FM / wp-includes

/var/www/qr4y.com/www/wp-includes

Name	Size	Mode	Actions
abilities-api/	-	0775	rm
ai-client/	-	0775	rm
assets/	-	0755	rm
block-bindings/	-	0755	rm
block-patterns/	-	0755	rm
block-supports/	-	0755	rm
blocks/	-	0755	rm
build/	-	0775	rm
certificates/	-	0755	rm
css/	-	0755	rm
customize/	-	0755	rm
fonts/	-	0755	rm
html-api/	-	0755	rm
ID3/	-	0755	rm
images/	-	0755	rm
interactivity-api/	-	0755	rm
IXR/	-	0755	rm
js/	-	0755	rm
l10n/	-	0755	rm
php-ai-client/	-	0775	rm
php-compat/	-	0755	rm
PHPMailer/	-	0755	rm
pomo/	-	0755	rm
Requests/	-	0755	rm
rest-api/	-	0755	rm
SimplePie/	-	0755	rm
sitemaps/	-	0755	rm
sodium_compat/	-	0755	rm
style-engine/	-	0755	rm
Text/	-	0755	rm
theme-compat/	-	0755	rm
widgets/	-	0755	rm
.htaccess	178	0644	edit dl rm
abilities-api.php	32800	0644	edit dl rm
abilities.php	11797	0644	edit dl rm
admin-bar.php	40067	0644	edit dl rm
ai-client.php	2549	0644	edit dl rm
atomlib.php	12181	0644	edit dl rm
author-template.php	19844	0644	edit dl rm
block-bindings.php	7632	0644	edit dl rm
block-editor.php	28724	0644	edit dl rm
block-i18n.json	316	0644	edit dl rm
block-patterns.php	15606	0644	edit dl rm
block-template-utils.php	63168	0644	edit dl rm
block-template.php	18257	0644	edit dl rm
blocks.php	124205	0644	edit dl rm
bookmark-template.php	12768	0644	edit dl rm
bookmark.php	15427	0644	edit dl rm
cache-compat.php	11021	0644	edit dl rm
cache.php	13486	0644	edit dl rm
canonical.php	34786	0644	edit dl rm
capabilities.php	43584	0644	edit dl rm
category-template.php	56990	0644	edit dl rm
category.php	12834	0644	edit dl rm
class-avif-info.php	30008	0644	edit dl rm
class-feed.php	539	0644	edit dl rm
class-http.php	367	0644	edit dl rm
class-IXR.php	2609	0644	edit dl rm
class-json.php	43676	0644	edit dl rm
class-oembed.php	401	0644	edit dl rm
class-phpass.php	6771	0644	edit dl rm
class-phpmailer.php	664	0644	edit dl rm
class-pop3.php	21100	0644	edit dl rm
class-requests.php	2237	0644	edit dl rm
class-simplepie.php	453	0644	edit dl rm
class-smtp.php	457	0644	edit dl rm
class-snoopy.php	37715	0644	edit dl rm
class-walker-category-dropdown.php	2469	0644	edit dl rm
class-walker-category.php	8477	0644	edit dl rm
class-walker-comment.php	14221	0644	edit dl rm
class-walker-nav-menu.php	12044	0644	edit dl rm
class-walker-page-dropdown.php	2710	0644	edit dl rm
class-walker-page.php	7612	0644	edit dl rm
class-wp-admin-bar.php	18002	0644	edit dl rm
class-wp-ajax-response.php	5288	0644	edit dl rm
class-wp-application-passwords.php	17099	0644	edit dl rm
class-wp-block-bindings-registry.php	8263	0644	edit dl rm
class-wp-block-bindings-source.php	2992	0644	edit dl rm
class-wp-block-editor-context.php	1350	0644	edit dl rm
class-wp-block-list.php	4713	0644	edit dl rm
class-wp-block-metadata-registry.php	11846	0644	edit dl rm
class-wp-block-parser-block.php	2555	0644	edit dl rm
class-wp-block-parser-frame.php	1994	0644	edit dl rm
class-wp-block-parser.php	11525	0644	edit dl rm
class-wp-block-pattern-categories-registry.php	4383	0644	edit dl rm
class-wp-block-patterns-registry.php	10265	0644	edit dl rm
class-wp-block-processor.php	69914	0644	edit dl rm
class-wp-block-styles-registry.php	6419	0644	edit dl rm
class-wp-block-supports.php	7578	0644	edit dl rm
class-wp-block-template.php	2111	0644	edit dl rm
class-wp-block-templates-registry.php	7080	0644	edit dl rm
class-wp-block-type-registry.php	5305	0644	edit dl rm
class-wp-block-type.php	17222	0644	edit dl rm
class-wp-block.php	28236	0644	edit dl rm
class-wp-classic-to-block-menu-converter.php	4026	0644	edit dl rm
class-wp-comment-query.php	49040	0644	edit dl rm
class-wp-comment.php	17249	0644	edit dl rm
class-wp-connector-registry.php	15181	0644	edit dl rm
class-wp-customize-control.php	26112	0644	edit dl rm
class-wp-customize-manager.php	202908	0644	edit dl rm
class-wp-customize-nav-menus.php	58034	0644	edit dl rm
class-wp-customize-panel.php	10703	0644	edit dl rm
class-wp-customize-section.php	11209	0644	edit dl rm
class-wp-customize-setting.php	29956	0644	edit dl rm
class-wp-customize-widgets.php	72596	0644	edit dl rm
class-wp-date-query.php	35970	0644	edit dl rm
class-wp-dependencies.php	17089	0644	edit dl rm
class-wp-dependency.php	2653	0644	edit dl rm
class-wp-duotone.php	40836	0644	edit dl rm
class-wp-editor.php	72228	0644	edit dl rm
class-wp-embed.php	15908	0644	edit dl rm
class-wp-error.php	7514	0644	edit dl rm
class-wp-exception.php	253	0644	edit dl rm
class-wp-fatal-error-handler.php	8150	0644	edit dl rm
class-wp-feed-cache-transient.php	3304	0644	edit dl rm
class-wp-feed-cache.php	969	0644	edit dl rm
class-wp-filter-sentinel.php	760	0644	edit dl rm
class-wp-hook.php	17472	0644	edit dl rm
class-wp-http-cookie.php	7269	0644	edit dl rm
class-wp-http-curl.php	13261	0644	edit dl rm
class-wp-http-encoding.php	6689	0644	edit dl rm
class-wp-http-ixr-client.php	3516	0644	edit dl rm
class-wp-http-proxy.php	5980	0644	edit dl rm
class-wp-http-requests-hooks.php	2022	0644	edit dl rm
class-wp-http-requests-response.php	4243	0644	edit dl rm
class-wp-http-response.php	2977	0644	edit dl rm
class-wp-http-streams.php	16764	0644	edit dl rm
class-wp-http.php	41641	0644	edit dl rm
class-wp-icon-collections-registry.php	5805	0644	edit dl rm
class-wp-icons-registry.php	9903	0644	edit dl rm
class-wp-image-editor-gd.php	20741	0644	edit dl rm
class-wp-image-editor-imagick.php	43454	0644	edit dl rm
class-wp-image-editor.php	17456	0644	edit dl rm
class-wp-list-util.php	7443	0644	edit dl rm
class-wp-locale-switcher.php	6776	0644	edit dl rm
class-wp-locale.php	16848	0644	edit dl rm
class-wp-matchesmapregex.php	1828	0644	edit dl rm
class-wp-meta-query.php	30507	0644	edit dl rm
class-wp-metadata-lazyloader.php	6833	0644	edit dl rm
class-wp-navigation-fallback.php	9193	0644	edit dl rm
class-wp-network-query.php	19989	0644	edit dl rm
class-wp-network.php	12411	0644	edit dl rm
class-wp-object-cache.php	17524	0644	edit dl rm
class-wp-oembed-controller.php	6905	0644	edit dl rm
class-wp-oembed.php	34372	0644	edit dl rm
class-wp-paused-extensions-storage.php	5067	0644	edit dl rm
