=== JVR WorldForge Connector ===
Contributors: jvrsoftware
Tags: threejs, publishing, rest-api, worldforge
Requires at least: 6.5
Tested up to: 6.8
Requires PHP: 8.1
Stable tag: 1.0.0
License: GPLv2 or later

Scoped data, media and deployment bridge for JVR WorldForge.

== Description ==

The connector exposes versioned REST endpoints for health, allowlisted public content, authenticated media upload, deployment dry-run, bounded website deployment and rollback. Use HTTPS and WordPress Application Passwords from the desktop editor. No credentials are written into projects or exported JavaScript.

== Security ==

Deployment and media routes require both the custom manage_worldforge capability and upload_files. Destinations are administrator-allowlisted and remain under the WordPress uploads directory. ZIP paths, expanded size, file count, SHA-256 and executable extensions are validated before extraction. Public data queries use administrator-defined templates and fields, caching and per-IP throttling.

== Installation ==

1. Install the plugin ZIP from Plugins > Add New > Upload Plugin.
2. Activate it and open Settings > WorldForge Connector.
3. Configure HTTPS origins, allowed post types, fields and deployment destinations.
4. Create an Application Password for the dedicated publishing user.
5. Store that secret in Windows Credential Manager through WorldForge; do not paste it into a project.

== Changelog ==

= 1.0.0 =
* Initial scoped REST data, media, deployment, rollback, health, CORS and rate-limit implementation.
