create-wp-plugin-cli — Master Audit, Backlog & Architectural Roadmap

Status: Consolidated Master Checklist (Post v1.0.5 Full Codebase Review — Iteration 14 Complete)
Legend: P0 = Blocking / Critical Bug / Violation · P1 = High Priority · P2 = Should Have · P3 = Nice to Have / Polish

🎯 High-Level Action Plan & Execution Roadmap

Phase 1: Critical Bug Fixes (P0) & WordPress.org Compliance
Phase 2: WooCommerce Granularity Overhaul (Sub-modules & Smart Asset Build)
Phase 3: PHP Architecture & SOLID Modernization (Container, Service Providers, strict_types)
Phase 4: CLI Refactoring (God-function split, Self-describing Modules, Rollback)
Phase 5: Quality, Testing, Windows CI & Static Analysis (PHPStan, Pest/PHPUnit, Windows Matrix)
Phase 6: Developer Experience, Documentation & Polish (Presets, Dry-run, Architecture Guide)

🛍️ Special Feature: Granular WooCommerce Architecture Design

The Problem

Selecting woocommerce_hooks previously dumped 15 separate files into every project (Payment Gateway, Shipping Method, Custom Email + 2 templates, Custom Product Type, Gutenberg Blocks, Block Integration JS, and a full webpack build pipeline). Developers who only wanted an email or shipping method were forced into building React blocks.

The Solution: Modular Sub-Modules

Sub-Module ID	Feature Name	Generated Files	Needs JS Build?	Status
`woo:gateway`	Payment Gateway (Classic + Block Checkout)	`src/Woo/Gateways/Gateway.php`, `src/Woo/Gateways/Blocks_Payment_Method_Type.php`, `assets/src/wc-gateway-block.js`	Yes	[x]
`woo:shipping`	Shipping Method (Zone-based calculation)	`src/Woo/Shipping/Shipping_Method.php`, `src/Woo/Providers/Shipping_Provider.php`	No	[x]
`woo:email`	Transactional Email (HTML & Plain templates)	`src/Woo/Emails/Custom_Email.php`, `templates/emails/*`	No	[x]
`woo:product-type`	Custom Product Type (Pricing & Tabs)	`src/Woo/Products/Custom_Product.php`, `src/Woo/Providers/Product_Type_Provider.php`	No	[x]
`woo:blocks`	Cart & Checkout Block Slots	`src/Woo/Blocks/Integration.php`, `src/Woo/Blocks/Cart_Summary_Block.php`, `assets/src/blocks-integration.js`	Yes	[x]
`woo:order-status`	Custom Order Status (HPOS-ready)	`src/Woo/Orders/Order_Status_Service.php`	No	[x]
`woo:action-scheduler`	Action Scheduler (Background queues)	`src/Woo/Tasks/Action_Scheduler_Service.php`	No	[x]
`woo:store-api`	Store API Endpoint Extension	`src/Woo/Api/Store_Api_Extension.php`	No	[x]
`woo:my-account`	My Account Custom Endpoint	`src/Woo/Account/Account_Endpoint_Service.php`, `templates/my-account/*`	No	[x]

Interactive Flow

When WooCommerce Integration is selected in Question 11, the CLI opens a secondary multi-select prompt:

? 11a. Select WooCommerce components to include:
  [x] Payment Gateway (Classic + Block Checkout)
  [ ] Custom Shipping Method
  [ ] Custom Transactional Email (HTML & Plain templates)
  [x] Custom Order Status (HPOS compliant)
  [ ] Custom Product Type & Data Tabs
  [ ] Cart & Checkout Block Extensions
  [x] Action Scheduler (Background Task Runner)
  [ ] Store API Extension (ExtendSchema for Blocks)
  [ ] My Account Custom Endpoint

CLI Flags & Presets

Granular: --modules "admin_settings,woo:gateway,woo:order-status"
Bundle shortcut: --modules "woo:all" or --modules "woocommerce" (scaffolds gateway + order status + HPOS by default)
Smart Build Pipeline: If only PHP-based WooCommerce features are selected, no package.json or webpack config is created, keeping the plugin 100% pure PHP.