class-wp-phpmailer.php	4348	0644	edit dl rm
class-wp-plugin-dependencies.php	25209	0644	edit dl rm
class-wp-post-type.php	30672	0644	edit dl rm
class-wp-post.php	8806	0644	edit dl rm
class-wp-query.php	164148	0644	edit dl rm
class-wp-recovery-mode-cookie-service.php	6877	0644	edit dl rm
class-wp-recovery-mode-email-service.php	11162	0644	edit dl rm
class-wp-recovery-mode-key-service.php	4914	0644	edit dl rm
class-wp-recovery-mode-link-service.php	3523	0644	edit dl rm
class-wp-recovery-mode.php	11460	0644	edit dl rm
class-wp-rewrite.php	63693	0644	edit dl rm
class-wp-role.php	2523	0644	edit dl rm
class-wp-roles.php	9326	0644	edit dl rm
class-wp-script-modules.php	40743	0644	edit dl rm
class-wp-scripts.php	36754	0644	edit dl rm
class-wp-session-tokens.php	7319	0644	edit dl rm
class-wp-simplepie-file.php	3552	0644	edit dl rm
class-wp-simplepie-sanitize-kses.php	1903	0644	edit dl rm
class-wp-site-query.php	31482	0644	edit dl rm
class-wp-site.php	7836	0644	edit dl rm
class-wp-speculation-rules.php	7884	0644	edit dl rm
class-wp-styles.php	13316	0644	edit dl rm
class-wp-tax-query.php	19577	0644	edit dl rm
class-wp-taxonomy.php	18559	0644	edit dl rm
class-wp-term-query.php	40751	0644	edit dl rm
class-wp-term.php	5263	0644	edit dl rm
class-wp-text-diff-renderer-inline.php	979	0644	edit dl rm
class-wp-text-diff-renderer-table.php	18925	0644	edit dl rm
class-wp-textdomain-registry.php	10481	0644	edit dl rm
class-wp-theme-json-data.php	1805	0644	edit dl rm
class-wp-theme-json-resolver.php	35692	0644	edit dl rm
class-wp-theme-json-schema.php	7367	0644	edit dl rm
class-wp-theme-json.php	221506	0644	edit dl rm
class-wp-theme.php	65811	0644	edit dl rm
class-wp-token-map.php	29032	0644	edit dl rm
class-wp-url-pattern-prefixer.php	4802	0644	edit dl rm
class-wp-user-meta-session-tokens.php	2954	0644	edit dl rm
class-wp-user-query.php	44102	0644	edit dl rm
class-wp-user-request.php	2342	0644	edit dl rm
class-wp-user.php	23189	0644	edit dl rm
class-wp-view-config-data.php	29427	0644	edit dl rm
class-wp-walker.php	13292	0644	edit dl rm
class-wp-widget-factory.php	3343	0644	edit dl rm
class-wp-widget.php	18452	0644	edit dl rm
class-wp-xmlrpc-server.php	216272	0644	edit dl rm
class-wp.php	26371	0644	edit dl rm
class-wpdb.php	121437	0644	edit dl rm
class.wp-dependencies.php	373	0644	edit dl rm
class.wp-scripts.php	343	0644	edit dl rm
class.wp-styles.php	338	0644	edit dl rm
comment-template.php	103211	0644	edit dl rm
comment.php	150630	0644	edit dl rm
compat-utf8.php	19386	0644	edit dl rm
compat.php	22479	0644	edit dl rm
connectors.php	32922	0644	edit dl rm
cron.php	46266	0644	edit dl rm
date.php	400	0644	edit dl rm
default-constants.php	11365	0644	edit dl rm
default-filters.php	39500	0644	edit dl rm
default-widgets.php	2288	0644	edit dl rm
deprecated.php	193977	0644	edit dl rm
embed-template.php	338	0644	edit dl rm
embed.php	39215	0644	edit dl rm
error-protection.php	4092	0644	edit dl rm
feed-atom-comments.php	5504	0644	edit dl rm
feed-atom.php	3114	0644	edit dl rm
feed-rdf.php	2668	0644	edit dl rm
feed-rss.php	1189	0644	edit dl rm
feed-rss2-comments.php	4136	0644	edit dl rm
feed-rss2.php	3799	0644	edit dl rm
feed.php	25189	0644	edit dl rm
fonts.php	9789	0644	edit dl rm
formatting.php	357652	0644	edit dl rm
functions.php	295481	0644	edit dl rm
functions.wp-scripts.php	20492	0644	edit dl rm
functions.wp-styles.php	8654	0644	edit dl rm
general-template.php	183472	0644	edit dl rm
global-styles-and-settings.php	20780	0644	edit dl rm
http.php	28961	0644	edit dl rm
https-detection.php	5857	0644	edit dl rm
https-migration.php	4741	0644	edit dl rm
icons.php	6334	0644	edit dl rm
json-schema.php	7802	0644	edit dl rm
kses.php	88497	0644	edit dl rm
l10n.php	71415	0644	edit dl rm
link-template.php	160143	0644	edit dl rm
load.php	56475	0644	edit dl rm
locale.php	162	0644	edit dl rm
media-template.php	65759	0644	edit dl rm
media.php	236804	0644	edit dl rm
meta.php	66739	0644	edit dl rm
ms-blogs.php	26324	0644	edit dl rm
ms-default-constants.php	4921	0644	edit dl rm
ms-default-filters.php	6636	0644	edit dl rm
ms-deprecated.php	21787	0644	edit dl rm
ms-files.php	2857	0644	edit dl rm
ms-functions.php	92530	0644	edit dl rm
ms-load.php	20055	0644	edit dl rm
ms-network.php	3782	0644	edit dl rm
ms-settings.php	4197	0644	edit dl rm
ms-site.php	41729	0644	edit dl rm
nav-menu-template.php	25983	0644	edit dl rm
nav-menu.php	44269	0644	edit dl rm
option.php	105246	0644	edit dl rm
pluggable-deprecated.php	6324	0644	edit dl rm
pluggable.php	127919	0644	edit dl rm
plugin.php	39110	0644	edit dl rm
post-formats.php	7070	0644	edit dl rm
post-template.php	69129	0644	edit dl rm
post-thumbnail-template.php	10879	0644	edit dl rm
post.php	305215	0644	edit dl rm
query.php	37554	0644	edit dl rm
registration-functions.php	200	0644	edit dl rm
registration.php	200	0644	edit dl rm
rest-api.php	102951	0644	edit dl rm
revision.php	31241	0644	edit dl rm
rewrite.php	19567	0644	edit dl rm
robots-template.php	5185	0644	edit dl rm
rss-functions.php	277	0644	edit dl rm
rss.php	23203	0644	edit dl rm
script-loader.php	163550	0644	edit dl rm
script-modules.php	12311	0644	edit dl rm
session.php	258	0644	edit dl rm
shortcodes.php	24034	0644	edit dl rm
sitemaps.php	3238	0644	edit dl rm
speculative-loading.php	11880	0644	edit dl rm
spl-autoload-compat.php	441	0644	edit dl rm
style-engine.php	8045	0644	edit dl rm
taxonomy.php	178307	0644	edit dl rm
template-canvas.php	544	0644	edit dl rm
template-loader.php	4267	0644	edit dl rm
template.php	36824	0644	edit dl rm
theme-i18n.json	1892	0644	edit dl rm
theme-previews.php	2887	0644	edit dl rm
theme-templates.php	4060	0644	edit dl rm
theme.json	9480	0644	edit dl rm
theme.php	134641	0644	edit dl rm
update.php	38269	0644	edit dl rm
user.php	180301	0644	edit dl rm
utf8.php	6977	0644	edit dl rm
vars.php	6600	0644	edit dl rm
version.php	1131	0644	edit dl rm
view-config.php	19087	0644	edit dl rm
view-transitions.php	602	0644	edit dl rm
widgets.php	70866	0644	edit dl rm
wp-db.php	445	0644	edit dl rm
wp-diff.php	792	0644	edit dl rm

