CHANGELOG.md

Changelog

[1.6.0] - 2026-07-18

Fixed

• The lw_lms_has_course_access filter is now reachable for paid courses. Previously the paid branch returned the legacy-purchase result before the filter line, so an integration could never grant (or deny) paid access through it. The built-in paid checks now short-circuit into a single filtered result.

Added

• AccessRepository::revoke_by_source( int $user_id, int $course_id, string $source, ?int $source_id = null ) — revokes only the access rows a given grant source owns, so an integration can cancel its own grant without trampling another source's access for the same course.

Changed

• Minimum PHP is now 8.2.
• Added PHPStan level 5 static analysis and a PHPUnit test suite (with an access-control regression test) to CI.

[1.5.1] - 2026-06-13

Changed

• Maintenance release — internal housekeeping, no functional changes.

[1.5.0] - 2026-06-13

Added

• WooCommerce Memberships integration: a paid course can be unlocked by an active WooCommerce Membership. New membership_plan_ids course meta, selectable as a checkbox list in the Access Settings metabox. AccessChecker grants access when the user is an active member of any selected plan (live check via wc_memberships_is_user_active_member, after the subscription checks and before the legacy-purchase fallback). The denied access REST payload now includes a memberships array (plan id, name, and a join URL). No DB schema change; no-op when WooCommerce Memberships is inactive.

[1.4.0] - 2026-05-13

Added

• WP-CLI workflow (issue #10):
  • wp lw-lms course create|list|delete|set-section
  • wp lw-lms lesson create|list|assign
  • wp lw-lms enroll <user> <course> [--source=…] [--expires-at=…]
  • wp lw-lms revoke <user> <course>
  • wp lw-lms force-complete <user> <course>
  • User refs accept ID, login, or email; course/lesson refs accept ID or slug. Each subcommand lives in its own CLI/*Command.php file (max 200 lines).
• lw_lms_settings_tabs filter — third-party plugins can append, remove, or reorder admin Settings tabs by returning a modified list of TabInterface instances. Issue #12.
• SettingsPage::get_settings_group() — exposes the settings group identifier so companion plugins can register_setting() against the same group and save options through the existing form (single nonce, single submit).

Fixed

• Course content is no longer gated behind has_access in the REST transform_full response. The course post_content is the public marketing/about description; per-lesson content stays gated by the lesson accessible flag and the lessons REST endpoint. content_raw (unfiltered source) remains editor-only. Issue #13.
• AccessChecker::has_lesson_access() now short-circuits on ACCESS_OPEN before consulting the preview-lesson branch, so open-course lessons remain accessible to guests even when marked as preview. Previously, preview lessons on open courses wrongly required login. Issue #11.

[1.3.0] - 2026-05-06

Added

• lw_lms_after_grant action — fires after access is granted (issue #9). Args: user_id, course_id, source, source_id, expires_at (5 args, callers must register with $accepted_args = 5).
• lw_lms_after_revoke action — fires only when an active row is actually flipped to revoked. Args: user_id, course_id, source (3 args).
• lw_lms_pre_grant filter — return false to abort a grant before any DB work. Args: $allow, user_id, course_id, source, source_id, expires_at (6 args).
• Free-course implicit enrollment. First time a logged-in user accesses a free course, a source='free' access row is inserted (idempotent), so lw_lms_after_grant fires for free enrollments and downstream automation (drip / welcome email / cohort analytics) can listen to a single grant signal.
• AccessQueries::has_active_access( user_id, course_id, source = null ) — optional $source argument for source-specific active-access checks ('free', 'manual', 'woocommerce', 'subscription').
• ProgressRepository::mark_course_completed( user_id, course_id ) — enumerates published lessons assigned to the course and upserts each as completed. The final upsert naturally fires lw_lms_lesson_completed and lw_lms_course_completed.