🐛 Section 0: Critical Codebase Findings & Edge Cases (Forensic Audit)

Iteration 1 Findings

Iteration 2 Findings

~~NEW-14 [P0] PHP Fatal Syntax Error on Apostrophes / Single Quotes in Plugin Name~~
Location: templates/src/Admin/Settings_Page.php:38, Rest/Rest_Controller.php:83, Woo/Gateways/Gateway.php:29, Woo/Shipping/Shipping_Method.php:30, Woo/Products/Custom_Product.php:53
Templates embed '{{PLUGIN_NAME}}' directly inside PHP single quotes __( '{{PLUGIN_NAME}} Settings', '...' ). If a user names their plugin "Dave's Plugin", the output becomes __( 'Dave's Plugin Settings', '...' ) which generates a fatal PHP syntax error (T_STRING). Fix: Use addcslashes($name, "'\\") for PHP single-quote substitutions.
~~NEW-15 [P0] Corrupt JSON Generation on Double Quotes in Description or Plugin Name~~
Location: templates/composer.json:3, templates/react/package.json:4, templates/react/assets/src/blocks/cart-summary/block.json:5
Templates embed "description": "{{DESCRIPTION}}" directly. If a description contains double quotes (e.g. A plugin with "fast" checkout), composer.json, package.json, and block.json become invalid JSON, causing composer validate and npm install to crash immediately. Fix: JSON-encode strings injected into JSON files.
NEW-16 [P1] Unprefixed CSS Classes in sample-widget.css Violate WPCS
Location: templates/assets/css/widgets/sample-widget.css:4-28
Uses generic class names .sample-widget-wrapper, .sample-widget-title, .sample-widget-description without the {{PREFIX}} namespace, causing global style collision with other Elementor widgets and themes.
NEW-17 [P1] workflow_dispatch broken in .github/workflows/publish.yml
Location: .github/workflows/publish.yml:41-45
Line 41 assumes $GITHUB_REF is refs/tags/v*. On manual workflow_dispatch, $GITHUB_REF is refs/heads/main, causing the tag comparison to always fail and aborting manual publish runs.
NEW-18 [P2] Code Snippets ship deprecated Singleton pattern and lack strict_types=1
Location: templates/.vscode/php.code-snippets:165-214
The snippet extension ships "WordPress OOP Singleton", generating the exact anti-pattern that violates DIP/SOLID, and misses declare(strict_types=1) across all snippet stubs.
NEW-19 [P2] Block Editor render crashes on uninitialized WC()->cart
Location: templates/react/assets/src/blocks/cart-summary/render.php:14-16
In the Gutenberg block editor or REST renderer context, WC()->cart is null, causing the block to render completely blank in the editor without a placeholder preview.
NEW-20 [P2] Block namespace in block.json uses function prefix instead of slug
Location: templates/react/assets/src/blocks/cart-summary/block.json:4
"name": "{{PREFIX}}/cart-summary" should use "name": "{{SLUG}}/cart-summary" according to WordPress block registration best practices.
NEW-21 [P2] Windows executable path for PHPCS in .vscode/settings.json
Location: templates/.vscode/settings.json:5-6
"phpsab.executablePathCS": "vendor/bin/phpcs" fails on Windows machines unless .bat is supported or dynamic OS resolution is applied.

