Kontinua

変更履歴

0.8.2

• Fix: refuse to bootstrap a second copy when WordPress leaves both kontinua and kontinua-2 folders (constants already defined / missing includes). Shows an admin notice to keep a single folder.
• Fix: load includes from this file’s directory, not from a stale KONTINUA_DIR of another copy.

0.8.1

• Feature: PHP error buffer reports fingerprint, severity, source (plugin/theme/core), versions, and backtrace to the Host.it console.
• Feature: signed /issues/ack clears fingerprints after the console stores them; passport capabilities php_issues / php_issues_ack.
• Improvement: notices are captured with warnings and fatals (deprecations still ignored).

0.8.0

• Feature: broken link discovery helpers for the Host.it console (sitemap URL, recent posts, resolve URLs).
• Feature: local redirect table + front-end router (exact/regex) with cloud sync; protected paths (login, admin, cron, REST, xmlrpc) are never redirected.
• Feature: front-end highlight of broken links when opened from the console.

0.7.9

• Fix: backup DB stream opens START TRANSACTION WITH CONSISTENT SNAPSHOT when the engine allows it; SQL header SET NAMES follows the site DB charset; decimal/bit values stay quoted; PK resume no longer loops on key 0.
• Fix: file incremental since allows one hour of clock skew; hello reports site unix time.
• Fix: PHP error log normalizes messages before hashing, caps writes per hour, runs only when paired (filterable), and registers shutdown once.
• Fix: uninstall removes restore/php options, kontinua_* transients, harvester cron, uploads/kontinua-private, upgrade/kontinua-hold, and leftover collect runtimes.

0.7.8

• Security: /pair rate limit counts failed attempts only (higher per-IP plafond + soft global cap); optional KONTINUA_TRUSTED_PROXIES / filter kontinua_trusted_proxies for real client IP behind CDN.
• Security: signed-request anti-replay uses one sliding-window option instead of one transient per nonce.
• Security: unknown admin-entry tickets no longer flood the access log; entry URL uses admin-post.php (cache-bypass); filters for third-party 2FA.
• Security: backup runtime removes previous collect files on open, chmod 0600 when possible, hourly WP-Cron cleanup; idx/att under uploads/kontinua-private; fallback deploy path when ABSPATH is not writable.

0.7.7

• Feature: Settings → Kontinua console environment (staging / production when available). Default is staging so claims and backup push match the Host.it beta console; KONTINUA_CLOUD_URL still overrides.

0.7.6

• Fix: restore SQL splits statements with a quote-aware parser (semicolon inside strings no longer breaks the batch); table checks are anchored to DROP/CREATE/INSERT.
• Fix: legacy file index is NDJSON with a byte cursor (no full JSON decode per page); harvest index is built by streaming sorted walk without holding every path in RAM.
• Fix: table row counts use information_schema.TABLE_ROWS; fingerprints/rows without a usable PK use a stable ORDER BY; integer PK fingerprints use keyset pagination.
• Fix: plugin/theme update verify accepts version_compare equality with the offer or any version greater than the previous one (fewer false rollbacks). Update lists reuse WordPress transients instead of wiping them on every call.

0.7.5

• Fix: database backup no longer drops every column (column names are validated as identifiers, not as table names with the wp_ prefix).
• Fix: stop excluding zip/archives site-wide so digital product downloads and similar uploads are backed up; pull and harvest share one exclusion list.
• Fix: paths like foto..jpg are included; only real path segments “.” / “..” are rejected.
• Fix: omitted files (oversized, excluded dirs, unreadable) are reported to the console; index paths with tabs/newlines are encoded safely.
• Fix: signed backup read allows wp-config.php and .htaccess (needed for a complete restore); kontinua-private stays out of the vault.

0.7.4

• Security: database credentials stay on the site (baked into the backup runtime); session open no longer returns the DB password.
• Security: backup runtime only pushes to allowlisted ingest hosts; table prefix is enforced; restore writes need an open restore session; plugin-private paths stay blocked (site config remains readable for signed backups).
• Security: HTTPS required on pairing and signed routes; pairing claim TTL 1 hour; /pair rate-limited; anti-replay uses per-nonce transients; file index stored under a private uploads path.
• Security: default control plane is production (app.kontinua.host.it); staging/demo must set KONTINUA_CLOUD_URL. Passport user list is administrators only, after pairing.
• Auto admin entry fires wp_login and refuses users with Two Factor enabled.

0.7.3

• Backup also covers WP_CONTENT_DIR when it lives outside ABSPATH (Bedrock / Composer layouts): plugins, themes, and uploads are included.
• Detached harvest runtime and signed pull share the same dual-root index (content paths use the wp-content/ prefix).

0.7.2

• Settings screen focuses on connection status and API key pairing; readiness, passport, and admin entry logs stay under Advanced tools.
• Plugins list shows a Settings link. Italian translations ship in the plugin package and follow the site language.

0.7.1

• Backup runtime protocol 3. Files up to 512 MB are included: large files travel in 4 MB parts inside the normal packets and a backup interrupted mid-file resumes from the last part, not from the start of the file.
• The time budget of each packet is capped by the host’s PHP limit when the runtime cannot lift it; the console also learns, per site, when a reverse proxy cuts requests early and shortens its requests instead of failing the backup.

0.7.0

• Backup runtime protocol 2. Tables leave the site as one stream of compressed SQL segments (one connection, one ordered read per table) instead of hundreds of small pages. Unchanged tables are recognised from the engine’s own metadata, so a backup of an idle site no longer scans the database.
• File index records the inode change time and prunes excluded folders before descending; unchanged files are decided from the index without touching them.

0.4.1

• PHP warnings are stored once at the end of the request. Silenced errors are ignored, and the same warning is not stored again for twelve hours.

0.4.0

• Recent PHP warnings and fatals stay on the site. Host.it can read that list with a signed call.
• The plugin still does not check whether the public site is up, and it still does not upload to storage.

0.3.1

• A later backup can skip a table whose contents match the previous one. The file list is scanned once per pass.
• Restore onto another server is performed by Host.it. This plugin still does not upload to storage.

0.3.0

• Host.it can read files and database tables to store a backup, and write them back on restore.
• The plugin still does not upload to object storage. The signing key stays on Host.it.

0.2.0

• The console can list and apply plugin, theme, and core updates.
• A plugin or theme folder is copied aside for that update and restored if the new version does not land.
• Core updates require a separate confirmation and are not rolled back automatically.

0.1.0

• Pairing code is completed by the console. The site stores a public key only.
• Signed on-demand site inventory.
• One-time wp-admin entry for the user chosen at pairing, written to a local log.
• Replaces the 1.0.0 local-only “marked as linked” flag.

1.0.0

• Initial site identity, passport JSON, and a local pairing code.