release: v3.3.0 — platform hardening & admin unification (Track F.1–F.8)

Plugin visibility control, UI/UX fixes, unified admin panel,
database-backed settings, and security hardening.

Highlights:
- ENABLED_PLUGINS env var for plugin visibility (F.1)
- Admin designation via ADMIN_EMAILS (F.4a)
- Master key scope control (F.4b)
- Panel unification + settings from UI (F.4c)
- exec() removal, shell injection fix, bcrypt migration (F.8)
- 5 new test suites

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/settings.py

@@ -0,0 +1,162 @@
+"""Unified settings access with DB > ENV > Default priority (Phase 4C.3).
+
+Usage:
+    from core.settings import get_setting
+
+    enabled = await get_setting("ENABLED_PLUGINS", "wordpress,woocommerce,supabase")
+    max_sites = int(await get_setting("MAX_SITES_PER_USER", "10"))
+"""
+
+import logging
+import os
+
+logger = logging.getLogger(__name__)
+
+# Cached plugin set for sync access (updated when settings change)
+_cached_plugins: set[str] | None = None
+
+# Default values for all managed settings
+SETTING_DEFAULTS: dict[str, str] = {
+    "ENABLED_PLUGINS": "wordpress,woocommerce,supabase",
+    "MAX_SITES_PER_USER": "10",
+    "USER_RATE_LIMIT_PER_MIN": "30",
+    "USER_RATE_LIMIT_PER_HR": "500",
+}
+
+# Human-readable labels for the settings UI
+SETTING_LABELS: dict[str, dict[str, str]] = {
+    "ENABLED_PLUGINS": {
+        "label": "Enabled Plugins",
+        "label_fa": "پلاگین‌های فعال",
+        "hint": "Comma-separated plugin types visible to public users",
+        "hint_fa": "انواع پلاگین قابل مشاهده برای کاربران عمومی (با کاما جدا شوند)",
+    },
+    "MAX_SITES_PER_USER": {
+        "label": "Max Sites per User",
+        "label_fa": "حداکثر سایت هر کاربر",
+        "hint": "Maximum number of sites each user can create",
+        "hint_fa": "حداکثر تعداد سایت‌هایی که هر کاربر می‌تواند بسازد",
+    },
+    "USER_RATE_LIMIT_PER_MIN": {
+        "label": "User Rate Limit (per minute)",
+        "label_fa": "محدودیت نرخ کاربر (در دقیقه)",
+        "hint": "Maximum MCP requests per user per minute",
+        "hint_fa": "حداکثر درخواست MCP هر کاربر در دقیقه",
+    },
+    "USER_RATE_LIMIT_PER_HR": {
+        "label": "User Rate Limit (per hour)",
+        "label_fa": "محدودیت نرخ کاربر (در ساعت)",
+        "hint": "Maximum MCP requests per user per hour",
+        "hint_fa": "حداکثر درخواست MCP هر کاربر در ساعت",
+    },
+}
+
+
+async def get_setting(key: str, default: str | None = None) -> str | None:
+    """Get a setting value with priority: Database > Environment > Default.
+
+    Args:
+        key: Setting key (e.g., "ENABLED_PLUGINS").
+        default: Fallback if not found anywhere. If None, uses SETTING_DEFAULTS.
+
+    Returns:
+        Setting value string, or None if not found anywhere.
+    """
+    # 1. Try database
+    try:
+        from core.database import get_database
+
+        db = get_database()
+        db_val = await db.get_setting(key)
+        if db_val is not None:
+            return db_val
+    except Exception:
+        pass  # DB not initialized yet (startup) — fall through
+
+    # 2. Try environment variable
+    env_val = os.environ.get(key)
+    if env_val is not None:
+        return env_val
+
+    # 3. Use provided default or SETTING_DEFAULTS
+    if default is not None:
+        return default
+    return SETTING_DEFAULTS.get(key)
+
+
+async def refresh_plugin_cache() -> None:
+    """Refresh the cached plugin set from DB/ENV/default."""
+    global _cached_plugins
+    val = await get_setting("ENABLED_PLUGINS")
+    if val:
+        _cached_plugins = {p.strip().lower() for p in val.split(",") if p.strip()}
+    else:
+        _cached_plugins = None
+
+
+async def save_setting(key: str, value: str) -> None:
+    """Save a setting to database and refresh caches."""
+    from core.database import get_database
+
+    db = get_database()
+    await db.set_setting(key, value)
+
+    if key == "ENABLED_PLUGINS":
+        await refresh_plugin_cache()
+
+
+async def delete_setting_value(key: str) -> bool:
+    """Delete a setting from database (revert to ENV/default)."""
+    from core.database import get_database
+
+    db = get_database()
+    deleted = await db.delete_setting(key)
+
+    if key == "ENABLED_PLUGINS":
+        await refresh_plugin_cache()
+
+    return deleted
+
+
+async def get_all_managed_settings() -> list[dict[str, str]]:
+    """Get all managed settings with their current values and sources.
+
+    Returns:
+        List of dicts with: key, value, source ("database"/"environment"/"default"),
+        label, hint.
+    """
+    result = []
+    try:
+        from core.database import get_database
+
+        db = get_database()
+        db_settings = await db.get_all_settings()
+    except Exception:
+        db_settings = {}
+
+    for key, default_val in SETTING_DEFAULTS.items():
+        meta = SETTING_LABELS.get(key, {})
+        db_val = db_settings.get(key)
+        env_val = os.environ.get(key)
+
+        if db_val is not None:
+            value, source = db_val, "database"
+        elif env_val is not None:
+            value, source = env_val, "environment"
+        else:
+            value, source = default_val, "default"
+
+        result.append(
+            {
+                "key": key,
+                "value": value,
+                "source": source,
+                "default": default_val,
+                "label": meta.get("label", key),
+                "label_fa": meta.get("label_fa", key),
+                "hint": meta.get("hint", ""),
+                "hint_fa": meta.get("hint_fa", ""),
+            }
+        )
+
+    return result