Iteration 3 Findings

~~NEW-22 [P0] suggestPrefix() generates prefixes that fail its own validator on long single-word names~~
Location: index.js:53-74
If the user inputs a single word like "WooCommerceIntegration" (22 chars), suggestPrefix() returns "woocommerceintegration", which immediately fails validatePrefix() (prefix.length > 20). Fix: Truncate single-word suggestions to 12 characters.
~~NEW-23 [P0] suggestNamespace() produces illegal PHP namespaces on numeric starts~~
Location: index.js:38-51
For names starting with numbers (e.g. "24Seven Commerce"), suggestNamespace() returns "24SevenCommerce", which is an illegal PHP namespace and fails validateNamespace(). Fix: Prefix with Plugin or sanitize leading digits.
~~NEW-24 [P1] Module Duplication Bug (--modules "admin_settings,admin_settings")~~
Location: index.js:247-251
parseModules() does not deduplicate. Passing repeated modules duplicates service registrations in Plugin.php and duplicate lines in Activator.php. Fix: Wrap in [...new Set(modules)].
~~NEW-25 [P1] Logged-out Anonymous Users Bypass Security Check in Ajax_Handler.php~~ (Fixed in 0.14)
Location: templates/src/Ajax/Ajax_Handler.php:66
if ( is_user_logged_in() && ! current_user_can( 'read' ) ) only checks capability if logged in. Since wp_ajax_nopriv_ is hooked, anonymous visitors bypass capability checking completely. Fix: Enforce capability or remove nopriv by default.
~~NEW-26 [P1] Hard Flush on Activation/Deactivation (flush_rewrite_rules())~~
Location: index.js:863-864
Calls flush_rewrite_rules() without arguments, triggering an expensive disk rewrite of .htaccess / web.config. WordPress standard for activation is soft-flush: flush_rewrite_rules( false ).
~~NEW-27 [P1] Dead "main" Entry in Scaffolded package.json Without React~~
Location: templates/react/package.json:5 & index.js:761
When only Interactivity or WooCommerce is chosen without React, package.json specifies "main": "assets/build/index.js", but assets/src/index.js is never compiled, leaving a broken dead entry.
NEW-28 [P2] Non-ASCII / Unicode Diacritic Stripping Bug in slugify()
Location: index.js:25-36
slugify("Über Plugin") strips Ü entirely and becomes "ber-plugin". Fix: Add .normalize('NFD').replace(/[\u0300-\u036f]/g, '') before regex stripping.
NEW-29 [P2] Elementor Widget CamelCase to Kebab Handle Conversion Flaw
Location: index.js:683-688
Widget asset slug only replaces underscores (str_replace('_', '-')), failing on CamelCase widget classes (e.g. HeroBanner becomes herobanner.css instead of hero-banner.css).
NEW-30 [P2] Theme Email Template Override Directory Incompatibility
Location: templates/src/Woo/Emails/Custom_Email.php:30-32
Sets template path to emails/... instead of woocommerce/emails/..., breaking standard {theme}/woocommerce/emails/ overrides in custom WordPress themes.

