- Token usage tracking with per-model cost estimation after every response
- UsageBadge component showing input/output tokens and estimated cost
- Updated pricing: Claude Sonnet 4.6 as default model
- Full settings page with API key encryption, model selection, and tool permissions
- React-based chat UI under Tools → WP Pro Admin
- Multi-session support with sidebar — create, switch, and delete sessions
- Auto-naming sessions from first message
- Tool call blocks with collapsible parameter display
- 2-second polling for smooth response delivery
- REST API endpoints for sessions, messages, and async chat
- Async agent processing via WordPress cron — no HTTP timeouts
- Audit log view on settings page showing last 50 tool executions
- Write tools: create_post, update_post, update_option, create_term
- Dry-run confirmation pattern — preview changes before executing
- Option whitelist enforcement (22 safe settings only)
- Write tools gated behind settings toggle (disabled by default)
- Read tools: wp_info, query_database, get_post
- SELECT-only SQL enforcement with keyword blocking and auto LIMIT 100
- Combined site info tool — plugins, themes, CPTs, taxonomies in one call
- Claude API client using wp_remote_post() with 120s timeout
- Agentic loop: call Claude → execute tools → loop until text response
- System prompt builder with live WordPress context
- Tool registry with dynamic loading based on settings
- Initial plugin foundation — PSR-4 autoloading, singleton bootstrap
- Database schema: wppa_sessions and wppa_messages tables
- Settings with AES-256-CBC encrypted API key storage
- Session and message repositories with full CRUD