Changed

• lw_lms_lesson_completed and lw_lms_course_completed are now fired centrally by ProgressRepository::upsert() and CompletionTracker::maybe_record() respectively, instead of by individual REST endpoints. Existing 2-arg signatures (lesson_id, user_id and course_id, user_id) are preserved.
• AccessRepository split into AccessRepository (writes: grant, revoke) and AccessQueries (reads: has_active_access, get_user_access, get_user_enrollments). Each class stays within the 200-line limit. Direct callers of the read methods on AccessRepository should migrate to AccessQueries.
• ProgressRepository split into ProgressRepository (writes: upsert, delete, mark_course_completed) and ProgressQueries (reads: get, get_course_progress, get_user_progress, get_completed_lessons). Direct callers of the read methods on ProgressRepository should migrate to ProgressQueries.

[1.2.16] - 2026-04-30

Added

• Standalone Abilities API support. Integration now registers a fallback on the official wp_abilities_api_categories_init and wp_abilities_api_init hooks (priority 20, gated by did_action() so the Site Manager bridge wins when active). Abilities are usable with only the WordPress 6.9+ Abilities API or the feature plugin — no Site Manager required.
• Detailed output_schema definitions for every ability (OutputSchemas): course summary fragment, full course with sections + lessons, per-lesson progress map with status enum, options. Lets AI agents introspect the exact response shape instead of guessing from 'type' => 'array'.
• list-courses response includes total_pages, page, and per_page alongside total.
• AbilityPermissions factory: prefers Site Manager's PermissionManager when injected (via the lw_site_manager_register_abilities bridge), falls back to a current_user_can() map (can_edit_posts → edit_posts, can_manage_options → manage_options, can_edit_users → edit_users) when registering directly.

Changed

• SiteManager folder restructured into focused Abilities/, Service/, and Schema/ namespaces. LmsAbilities and LmsService split per concern: course / progress / options.
• set-progress description explicitly notes the destructive aspect: reverting from completed loses the completion timestamp.

[1.2.15] - 2026-04-30

Added

• Variation-level WooCommerce Subscriptions access (issue #8). New subscription_variation_ids course meta accepts parent_id:variation_id pairs, so a course can be tied to specific variations of a variable-subscription product (e.g. only the "Yearly" variation grants access, not "Monthly"). Implemented in the new SubscriptionVariationChecker (runtime check via wcs_get_users_subscriptions() against active subscriptions; matches on the variation ID line item, not the parent). Existing parent-level subscription_ids behaviour is unchanged and still evaluated first.
• New Subscription Variations field in the Course Access metabox — textarea, one parent_id:variation_id per line.
• AccessChecker::get_access_info() now includes a subscription_variations array for paid courses without access (parent_id, variation_id, name, attributes, price, url) so REST clients can render variation-specific upsells.

Changed

• AccessMetaboxRenderer converted from trait to a static helper class (was 78 lines as a trait, would have exceeded the 80-line trait limit with the new render method).

[1.2.14] - 2026-04-27

Added

• Lock-on-complete progress snapshot (issue #7). When a user first reaches 100% in a course, the lesson count is captured and frozen for that user × course pair. Adding a lesson to the course later no longer demotes completed users from 100% — they stay at 100%, and the new lesson is "extra material". Users still in progress see the current (larger) total and a freshly-recalculated percentage.
  • New wp_lms_completion_snapshots table (user_id, course_id, total_lessons, completed_at, UNIQUE on user_id, course_id).
  • New ProgressSnapshotTable, ProgressSnapshotRepository, CompletionTracker, ProgressSnapshotMigration classes.
  • ProgressRepository::upsert() now triggers CompletionTracker::maybe_record() after every status change, so the snapshot is written exactly once at the moment of completion.
  • Activation migration (ProgressSnapshotMigration::backfill()) retroactively writes a snapshot for every user × course pair already at 100% in wp_lms_progress. Idempotent — safe to call on every activation.
• DB version bumped to 1.2.0 to trigger the migration on update.