Iteration 4 Findings

NEW-31 [P1] Missing JavaScript Translation Registration (wp_set_script_translations)
Location: templates/src/Admin/Assets.php:51, Woo/Gateways/Blocks_Payment_Method_Type.php:65, Woo/Blocks/Integration.php:59
Enqueued JavaScript bundles call wp.i18n translation methods (__(), _n()), but PHP never calls wp_set_script_translations(). As a result, JavaScript strings remain in English on non-English WordPress installations.
NEW-32 [P1] Cart is not emptied on successful checkout in Gateway.php
Location: templates/src/Woo/Gateways/Gateway.php:81-95
process_payment() completes payment with $order->payment_complete(), but omits WC()->cart->empty_cart(), leaving active cart items in user sessions on certain WooCommerce configurations.
NEW-33 [P1] Missing Global Form Fields in Shipping_Method.php
Location: templates/src/Woo/Shipping/Shipping_Method.php:58-73
Only defines $this->instance_form_fields and never sets $this->form_fields. Navigating to the global shipping method settings page in WooCommerce Admin renders an empty form.
NEW-34 [P1] Potential PHP Notices on Non-Scalar get_option & REST parameters
Location: templates/src/Admin/Settings_Page.php:84, Rest/Rest_Controller.php:84
Direct type casting (string) $value without is_scalar() guards triggers Array to string conversion notices when array or object values are retrieved.
NEW-35 [P2] Missing Custom Category Registration for Elementor Widgets
Location: templates/src/Widgets/Sample_Widget.php:73-75
Assigns widget to Elementor's default 'general' category instead of registering a branded plugin category via elementor/elements/categories_registered.
NEW-36 [P2] Cart_Summary_Block.php does not implement Registrable
Location: templates/src/Woo/Blocks/Cart_Summary_Block.php:22-38
Uses an isolated static register() method rather than integrating into the plugin's OOP contract system.
NEW-37 [P2] Shortcode.php ignores enclosing shortcode content
Location: templates/src/Frontend/Shortcode.php:37-55
Signature declares $content = null for enclosing shortcodes, but the template never handles $content or calls do_shortcode().
NEW-38 [P2] Unsafe Current Directory Fallback in Interactive outputDir Prompt
Location: index.js:399
initial: flags.out || ((prev, values) => './' + values.slug) can evaluate to './' if slug is undefined, creating a risk of scaffolding directly into the root folder. Fix: Default to './' + (values.slug || 'my-plugin').

Iteration 5 Findings

NEW-39 [P1] Custom WooCommerce Product Type Missing Add to Cart Hook
Location: templates/src/Woo/Products/Custom_Product.php:23-56
WooCommerce requires add_action( 'woocommerce_{{PREFIX}}_custom_add_to_cart', 'woocommerce_simple_add_to_cart' ) to render the add-to-cart form on single product pages. Without this hook, no add to cart button is displayed on the frontend.
NEW-40 [P1] Conflicting Dual UI Rendered in React Admin Mode
Location: templates/src/Admin/Settings_Page.php:98-107
When useReact is enabled, both the <div id="{{PREFIX}}-app-root"></div> mount point and the classic <form method="post" action="options.php"> are rendered on the same page simultaneously, creating a confusing stacked dual-interface.
NEW-41 [P1] Inaccessible Settings API Field Lacking label_for & Input id
Location: templates/src/Admin/Settings_Page.php:69-86
add_settings_field() omits 'label_for' => '{{PREFIX}}_option_name' and the <input> lacks id="{{PREFIX}}_option_name", violating accessibility standards (WCAG a11y label associations).
NEW-42 [P1] wp {{PREFIX}} cache clear Leaves Database Transients on WP 6.1+ Without External Object Cache
Location: templates/src/CLI/Commands.php:65-69
If wp_cache_flush_group() exists, delete_transient() is skipped in an else branch. On default MySQL installs without Redis/Memcached, persistent database transients remain uncleared.
NEW-43 [P2] Code Snippet Widget Name Regex Mismatches Sample Widget Convention
Location: templates/.vscode/php-elementor.code-snippets:33
Transform produces {{PREFIX}}_sample-widget (hyphenated), while Sample_Widget.php uses {{PREFIX}}_sample_widget (underscores).
NEW-44 [P2] CPT Taxonomy REST Attachment & Missing rest_base
Location: templates/src/PostTypes/Post_Types.php:41-65
Registers taxonomy after post type without 'taxonomies' => ['{{PREFIX}}_category'] in $cpt_args and without explicit 'rest_base', creating potential REST API schema omission.
NEW-45 [P2] Ephemeral Elementor Dependency Notice (Dismiss Button Does Not Persist)
Location: templates/src/Elementor/Dependency_Notice.php:46
Notice has .is-dismissible but lacks an AJAX handler to store dismissed state, causing it to reappear on every page load.
NEW-46 [P2] Missing Script Module Standard Namespace Identifier
Location: templates/src/Frontend/Interactivity.php:50
Script module ID is registered as '{{PREFIX}}-interactivity-view' instead of the official WordPress Core convention format '{{SLUG}}/view'.