Edit: /var/www/qr4y.com/www/wp-includes/connectors.php (32922B)

<?php
/**
 * Connectors API.
 *
 * @package WordPress
 * @subpackage Connectors
 * @since 7.0.0
 */

use WordPress\AiClient\AiClient;
use WordPress\AiClient\Providers\Http\DTO\ApiKeyRequestAuthentication;

/**
 * Checks if a connector is registered.
 *
 * @since 7.0.0
 *
 * @see WP_Connector_Registry::is_registered()
 *
 * @param string $id The connector identifier.
 * @return bool True if the connector is registered, false otherwise.
 */
function wp_is_connector_registered( string $id ): bool {
	$registry = WP_Connector_Registry::get_instance();
	if ( null === $registry ) {
		return false;
	}

return $registry->is_registered( $id );
}

/**
 * Retrieves a registered connector.
 *
 * @since 7.0.0
 *
 * @see WP_Connector_Registry::get_registered()
 *
 * @param string $id The connector identifier.
 * @return array|null {
 *     Connector data, or null if not registered.
 *
 *     @type string $name           The connector's display name.
 *     @type string $description    The connector's description.
 *     @type string $logo_url       Optional. URL to the connector's logo image.
 *     @type string $type           The connector type, e.g. 'ai_provider'.
 *     @type array  $authentication {
 *         Authentication configuration. When method is 'api_key' or
 *         'application_password', includes credentials_url, setting_name, and
 *         optionally constant_name and env_var_name. When 'none', only method
 *         is present.
 *
 *         @type string $method          The authentication method: 'api_key',
 *                                       'application_password', or 'none'.
 *         @type string $credentials_url Optional. URL where users can obtain API credentials.
 *         @type string $setting_name    Optional. The setting name for the API key or application-password credentials.
 *         @type string $constant_name   Optional. PHP constant name for the API key or application-password credentials.
 *         @type string $env_var_name    Optional. Environment variable name for the API key or application-password credentials.
 *     }
 *     @type array  $plugin         {
 *         Optional. Plugin data for install/activate UI.
 *
 *         @type string   $file      The plugin's main file path relative to the plugins
 *                                   directory (e.g. 'my-plugin/my-plugin.php' or 'hello.php').
 *         @type callable $is_active Callback to determine whether the plugin is active. Receives no arguments and must return bool.
 *                                   Defaults to `__return_true`.
 *     }
 * }
 * @phpstan-return ?array{
 *     name: non-empty-string,
 *     description: string,
 *     logo_url?: non-empty-string,
 *     type: non-empty-string,
 *     authentication: array{
 *         method: 'api_key'|'application_password'|'none',
 *         credentials_url?: non-empty-string,
 *         setting_name?: non-empty-string,
 *         constant_name?: non-empty-string,
 *         env_var_name?: non-empty-string
 *     },
 *     plugin: array{
 *         file?: non-empty-string,
 *         is_active: callable(): bool,
 *     }
 * }
 */
function wp_get_connector( string $id ): ?array {
	$registry = WP_Connector_Registry::get_instance();
	if ( null === $registry ) {
		return null;
	}