Changed

• ProgressCalculator::calculate() now resolves the total via the snapshot when one exists, otherwise falls back to the current course size.
• Percentage is now clamped to 100% defensively.

[1.2.13] - 2026-04-27

Fixed

• Course builder drag&drop now persists lesson_section_id and lesson_order for every lesson on save (issue #3). Previously only the course_sections array was written, leaving the lessons' meta untouched, which caused two bugs: (a) the frontend / REST response went out of sync with the editor, and (b) a "drag → drag back" gesture left orphan state because the second move never triggered a re-save. The new LessonAssignmentSaver reads the JSON payload emitted by the JS on every change (and on init) and updates the metas in one pass, defensively skipping lessons not actually attached to the course being saved.

Added

• All Lessons admin list now has two new columns (issue #5):
  • Order — shows lesson_order, sortable
  • Course — clickable link to the parent course's editor

Changed

• CourseContentMetabox was split into a coordinator + CourseContentRenderer + LessonAssignmentSaver to keep each file under 200 lines

Docs

• ProgressCalculator class doc now explicitly states the known limitation that adding a lesson to a course mid-progress does not retroactively recalculate users' completion percentages (issue #7); LearnDash has the same behaviour

[1.2.12] - 2026-03-22

Added

• LW Site Manager integration - LMS abilities for AI agents
• lw-lms/list-courses ability - list courses
• lw-lms/get-course ability - get course details with lessons
• lw-lms/get-progress ability - get user progress
• lw-lms/set-progress ability - update lesson completion
• lw-lms/get-options ability - get LMS settings

Fixed

• list-courses input schema now accepts empty requests

[1.2.11]

Fixed

• Smarter autoloader fallback - supports root Composer dependency installs

[1.2.10]

Fixed

• Graceful error when autoloader is missing (admin notice instead of fatal error)

[1.2.9]

Fixed

• Minor fix

[1.2.8]

Added

• Hash-based tab navigation on settings page
• New chalkboard-user icon
• Updated ParentPage with SVG icon support from registry
• Suppressed expected PHPCS warnings for custom capabilities and meta queries

[1.2.7]

Fixed

• Admin notice isolation for notices relocated by WordPress core JS

[1.2.6]

Changed

• Isolate third-party admin notices on LW plugin pages

[1.2.5]

Added

• Fresh POT file and Hungarian (hu_HU) translation

[1.2.4]

Added

• Central plugin registry from GitHub JSON

[1.2.3]

Added

• WP-CLI LearnDash migration command (wp lw-lms migrate-learndash)
• Support for --dry-run and --verbose flags
• Migrates courses, lessons, sections, and lesson order

[1.2.2]

Added

• Instructor field to Course Data metabox
• Instructor meta registered with REST API support

[1.2.1]

Changed

• Improved Add Enrollment form with explicit Course and Expires labels

[1.2.0]

Added

• Manual course enrollment on user profile pages (wp-admin)
• Enrollment table with course name, source, granted date, and expiry
• Course grant/revoke actions with nonce and capability protection
• AccessRepository::get_user_enrollments() method

[1.1.1]

Fixed

• Auto-create access table on plugin update (not just activation)

[1.1.0]

Added

• Time-limited course access (per-product duration)
• wp_lms_access database table for fast access lookups
• AccessGranter - automatic access on WooCommerce order completion
• product_id:days format in Course Access metabox
• expires_at to REST API access info
• access_duration to product info in REST API
• Backward-compatible fallback for legacy purchases

Changed

• DB version updated to 1.1.0

[1.0.0]

Added

• Initial release
• Course and Lesson custom post types
• Course sections and lesson ordering
• Access control (open, free, paid)
• WooCommerce integration
• Progress tracking
• REST API
• Video support (YouTube, Vimeo, Wistia, self-hosted)
• Attachments and downloads