Iteration 6 Findings

NEW-47 [P1] Missing Core Constants in tests/bootstrap.php ({{PREFIX}}_PATH, {{PREFIX}}_URL)
Location: templates/tests/bootstrap.php:14-19
bootstrap.php only defines {{PREFIX_UPPER}}_VERSION and {{PREFIX_UPPER}}_FILE. Any unit test instantiating Admin\Assets, Interactivity, Blocks_Payment_Method_Type, Integration, or Custom_Email crashes with Error: Undefined constant "{{PREFIX}}_PATH".
NEW-48 [P1] Outdated WordPress Stubs Version for Interactivity API in composer.json
Location: templates/composer.json:23
Locks php-stubs/wordpress-stubs to ^6.0. When interactivity module is selected (requiring WP 6.5+), Intelephense and static analyzers report false undefined function errors for wp_register_script_module() and wp_interactivity_state().
NEW-49 [P2] Unconditional Elementor Transient Deletion & Orphan CPT Data in uninstall.php
Location: templates/uninstall.php:21
delete_transient('{{PREFIX}}_elementor_widgets') is executed unconditionally even when Elementor is not selected, while orphaned CPT posts/terms are left uncleaned.
NEW-50 [P2] Test Suite Temp Directory Leakage on Assertion Failures (generator.test.js)
Location: tests/generator.test.js
fs.rmSync(outDir) is placed after assertions without try...finally or t.after(). Any failed test leaves tmp-test-* directories on disk, corrupting subsequent runs with "directory already exists" errors.

Iteration 7 Findings

~~NEW-51 [P0] Windows Drive-Letter Casing Crash in isRunAsScript()~~
Location: index.js:930-944
On Windows, path.resolve(__filename) === path.resolve(invokedPath) evaluates to false if drive letter casings differ (d:\ vs D:\), causing main() to silently never execute. Fix: Use case-insensitive path comparison on Windows.
NEW-52 [P1] Sample "Special Product Note" Injected on Every Single Product Page
Location: templates/src/Woo/Woo_Hooks.php:37, 76-78
Hooks custom_product_summary_note() on woocommerce_single_product_summary, printing unrequested demo markup between the price and add-to-cart button on all products across the live shop.
NEW-53 [P1] Unhandled Non-Array Return from apply_filters('{{PREFIX}}_services')
Location: templates/src/Plugin.php:90-92
If a filter callback returns non-array (e.g. null or false), foreach throws a fatal TypeError: foreach() argument must be of type array|object, null given.
NEW-54 [P1] Missing Tax Calculation in Shipping_Method::calculate_shipping()
Location: templates/src/Woo/Shipping/Shipping_Method.php:81-89
$this->add_rate() omits 'package' => $package, leading to incorrect tax calculations for taxable shipping zones in WooCommerce stores.
NEW-55 [P2] Missing tmp-test* in Root .gitignore
Location: .gitignore
Test temp folders created by generator.test.js are not ignored, cluttering git working tree when tests fail.
~~NEW-56 [P2] Missing create-wp-plugin Alias in package.json "bin" Field~~
Location: package.json:6-8
Only defines "create-wp-plugin-cli". Adding "create-wp-plugin": "index.js" ensures standard npm npm create wp-plugin alias execution works without error.
Rejected: create-wp-plugin is a separate, unrelated npm package. A bin by that name shadows it on PATH and blurs the two projects — the opposite of the intent. The alias has been removed; create-wp-plugin-cli is the sole bin.