return $registry->get_registered( $id );
}

/**
 * Retrieves all registered connectors.
 *
 * @since 7.0.0
 *
 * @see WP_Connector_Registry::get_all_registered()
 *
 * @return array {
 *     Connector settings keyed by connector ID.
 *
 *     @type array ...$0 {
 *         Data for a single connector.
 *
 *         @type string      $name           The connector's display name.
 *         @type string      $description    The connector's description.
 *         @type string      $logo_url       Optional. URL to the connector's logo image.
 *         @type string      $type           The connector type, e.g. 'ai_provider'.
 *         @type array       $authentication {
 *             Authentication configuration. When method is 'api_key' or
 *             'application_password', includes credentials_url, setting_name,
 *             and optionally constant_name and env_var_name. When 'none', only
 *             method is present.
 *
 *             @type string $method          The authentication method: 'api_key',
 *                                           'application_password', or 'none'.
 *             @type string $credentials_url Optional. URL where users can obtain API credentials.
 *             @type string $setting_name    Optional. The setting name for the API key or application-password credentials.
 *             @type string $constant_name   Optional. PHP constant name for the API key or application-password credentials.
 *             @type string $env_var_name    Optional. Environment variable name for the API key or application-password credentials.
 *         }
 *         @type array       $plugin         {
 *             Optional. Plugin data for install/activate UI.
 *
 *             @type string   $file      The plugin's main file path relative to the plugins
 *                                       directory (e.g. 'my-plugin/my-plugin.php' or 'hello.php').
 *             @type callable $is_active Callback to determine whether the plugin is active. Receives no arguments and must return bool.
 *                                       Defaults to `__return_true`.
 *         }
 *     }
 * }
 * @phpstan-return array<string, array{
 *     name: non-empty-string,
 *     description: string,
 *     logo_url?: non-empty-string,
 *     type: non-empty-string,
 *     authentication: array{
 *         method: 'api_key'|'application_password'|'none',
 *         credentials_url?: non-empty-string,
 *         setting_name?: non-empty-string,
 *         constant_name?: non-empty-string,
 *         env_var_name?: non-empty-string
 *     },
 *     plugin: array{
 *         file?: non-empty-string,
 *         is_active: callable(): bool,
 *     }
 * }>
 */
function wp_get_connectors(): array {
	$registry = WP_Connector_Registry::get_instance();
	if ( null === $registry ) {
		return array();
	}

return $registry->get_all_registered();
}

/**
 * Resolves an AI provider logo file path to a URL.
 *
 * Converts an absolute file path to a plugin URL. The path must reside within
 * the plugins or must-use plugins directory.
 *
 * @since 7.0.0
 * @access private
 *
 * @param string $path Absolute path to the logo file.
 * @return non-empty-string|null The URL to the logo file, or null if the path is invalid.
 */
function _wp_connectors_resolve_ai_provider_logo_url( string $path ): ?string {
	if ( ! $path ) {
		return null;
	}

$path = wp_normalize_path( $path );

if ( ! file_exists( $path ) ) {
		return null;
	}

$mu_plugin_dir = wp_normalize_path( WPMU_PLUGIN_DIR );
	if ( str_starts_with( $path, $mu_plugin_dir . '/' ) ) {
		$logo_url = plugins_url( substr( $path, strlen( $mu_plugin_dir ) ), WPMU_PLUGIN_DIR . '/.' );
		return $logo_url ? $logo_url : null;
	}

$plugin_dir = wp_normalize_path( WP_PLUGIN_DIR );
	if ( str_starts_with( $path, $plugin_dir . '/' ) ) {
		$logo_url = plugins_url( substr( $path, strlen( $plugin_dir ) ) );
		return $logo_url ? $logo_url : null;
	}

_doing_it_wrong(
		__FUNCTION__,
		__( 'Provider logo path must be located within the plugins or must-use plugins directory.' ),
		'7.0.0'
	);

return null;
}

/**
 * Initializes the connector registry with default connectors and fires the registration action.
 *
 * Creates the registry instance, registers built-in connectors (which cannot be unhooked),
 * and then fires the `wp_connectors_init` action for plugins to register their own connectors.
 *
 * @since 7.0.0
 * @access private
 */
function _wp_connectors_init(): void {
	$registry = new WP_Connector_Registry();
	WP_Connector_Registry::set_instance( $registry );

// Only register default AI providers if AI support is enabled.
	if ( wp_supports_ai() ) {
		_wp_connectors_register_default_ai_providers( $registry );
	}

// Non-AI default connectors.
	$registry->register(
		'akismet',
		array(
			'name'           => __( 'Akismet Anti-spam' ),
			'description'    => __( 'Protect your site from spam.' ),
			'type'           => 'spam_filtering',
			'plugin'         => array(
				'file'      => 'akismet/akismet.php',
				'is_active' => static function () {
					return defined( 'AKISMET_VERSION' );
				},
			),
			'authentication' => array(
				'method'          => 'api_key',
				'credentials_url' => 'https://akismet.com/get/',
				'setting_name'    => 'wordpress_api_key',
				'constant_name'   => 'WPCOM_API_KEY',
			),
		)
	);

