Update

Author: PDowney

.github/copilot-instructions.md

@@ -17,12 +17,14 @@ applyTo: '**'
 ## 📋 Essential Requirements
 
 ### WordPress Compatibility
+
 - **WordPress:** 6.5+ minimum
 - **PHP:** 7.4+ minimum  
 - **WooCommerce:** 5.0+ (when applicable)
 - Follow [WordPress Coding Standards](https://developer.wordpress.org/coding-standards/) for PHP, JS, CSS, HTML, and accessibility
 
 ### Code Quality Standards
+
 1. **Security First:** Always sanitize input (`sanitize_*()`) and escape output (`esc_*()`)
 2. **WordPress APIs:** Use WP functions instead of raw PHP/SQL
 3. **Hook System:** Proper use of `add_action()` and `add_filter()`
@@ -55,8 +57,7 @@ applyTo: '**'
 
 **Version Release Process (only when instructed):**
 - Follow semantic versioning (MAJOR.MINOR.PATCH)
-- Update version in: plugin header, README.md, readme.txt, CHANGELOG.md
-- Update version in: constants section, .pot files, package.json, composer.json
+- Update version in: plugin header, README.md, readme.txt, CHANGELOG.md, GEMINI.md, and `.pot` language files, constants section, package.json, and composer.json
 - Move "Unreleased" changes to new version section in both changelogs
 - **Never auto-update versions** - wait for explicit instruction
 
@@ -65,6 +66,11 @@ applyTo: '**'
 - Write clear function/class descriptions
 - Document security considerations and hooks used
 
+**Internationalization (i18n):**
+- Update `.pot` language files when adding or modifying translatable strings
+- Always use the correct text domain when dealing with translation functions
+- Mark all user-facing strings with `__()`, `_e()`, `esc_html__()`, `esc_attr__()`, etc.
+
 ## ⚡ Performance & Quality
 
 **Performance Optimization:**

GEMINI.md

@@ -1,13 +1,11 @@
-# Project-specific instructions for Gemini AI
-# This file provides context about the Simple WP Site Exporter WordPress plugin
-# to help Gemini understand the codebase and provide better analysis
-
 # Simple WP Site Exporter - WordPress Plugin
 
 ## Project Overview
+
 This is a secure WordPress site export plugin that creates complete site backups including files and database as downloadable ZIP archives. Designed for WordPress administrators who need reliable, secure site exports for migrations, backups, or development purposes.
 
 ## Plugin Details
+
 - **Name:** Simple WP Site Exporter
 - **Version:** 1.8.4
 - **WordPress Compatibility:** 6.5+
@@ -18,7 +16,9 @@ This is a secure WordPress site export plugin that creates complete site backups
 ## Architecture & Design Patterns
 
 ### Single-File Plugin Architecture
+
 The plugin follows a single-file architecture pattern for simplicity:
+
 ```php
 // All functionality contained in simple-wp-site-exporter.php
 // Functions prefixed with 'sse_' for namespace consistency
@@ -28,7 +28,9 @@ function sse_function_name() {
 ```
 
 ### Plugin Initialization
+
 The plugin uses proper WordPress initialization patterns:
+
 ```php
 function sse_init_plugin() {
     // Hook admin menu creation
@@ -39,6 +41,7 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 ```
 
 ### File Structure
+
 - `simple-wp-site-exporter.php` - Main plugin file (all functionality)
 - `languages/` - Translation files (.pot file included)
 - `CHANGELOG.md` - Developer changelog
@@ -49,12 +52,14 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 ## WordPress Coding Standards
 
 ### Naming Conventions
+
 - **Functions:** `sse_snake_case` (WordPress standard with plugin prefix)
 - **Variables:** `$snake_case`
 - **Constants:** `SSE_UPPER_SNAKE_CASE`
 - **Text Domain:** Always use `'simple-wp-site-exporter'`
 
 ### Security Requirements
+
 - Always use `esc_html()`, `esc_attr()`, `esc_url()` for output
 - Sanitize input with `sanitize_text_field()`, `wp_unslash()`, etc.
 - Use `current_user_can( 'manage_options' )` for capability checks
@@ -63,6 +68,7 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 - Validate all file paths to prevent directory traversal
 
 ### WordPress Integration
+
 - **Hooks:** Proper use of actions and filters
 - **File Operations:** WordPress Filesystem API only
 - **Database:** WP-CLI integration for secure database exports
@@ -74,43 +80,50 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 ### Core Functionality
 
 #### Site Export Process
+
 - **File Export:** Complete WordPress installation including themes, plugins, uploads
 - **Database Export:** Secure database dump using WP-CLI when available
 - **ZIP Creation:** All files compressed into downloadable archive
 - **Automatic Cleanup:** Export files auto-deleted after 5 minutes for security
 
 #### Security Features
+
 - **Path Traversal Protection:** Comprehensive file path validation
 - **File Access Control:** Strict file extension allowlist (ZIP, SQL only)
 - **Authentication:** Admin capability checks for all operations
 - **Rate Limiting:** Download throttling (1 request per minute per user)
 - **Nonce Verification:** CSRF protection on all forms and actions
 
 #### Performance Optimizations
+
 - **Export Locking:** Transient-based system prevents concurrent exports
 - **Memory Management:** Stream-based file operations for large files
 - **User-Configurable Limits:** File size filtering (100MB, 500MB, 1GB options)
 - **Resource Management:** Proper execution time limits and cleanup
 
 #### Admin Interface
+
 - **Export Form:** User-friendly interface with file size options
 - **File Management:** Download and delete export files
 - **Status Feedback:** Clear success/error messages
 - **Security Notices:** User guidance on file security
 
 ### File Operation Security
+
 - **Directory Validation:** All paths validated within WordPress upload directory
 - **Extension Allowlist:** Only ZIP and SQL files allowed for download
 - **Path Resolution:** Multiple validation layers prevent symlink attacks
 - **Real Path Validation:** Prevents path manipulation vulnerabilities
 
 ### Performance Considerations
+
 - **Large Site Support:** Handles multi-GB WordPress installations
 - **Memory Efficiency:** Files processed individually to avoid exhaustion
 - **Export Scalability:** Optimized for various hosting environments
 - **Cleanup Efficiency:** Automatic file removal prevents disk space issues
 
 ### WP-CLI Integration
+
 - **Database Export:** Efficient database dumps when WP-CLI available
 - **Security Validation:** WP-CLI executable verification
 - **Error Handling:** Graceful fallback when WP-CLI unavailable
@@ -119,18 +132,21 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 ## Development Standards
 
 ### Error Handling
+
 - **WP_Error Usage:** Consistent error object returns throughout
 - **Comprehensive Logging:** Structured logging with severity levels
 - **Security Logging:** Detailed logs for security events
 - **User Feedback:** Clear error messages without information disclosure
 
 ### Documentation
+
 - **PHPDoc Compliance:** Complete documentation for all functions
 - **Security Comments:** Detailed security justifications
 - **Code Examples:** Clear usage examples in documentation
 - **Version Control:** Comprehensive changelog maintenance
 
 ### Testing & Quality Assurance
+
 - **PHPStan Level 5:** Static analysis compliance
 - **PHPCS WordPress Standards:** Full coding standards compliance
 - **PHPMD Compliance:** Code quality and complexity management
@@ -139,34 +155,39 @@ add_action( 'plugins_loaded', 'sse_init_plugin' );
 ## When Reviewing Code
 
 ### Critical Issues to Flag
+
 1. **File Security Vulnerabilities** (path traversal, unauthorized access)
 2. **Export Process Security** (file cleanup, access controls)
 3. **Memory Management** (large file handling, resource limits)
 4. **WordPress Standard Violations** (coding standards, API usage)
 5. **Permission and Capability Issues** (admin access, nonce verification)
 
 ### Plugin-Specific Security Concerns
+
 1. **File Path Validation:** Ensure all paths are properly validated
 2. **Export File Access:** Verify download security and cleanup
 3. **Database Export Security:** Check WP-CLI command construction
 4. **Upload Directory Security:** Validate file operations within allowed areas
 5. **Temporary File Management:** Ensure proper cleanup of export files
 
 ### Performance Focus Areas
+
 1. **Large File Handling:** Memory-efficient file operations
 2. **Export Process Optimization:** Minimize resource usage
 3. **Concurrent Export Prevention:** Export locking mechanisms
 4. **File Size Management:** User-configurable limits and filtering
 5. **Cleanup Efficiency:** Automatic file removal processes
 
 ### Positive Patterns to Recognize
+
 1. **Security-First Design:** Multiple validation layers
 2. **WordPress API Compliance:** Proper use of WordPress functions
 3. **User Experience:** Clear interface and feedback
 4. **Performance Optimization:** Efficient resource management
 5. **Documentation Quality:** Comprehensive code documentation
 
 ### Suggestions to Provide
+
 1. **WordPress-Specific Solutions:** Prefer WordPress APIs over generic PHP
 2. **Security Enhancements:** Additional validation and protection layers
 3. **Performance Improvements:** Memory and resource optimizations