Iteration 8 Findings

NEW-57 [P1] phpcs.xml Skips Sniffing ./templates/ Directory
Location: templates/phpcs.xml:5-8
Only includes ./src, ./tests, ./{{SLUG}}.php, ./uninstall.php. Any template files in ./templates/emails/ are completely skipped by PHPCS linting during composer lint.
NEW-58 [P1] Missing init_form_fields() in Custom_Email.php
Location: templates/src/Woo/Emails/Custom_Email.php:20-41
Custom_Email does not implement init_form_fields(), preventing store managers from configuring the email Subject, Heading, or recipient in WooCommerce Settings > Emails.
NEW-59 [P2] Elementor Widget Basic HTML Stripped by esc_html() in Sample_Widget.php
Location: templates/src/Widgets/Sample_Widget.php:178
Uses 'basic' inline editing for description, but render() uses esc_html() instead of wp_kses_post(), stripping formatting (bold/italic/links) added in the Elementor visual editor.
NEW-60 [P2] Missing Dashicon Icon on CPT Registration in Post_Types.php
Location: templates/src/PostTypes/Post_Types.php:41-50
Post_Types.php omits 'menu_icon', defaulting to the generic post pin icon in the WordPress admin sidebar.

Iteration 9 Findings

NEW-61 [P0] Missing webpack.config.js Generation When Only React Is Selected
Location: index.js:775
Condition if (hasInteractivity || hasWoo) skips creating webpack.config.js when only React is chosen. @wordpress/scripts defaults to ./src/index.js while our scaffold lives in ./assets/src/index.js, causing npm run build to fail immediately with module resolution error.
NEW-62 [P1] Missing wp-components CSS Dependency in Admin\Assets.php
Location: templates/src/Admin/Assets.php:63
Passes array() instead of array( 'wp-components' ) when enqueuing assets/build/index.css, causing core WordPress React components to render without Gutenberg stylesheet styles.
NEW-63 [P2] Uncaught Fatal Error in tests/bootstrap.php on Missing Autoloader
Location: templates/tests/bootstrap.php:8
require_once dirname(__DIR__) . '/vendor/autoload.php' fails with fatal error if phpunit is executed before composer install rather than displaying a clear instruction.
NEW-64 [P2] Hardcoded Version in Interactivity.php Bypasses Webpack Asset Hash
Location: templates/src/Frontend/Interactivity.php:53
Passes {{PREFIX_UPPER}}_VERSION instead of reading generated assets/build/view.asset.php hash, preventing automated browser cache-busting during frontend script changes.

Iteration 10 Findings

NEW-65 [P1] Missing DOMContentLoaded Guard in React Admin App Entrypoint (index.js)
Location: templates/react/assets/src/index.js:18-22
Queries document.getElementById('{{PREFIX}}-app-root') synchronously upon script execution. If executed in <head> or via asynchronous module loader, root element evaluates to null and the React app fails to mount.
NEW-66 [P1] Missing Undefined Global Guard in wc-gateway-block.js
Location: templates/react/assets/src/wc-gateway-block.js:9-13
Immediately destructures window.wc.wcBlocksRegistry. When loaded on non-block checkout pages, browser logs an unhandled TypeError: Cannot read properties of undefined.
NEW-67 [P1] Missing Undefined Global Guard in blocks-integration.js
Location: templates/react/assets/src/blocks-integration.js:8-11
Destructures window.wc.blocksCheckout without verification, crashing with TypeError outside block checkout scope.
NEW-68 [P2] Unsafe Null Context Mutation in Interactivity API view.js
Location: templates/react/assets/src/view.js:6-8
Calls getContext().count++ without null checks on getContext(), risking runtime exceptions on frontend pages where data-wp-context is absent.

Iteration 11 Findings

NEW-69 [P1] Multisite Uninstall Cleanup Truncates at 100 Sites (uninstall.php)
Location: templates/uninstall.php:25
get_sites( array( 'fields' => 'ids' ) ) defaults to 100 sites, leaving all sub-sites beyond site #100 unclean on multisite networks. Fix: Pass 'number' => 0.
NEW-70 [P2] Missing Webpack output.path in webpack.config.js
Location: index.js:793-798
Omits explicit output: { ...defaultConfig.output, path: path.resolve(process.cwd(), 'assets/build') }, causing path collisions if wp-scripts is invoked directly without CLI arguments.