/**
	 * Fires when the connector registry is ready for plugins to register connectors.
	 *
	 * Built-in connectors and any AI providers auto-discovered from the WP AI Client
	 * registry have already been registered at this point and cannot be unhooked.
	 *
	 * AI provider plugins that register with the WP AI Client do not need to use
	 * this action — their connectors are created automatically. This action is
	 * primarily for registering non-AI-provider connectors or overriding metadata
	 * on existing connectors.
	 *
	 * Use `$registry->register()` within this action to add new connectors.
	 * To override an existing connector, unregister it first, then re-register
	 * with updated data.
	 *
	 * Example — overriding metadata on an auto-discovered connector:
	 *
	 *     add_action( 'wp_connectors_init', function ( WP_Connector_Registry $registry ) {
	 *         if ( $registry->is_registered( 'anthropic' ) ) {
	 *             $connector = $registry->unregister( 'anthropic' );
	 *             $connector['description'] = __( 'Custom description for Anthropic.', 'my-plugin' );
	 *             $registry->register( 'anthropic', $connector );
	 *         }
	 *     } );
	 *
	 * @since 7.0.0
	 *
	 * @param WP_Connector_Registry $registry Connector registry instance.
	 */
	do_action( 'wp_connectors_init', $registry );
}

/**
 * Registers connectors for the built-in AI providers.
 *
 * @since 7.0.0
 * @access private
 *
 * @param WP_Connector_Registry $registry The connector registry instance.
 */
function _wp_connectors_register_default_ai_providers( WP_Connector_Registry $registry ): void {
	// Built-in connectors.
	$defaults = array(
		'anthropic' => array(
			'name'           => 'Anthropic',
			'description'    => __( 'Text generation with Claude.' ),
			'type'           => 'ai_provider',
			'plugin'         => array(
				'file' => 'ai-provider-for-anthropic/plugin.php',
			),
			'authentication' => array(
				'method'          => 'api_key',
				'credentials_url' => 'https://platform.claude.com/settings/keys',
			),
		),
		'google'    => array(
			'name'           => 'Google',
			'description'    => __( 'Text and image generation with Gemini and Imagen.' ),
			'type'           => 'ai_provider',
			'plugin'         => array(
				'file' => 'ai-provider-for-google/plugin.php',
			),
			'authentication' => array(
				'method'          => 'api_key',
				'credentials_url' => 'https://aistudio.google.com/api-keys',
			),
		),
		'openai'    => array(
			'name'           => 'OpenAI',
			'description'    => __( 'Text and image generation with GPT and Dall-E.' ),
			'type'           => 'ai_provider',
			'plugin'         => array(
				'file' => 'ai-provider-for-openai/plugin.php',
			),
			'authentication' => array(
				'method'          => 'api_key',
				'credentials_url' => 'https://platform.openai.com/api-keys',
			),
		),
	);

// Merge AI Client registry data on top of defaults.
	// Registry values (from provider plugins) take precedence over hardcoded fallbacks.
	$ai_registry = AiClient::defaultRegistry();

foreach ( array_filter( $ai_registry->getRegisteredProviderIds() ) as $connector_id ) {
		$provider_class_name = $ai_registry->getProviderClassName( $connector_id );
		$provider_metadata   = $provider_class_name::metadata();

$auth_method = $provider_metadata->getAuthenticationMethod();
		$is_api_key  = null !== $auth_method && $auth_method->isApiKey();

if ( $is_api_key ) {
			$credentials_url = $provider_metadata->getCredentialsUrl();
			$authentication  = array(
				'method' => 'api_key',
			);
			if ( $credentials_url ) {
				$authentication['credentials_url'] = $credentials_url;
			}
		} else {
			$authentication = array( 'method' => 'none' );
		}

$name        = $provider_metadata->getName();
		$description = $provider_metadata->getDescription();
		$logo_url    = $provider_metadata->getLogoPath()
			? _wp_connectors_resolve_ai_provider_logo_url( $provider_metadata->getLogoPath() )
			: null;

if ( isset( $defaults[ $connector_id ] ) ) {
			// Override fields with non-empty registry values.
			if ( $name ) {
				$defaults[ $connector_id ]['name'] = $name;
			}
			if ( $description ) {
				$defaults[ $connector_id ]['description'] = $description;
			}
			if ( $logo_url ) {
				$defaults[ $connector_id ]['logo_url'] = $logo_url;
			}
			// Always update auth method; keep existing credentials_url as fallback.
			$defaults[ $connector_id ]['authentication']['method'] = $authentication['method'];
			if ( ! empty( $authentication['credentials_url'] ) ) {
				$defaults[ $connector_id ]['authentication']['credentials_url'] = $authentication['credentials_url'];
			}
		} else {
			$defaults[ $connector_id ] = array(
				'name'           => $name ? $name : ucwords( $connector_id ),
				'description'    => $description ? $description : '',
				'type'           => 'ai_provider',
				'authentication' => $authentication,
			);
			if ( $logo_url ) {
				$defaults[ $connector_id ]['logo_url'] = $logo_url;
			}
		}
	}

// Register all default connectors directly on the registry.
	foreach ( $defaults as $id => $args ) {
		if ( 'api_key' === $args['authentication']['method'] ) {
			$sanitized_id = str_replace( '-', '_', $id );

$args['authentication']['setting_name'] = "connectors_ai_{$sanitized_id}_api_key";

// All AI providers use the {CONSTANT_CASE_ID}_API_KEY naming convention.
			$constant_case_key = strtoupper( (string) preg_replace( '/([a-z])([A-Z])/', '$1_$2', $sanitized_id ) ) . '_API_KEY';

$args['authentication']['constant_name'] = $constant_case_key;
			$args['authentication']['env_var_name']  = $constant_case_key;
		}

$args['plugin']['is_active'] = static function () use ( $ai_registry, $id ): bool {
			try {
				return $ai_registry->hasProvider( $id );
			} catch ( Exception $e ) {
				return false;
			}
		};

