self::is_configured(),
'status' => self::is_configured() ? (string) $state['status'] : 'not_configured',
'source' => self::constant_key() ? 'configuration' : ( ! empty( $state['api_key'] ) ? 'wordpress' : 'none' ),
'model' => self::get_builder_model(),
);
}
/** Return the selected Builder AI model after the existing developer filter. */
public static function get_builder_model() {
$state = self::state();
$model = isset( $state['model'] ) ? self::normalize_model( $state['model'] ) : self::DEFAULT_MODEL;
$model = preg_replace( '/[^A-Za-z0-9._:-]/', '', (string) apply_filters( 'divi_powers_openai_builder_model', $model ) );
return '' !== $model ? $model : self::DEFAULT_MODEL;
}
/** Return a short customer-facing label for the active Builder model. */
public static function get_builder_model_label() {
$model = self::get_builder_model();
$options = self::model_options();
return isset( $options[ $model ] ) ? $options[ $model ]['short_label'] : $model;
}
/**
* Return the key for server-side requests only.
*
* @return string|WP_Error
*/
public static function get_api_key() {
$constant = self::constant_key();
if ( $constant ) {
return $constant;
}
$state = self::state();
if ( empty( $state['api_key'] ) || ! is_string( $state['api_key'] ) ) {
return new WP_Error( 'divi_powers_openai_missing', __( 'Add an OpenAI API key before testing the connection.', '5d-powers-for-divi' ) );
}
return self::decrypt( $state['api_key'] );
}
/** Save or replace the encrypted administrator-provided key. */
public function handle_save() {
$this->require_admin();
if ( self::constant_key() ) {
$this->redirect( 'constant' );
}
$key = isset( $_POST['openai_api_key'] ) ? trim( (string) wp_unslash( $_POST['openai_api_key'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- require_admin() verifies the nonce; preserving the secret byte-for-byte is required before strict format validation and encryption.
if ( strlen( $key ) < 20 || strlen( $key ) > 512 || preg_match( '/\s/', $key ) ) {
$this->redirect( 'invalid' );
}
$encrypted = self::encrypt( $key );
unset( $key );
if ( is_wp_error( $encrypted ) ) {
$this->redirect( 'crypto_error' );
}
$state = self::state();
$state['api_key'] = $encrypted;
$state['status'] = 'not_tested';
$state['last_checked'] = '';
$state['last_error'] = '';
update_option( self::OPTION, $state, false );
$this->redirect( 'saved' );
}
/** Save the administrator's preferred model for every Builder AI stage. */
public function handle_model_save() {
$this->require_admin();
$model = isset( $_POST['openai_model'] ) ? sanitize_text_field( wp_unslash( $_POST['openai_model'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing -- require_admin() verifies the nonce immediately above.
$options = self::model_options();
if ( ! isset( $options[ $model ] ) ) {
$this->redirect( 'invalid_model' );
}
$state = self::state();
$state['model'] = $model;
update_option( self::OPTION, $state, false );
$this->redirect( 'model_saved' );
}
/** Test the stored key from WordPress without returning it to the browser. */
public function handle_test() {
$this->require_admin();
$result = $this->test_connection();
$this->redirect( is_wp_error( $result ) ? 'test_failed' : 'connected' );
}
/** Remove the database-backed key and its connection status. */
public function handle_remove() {
$this->require_admin();
if ( self::constant_key() ) {
$this->redirect( 'constant' );
}
$state = self::state();
$state['api_key'] = '';
$state['status'] = 'not_configured';
$state['last_checked'] = '';
$state['last_error'] = '';
update_option( self::OPTION, $state, false );
$this->redirect( 'removed' );
}
/** Load the local provider settings style on the Builder AI screen. */
public function enqueue_guide_assets( $hook ) {
if ( in_array( $hook, array( 'divi-powers_page_divi-powers-connection', 'admin_page_divi-powers-connection' ), true ) && current_user_can( 'manage_options' ) ) {
wp_enqueue_style( 'divi-powers-connection', DIVI_POWERS_URL . 'assets/css/connection.css', array(), DIVI_POWERS_VERSION );