Iteration 12 Findings

NEW-71 [P1] Missing CI NPM Dependency Caching in Scaffolded Workflow (node-build)
Location: index.js:806-824
ciNodeJob runs raw npm install without cache: 'npm' in actions/setup-node@v4, resulting in un-cached node module downloads on every CI run.
NEW-72 [P2] Missing Elementor get_custom_help_url() Stub in Sample_Widget.php
Location: templates/src/Widgets/Sample_Widget.php:38-45
Omits get_custom_help_url() method used by Elementor widgets to link to developer docs in the Elementor visual panel.

Iteration 13 Findings

NEW-73 [P1] Missing Core Function Stubs in Example_Test.php Causes Brain Monkey Crashes
Location: templates/tests/Unit/Example_Test.php:48-69
Example_Test.php fails to stub register_rest_route, wp_register_script_module, wp_interactivity_state, and wp_localize_script. When REST or Interactivity modules are scaffolded, running PHPUnit tests crashes with Function called without expectations exceptions.
NEW-74 [P2] Hardcoded Tested up to: 6.7 in readme.txt Lacks Dynamic Generator Token
Location: templates/readme.txt:5
Hardcodes static 6.7 instead of a template-driven {{TESTED_UP_TO}} token, making version maintenance across new WordPress releases error-prone.

Iteration 14 Findings (CPT Labels & Type Hints)

NEW-75 [P2] Incomplete CPT & Taxonomy Label Sets in Post_Types.php
Location: templates/src/PostTypes/Post_Types.php:36-39
Only defines 'name' and 'singular_name'. Standard admin actions (Add New, Edit, View, Search, Not Found) default to generic post labels ("Add New Post") instead of custom entity names ("Add New Item").
NEW-76 [P2] Missing Strict Type Hints in Woo_Hooks.php Method Signatures
Location: templates/src/Woo/Woo_Hooks.php:86-110
Hooks handlers (register_gateway, register_shipping_method, register_email) omit parameter and return type declarations (array $gateways): array).

🏛️ Section A: Architecture & SOLID (Generated Plugin)

💻 Section B: The CLI Tool (`index.js`, Packaging & DX)

B1. Correctness Bugs

B2. CLI Architecture & Modularization

B2.1 [P0] runGenerator() is a 450-line god function
Split into TemplateEngine, FileWriter, ModuleRegistry, and Generator.
B2.2 [P0] Adding a module violates Open-Closed Principle (OCP)
Module logic is scattered across 4+ files. Convert modules into self-describing objects: { id, prompt, files[], services[], requiresBuild }.
~~B2.3 [P0] Move Elementor PHP string generation to real .php template files~~
Done in v2: the Elementor registrar/notice live in templates/src/Elementor/*.php. What remains in index.js is single-line $providers[] = new …() accumulation (shared across every module), not escaped PHP literals.
~~B2.4 [P1] Enhance template engine beyond naive replaceAll~~
applyConditionals() adds {{#if flag}} / {{#unless flag}} / {{else}} (nesting + standalone-line trimming), driven by a templateFlags table. Eight variation-only tokens (REACT_ADMIN_ROOT, REACT_ADMIN_HOOK_GUARD, REACT_ASSETS_REGISTRATION, PHPCS_RULESETS, VSCODE_EXTRA_STUB_PATH, README_ELEMENTOR_DOCS, README_REACT_INSTALL, README_REACT_SCRIPTS) plus README_CLI_DOCS are gone — templates now carry their own optional sections. The remaining generator-built tokens (PROVIDER_REGISTRATIONS, ACTIVATOR_BODY/DEACTIVATOR_BODY/UNINSTALL_BODY, CI_NODE_JOB, CI_PHP_MATRIX, PLUGIN_HEADER_EXTRA, WOOCOMMERCE_HPOS, COMPOSER_EXTRA_REQUIRE_DEV, PACKAGE_EXTRA_*) are data-driven codegen / structured-file fragment assembly, not on/off toggles, and are left as-is on purpose — a new module extends an existing accumulator there, it does not invent a token. Engine unit tests: tests/engine.test.js.
B2.5 [P1] Split 950-line index.js into ES modules
src/validators.js, src/modules/, src/templating.js, bin/cli.js.
B2.6 [P2] Add JSDoc types & jsconfig.json (checkJs: true)