$registry->register( $id, $args );
	}
}

/**
 * Masks an API key, showing only the last 4 characters.
 *
 * @since 7.0.0
 * @access private
 *
 * @param string $key The API key to mask.
 * @return string The masked key, e.g. "************fj39".
 */
function _wp_connectors_mask_api_key( string $key ): string {
	if ( strlen( $key ) <= 4 ) {
		return $key;
	}

return str_repeat( "\u{2022}", min( strlen( $key ) - 4, 16 ) ) . substr( $key, -4 );
}

/**
 * Determines the source of an API key for a given connector.
 *
 * Checks in order: environment variable, PHP constant, database.
 * Environment variable and constant are only checked when their
 * respective names are provided.
 *
 * @since 7.0.0
 * @access private
 *
 * @param string $setting_name  The option name for the API key (e.g., 'connectors_spam_filtering_my_plugin_api_key').
 * @param string $env_var_name  Optional. Environment variable name to check (e.g., 'MY_PLUGIN_API_KEY').
 * @param string $constant_name Optional. PHP constant name to check (e.g., 'MY_PLUGIN_API_KEY').
 * @return string The key source: 'env', 'constant', 'database', or 'none'.
 */
function _wp_connectors_get_api_key_source( string $setting_name, string $env_var_name = '', string $constant_name = '' ): string {
	// Check environment variable first.
	if ( '' !== $env_var_name ) {
		$env_value = getenv( $env_var_name );
		if ( false !== $env_value && '' !== $env_value ) {
			return 'env';
		}
	}

// Check PHP constant.
	if ( '' !== $constant_name && defined( $constant_name ) ) {
		$const_value = constant( $constant_name );
		if ( is_string( $const_value ) && '' !== $const_value ) {
			return 'constant';
		}
	}

// Check database.
	$db_value = get_option( $setting_name, '' );
	if ( '' !== $db_value ) {
		return 'database';
	}

return 'none';
}

/**
 * Parses a `username:password` credentials string.
 *
 * Splits on the first colon, matching the HTTP Basic authentication
 * userinfo format, so passwords may contain colons.
 *
 * @since 7.1.0
 * @access private
 *
 * @param string $value The raw credentials string.
 * @return array{username: string, password: string} Parsed credentials. Both values
 *                                                   are empty when the string is malformed.
 */
function wp_connectors_parse_application_password_credentials( string $value ): array {
	$separator = strpos( $value, ':' );
	// Trim so surrounding whitespace or a trailing newline (common when the
	// value comes from a file or `.env`) does not become part of the credentials.
	$username = false === $separator ? '' : trim( substr( $value, 0, $separator ) );
	$password = false === $separator ? '' : trim( substr( $value, $separator + 1 ) );

if ( '' === $username || '' === $password ) {
		return array(
			'username' => '',
			'password' => '',
		);
	}

return array(
		'username' => $username,
		'password' => $password,
	);
}

/**
 * Resolves application-password credentials for a connector.
 *
 * Checks in order: environment variable, PHP constant, database. The
 * environment variable and constant are only checked when their respective
 * names are provided, and must contain the credentials as a single
 * `username:password` string. A non-empty environment variable or constant
 * that cannot be parsed as `username:password` is reported with
 * `_doing_it_wrong()` and ignored, so resolution falls through to the next
 * source.
 *
 * @since 7.1.0
 * @access private
 *
 * @param array $auth The connector's authentication configuration.
 * @return array{username: string, password: string, source: string} Resolved credentials and
 *                                                                   their source: 'env', 'constant',
 *                                                                   'database', or 'none'.
 */
function wp_connectors_get_application_password_credentials( array $auth ): array {
	// Check environment variable first.
	$env_var_name = $auth['env_var_name'] ?? '';
	if ( '' !== $env_var_name ) {
		$env_value = getenv( $env_var_name );
		if ( false !== $env_value && '' !== $env_value ) {
			$credentials = wp_connectors_parse_application_password_credentials( $env_value );
			if ( '' !== $credentials['username'] && '' !== $credentials['password'] ) {
				$credentials['source'] = 'env';
				return $credentials;
			}

_doing_it_wrong(
				__FUNCTION__,
				sprintf(
					/* translators: %s: Environment variable name. */
					__( 'The %s environment variable must contain application password credentials in "username:password" format.' ),
					esc_html( $env_var_name )
				),
				'7.1.0'
			);
		}
	}

// Check PHP constant.
	$constant_name = $auth['constant_name'] ?? '';
	if ( '' !== $constant_name && defined( $constant_name ) ) {
		$const_value = constant( $constant_name );
		if ( is_string( $const_value ) && '' !== $const_value ) {
			$credentials = wp_connectors_parse_application_password_credentials( $const_value );
			if ( '' !== $credentials['username'] && '' !== $credentials['password'] ) {
				$credentials['source'] = 'constant';
				return $credentials;
			}

_doing_it_wrong(
				__FUNCTION__,
				sprintf(
					/* translators: %s: PHP constant name. */
					__( 'The %s constant must contain application password credentials in "username:password" format.' ),
					esc_html( $constant_name )
				),
				'7.1.0'
			);
		}
	}

// Check database.
	$stored   = get_option( $auth['setting_name'] ?? '', array() );
	$username = is_array( $stored ) && isset( $stored['username'] ) && is_string( $stored['username'] ) ? $stored['username'] : '';
	$password = is_array( $stored ) && isset( $stored['password'] ) && is_string( $stored['password'] ) ? $stored['password'] : '';

return array(
		'username' => $username,
		'password' => $password,
		'source'   => '' !== $username && '' !== $password ? 'database' : 'none',
	);
}

/**
 * Checks whether an API key is valid for a given provider.
 *
 * @since 7.0.0
 * @access private
 *
 * @param string $key         The API key to check.
 * @param string $provider_id The WP AI client provider ID.
 * @return bool|null True if valid, false if invalid, null if unable to determine.
 */
function _wp_connectors_is_ai_api_key_valid( string $key, string $provider_id ): ?bool {
	try {
		$registry = AiClient::defaultRegistry();

if ( ! $registry->hasProvider( $provider_id ) ) {
			_doing_it_wrong(
				__FUNCTION__,
				sprintf(
					/* translators: %s: AI provider ID. */
					__( 'The provider "%s" is not registered in the AI client registry.' ),
					$provider_id
				),
				'7.0.0'
			);
			return null;
		}

