Updates, webhooks, and API keys

Updates

Orravo Core runs an update check twice daily via the orravo_core_update_check cron. Update data is cached in a transient and surfaced in Products -> Updates.

bashwp orravo updates              # List available updates
wp orravo channel oforms beta  # Set update channel for a product

AJAX endpoints used by the admin UI: oc_set_channel, oc_rollback_plugin, oc_bust_update_cache.

Snapshots

Settings snapshots live in wp_orravo_snapshots. They let you capture the current configuration of an Orravo plugin and roll back. AJAX:

• oc_create_snapshot
• oc_restore_snapshot
• oc_delete_snapshot

Webhooks

Manage in Developer -> Webhooks. Each webhook stores a URL, secret, event list, and active flag.

AJAX endpoints: oc_save_webhook, oc_delete_webhook, oc_test_webhook. Outbound payloads are HMAC-signed with the webhook secret; deliveries are logged to wp_orravo_webhook_log with status code and response.

Retries are handled via the orravo_webhook_retry action hook (which runs through OC_Queue when present).

API keys

Generated in Developer -> API Keys. Only the SHA-256 hash and a short prefix are persisted; the raw key is shown once on creation. AJAX: oc_create_api_key, oc_delete_api_key.

Activity log

Every Orravo plugin can log an event:

phpOC_DB::log_activity(
    'my-plugin',
    'User created a thing',
    admin_url( 'admin.php?page=my-plugin&tab=things' )
);

Events appear in the Live activity tab and feed the dashboard widget.