lets an administrator manually refresh the WP Maker component catalog. The catalog is hosted on Gitee (https://gitee.com), an open-source code hosting service. No request is made automatically: the catalog is fetched only when an administrator clicks the “Refresh catalog” button, and the response is cached locally for 12 hours. Only the extension catalog data is downloaded; no personal data is sent.
Gitee terms of service: https://gitee.com/terms
Gitee privacy policy: https://gitee.com/privacy

Privacy

This plugin does not collect user data, does not perform remote telemetry, and does not send any information to the author’s server.

• Feishu notifications — when Feishu visitor notifications or FluentChat Feishu notifications are enabled, related event information is sent to a Feishu bot webhook configured by the site administrator; recipients and content are fully controlled by the site administrator
• Baidu Analytics — when enabled, a Baidu Analytics script is injected in the frontend footer; data is processed by the Baidu Analytics platform. Please follow Baidu’s privacy policy
• CORS — cross-origin response headers are configured to support app requests; no data is actively sent out
• Case Portal catalog — when an administrator opens the Case Portal page, this plugin fetches a public extension catalog (plugin/theme/App list) from the official Gitee repository to display documentation links; no site data is uploaded

All external interactions are enabled explicitly by the site administrator; the plugin itself has no phone-home behavior.