$registry->setProviderRequestAuthentication(
			$provider_id,
			new ApiKeyRequestAuthentication( $key )
		);

return $registry->isProviderConfigured( $provider_id );
	} catch ( Exception $e ) {
		wp_trigger_error( __FUNCTION__, $e->getMessage() );
		return null;
	}
}

/**
 * Sanitizes stored application-password credentials for a connector.
 *
 * Credential fields that are missing or not strings keep their currently
 * stored values, so partial updates cannot silently clear a stored secret.
 * A password matching the mask that `_wp_connectors_rest_settings_dispatch()`
 * places in REST responses also keeps the stored password, so a masked
 * settings response can be submitted back to the endpoint unchanged.
 * Pass an empty string to clear a field.
 * If the sanitized username is empty, both fields are discarded so partial
 * credentials cannot leave an orphaned secret.
 *
 * @since 7.1.0
 * @access private
 *
 * @param mixed  $value  The submitted setting value.
 * @param string $option The option name being sanitized. Passed explicitly by the
 *                       registered sanitize callback; falls back to the current
 *                       `sanitize_option_{$option}` filter name when omitted.
 * @return array{username: string, password: string} Sanitized credentials.
 */
function wp_connectors_sanitize_application_password_credentials( $value, string $option = '' ): array {
	if ( ! is_array( $value ) ) {
		$value = array();
	}

if ( '' === $option ) {
		$option = str_replace( 'sanitize_option_', '', (string) current_filter() );
	}

$stored = get_option( $option );
	if ( ! is_array( $stored ) ) {
		$stored = array();
	}

$credentials = array();
	foreach ( array( 'username', 'password' ) as $field ) {
		if ( isset( $value[ $field ] ) && is_string( $value[ $field ] ) ) {
			$credentials[ $field ] = sanitize_text_field( $value[ $field ] );
		} else {
			$credentials[ $field ] = isset( $stored[ $field ] ) && is_string( $stored[ $field ] ) ? $stored[ $field ] : '';
		}
	}

// A masked password means a client resubmitted a masked REST response.
	if ( str_repeat( "\u{2022}", 16 ) === $credentials['password'] ) {
		$credentials['password'] = isset( $stored['password'] ) && is_string( $stored['password'] ) ? $stored['password'] : '';
	}

if ( '' === $credentials['username'] ) {
		return array(
			'username' => '',
			'password' => '',
		);
	}

return $credentials;
}

/**
 * Masks and validates connector credentials in REST responses.
 *
 * On every `/wp/v2/settings` response, masks connector API key values and the
 * password field of default application-password credential objects.
 *
 * On POST or PUT requests, validates each updated AI provider API key before
 * masking. If validation fails, the key is reverted to an empty string.
 * Application password values are masked but not validated.
 *
 * @since 7.0.0
 * @access private
 *
 * @param WP_REST_Response $response The response object.
 * @param WP_REST_Server   $server   The server instance.
 * @param WP_REST_Request  $request  The request object.
 * @return WP_REST_Response The modified response with masked/validated keys.
 */
function _wp_connectors_rest_settings_dispatch( WP_REST_Response $response, WP_REST_Server $server, WP_REST_Request $request ): WP_REST_Response {
	if ( '/wp/v2/settings' !== $request->get_route() ) {
		return $response;
	}

$data = $response->get_data();
	if ( ! is_array( $data ) ) {
		return $response;
	}

$is_update = 'POST' === $request->get_method() || 'PUT' === $request->get_method();

foreach ( wp_get_connectors() as $connector_id => $connector_data ) {
		$auth = $connector_data['authentication'];

if ( 'application_password' === $auth['method'] && ! empty( $auth['setting_name'] ) ) {
			$setting_name = $auth['setting_name'];
			if ( array_key_exists( $setting_name, $data ) && is_array( $data[ $setting_name ] ) ) {
				$password = $data[ $setting_name ]['password'] ?? '';
				if ( is_string( $password ) && '' !== $password ) {
					$data[ $setting_name ]['password'] = str_repeat( "\u{2022}", 16 );
				}
			}
			continue;
		}

if ( 'api_key' !== $auth['method'] || empty( $auth['setting_name'] ) ) {
			continue;
		}

$setting_name = $auth['setting_name'];
		if ( ! array_key_exists( $setting_name, $data ) ) {
			continue;
		}

$value = $data[ $setting_name ];

// On update, validate AI provider keys before masking.
		// Non-AI connectors accept keys as-is; the service plugin handles its own validation.
		if ( $is_update && is_string( $value ) && '' !== $value && 'ai_provider' === $connector_data['type'] ) {
			if ( true !== _wp_connectors_is_ai_api_key_valid( $value, $connector_id ) ) {
				update_option( $setting_name, '' );
				$data[ $setting_name ] = '';
				continue;
			}
		}

// Mask the key in the response.
		if ( is_string( $value ) && '' !== $value ) {
			$data[ $setting_name ] = _wp_connectors_mask_api_key( $value );
		}
	}

$response->set_data( $data );
	return $response;
}
add_filter( 'rest_post_dispatch', '_wp_connectors_rest_settings_dispatch', 10, 3 );

/**
 * Registers default connector settings.
 *
 * @since 7.0.0
 * @access private
 */
function _wp_register_default_connector_settings(): void {
	$registered_settings = get_registered_settings();

foreach ( wp_get_connectors() as $connector_data ) {
		$auth = $connector_data['authentication'];
		if ( 'api_key' !== $auth['method'] && 'application_password' !== $auth['method'] ) {
			continue;
		}

if ( empty( $auth['setting_name'] ) || isset( $registered_settings[ $auth['setting_name'] ] ) ) {
			continue;
		}
		$setting_name = $auth['setting_name'];

if ( ! isset( $connector_data['plugin']['is_active'] ) || ! is_callable( $connector_data['plugin']['is_active'] ) ) {
			continue;
		}

if ( ! call_user_func( $connector_data['plugin']['is_active'] ) ) {
			continue;
		}