}
}
/** Render the optional on-site OpenAI connection. */
public function render_settings() {
if ( ! current_user_can( 'manage_options' ) ) {
return;
}
$state = self::state();
$configured = self::is_configured();
$from_config = (bool) self::constant_key();
$model = self::normalize_model( $state['model'] );
$models = self::model_options();
$status = $configured ? (string) $state['status'] : 'not_configured';
if ( $from_config && 'not_configured' === $status ) {
$status = 'not_tested';
}
$labels = array(
'connected' => __( 'Connected', '5d-powers-for-divi' ),
'not_tested' => __( 'Saved — test the connection', '5d-powers-for-divi' ),
'error' => __( 'Connection needs attention', '5d-powers-for-divi' ),
'not_configured' => __( 'Not connected', '5d-powers-for-divi' ),
);
$message = isset( $_GET['dp_ai_message'] ) ? sanitize_key( wp_unslash( $_GET['dp_ai_message'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
?>
render_message( $message, $state ); ?>
↗
save_test_status( 'error', $key->get_error_message() );
return $key;
}
$response = wp_remote_get(
self::API_URL,
array(
'timeout' => 20,
'redirection' => 0,
'limit_response_size' => self::MAX_RESPONSE_BYTES,
'headers' => array(
'Authorization' => 'Bearer ' . $key,
'Accept' => 'application/json',
),
)
);
unset( $key );
if ( is_wp_error( $response ) ) {
$error = __( 'WordPress could not reach OpenAI. Check the site connection and try again.', '5d-powers-for-divi' );
$this->save_test_status( 'error', $error );
return new WP_Error( 'divi_powers_openai_network', $error );
}
$code = (int) wp_remote_retrieve_response_code( $response );
if ( $code >= 200 && $code < 300 ) {
$this->save_test_status( 'connected', '' );
return true;
}
$messages = array(
401 => __( 'OpenAI did not accept this API key. Replace it and try again.', '5d-powers-for-divi' ),
403 => __( 'This API key does not have permission to use the OpenAI API.', '5d-powers-for-divi' ),
429 => __( 'OpenAI received the request but the account is currently rate-limited or out of API credit.', '5d-powers-for-divi' ),
);
$error = isset( $messages[ $code ] ) ? $messages[ $code ] : __( 'OpenAI could not verify the connection. Try again in a moment.', '5d-powers-for-divi' );
$this->save_test_status( 'error', $error );
return new WP_Error( 'divi_powers_openai_http', $error, array( 'status' => $code ) );
}
/** Persist only a bounded, non-secret connection result. */
private function save_test_status( $status, $error ) {
$state = self::state();
$state['status'] = 'connected' === $status ? 'connected' : 'error';
$state['last_checked'] = gmdate( 'c' );
$state['last_error'] = substr( sanitize_text_field( (string) $error ), 0, 300 );
update_option( self::OPTION, $state, false );
}
/** Display one plain-language result on the settings card. */
private function render_message( $message, array $state ) {
$success = array(
'saved' => __( 'API key saved. Test the connection when you are ready.', '5d-powers-for-divi' ),
'connected' => __( 'Connected to OpenAI. The key is ready for Visual Builder AI.', '5d-powers-for-divi' ),
'removed' => __( 'The saved OpenAI API key was removed.', '5d-powers-for-divi' ),
'model_saved' => __( 'Builder AI model saved.', '5d-powers-for-divi' ),
);
$errors = array(
'invalid' => __( 'Enter a complete OpenAI API key without spaces.', '5d-powers-for-divi' ),
'invalid_model' => __( 'Choose one of the available Builder AI models.', '5d-powers-for-divi' ),
'crypto_error' => __( 'WordPress could not securely save the key on this server.', '5d-powers-for-divi' ),
'constant' => __( 'This key is controlled by the WordPress configuration and cannot be changed here.', '5d-powers-for-divi' ),
'test_failed' => ! empty( $state['last_error'] ) ? $state['last_error'] : __( 'The OpenAI connection test failed.', '5d-powers-for-divi' ),
);
if ( isset( $success[ $message ] ) ) {
echo '' . esc_html( $success[ $message ] ) . '
' . esc_html( $errors[ $message ] ) . '