3 Commits

Include renames

Author	SHA1	Message	Date
janniclas.loosenandClaude Opus 5.5	b24eb6c3e9	fix(security): no direct HTTP access to plugin PHP files (audit L2, cheap part) ... Every file under src/ exits outside WordPress (defined('ABSPATH') || exit; after the use block, so a direct request no longer prints a fatal error with the server path); divi-convert-fixture.php gets the WP_CLI guard the other integration scripts have. A unit test keeps both true; PSR1 side-effects warning excluded for the guard. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 19:32:12 +02:00
janniclas.loosenandClaude Opus 5.5	d5a9774241	fix: content-create names the Divi layout when its write fails (S50) ... A failing Divi layout write discarded the draft with the fields/terms message (REASON_EXTRAS); it now passes NewDraft::REASON_LAYOUT (ledger T9). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 18:35:59 +02:00
janniclas.loosenandClaude Opus 5.5	d2cc8497c9	refactor: extract the lit/content-create draft transaction into NewDraft (M7) ... NewDraft owns insert (partial write on a throwing hook), refuse and discard (via Rollback::attempt and WriteFailed::*) and the partial logging; ContentCreateAbility keeps checkDivi/prepare/combined (Errors::fieldsOf) and the result. Both discard callers still pass REASON_EXTRAS. Behaviour unchanged; NewDraftTest adds the throwing-delete branch. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-26 17:43:50 +02:00