feat: skeleton preloader for app.feat: disable automatic authentication for non-ssl.fix: disable encryption when on non-ssl.
0.9.0
Fix: non-ssl default to manual authentication
0.8.0
Improved: Connections UI. Reduced connections from 2 to 1 on connections page.
Fix: option key change for RTC enabled.
0.7.0
New: Automatic connection flow. Admins can connect via the WPSignal dashboard with a single click, without entering an API key. Uses a CSRF-protected OAuth-style code exchange.
New: Disconnect button in the Connection tab. Removes the site from the WPSignal server and clears all local credentials, with inline confirmation before proceeding.
New: Per-site JWT signing secrets. Each site’s connection tokens are now signed with a unique secret, isolating sites cryptographically and eliminating cross-site token forgery risk.
Improved: Connection tab redesigned with Automatic and Manual sub-tabs to clearly separate the two connection methods.
Improved: Disconnect works correctly regardless of how the site was connected: API key authentication for manual connections, publish-secret authentication for automatic connections.
0.6.0
New: Plugin renamed to “WordSocket” to comply with WordPress.org plugin directory guidelines.
Improved: Settings Connection tab revamped: server URL field removed, flow simplified to API Key entry and a single Connect action.
Improved: API key validated client-side before attempting connection.
Improved: Connection tab now surfaces WordPress real-time collaboration (RTC) availability and WP version compatibility, with clearer, more descriptive warnings when collaborative editing is unavailable.
Improved: PHP documentation blocks updated across all core classes for better tooling and doc parser support.
Developer: .pot language file added (eventra-for-wpsignal.pot).
0.5.1
Fixed: WordPress 7.0 Beta 2 compatibility for the Yjs sync provider. Collection-level providers (e.g. collaborative notes) receive a null objectId; the provider now maps this to a shared “collection” channel suffix so all peers join the same channel.
Fixed: ProviderCreatorOptions type updated to accept objectId: string | number | null, matching the Beta 2 provider creator API.
0.5.0
New: wpsignal_token_channels filter: plugins can append channels to the initial auto-subscribe list in the minted JWT.
New: wpsignal_token_channel_prefixes filter: plugins can add channel-prefix permissions to the JWT allowed_channel_prefixes claim, enabling server-enforced access to custom channel namespaces.
Improved: window.WPS.subscribe() and window.WPS.unsubscribe() now work on SSE connections. Channel changes are tracked in a persistent set and applied immediately via a debounced SSE reconnect, so plugins that call these methods do not need to know the current transport.
Developer: forceSSE config flag available for testing the SSE transport without browser tooling.
0.4.0
New: AES-256-GCM encrypted event payloads. The WPSignal relay receives and forwards ciphertext only: plaintext message content never leaves WordPress.
New: Encryption key derived from WordPress salts and site key via HKDF-SHA256. Key is never transmitted to the WPSignal server.
New: wpsignal_encryption_seed filter for plugins and themes to supply custom key material.
New: SubtleCrypto decryption in the browser client: events are dispatched only after successful decryption.
0.3.0
New: Real-time collaborative editing in the block editor (WordPress 7.0+) via Yjs WebSocket sync provider.
New: publishBinary() and onBinaryMessage() methods on window.WPS for binary WebSocket frames.
New: transport property on window.WPS exposes the current connection type (‘ws’, ‘sse’, or null).
New: Admin toggle in Settings to enable or disable the real-time collaboration provider independently.
Improved: Collaboration provider emits disconnected status when WebSocket is unavailable, allowing WordPress to show its “not synced” indicator.
0.2.0
New: Custom trigger builder: register triggers from the admin UI without code.
New: Settings page rebuilt as a React app with Connection and Triggers tabs.
New: Explorer (Kitchen Sink) admin page with 5 interactive panels.
New: Public JavaScript API (window.WPS): subscribe, publish, event listeners.
New: WPS::trigger() fluent builder and WPS::publish() facade methods.
New: Support for self-hosted servers (configurable server URL).
Improved: OOP architecture with PSR-4 autoloading under the WPSignal namespace.
Improved: TypeScript source with @wordpress/scripts build pipeline.