if ( 'api_key' === $auth['method'] ) {
			register_setting(
				'connectors',
				$setting_name,
				array(
					'type'              => 'string',
					'label'             => sprintf(
						/* translators: %s: Connector name. */
						__( '%s API Key' ),
						$connector_data['name']
					),
					'description'       => sprintf(
						/* translators: %s: Connector name. */
						__( 'API key for the %s connector.' ),
						$connector_data['name']
					),
					'default'           => '',
					'show_in_rest'      => true,
					'sanitize_callback' => 'sanitize_text_field',
				)
			);
		} elseif ( 'application_password' === $auth['method'] ) {
			register_setting(
				'connectors',
				$setting_name,
				array(
					'type'              => 'object',
					'label'             => sprintf(
						/* translators: %s: Connector name. */
						__( '%s Credentials' ),
						$connector_data['name']
					),
					'description'       => sprintf(
						/* translators: %s: Connector name. */
						__( 'Application password credentials for the %s connector.' ),
						$connector_data['name']
					),
					'default'           => array(
						'username' => '',
						'password' => '',
					),
					'show_in_rest'      => array(
						'schema' => array(
							'type'                 => 'object',
							'properties'           => array(
								'username' => array(
									'type' => 'string',
								),
								'password' => array(
									'type' => 'string',
								),
							),
							'additionalProperties' => false,
						),
					),
					'sanitize_callback' => static function ( $value ) use ( $setting_name ) {
						return wp_connectors_sanitize_application_password_credentials( $value, $setting_name );
					},
				)
			);
		}
	}
}
add_action( 'init', '_wp_register_default_connector_settings', 20 );

/**
 * Passes stored connector API keys to the WP AI client.
 *
 * @since 7.0.0
 * @access private
 */
function _wp_connectors_pass_default_keys_to_ai_client(): void {
	try {
		$ai_registry = AiClient::defaultRegistry();
		foreach ( wp_get_connectors() as $connector_id => $connector_data ) {
			if ( 'ai_provider' !== $connector_data['type'] ) {
				continue;
			}

$auth = $connector_data['authentication'];
			if ( 'api_key' !== $auth['method'] || empty( $auth['setting_name'] ) ) {
				continue;
			}

if ( ! $ai_registry->hasProvider( $connector_id ) ) {
				continue;
			}

// Skip if the key is already provided via env var or constant.
			$key_source = _wp_connectors_get_api_key_source( $auth['setting_name'], $auth['env_var_name'] ?? '', $auth['constant_name'] ?? '' );
			if ( 'env' === $key_source || 'constant' === $key_source ) {
				continue;
			}

$api_key = get_option( $auth['setting_name'], '' );
			if ( ! is_string( $api_key ) || '' === $api_key ) {
				continue;
			}

$ai_registry->setProviderRequestAuthentication(
				$connector_id,
				new ApiKeyRequestAuthentication( $api_key )
			);
		}
	} catch ( Exception $e ) {
		wp_trigger_error( __FUNCTION__, $e->getMessage() );
	}
}
add_action( 'init', '_wp_connectors_pass_default_keys_to_ai_client', 20 );

/**
 * Exposes connector settings to the connectors-wp-admin script module.
 *
 * @since 7.0.0
 * @access private
 *
 * @param array<string, mixed> $data Existing script module data.
 * @return array<string, mixed> Script module data with connectors added.
 */
function _wp_connectors_get_connector_script_module_data( array $data ): array {
	$registry = AiClient::defaultRegistry();

if ( ! function_exists( 'validate_plugin' ) ) {
		require_once ABSPATH . 'wp-admin/includes/plugin.php';
	}

$connectors = array();
	foreach ( wp_get_connectors() as $connector_id => $connector_data ) {
		$auth     = $connector_data['authentication'];
		$auth_out = array( 'method' => $auth['method'] );

if ( 'api_key' === $auth['method'] ) {
			$auth_out['settingName']    = $auth['setting_name'] ?? '';
			$auth_out['credentialsUrl'] = $auth['credentials_url'] ?? null;
			$key_source                 = _wp_connectors_get_api_key_source( $auth['setting_name'] ?? '', $auth['env_var_name'] ?? '', $auth['constant_name'] ?? '' );
			$auth_out['keySource']      = $key_source;

if ( 'ai_provider' === $connector_data['type'] ) {
				try {
					$auth_out['isConnected'] = $registry->hasProvider( $connector_id ) && $registry->isProviderConfigured( $connector_id );
				} catch ( Exception $e ) {
					$auth_out['isConnected'] = false;
				}
			} else {
				$auth_out['isConnected'] = 'none' !== $key_source;
			}
		} elseif ( 'application_password' === $auth['method'] ) {
			$credentials = wp_connectors_get_application_password_credentials( $auth );

$auth_out['settingName']    = $auth['setting_name'] ?? '';
			$auth_out['credentialsUrl'] = $auth['credentials_url'] ?? null;
			$auth_out['keySource']      = $credentials['source'];
			$auth_out['isConnected']    = '' !== $credentials['username'] && '' !== $credentials['password'];
		}

$connector_out = array(
			'name'           => $connector_data['name'],
			'description'    => $connector_data['description'],
			'logoUrl'        => ! empty( $connector_data['logo_url'] ) ? $connector_data['logo_url'] : null,
			'type'           => $connector_data['type'],
			'authentication' => $auth_out,
		);

if ( ! empty( $connector_data['plugin']['file'] ) ) {
			$file         = $connector_data['plugin']['file'];
			$is_activated = (bool) call_user_func( $connector_data['plugin']['is_active'] );
			$is_installed = $is_activated || 0 === validate_plugin( $file );

$connector_out['plugin'] = array(
				'file'        => $file,
				'isInstalled' => $is_installed,
				'isActivated' => $is_activated,
			);
		}

$connectors[ $connector_id ] = $connector_out;
	}
	ksort( $connectors );
	$data['connectors']        = $connectors;
	$data['isFileModDisabled'] = ! wp_is_file_mod_allowed( 'install_plugins' );
	return $data;
}
add_filter( 'script_module_data_options-connectors-wp-admin', '_wp_connectors_get_connector_script_module_data' );

cmd: