ConfigOps – Agent-Ready Settings Undo

Description

The undo button WordPress forgot

WordPress shows you the settings form. ConfigOps shows you what the save actually changed.

Agent-ready. Human-authorized.

WordPress Abilities and machine-readable JSON WP-CLI commands let an authorized tool list recorded changes, inspect redacted diffs, control named Change Sessions, and run the restore checks without writing. Compatible MCP adapters can expose the same abilities as agent tools.

Automation gets evidence and a plan. Humans retain write authority. ConfigOps exposes no generic option writer, raw SQL tool, plugin installer, or automated restore apply. The current agent boundary can produce a conflict-checked restore plan, but a human remains responsible for the actual undo.

Visit the ConfigOps website or read the documentation.

Change a supported WordPress or plugin setting as usual. ConfigOps automatically opens an isolated observation for that save, groups the resulting writes, and reduces repeated writes to the same option into the original-to-final change.

A compact evidence card states how many values WordPress wrote, separates likely decisions from housekeeping, and links to the stored diff. Whole-save Undo appears only when every recorded value is restorable and still passes the conflict check.

Version 0.5 adds opt-in verified key undo for ordinary associative plugin settings even when ConfigOps has no dedicated adapter. It restores only snapshot-verified keys that still match and preserves unrelated later changes.

One action. The hidden writes behind it. A clear diff. A conflict-checked undo.

What a settings save actually wrote

ConfigOps is not a generic activity log. It does more than report that somebody clicked Save: it records the supported Options API writes caused by the request, separates likely decisions from plugin housekeeping, and attributes the responsible component and code path where possible.

ConfigOps is not a backup. It restores only supported setting values that still match the recorded state, so a later legitimate change is not silently overwritten.

ConfigOps is not plugin-version rollback. It works with configuration values, not plugin or theme code.

What ConfigOps records and checks

• Agent-ready discovery through the native WordPress Abilities API.
• Machine-readable JSON wp configops commands designed for scripts and language-model tool use.
• Read-only restore planning that checks scope, conflicts, references, autoload state, filtered option reads, adapters, and verified generic-array paths without writing.
• Automatic local evidence for authorized settings changes made through WordPress admin, REST, and WP-CLI requests.
• Plain-language nested diffs that turn option arrays into recognizable settings.
• An immediate link to the recorded diff and whole-save Undo only when every value passes the restore policy.
• Named Change Sessions for planned maintenance, support cases, and investigations that span several requests.
• Provenance for the user, request, component, and code path where ConfigOps can determine it.
• Secret redaction before mutation history is stored.
• Conflict checks before every restore.
• Isolated site evidence across network-active WordPress Multisite installations.
• Multi-Network boundaries tied to each site’s real network ownership, including fail-closed foreign-network writes and lifecycle switches.
• A separate Network Admin ledger for Network Options changes.
• Named Network Change Sessions for planned work that spans several Network Admin requests.
• Mutation-level undo for complete Network Options additions and updates.
• Optional experimental undo for verified keys in ordinary, unclaimed associative wp_options arrays.

Safety before convenience

Probable credentials are removed before mutation history is stored. Undo first checks that the current value still matches the observed value. An interrupted or incomplete observation loses whole-save undo instead of pretending its evidence is safe.

Direct writes to custom plugin tables are recorded as value-free warnings. ConfigOps does not store raw SQL and does not claim it can reverse data it does not understand.

Site icons, site logos, and supported Yoast logo and social-image settings show the referenced attachment name, file type, dimensions, thumbnail, and missing state. Yoast publisher-policy, content-ignore, and LLMs.txt page IDs show bounded page identity instead of a bare database ID. ConfigOps never copies or deletes referenced media or content.

All evidence remains in the website database. ConfigOps does not send observation data to pyrra or another external service. Suggested disclosure text is added to WordPress’s privacy-policy guide.

Tested component contracts

The current release includes pinned adapters for:

• WordPress Core 7.0–7.1
• WP Mail SMTP Free 4.9.0
• Yoast SEO Free 28.2

The Support contracts screen lists each tested plugin version, mapped settings family, refused operation, and undo level. An untested component version keeps its observed evidence but disables automatic undo.

Multisite in version 0.5

On a network-active installation, each site keeps its own isolated evidence lifecycle. On Multi-Network installations, ConfigOps derives the network from the actual site record after every internal context switch, refuses lifecycle work that crosses networks, and excludes foreign Network Options writes from the current network ledger. An affected open capture is marked incomplete instead of silently appearing trustworthy. Network Admin receives a separate network-wide ledger for supported Network Options API changes, with guarded mutation-level undo for complete additions and updates.

Network option deletes remain review-only because WordPress reports them after the previous value is gone. Named Network Change Sessions can group network-owned evidence, but whole-network-change undo, cross-site aggregation, and bulk operations are not available.

Version 0.5 is a local single-site and Multisite undo and evidence layer for supported WordPress settings. It is not a staging plugin, backup, content migration, database synchronization, fleet manager, or generic activity log.