B3. Testing & CI Pipeline

B4–B5. DX & Missing Features

B6. Generated Scaffold Quality & Demo Code Fixes

B7. Documentation

B7.1 [P1] Add Architecture Section to README.md (Service Container, Contracts, Design).
B7.2 [P1] Add Module Matrix Table to README.md (Module → Generated Files → Dependencies).
B7.3 [P1] Add Comparison Section ("Why not wp scaffold plugin or @wordpress/create-block?").
B7.4 [P2] Add CI, npm version, license, and provenance badges.
B7.5 [P2] Add asciinema / GIF terminal recording demo.

🧪 Section C: Testing, Quality & Tooling

C1 [P0] Add PHPStan / Psalm static analysis (szepeviktor/phpstan-wordpress Level 5 + baseline).
C2 [P1] Add WordPress Integration Tests (wp-phpunit/wp-phpunit + yoast/phpunit-polyfills).
C3 [P1] Add .wp-env.json / @wordpress/env local Docker development environment.
C4 [P1] Add JS Jest testing (@wordpress/jest-preset-default).
C5 [P3] Add Playwright E2E testing setup (@wordpress/e2e-test-utils-playwright).
C6 [P2] Enable code coverage in CI.

C7 [P2] Declare WooCommerce custom capabilities in phpcs.xml when WooCommerce is enabled
Location: templates/phpcs.xml & index.js
WooCommerce registers its own capabilities (manage_woocommerce, view_woocommerce_reports, edit_shop_orders, read_shop_order); WPCS only knows core's capabilities, causing false positives. Add the following rule under <config name="installed_paths" ...> line in phpcs.xml when the WooCommerce module is selected:

  <!--
  WooCommerce registers its own capabilities; WPCS only knows core's,
  so they're declared here to avoid false positives.
  -->
  <rule ref="WordPress.WP.Capabilities">
  	<properties>
  		<property name="custom_capabilities" type="array">
  			<element value="manage_woocommerce"/>
  			<element value="view_woocommerce_reports"/>
  			<element value="edit_shop_orders"/>
  			<element value="read_shop_order"/>
  		</property>
  	</properties>
  </rule>

C8 [P3] Add PHP 8.4 to CI matrix.

📦 Section D: WordPress.org & Deployment Pipeline

D1 [P1] Add GitHub Action for Plugin Check (wordpress/plugin-check-action).
D2 [P2] Add SVN release deployment workflow (10up/action-wordpress-plugin-deploy).
D3 [P2] Scaffold .wordpress-org/ assets directory (banner-772x250, icon-256x256).
D4 [P2] Wire make-pot translation generation into CI.
D5 [P3] Add open-source repository templates (CONTRIBUTING.md, SECURITY.md, PR templates).

⚙️ Section E: Runtime Features & Enhancements

E1 [P1] Add Runtime Requirements Checker (PHP/WP version mismatch guard with admin notice).
E2 [P1] Add Database / Version Migration Routine (Core\Migrator).
E3 [P0] Add Custom Database Table + dbDelta() Module.
E4 [P2] Add Roles & Capabilities Manager Module.
E5 [P2] Add PSR-3 / wc_get_logger() Logger Abstraction.
E6 [P2] Add Options & Transients Wrapper Service.
E7 [P1] Add standalone native Gutenberg block module (--modules block).
E8 [P3] Add Admin Notices Manager & Site Health Info Tab.

FilesExpand file tree

BACKLOG.md

Latest commit

History