WordPress 6.9 Abilities API provides standardized capability discovery and execution for Data Machine operations. All REST API, CLI, and Chat tool operations delegate to registered abilities.

Overview

The Abilities API in inc/Abilities/ provides a unified interface for Data Machine operations. Each ability implements execute_callback with permission_callback for consistent access control across REST API, CLI commands, and Chat tools.

Total registered abilities: 167

Multi-Agent Scoping

All abilities support agent_id and user_id parameters for multi-agent scoping. The PermissionHelper class resolves scoped agent and user IDs, enforces ownership checks via owns_resource() and owns_agent_resource(), and controls access grants via can_access_agent().

Registered Abilities

Pipeline Management (7 abilities)

Pipeline Steps (5 abilities)

Flow Management (5 abilities)

Flow Steps (4 abilities)

Queue Management (7 abilities)

Webhook Triggers (5 abilities)

Job Execution (9 abilities)

Engine (4 abilities)

Internal abilities for the pipeline execution engine.

Agent Management (6 abilities)

Agent Memory (4 abilities)

Daily Memory (5 abilities)

Agent Files (5 abilities)

Flow Files (5 abilities)

Workspace (16 abilities)

Chat Sessions (4 abilities)

GitHub (6 abilities)

Handler Execution (9 abilities)

Duplicate Check (2 abilities)

Post Query (2 abilities)

Content / Block Editing (3 abilities)

Media (7 abilities)

Image Templates (1 ability)

Image Optimization (2 abilities)

Internal Linking (6 abilities)

SEO — Meta Descriptions (2 abilities)

SEO — IndexNow (4 abilities)

Analytics (4 abilities)

Taxonomy (5 abilities)

Settings (7 abilities)

Authentication (3 abilities)

Logging (5 abilities)

Local Search (1 ability)

Handler Discovery (5 abilities)

Step Types (2 abilities)

Processed Items (3 abilities)

Agent Ping (1 ability)

System Infrastructure (4 abilities)

Category Registration

The datamachine category is registered via wp_register_ability_category() on the wp_abilities_api_categories_init hook:

wp_register_ability_category(
    'datamachine',
    array(
        'label' => 'Data Machine',
        'description' => 'Data Machine flow and pipeline operations',
    )
);

Permission Model

All abilities support both WordPress admin and WP-CLI contexts via the shared PermissionHelper:

// Standard permission check
PermissionHelper::can_manage(); // WP-CLI always returns true; web requires manage_options

// Multi-agent scoped permission check
PermissionHelper::can_access_agent($agent_id);
PermissionHelper::owns_resource($resource_user_id);
PermissionHelper::resolve_scoped_agent_id($params);
PermissionHelper::resolve_scoped_user_id($params);

Architecture

Delegation Pattern

REST API endpoints, CLI commands, and Chat tools delegate to abilities for business logic. Abilities are the canonical, public-facing primitive; service classes are considered an internal implementation detail and are being phased out as abilities become fully self-contained.

REST API Endpoint → Ability → (Service layer used during migration) → Database
CLI Command → Ability → (Service layer used during migration) → Database
Chat Tool → Ability → (Service layer used during migration) → Database

Note: many ability implementations are already self-contained and do not call service managers. Where services remain, they are transitional and will be migrated into abilities per the migration plan.

Facade Pattern

Several top-level ability classes serve as facades that instantiate sub-ability classes from subdirectories:

• ChatAbilities.php → Chat/CreateChatSessionAbility.php, etc.
• EngineAbilities.php → Engine/RunFlowAbility.php, etc.
• FlowAbilities.php → Flow/QueueAbility.php, Flow/WebhookTriggerAbility.php, etc.

Ability Registration

Each abilities class registers abilities on the wp_abilities_api_init hook:

public function register(): void {
    add_action( 'wp_abilities_api_init', array( $this, 'register_abilities' ) );
}

Testing

Unit tests in tests/Unit/Abilities/ verify ability registration, schema validation, permission checks, and execution logic:

• AuthAbilitiesTest.php – Authentication abilities
• FileAbilitiesTest.php – File management abilities
• FlowAbilitiesTest.php – Flow CRUD abilities
• FlowStepAbilitiesTest.php – Flow step abilities
• JobAbilitiesTest.php – Job execution abilities
• LogAbilitiesTest.php – Logging abilities
• PipelineAbilitiesTest.php – Pipeline CRUD abilities
• PipelineStepAbilitiesTest.php – Pipeline step abilities
• PostQueryAbilitiesTest.php – Post query abilities
• ProcessedItemsAbilitiesTest.php – Processed items abilities
• SettingsAbilitiesTest.php – Settings abilities

WP-CLI Integration

CLI commands execute abilities directly. See individual command files in inc/Cli/Commands/ for available commands.

Post Tracking

The PostTracking class in inc/Core/WordPress/PostTracking.php provides post tracking functionality for handlers creating WordPress posts.

Meta Keys:

• _datamachine_post_handler: Handler slug that created the post
• _datamachine_post_flow_id: Flow ID associated with the post
• _datamachine_post_pipeline_id: Pipeline ID associated with the post

Usage:

use DataMachineCoreWordPressPostTracking;

// After creating a post
$this->storePostTrackingMeta($post_id, $handler_config);